SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:1602-1
Rating:             important
References:         #1051510 #1058115 #1065729 #1071995 #1082555 
                    #1083647 #1089895 #1103990 #1103991 #1103992 
                    #1104745 #1109837 #1111666 #1112178 #1112374 
                    #1113956 #1114279 #1124278 #1127354 #1127355 
                    #1127371 #1133021 #1141558 #1142685 #1144333 
                    #1151794 #1152489 #1154824 #1157169 #1158265 
                    #1160388 #1160947 #1164780 #1164871 #1165183 
                    #1165478 #1165741 #1166969 #1166978 #1167574 
                    #1167851 #1167867 #1168332 #1168503 #1168670 
                    #1168789 #1169005 #1169020 #1169514 #1169525 
                    #1169762 #1170056 #1170125 #1170145 #1170284 
                    #1170345 #1170457 #1170522 #1170592 #1170617 
                    #1170618 #1170620 #1170621 #1170770 #1170778 
                    #1170791 #1170901 #1171078 #1171098 #1171118 
                    #1171189 #1171191 #1171195 #1171202 #1171205 
                    #1171214 #1171217 #1171218 #1171219 #1171220 
                    #1171244 #1171293 #1171417 #1171527 #1171599 
                    #1171600 #1171601 #1171602 #1171604 #1171605 
                    #1171606 #1171607 #1171608 #1171609 #1171610 
                    #1171611 #1171612 #1171613 #1171614 #1171615 
                    #1171616 #1171617 #1171618 #1171619 #1171620 
                    #1171621 #1171622 #1171623 #1171624 #1171625 
                    #1171626 #1171662 #1171679 #1171691 #1171692 
                    #1171694 #1171695 #1171736 #1171761 #1171817 
                    #1171948 #1171949 #1171951 #1171952 #1171979 
                    #1171982 #1171983 #1172017 #1172096 #1172097 
                    #1172098 #1172099 #1172101 #1172102 #1172103 
                    #1172104 #1172127 #1172130 #1172185 #1172188 
                    #1172199 #1172201 #1172202 #1172218 #1172221 
                    #1172249 #1172251 #1172253 #1172317 #1172342 
                    #1172343 #1172344 #1172366 #1172378 #1172391 
                    #1172397 #1172453 
Cross-References:   CVE-2018-1000199 CVE-2019-19462 CVE-2019-20806
                    CVE-2019-20812 CVE-2019-9455 CVE-2020-0543
                    CVE-2020-10690 CVE-2020-10711 CVE-2020-10720
                    CVE-2020-10732 CVE-2020-10751 CVE-2020-10757
                    CVE-2020-12114 CVE-2020-12464 CVE-2020-12652
                    CVE-2020-12653 CVE-2020-12654 CVE-2020-12655
                    CVE-2020-12656 CVE-2020-12657 CVE-2020-12659
                    CVE-2020-12768 CVE-2020-12769 CVE-2020-13143
                   
Affected Products:
                    SUSE Linux Enterprise Workstation Extension 12-SP5
                    SUSE Linux Enterprise Software Development Kit 12-SP5
                    SUSE Linux Enterprise Server 12-SP5
                    SUSE Linux Enterprise High Availability 12-SP5
______________________________________________________________________________

   An update that solves 24 vulnerabilities and has 133 fixes
   is now available.

Description:

   The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various
   security and bugfixes.

   The following security bugs were fixed:

   - CVE-2020-0543: Fixed a side channel attack against special registers     which could have resulted in leaking of read values to cores other than
     the one which called it. This attack is known as Special Register Buffer
     Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
   - CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store
     in drivers/usb/gadget/configfs.c (bsc#1171982).
   - CVE-2020-12769: Fixed an issue which could have allowed attackers to
     cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one
     (bsc#1171983).
   - CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in
     arch/x86/kvm/svm.c (bsc#1171736).
   - CVE-2020-12659: Fixed an out-of-bounds write (by a user with the
     CAP_NET_ADMIN capability) due to improper headroom validation
     (bsc#1171214).
   - CVE-2020-12657: An a use-after-free in block/bfq-iosched.c (bsc#1171205).
   - CVE-2020-12656: Fixed an improper handling of certain domain_release
     calls leadingch could have led to a memory leak (bsc#1171219).
   - CVE-2020-12655: Fixed an issue which could have allowed attackers to
     trigger a sync of excessive duration via an XFS v5 image with crafted
     metadata (bsc#1171217).
   - CVE-2020-12654: Fixed an issue in he wifi driver which could have
     allowed a remote AP to trigger a heap-based buffer overflow
     (bsc#1171202).
   - CVE-2020-12653: Fixed an issue in the wifi driver which could have
     allowed local users to gain privileges or cause a denial of service
     (bsc#1171195).
   - CVE-2020-12652: Fixed an issue which could have allowed local users to
     hold an incorrect lock during the ioctl operation and trigger a race
     condition (bsc#1171218).
   - CVE-2020-12464: Fixed a use-after-free due to a transfer without a
     reference (bsc#1170901).
   - CVE-2020-12114: Fixed a pivot_root race condition which could have
     allowed local users to cause a denial of service (panic) by corrupting a
     mountpoint reference counter (bsc#1171098).
   - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap
     could have caused user PTE access (bsc#1172317).
   - CVE-2020-10751: Fixed an improper implementation in SELinux LSM hook
     where it was assumed that an skb would only contain a single netlink
     message (bsc#1171189).
   - CVE-2020-10732: Fixed kernel data leak in userspace coredumps due to
     uninitialized data (bsc#1171220).
   - CVE-2020-10720: Fixed a use-after-free read in napi_gro_frags()
     (bsc#1170778).
   - CVE-2020-10711: Fixed a null pointer dereference in SELinux subsystem
     which could have allowed a remote network user to crash the kernel
     resulting in a denial of service (bsc#1171191).
   - CVE-2020-10690: Fixed the race between the release of ptp_clock and cdev
     (bsc#1170056).
   - CVE-2019-9455: Fixed a pointer leak due to a WARN_ON statement in a
     video driver. This could lead to local information disclosure with
     System execution privileges needed (bsc#1170345).
   - CVE-2019-20812: Fixed an issue in prb_calc_retire_blk_tmo() which could
     have resulted in a denial of service (bsc#1172453).
   - CVE-2019-20806: Fixed a null pointer dereference which may had lead to
     denial of service (bsc#1172199).
   - CVE-2019-19462: Fixed an issue which could have allowed local user to
     cause denial of service (bsc#1158265).
   - CVE-2018-1000199: Fixed a potential local code execution via ptrace
     (bsc#1089895).

   The following non-security bugs were fixed:

   - ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
     (bsc#1051510).
   - ACPI: sysfs: Fix reference count leak in
     acpi_sysfs_add_hotplug_profile() (bsc#1051510).
   - acpi/x86: ignore unspecified bit positions in the ACPI global lock field
     (bsc#1051510).
   - Add br_netfilter to kernel-default-base (bsc#1169020)
   - Add commit for git-fix that's not a fix This commit cleans up debug code
     but does not fix anything, and it relies on a new kernel function that
     isn't yet in this version of SLE.
   - agp/intel: Reinforce the barrier after GTT updates (bsc#1051510).
   - ALSA: ctxfi: Remove unnecessary cast in kfree (bsc#1051510).
   - ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256
     (bsc#1051510).
   - ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).
   - ALSA: hda: Add driver blacklist (bsc#1051510).
   - ALSA: hda: Always use jackpoll helper for jack update after resume
     (bsc#1051510).
   - ALSA: hda: call runtime_allow() for all hda controllers (bsc#1051510).
   - ALSA: hda: Do not release card at firmware loading error (bsc#1051510).
   - ALSA: hda: Explicitly permit using autosuspend if runtime PM is
     supported (bsc#1051510).
   - ALSA: hda/hdmi: fix race in monitor detection during probe (bsc#1051510).
   - ALSA: hda/hdmi: fix without unlocked before return (bsc#1051510).
   - ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops
     (bsc#1051510).
   - ALSA: hda: Keep the controller initialization even if no codecs found
     (bsc#1051510).
   - ALSA: hda: Match both PCI ID and SSID for driver blacklist (bsc#1111666).
   - ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround
     (bsc#1172017).
   - ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA
     (git-fixes).
   - ALSA: hda/realtek - Add HP new mute led supported for ALC236 (git-fixes).
   - ALSA: hda/realtek - Add more fixup entries for Clevo machines
     (git-fixes).
   - ALSA: hda/realtek - Add new codec supported for ALC245 (bsc#1051510).
   - ALSA: hda/realtek - Add new codec supported for ALC287 (git-fixes).
   - ALSA: hda/realtek: Add quirk for Samsung Notebook (git-fixes).
   - ALSA: hda/realtek - Add supported new mute Led for HP (git-fixes).
   - ALSA: hda/realtek - Enable headset mic of ASUS GL503VM with ALC295
     (git-fixes).
   - ALSA: hda/realtek - Enable headset mic of ASUS UX550GE with ALC295
     (git-fixes).
   - ALSA: hda/realtek: Enable headset mic of ASUS UX581LV with ALC295
     (git-fixes).
   - ALSA: hda/realtek - Enable the headset mic on Asus FX505DT (bsc#1051510).
   - ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (git-fixes).
   - ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
     (bsc#1111666).
   - ALSA: hda/realtek - Fix unexpected init_amp override (bsc#1051510).
   - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (git-fixes
     bsc#1171293).
   - ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter (bsc#1051510).
   - ALSA: hda: Release resources at error in delayed probe (bsc#1051510).
   - ALSA: hda: Remove ASUS ROG Zenith from the blacklist (bsc#1051510).
   - ALSA: hda: Skip controller resume if not needed (bsc#1051510).
   - ALSA: hwdep: fix a left shifting 1 by 31 UB bug (git-fixes).
   - ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio
     option (git-fixes).
   - ALSA: opti9xx: shut up gcc-10 range warning (bsc#1051510).
   - ALSA: pcm: fix incorrect hw_base increase (git-fixes).
   - ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
     (bsc#1170522).
   - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
     (git-fixes).
   - ALSA: usb-audio: Add connector notifier delegation (bsc#1051510).
   - ALSA: usb-audio: Add control message quirk delay for Kingston HyperX
     headset (git-fixes).
   - ALSA: usb-audio: add mapping for ASRock TRX40 Creator (git-fixes).
   - ALSA: usb-audio: Add mixer workaround for TRX40 and co (bsc#1051510).
   - ALSA: usb-audio: Add quirk for Focusrite Scarlett 2i2 (bsc#1051510).
   - ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
     (bsc#1051510).
   - ALSA: usb-audio: Apply async workaround for Scarlett 2i4 2nd gen
     (bsc#1051510).
   - ALSA: usb-audio: Check mapping at creating connector controls, too
     (bsc#1051510).
   - ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID (bsc#1051510).
   - ALSA: usb-audio: Do not create jack controls for PCM terminals
     (bsc#1051510).
   - ALSA: usb-audio: Do not override ignore_ctl_error value from the map
     (bsc#1051510).
   - ALSA: usb-audio: Filter error from connector kctl ops, too (bsc#1051510).
   - ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
     (bsc#1051510).
   - ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
     (git-fixes).
   - ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio
     (git-fixes).
   - ALSA: usx2y: Fix potential NULL dereference (bsc#1051510).
   - ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
     (bsc#1051510).
   - ASoC: dapm: connect virtual mux with default value (bsc#1051510).
   - ASoC: dapm: fixup dapm kcontrol widget (bsc#1051510).
   - ASoC: dpcm: allow start or stop during pause for backend (bsc#1051510).
   - ASoC: fix regwmask (bsc#1051510).
   - ASoC: msm8916-wcd-digital: Reset RX interpolation path after use
     (bsc#1051510).
   - ASoC: samsung: Prevent clk_get_rate() calls in atomic context
     (bsc#1111666).
   - ASoC: topology: Check return value of pcm_new_ver (bsc#1051510).
   - ASoC: topology: use name_prefix for new kcontrol (bsc#1051510).
   - b43legacy: Fix case where channel status is corrupted (bsc#1051510).
   - batman-adv: fix batadv_nc_random_weight_tq (git-fixes).
   - batman-adv: Fix refcnt leak in batadv_show_throughput_override
     (git-fixes).
   - batman-adv: Fix refcnt leak in batadv_store_throughput_override
     (git-fixes).
   - batman-adv: Fix refcnt leak in batadv_v_ogm_process (git-fixes).
   - bcache: avoid unnecessary btree nodes flushing in btree_flush_write()
     (git fixes (block drivers)).
   - bcache: fix incorrect data type usage in btree_flush_write() (git fixes
     (block drivers)).
   - bcache: Revert "bcache: shrink btree node cache after bch_btree_check()"
     (git fixes (block drivers)).
   - blk-mq: honor IO scheduler for multiqueue devices (bsc#1165478).
   - blk-mq: simplify blk_mq_make_request() (bsc#1165478).
   - block/drbd: delete invalid function drbd_md_mark_dirty_ (bsc#1171527).
   - block: drbd: remove a stray unlock in __drbd_send_protocol()
     (bsc#1171599).
   - block: fix busy device checking in blk_drop_partitions again
     (bsc#1171948).
   - block: fix busy device checking in blk_drop_partitions (bsc#1171948).
   - block: fix memleak of bio integrity data (git fixes (block drivers)).
   - block: remove the bd_openers checks in blk_drop_partitions (bsc#1171948).
   - bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets()
     (networking-stable-20_03_28).
   - bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF
     (bsc#1104745).
   - bnxt_en: reinitialize IRQs when MTU is modified
     (networking-stable-20_03_14).
   - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails (bsc#1104745 ).
   - bnxt_en: Return error when allocating zero size context memory
     (bsc#1104745).
   - bonding/alb: make sure arp header is pulled before accessing it
     (networking-stable-20_03_14).
   - bpf: Fix sk_psock refcnt leak when receiving message (bsc#1083647).
   - bpf: Forbid XADD on spilled pointers for unprivileged users     (bsc#1083647).
   - brcmfmac: abort and release host after error (bsc#1051510).
   - btrfs: fix deadlock with memory reclaim during scrub (bsc#1172127).
   - btrfs: fix log context list corruption after rename whiteout error
     (bsc#1172342).
   - btrfs: fix partial loss of prealloc extent past i_size after fsync
     (bsc#1172343).
   - btrfs: move the dio_sem higher up the callchain (bsc#1171761).
   - btrfs: relocation: add error injection points for cancelling balance
     (bsc#1171417).
   - btrfs: relocation: Check cancel request after each data page read
     (bsc#1171417).
   - btrfs: relocation: Check cancel request after each extent found
     (bsc#1171417).
   - btrfs: relocation: Clear the DEAD_RELOC_TREE bit for orphan roots to
     prevent runaway balance (bsc#1171417).
   - btrfs: relocation: Fix reloc root leakage and the NULL pointer reference
     caused by the leakage (bsc#1171417).
   - btrfs: relocation: Work around dead relocation stage loop (bsc#1171417).
   - btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent
     runaway balance (bsc#1171417 bsc#1160947 bsc#1172366).
   - btrfs: reloc: fix reloc root leak and NULL pointer dereference
     (bsc#1171417 bsc#1160947 bsc#1172366).
   - btrfs: setup a nofs context for memory allocation at btrfs_create_tree()
     (bsc#1172127).
   - btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
     (bsc#1172127).
   - btrfs: use nofs context when initializing security xattrs to avoid
     deadlock (bsc#1172127).
   - can: add missing attribute validation for termination
     (networking-stable-20_03_14).
   - cdc-acm: close race betrween suspend() and acm_softint (git-fixes).
   - cdc-acm: introduce a cool down (git-fixes).
   - ceph: check if file lock exists before sending unlock request
     (bsc#1168789).
   - ceph: demote quotarealm lookup warning to a debug message (bsc#1171692).
   - ceph: fix double unlock in handle_cap_export() (bsc#1171694).
   - ceph: fix double unlock in handle_cap_export() (bsc#1171694).
   - ceph: fix endianness bug when handling MDS session feature bits
     (bsc#1171695).
   - ceph: fix endianness bug when handling MDS session feature bits
     (bsc#1171695).
   - cgroup, netclassid: periodically release file_lock on classid updating
     (networking-stable-20_03_14).
   - CIFS: Allocate crypto structures on the fly for calculating signatures
     of incoming packets (bsc#1144333).
   - CIFS: Allocate encryption header through kmalloc (bsc#1144333).
   - CIFS: allow unlock flock and OFD lock across fork (bsc#1144333).
   - CIFS: check new file size when extending file by fallocate (bsc#1144333).
   - CIFS: cifspdu.h: Replace zero-length array with flexible-array member
     (bsc#1144333).
   - CIFS: clear PF_MEMALLOC before exiting demultiplex thread (bsc#1144333).
   - CIFS: do not share tcons with DFS (bsc#1144333).
   - CIFS: dump the session id and keys also for SMB2 sessions (bsc#1144333).
   - CIFS: ensure correct super block for DFS reconnect (bsc#1144333).
   - CIFS: Fix bug which the return value by asynchronous read is error
     (bsc#1144333).
   - CIFS: fix uninitialised lease_key in open_shroot() (bsc#1144333).
   - CIFS: improve read performance for page size 64KB & cache=strict &
     vers=2.1+ (bsc#1144333).
   - CIFS: Increment num_remote_opens stats counter even in case of
     smb2_query_dir_first (bsc#1144333).
   - CIFS: minor update to comments around the cifs_tcp_ses_lock mutex
     (bsc#1144333).
   - CIFS: protect updating server->dstaddr with a spinlock (bsc#1144333).
   - CIFS: smb2pdu.h: Replace zero-length array with flexible-array member
     (bsc#1144333).
   - CIFS: smbd: Calculate the correct maximum packet size for segmented
     SMBDirect send/receive (bsc#1144333).
   - CIFS: smbd: Check and extend sender credits in interrupt context
     (bsc#1144333).
   - CIFS: smbd: Check send queue size before posting a send (bsc#1144333).
   - CIFS: smbd: Do not schedule work to send immediate packet on every
     receive (bsc#1144333).
   - CIFS: smbd: Merge code to track pending packets (bsc#1144333).
   - CIFS: smbd: Properly process errors on ib_post_send (bsc#1144333).
   - CIFS: smbd: Update receive credits before sending and deal with credits
     roll back on failure before sending (bsc#1144333).
   - CIFS: Warn less noisily on default mount (bsc#1144333).
   - clk: Add clk_hw_unregister_composite helper function definition
     (bsc#1051510).
   - clk: imx6ull: use OSC clock during AXI rate change (bsc#1051510).
   - clk: imx: make mux parent strings const (bsc#1051510).
   - clk: mediatek: correct the clocks for MT2701 HDMI PHY module
     (bsc#1051510).
   - clk: sunxi-ng: a64: Fix gate bit of DSI DPHY (bsc#1051510).
   - clocksource/drivers/hyper-v: Set TSC clocksource as default w/
     InvariantTSC (bsc#1170620).
   - clocksource/drivers/hyper-v: Set TSC clocksource as default w/
     InvariantTSC (bsc#1170620, bsc#1170621).
   - clocksource: dw_apb_timer_of: Fix missing clockevent timers     (bsc#1051510).
   - component: Silence bind error on -EPROBE_DEFER (bsc#1051510).
   - coresight: do not use the BIT() macro in the UAPI header (git fixes
     (block drivers)).
   - cpufreq: s3c64xx: Remove pointless NULL check in
     s3c64xx_cpufreq_driver_init (bsc#1051510).
   - crypto: ccp - AES CFB mode is a stream cipher (git-fixes).
   - crypto: ccp - Change a message to reflect status instead of failure
     (bsc#1172218).
   - crypto: ccp - Clean up and exit correctly on allocation failure
     (git-fixes).
   - crypto: ccp - Cleanup misc_dev on sev_exit() (bsc#1114279).
   - crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (bsc#1114279).
   - cxgb4: fix MPS index overwrite when setting MAC address (bsc#1127355).
   - cxgb4: fix Txq restart check during backpressure (bsc#1127354
     bsc#1127371).
   - debugfs: Add debugfs_create_xul() for hexadecimal unsigned long
     (git-fixes).
   - debugfs_lookup(): switch to lookup_one_len_unlocked() (bsc#1171979).
   - devlink: fix return value after hitting end in region read (bsc#1109837).
   - devlink: validate length of param values (bsc#1109837).
   - devlink: validate length of region addr/len (bsc#1109837).
   - dmaengine: dmatest: Fix iteration non-stop logic (bsc#1051510).
   - dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574).
   - dm-raid1: fix invalid return value from dm_mirror (bsc#1172378).
   - dm writecache: fix data corruption when reloading the target (git fixes
     (block drivers)).
   - dm writecache: fix incorrect flush sequence when doing SSD mode commit
     (git fixes (block drivers)).
   - dm writecache: verify watermark during resume (git fixes (block
     drivers)).
   - dm zoned: fix invalid memory access (git fixes (block drivers)).
   - dm zoned: reduce overhead of backing device checks (git fixes (block
     drivers)).
   - dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone() (git
     fixes (block drivers)).
   - dm zoned: support zone sizes smaller than 128MiB (git fixes (block
     drivers)).
   - dp83640: reverse arguments to list_add_tail (git-fixes).
   - Drivers: hv: Add a module description line to the hv_vmbus driver
     (bsc#1172249, bsc#1172251).
   - Drivers: hv: Add a module description line to the hv_vmbus driver
     (bsc#1172253).
   - Drivers: HV: Send one page worth of kmsg dump over Hyper-V during panic
     (bsc#1170618).
   - Drivers: hv: vmbus: Fix the issue with freeing up hv_ctl_table_hdr
     (bsc#1170618).
   - Drivers: hv: vmbus: Get rid of MSR access from vmbus_drv.c (bsc#1170618).
   - Drivers: hv: vmus: Fix the check for return value from kmsg get dump
     buffer (bsc#1170618).
   - drivers/net/ibmvnic: Update VNIC protocol version reporting
     (bsc#1065729).
   - Drivers: w1: add hwmon support structures (jsc#SLE-11048).
   - Drivers: w1: add hwmon temp support for w1_therm (jsc#SLE-11048).
   - Drivers: w1: refactor w1_slave_show to make the temp reading
     functionality separate (jsc#SLE-11048).
   - drm: amd/acp: fix broken menu structure (bsc#1114279) 	* context changes
   - drm/amdgpu: Correctly initialize thermal controller for GPUs with
     Powerplay table v0 (e.g Hawaii) (bsc#1111666).
   - drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event (bsc#1111666).
   - drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is
     (bsc#1113956)
   - drm/atomic: Take the atomic toys away from X (bsc#1112178) 	* context
     changes
   - drm/crc: Actually allow to change the crc source (bsc#1114279) 	* offset
     changes
   - drm/dp_mst: Fix clearing payload state on topology disable (bsc#1051510).
   - drm/dp_mst: Reformat drm_dp_check_act_status() a bit (bsc#1051510).
   - drm/edid: Fix off-by-one in DispID DTD pixel clock (bsc#1114279)
   - drm/etnaviv: fix perfmon domain interation (bsc#1113956)
   - drm/etnaviv: rework perfmon query infrastructure (bsc#1112178)
   - drm/i915: Apply Wa_1406680159:icl,ehl as an engine workaround
     (bsc#1112178) 	* rename gt/intel_workarounds.c to intel_workarounds.c 	*
     context changes
   - drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of
     (bsc#1114279)
   - drm/i915: HDCP: fix Ri prime check done during link check (bsc#1112178)
     * rename display/intel_hdmi.c to intel_hdmi.c 	* context changes
   - drm/i915: properly sanity check batch_start_offset (bsc#1114279) 	*
     renamed display/intel_fbc.c -> intel_fb.c 	* renamed gt/intel_rc6.c ->
     intel_pm.c 	* context changes
   - drm/meson: Delete an error message in meson_dw_hdmi_bind() (bsc#1051510).
   - drm: NULL pointer dereference [null-pointer-deref] (CWE 476) problem
     (bsc#1114279)
   - drm/qxl: qxl_release leak in qxl_draw_dirty_fb() (bsc#1051510).
   - drm/qxl: qxl_release leak in qxl_hw_surface_alloc() (bsc#1051510).
   - drm/qxl: qxl_release use after free (bsc#1051510).
   - drm: Remove PageReserved manipulation from drm_pci_alloc (bsc#1114279)
     * offset changes
   - drm/sun4i: dsi: Allow binding the host without a panel (bsc#1113956)
   - drm/sun4i: dsi: Avoid hotplug race with DRM driver bind (bsc#1113956)
   - drm/sun4i: dsi: Remove incorrect use of runtime PM (bsc#1113956) 	*
     context changes
   - drm/sun4i: dsi: Remove unused drv from driver context (bsc#1113956) 	*
     context changes 	* keep include of sun4i_drv.h
   - dump_stack: avoid the livelock of the dump_lock (git fixes (block
     drivers)).
   - EDAC/amd64: Add family ops for Family 19h Models 00h-0Fh (jsc#SLE-11833).
   - EDAC/amd64: Drop some family checks for newer systems (jsc#SLE-11833).
   - EDAC/mce_amd: Always load on SMCA systems (jsc#SLE-11833).
   - EDAC/mce_amd: Make fam_ops static global (jsc#SLE-11833).
   - EDAC, sb_edac: Add support for systems with segmented PCI buses
     (bsc#1169525).
   - ext4: do not zeroout extents beyond i_disksize (bsc#1167851).
   - ext4: fix extent_status fragmentation for plain files (bsc#1171949).
   - ext4: use non-movable memory for superblock readahead (bsc#1171952).
   - fanotify: fix merging marks masks with FAN_ONDIR (bsc#1171679).
   - fbcon: fix null-ptr-deref in fbcon_switch (bsc#1114279) 	* rename
     drivers/video/fbdev/core to drivers/video/console 	* context changes
   - fib: add missing attribute validation for tun_id
     (networking-stable-20_03_14).
   - firmware: qcom: scm: fix compilation error when disabled (bsc#1051510).
   - Fix a backport bug, where btrfs_put_root() -> btrfs_put_fs_root()
     modification is not needed due to missing dependency
   - fs/cifs: fix gcc warning in sid_to_id (bsc#1144333).
   - fs/seq_file.c: simplify seq_file iteration code and interface
     (bsc#1170125).
   - gpio: tegra: mask GPIO IRQs during IRQ shutdown (bsc#1051510).
   - gre: fix uninit-value in __iptunnel_pull_header
     (networking-stable-20_03_14).
   - HID: hid-input: clear unmapped usages (git-fixes).
   - HID: hyperv: Add a module description line (bsc#1172249, bsc#1172251).
   - HID: hyperv: Add a module description line (bsc#1172253).
   - HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
     (git-fixes).
   - HID: i2c-hid: override HID descriptors for certain devices (git-fixes).
   - HID: multitouch: add eGalaxTouch P80H84 support (bsc#1051510).
   - HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
     (git-fixes).
   - hrtimer: Annotate lockless access to timer->state (git fixes (block
     drivers)).
   - hsr: add restart routine into hsr_get_node_list()
     (networking-stable-20_03_28).
   - hsr: check protocol version in hsr_newlink()
     (networking-stable-20_04_17).
   - hsr: fix general protection fault in hsr_addr_is_self()
     (networking-stable-20_03_28).
   - hsr: set .netnsok flag (networking-stable-20_03_28).
   - hsr: use rcu_read_lock() in hsr_get_node_{list/status}()
     (networking-stable-20_03_28).
   - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present
     (git-fixes).
   - i2c: acpi: put device when verifying client fails (git-fixes).
   - i2c: brcmstb: remove unused struct member (git-fixes).
   - i2c: core: Allow empty id_table in ACPI case as well (git-fixes).
   - i2c: core: decrease reference count of device node in
     i2c_unregister_device (git-fixes).
   - i2c: dev: Fix the race between the release of i2c_dev and cdev
     (bsc#1051510).
   - i2c: fix missing pm_runtime_put_sync in i2c_device_probe (git-fixes).
   - i2c-hid: properly terminate i2c_hid_dmi_desc_override_table array
     (git-fixes).
   - i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device (git-fixes).
   - i2c: iproc: Stop advertising support of SMBUS quick cmd (git-fixes).
   - i2c: isch: Remove unnecessary acpi.h include (git-fixes).
   - i2c: mux: demux-pinctrl: Fix an error handling path in
     'i2c_demux_pinctrl_probe()' (bsc#1051510).
   - i2c: st: fix missing struct parameter description (bsc#1051510).
   - IB/ipoib: Add child to parent list only if device initialized
     (bsc#1168503).
   - IB/ipoib: Consolidate checking of the proposed child interface
     (bsc#1168503).
   - IB/ipoib: Do not remove child devices from within the ndo_uninit
     (bsc#1168503).
   - IB/ipoib: Get rid of IPOIB_FLAG_GOING_DOWN (bsc#1168503).
   - IB/ipoib: Get rid of the sysfs_mutex (bsc#1168503).
   - IB/ipoib: Maintain the child_intfs list from ndo_init/uninit
     (bsc#1168503).
   - IB/ipoib: Move all uninit code into ndo_uninit (bsc#1168503).
   - IB/ipoib: Move init code to ndo_init (bsc#1168503).
   - IB/ipoib: Replace printk with pr_warn (bsc#1168503).
   - IB/ipoib: Use cancel_delayed_work_sync for neigh-clean task
     (bsc#1168503).
   - IB/ipoib: Warn when one port fails to initialize (bsc#1168503).
   - IB/mlx5: Fix missing congestion control debugfs on rep rdma device
     (bsc#1103991).
   - ibmvnic: Skip fatal error reset after passive init (bsc#1171078
     ltc#184239).
   - iio:ad7797: Use correct attribute_group (bsc#1051510).
   - iio: adc: stm32-adc: fix device used to request dma (bsc#1051510).
   - iio: adc: stm32-adc: fix sleep in atomic context (git-fixes).
   - iio: adc: stm32-adc: Use dma_request_chan() instead
     dma_request_slave_channel() (bsc#1051510).
   - iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
     (bsc#1051510).
   - iio: sca3000: Remove an erroneous 'get_device()' (bsc#1051510).
   - iio: xilinx-xadc: Fix ADC-B powerdown (bsc#1051510).
   - iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
     (bsc#1051510).
   - iio: xilinx-xadc: Fix sequencer configuration for aux channels in
     simultaneous mode (bsc#1051510).
   - ima: Fix return value of ima_write_policy() (git-fixes).
   - Input: evdev - call input_flush_device() on release(), not flush()
     (bsc#1051510).
   - Input: hyperv-keyboard - add module description (bsc#1172249,
     bsc#1172251).
   - Input: hyperv-keyboard - add module description (bsc#1172253).
   - Input: i8042 - add Acer Aspire 5738z to nomux list (bsc#1051510).
   - Input: i8042 - add ThinkPad S230u to i8042 reset list (bsc#1051510).
   - Input: raydium_i2c_ts - use true and false for boolean values
     (bsc#1051510).
   - Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()
     (bsc#1051510).
   - Input: synaptics-rmi4 - really fix attn_data use-after-free (git-fixes).
   - Input: usbtouchscreen - add support for BonXeon TP (bsc#1051510).
   - Input: xpad - add custom init packet for Xbox One S controllers     (bsc#1051510).
   - iommu/amd: Call domain_flush_complete() in update_domain() (bsc#1172096).
   - iommu/amd: Do not flush Device Table in iommu_map_page() (bsc#1172097).
   - iommu/amd: Do not loop forever when trying to increase address space
     (bsc#1172098).
   - iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
     (bsc#1172099).
   - iommu/amd: Fix over-read of ACPI UID from IVRS table (bsc#1172101).
   - iommu/amd: Fix race in increase_address_space()/fetch_pte()
     (bsc#1172102).
   - iommu/amd: Update Device Table in increase_address_space() (bsc#1172103).
   - iommu: Fix reference count leak in iommu_group_alloc (bsc#1172397).
   - ip6_tunnel: Allow rcv/xmit even if remote address is a local address
     (bsc#1166978).
   - ipmi: fix hung processes in __get_guid() (git-fixes).
   - ipv4: fix a RCU-list lock in fib_triestat_seq_show
     (networking-stable-20_04_02).
   - ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface
     (networking-stable-20_03_14).
   - ipv6: do not auto-add link-local address to lag ports
     (networking-stable-20_04_09).
   - ipv6: fix IPV6_ADDRFORM operation logic (bsc#1171662).
   - ipv6: Fix nlmsg_flags when splitting a multipath route
     (networking-stable-20_03_01).
   - ipv6: fix restrict IPV6_ADDRFORM operation (bsc#1171662).
   - ipv6: Fix route replacement with dev-only route
     (networking-stable-20_03_01).
   - ipvlan: add cond_resched_rcu() while processing muticast backlog
     (networking-stable-20_03_14).
   - ipvlan: do not deref eth hdr before checking it's set
     (networking-stable-20_03_14).
   - ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast()
     (networking-stable-20_03_14).
   - iwlwifi: pcie: actually release queue memory in TVQM (bsc#1051510).
   - ixgbe: do not check firmware errors (bsc#1170284).
   - kabi fix for early XHCI debug (git-fixes).
   - kabi for for md: improve handling of bio with REQ_PREFLUSH in
     md_flush_request() (git-fixes).
   - kabi, protect struct ib_device (bsc#1168503).
   - kabi/severities: Do not track KVM internal symbols.
   - kabi/severities: Ingnore get_dev_data() The function is internal to the
     AMD IOMMU driver and must not be called by any third party.
   - kabi workaround for snd_rawmidi buffer_ref field addition (git-fixes).
   - KEYS: reaching the keys quotas correctly (bsc#1051510).
   - KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (bsc#1133021).
   - KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (bsc#1133021).
   - KVM: Check validity of resolved slot when searching memslots
     (bsc#1172104).
   - KVM: s390: vsie: Fix delivery of addressing exceptions (git-fixes).
   - KVM: s390: vsie: Fix possible race when shadowing region 3 tables
     (git-fixes).
   - KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks
     (git-fixes).
   - KVM: SVM: Fix potential memory leak in svm_cpu_init() (bsc#1171736).
   - KVM x86: Extend AMD specific guest behavior to Hygon virtual CPUs
     (bsc#1152489).
   - l2tp: Allow management of tunnels and session in user namespace
     (networking-stable-20_04_17).
   - libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
     (bsc#1051510).
   - libata: Return correct status in sata_pmp_eh_recover_pm() when
     ATA_DFLAG_DETACH is set (bsc#1051510).
   - lib: raid6: fix awk build warnings (git fixes (block drivers)).
   - lib/raid6/test: fix build on distros whose /bin/sh is not bash (git
     fixes (block drivers)).
   - lib/stackdepot.c: fix global out-of-bounds in stack_slabs (git fixes
     (block drivers)).
   - locks: print unsigned ino in /proc/locks (bsc#1171951).
   - mac80211: add ieee80211_is_any_nullfunc() (bsc#1051510).
   - mac80211_hwsim: Use kstrndup() in place of kasprintf() (bsc#1051510).
   - mac80211: mesh: fix discovery timer re-arming issue / crash
     (bsc#1051510).
   - macsec: avoid to set wrong mtu (bsc#1051510).
   - macsec: restrict to ethernet devices (networking-stable-20_03_28).
   - macvlan: add cond_resched() during multicast processing
     (networking-stable-20_03_14).
   - macvlan: fix null dereference in macvlan_device_event() (bsc#1051510).
   - make some Fujitsu systems run (bsc#1141558).
   - md: improve handling of bio with REQ_PREFLUSH in md_flush_request()
     (git-fixes).
   - md/raid0: Fix an error message in raid0_make_request() (git fixes (block
     drivers)).
   - md/raid10: prevent access of uninitialized resync_pages offset
     (git-fixes).
   - media: dvb: return -EREMOTEIO on i2c transfer failure (bsc#1051510).
   - media: platform: fcp: Set appropriate DMA parameters (bsc#1051510).
   - media: ti-vpe: cal: fix disable_irqs to only the intended target
     (git-fixes).
   - mei: release me_cl object reference (bsc#1051510).
   - mlxsw: Fix some IS_ERR() vs NULL bugs (networking-stable-20_04_27).
   - mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
     (networking-stable-20_04_09).
   - mlxsw: spectrum_mr: Fix list iteration in error path (bsc#1112374).
   - mmc: atmel-mci: Fix debugfs on 64-bit platforms (git-fixes).
   - mmc: core: Check request type before completing the request (git-fixes).
   - mmc: core: Fix recursive locking issue in CQE recovery path (git-fixes).
   - mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout
     loop (git-fixes).
   - mmc: dw_mmc: Fix debugfs on 64-bit platforms (git-fixes).
   - mmc: meson-gx: make sure the descriptor is stopped on errors (git-fixes).
   - mmc: meson-gx: simplify interrupt handler (git-fixes).
   - mmc: renesas_sdhi: limit block count to 16 bit for old revisions
     (git-fixes).
   - mmc: sdhci-esdhc-imx: fix the mask for tuning start point (bsc#1051510).
   - mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (bsc#1051510).
   - mmc: sdhci-of-at91: fix memleak on clk_get failure (git-fixes).
   - mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers     (bsc#1051510).
   - mmc: sdhci-xenon: fix annoying 1.8V regulator warning (bsc#1051510).
   - mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
     (bsc#1051510).
   - mmc: tmio: fix access width of Block Count Register (git-fixes).
   - mm: limit boost_watermark on small zones (git fixes (mm/pgalloc)).
   - mm: thp: handle page cache THP correctly in PageTransCompoundMap (git
     fixes (block drivers)).
   - mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
     (bsc#1051510).
   - mtd: spi-nor: cadence-quadspi: add a delay in write sequence (git-fixes).
   - mtd: spi-nor: enable 4B opcodes for mx66l51235l (git-fixes).
   - mtd: spi-nor: fsl-quadspi: Do not let -EINVAL on the bus (git-fixes).
   - mwifiex: avoid -Wstringop-overflow warning (bsc#1051510).
   - mwifiex: Fix memory corruption in dump_station (bsc#1051510).
   - net: bcmgenet: correct per TX/RX ring statistics
     (networking-stable-20_04_27).
   - net: dsa: b53: Fix ARL register definitions (networking-stable-20_04_27).
   - net: dsa: b53: Rework ARL bin logic (networking-stable-20_04_27).
   - net: dsa: bcm_sf2: Do not register slave MDIO bus with OF
     (networking-stable-20_04_09).
   - net: dsa: bcm_sf2: Ensure correct sub-node is parsed
     (networking-stable-20_04_09).
   - net: dsa: bcm_sf2: Fix overflow checks (git-fixes).
   - net: dsa: Fix duplicate frames flooded by learning
     (networking-stable-20_03_28).
   - net: dsa: mv88e6xxx: fix lockup on warm boot
     (networking-stable-20_03_14).
   - net/ethernet: add Google GVE driver (jsc#SLE-10538)
   - net: fec: add phy_reset_after_clk_enable() support (git-fixes).
   - net: fec: validate the new settings in fec_enet_set_coalesce()
     (networking-stable-20_03_14).
   - net: fib_rules: Correctly set table field when table number exceeds 8
     bits (networking-stable-20_03_01).
   - net: fix race condition in __inet_lookup_established() (bsc#1151794).
   - net: fq: add missing attribute validation for orphan mask
     (networking-stable-20_03_14).
   - net: hns3: fix "tc qdisc del" failed issue (bsc#1109837).
   - net, ip_tunnel: fix interface lookup with no key
     (networking-stable-20_04_02).
   - net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
     (networking-stable-20_04_17).
   - net: ipv6: do not consider routes via gateways for anycast address check
     (networking-stable-20_04_17).
   - netlink: Use netlink header as base to calculate bad attribute offset
     (networking-stable-20_03_14).
   - net: macsec: update SCI upon MAC address change
     (networking-stable-20_03_14).
   - net: memcg: fix lockdep splat in inet_csk_accept()
     (networking-stable-20_03_14).
   - net: memcg: late association of sock to memcg
     (networking-stable-20_03_14).
   - net/mlx4_en: avoid indirect call in TX completion
     (networking-stable-20_04_27).
   - net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
   - net/mlx5: Add new fields to Port Type and Speed register (bsc#1171118).
   - net/mlx5: Add RoCE RX ICRC encapsulated counter (bsc#1171118).
   - net/mlx5e: Fix ethtool self test: link speed (bsc#1171118).
   - net/mlx5e: Move port speed code from en_ethtool.c to en/port.c
     (bsc#1171118).
   - net/mlx5: Expose link speed directly (bsc#1171118).
   - net/mlx5: Expose link speed directly (bsc#1171118).
   - net/mlx5: Expose port speed when possible (bsc#1171118).
   - net/mlx5: Expose port speed when possible (bsc#1171118).
   - net/mlx5: Fix failing fw tracer allocation on s390 (bsc#1103990 ).
   - net: mvneta: Fix the case where the last poll did not process all rx
     (networking-stable-20_03_28).
   - net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
     (networking-stable-20_04_27).
   - net/packet: tpacket_rcv: do not increment ring index on drop
     (networking-stable-20_03_14).
   - net: phy: restore mdio regs in the iproc mdio driver
     (networking-stable-20_03_01).
   - net: qmi_wwan: add support for ASKEY WWHC050
     (networking-stable-20_03_28).
   - net: revert default NAPI poll timeout to 2 jiffies
     (networking-stable-20_04_17).
   - net_sched: cls_route: remove the right filter from hashtable
     (networking-stable-20_03_28).
   - net_sched: sch_skbprio: add message validation to skbprio_change()
     (bsc#1109837).
   - net/x25: Fix x25_neigh refcnt leak when receiving frame
     (networking-stable-20_04_27).
   - nfc: add missing attribute validation for SE API
     (networking-stable-20_03_14).
   - nfc: add missing attribute validation for vendor subcommand
     (networking-stable-20_03_14).
   - nfc: pn544: Fix occasional HW initialization failure
     (networking-stable-20_03_01).
   - nfc: st21nfca: add missed kfree_skb() in an error path (bsc#1051510).
   - nfp: abm: fix a memory leak bug (bsc#1109837).
   - nfsd4: fix up replay_matches_cache() (git-fixes).
   - nfsd: Ensure CLONE persists data and metadata changes to the target file
     (git-fixes).
   - nfsd: fix delay timer on 32-bit architectures (git-fixes).
   - nfsd: fix jiffies/time_t mixup in LRU list (git-fixes).
   - nfs: Directory page cache pages need to be locked when read (git-fixes).
   - nfsd: memory corruption in nfsd4_lock() (git-fixes).
   - nfs: Do not call generic_error_remove_page() while holding locks
     (bsc#1170457).
   - nfs: Fix memory leaks and corruption in readdir (git-fixes).
   - nfs: Fix O_DIRECT accounting of number of bytes read/written (git-fixes).
   - nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl (git-fixes).
   - nfs: fix racey wait in nfs_set_open_stateid_locked (bsc#1170592).
   - nfs/flexfiles: Use the correct TCP timeout for flexfiles I/O (git-fixes).
   - nfs/pnfs: Fix pnfs_generic_prepare_to_resend_writes() (git-fixes).
   - nfs: Revalidate the file size on a fatal write error (git-fixes).
   - NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals
     (git-fixes).
   - NFSv4: Do not allow a cached open with a revoked delegation (git-fixes).
   - NFSv4: Fix leak of clp->cl_acceptor string (git-fixes).
   - NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
     (git-fixes).
   - NFSv4: try lease recovery on NFS4ERR_EXPIRED (git-fixes).
   - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for
     layoutreturn (git-fixes).
   - nl802154: add missing attribute validation for dev_type
     (networking-stable-20_03_14).
   - nl802154: add missing attribute validation (networking-stable-20_03_14).
   - nvme-fc: print proper nvme-fc devloss_tmo value (bsc#1172391).
   - objtool: Fix stack offset tracking for indirect CFAs (bsc#1169514).
   - objtool: Fix switch table detection in .text.unlikely (bsc#1169514).
   - objtool: Make BP scratch register warning more robust (bsc#1169514).
   - padata: Remove broken queue flushing (git-fixes).
   - Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()" (git fixes
     (block drivers)).
   - PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2
     (bsc#1172201, bsc#1172202).
   - PCI: hv: Decouple the func definition in hv_dr_state from VSP message
     (bsc#1172201, bsc#1172202).
   - PCI: sanity test on PCI vendor to be sure we do not touch everything
     (bsc#1141558).
   - perf/x86/amd: Add support for Large Increment per Cycle Events
     (jsc#SLE-11831).
   - perf/x86/amd: Constrain Large Increment per Cycle events (jsc#SLE-11831).
   - pinctrl: baytrail: Enable pin configuration setting for GPIO chip
     (git-fixes).
   - pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
     (git-fixes).
   - pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H
     (git-fixes).
   - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
     (bsc#1051510).
   - pNFS: Ensure we do clear the return-on-close layout stateid on fatal
     errors (git-fixes).
   - powerpc: Add attributes for setjmp/longjmp (bsc#1065729).
   - powerpc/pci/of: Parse unassigned resources (bsc#1065729).
   - powerpc/setup_64: Set cache-line-size based on cache-block-size
     (bsc#1065729).
   - powerpc/sstep: Fix DS operand in ld encoding to appropriate value
     (bsc#1065729).
   - qede: Fix race between rdma destroy workqueue and link change event
     (networking-stable-20_03_01).
   - r8152: check disconnect status after long sleep
     (networking-stable-20_03_14).
   - raid6/ppc: Fix build for clang (git fixes (block drivers)).
   - random: always use batched entropy for get_random_u{32,64} (bsc#1164871).
   - rcu: locking and unlocking need to always be at least barriers (git
     fixes (block drivers)).
   - RDMA/ipoib: Fix use of sizeof() (bsc#1168503).
   - RDMA/netdev: Fix netlink support in IPoIB (bsc#1168503).
   - RDMA/netdev: Hoist alloc_netdev_mqs out of the driver (bsc#1168503).
   - RDMA/netdev: Use priv_destructor for netdev cleanup (bsc#1168503).
   - Remove 2 git-fixes that cause build issues. (bsc#1171691)
   - Revert "drm/panel: simple: Add support for Sharp LQ150X1LG11 panels"
     (bsc#1114279)
   - Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()"
     (bsc#1172221).
   - Revert "RDMA/cma: Simplify rdma_resolve_addr() error flow" (bsc#1103992).
   - rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (bsc#1051510).
   - s390/cpum_cf: Add new extended counters for IBM z15 (bsc#1169762
     LTC#185291).
   - s390/pci: Fix possible deadlock in recover_store() (bsc#1165183
     LTC#184103).
   - s390/pci: Recover handle in clp_set_pci_fn() (bsc#1165183 LTC#184103).
   - scripts/decodecode: fix trapping instruction formatting (bsc#1065729).
   - scripts/dtc: Remove redundant YYLOC global declaration (bsc#1160388).
   - scsi: bnx2i: fix potential use after free (bsc#1171600).
   - scsi: core: Handle drivers which set sg_tablesize to zero (bsc#1171601)
   - scsi: core: save/restore command resid for error handling (bsc#1171602).
   - scsi: core: scsi_trace: Use get_unaligned_be*() (bsc#1171604).
   - scsi: core: try to get module before removing device (bsc#1171605).
   - scsi: csiostor: Adjust indentation in csio_device_reset (bsc#1171606).
   - scsi: csiostor: Do not enable IRQs too early (bsc#1171607).
   - scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
     (bsc#1171608).
   - scsi: fnic: fix invalid stack access (bsc#1171609).
   - scsi: fnic: fix msix interrupt allocation (bsc#1171610).
   - scsi: ibmvscsi: Fix WARN_ON during event pool release (bsc#1170791
     ltc#185128).
   - scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func (bsc#1171611).
   - scsi: iscsi: Fix a potential deadlock in the timeout handler
     (bsc#1171612).
   - scsi: iscsi: qla4xxx: fix double free in probe (bsc#1171613).
   - scsi: lpfc: Change default queue allocation for reduced memory
     consumption (bsc#1164780).
   - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer
     dereferences (bsc#1171614).
   - scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
     (bsc#1171615).
   - scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event
     (bsc#1164780).
   - scsi: lpfc: Fix MDS Diagnostic Enablement definition (bsc#1164780).
   - scsi: lpfc: Fix negation of else clause in lpfc_prep_node_fc4type
     (bsc#1164780).
   - scsi: lpfc: Fix noderef and address space warnings (bsc#1164780).
   - scsi: lpfc: Maintain atomic consistency of queue_claimed flag
     (bsc#1164780).
   - scsi: lpfc: remove duplicate unloading checks (bsc#1164780).
   - scsi: lpfc: Remove re-binding of nvme rport during registration
     (bsc#1164780).
   - scsi: lpfc: Remove redundant initialization to variable rc (bsc#1164780).
   - scsi: lpfc: Remove unnecessary lockdep_assert_held calls (bsc#1164780).
   - scsi: lpfc: Update lpfc version to 12.8.0.1 (bsc#1164780).
   - scsi: megaraid_sas: Do not initiate OCR if controller is not in ready
     state (bsc#1171616).
   - scsi: qla2xxx: add ring buffer for tracing debug logs (bsc#1157169).
   - scsi: qla2xxx: check UNLOADING before posting async work (bsc#1157169).
   - scsi: qla2xxx: Delete all sessions before unregister local nvme port
     (bsc#1157169).
   - scsi: qla2xxx: Do not log message when reading port speed via sysfs
     (bsc#1157169).
   - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
     (bsc#1157169).
   - scsi: qla2xxx: Fix regression warnings (bsc#1157169).
   - scsi: qla2xxx: Remove non functional code (bsc#1157169).
   - scsi: qla2xxx: set UNLOADING before waiting for session deletion
     (bsc#1157169).
   - scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free (bsc#1171617).
   - scsi: qla4xxx: fix double free bug (bsc#1171618).
   - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
     (bsc#1171619).
   - scsi: sg: add sg_remove_request in sg_common_write (bsc#1171620).
   - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and
     WRITE(6) (bsc#1171621).
   - scsi: ufs: change msleep to usleep_range (bsc#1171622).
   - scsi: ufs: Clean up ufshcd_scale_clks() and clock scaling error out path
     (bsc#1171623).
   - scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
     (bsc#1171624).
   - scsi: ufs: Fix ufshcd_probe_hba() reture value in case
     ufshcd_scsi_add_wlus() fails (bsc#1171625).
   - scsi: ufs: Recheck bkops level if bkops is disabled (bsc#1171626).
   - sctp: fix possibly using a bad saddr with a given dst
     (networking-stable-20_04_02).
   - sctp: fix refcount bug in sctp_wfree (networking-stable-20_04_02).
   - sctp: move the format error check out of __sctp_sf_do_9_1_abort
     (networking-stable-20_03_01).
   - selftests/powerpc: Fix build errors in powerpc ptrace selftests
     (boo#1124278).
   - seq_file: fix problem when seeking mid-record (bsc#1170125).
   - sfc: detach from cb_page in efx_copy_channel()
     (networking-stable-20_03_14).
   - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
     (bsc#1172185).
   - slcan: not call free_netdev before rtnl_unlock in slcan_open
     (networking-stable-20_03_28).
   - slip: make slhc_compress() more robust against malicious packets
     (networking-stable-20_03_14).
   - smb3: Additional compression structures (bsc#1144333).
   - smb3: Add new compression flags (bsc#1144333).
   - smb3: change noisy error message to FYI (bsc#1144333).
   - smb3: enable swap on SMB3 mounts (bsc#1144333).
   - smb3: Minor cleanup of protocol definitions (bsc#1144333).
   - smb3: remove overly noisy debug line in signing errors (bsc#1144333).
   - smb3: smbdirect support can be configured by default (bsc#1144333).
   - smb3: use SMB2_SIGNATURE_SIZE define (bsc#1144333).
   - spi: bcm63xx-hsspi: Really keep pll clk enabled (bsc#1051510).
   - spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (bsc#1051510).
   - spi: dw: Add SPI Rx-done wait method to DMA-based transfer (bsc#1051510).
   - spi: dw: Add SPI Tx-done wait method to DMA-based transfer (bsc#1051510).
   - spi: dw: Zero DMA Tx and Rx configurations on stack (bsc#1051510).
   - spi: pxa2xx: Add CS control clock quirk (bsc#1051510).
   - spi: qup: call spi_qup_pm_resume_runtime before suspending (bsc#1051510).
   - spi/zynqmp: remove entry that causes a cs glitch (bsc#1051510).
   - staging: comedi: dt2815: fix writing hi byte of analog output
     (bsc#1051510).
   - staging: comedi: Fix comedi_device refcnt leak in comedi_open
     (bsc#1051510).
   - staging: iio: ad2s1210: Fix SPI reading (bsc#1051510).
   - supported.conf: Add br_netfilter to base (bsc#1169020).
   - supported.conf: support w1 core and thermometer support
   - svcrdma: Fix double svc_rdma_send_ctxt_put() in an error path
     (bsc#1103992).
   - svcrdma: Fix leak of transport addresses (git-fixes).
   - svcrdma: Fix trace point use-after-free race (bsc#1103992 ).
   - taskstats: fix data-race (bsc#1172188).
   - tcp: cache line align MAX_TCP_HEADER (networking-stable-20_04_27).
   - tcp: repair: fix TCP_QUEUE_SEQ implementation
     (networking-stable-20_03_28).
   - team: add missing attribute validation for array index
     (networking-stable-20_03_14).
   - team: add missing attribute validation for port ifindex
     (networking-stable-20_03_14).
   - team: fix hang in team_mode_get() (networking-stable-20_04_27).
   - tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (bsc#1065729).
   - tpm/tpm_tis: Free IRQ if probing fails (bsc#1082555).
   - tun: Do not put_page() for all negative return values from XDP program
     (bsc#1109837).
   - Update config files: Build w1 bus on arm64 (jsc#SLE-11048)
   - usb: core: Fix misleading driver bug report (bsc#1051510).
   - usb: gadget: legacy: fix redundant initialization warnings (bsc#1051510).
   - usbnet: silence an unnecessary warning (bsc#1170770).
   - video: fbdev: sis: Remove unnecessary parentheses and commented code
     (bsc#1114279)
   - video: fbdev: w100fb: Fix a potential double free (bsc#1051510).
   - vrf: Check skb for XFRM_TRANSFORMED flag (networking-stable-20_04_27).
   - vxlan: check return value of gro_cells_init()
     (networking-stable-20_03_28).
   - w1: Add subsystem kernel public interface (jsc#SLE-11048).
   - w1: Fix slave count on 1-Wire bus (resend) (jsc#SLE-11048).
   - w1: keep balance of mutex locks and refcnts (jsc#SLE-11048).
   - w1: use put_device() if device_register() fail (jsc#SLE-11048).
   - wcn36xx: Fix error handling path in 'wcn36xx_probe()' (bsc#1051510).
   - wimax/i2400m: Fix potential urb refcnt leak (bsc#1051510).
   - workqueue: do not use wq_select_unbound_cpu() for bound works
     (bsc#1172130).
   - x86/amd_nb: Add Family 19h PCI IDs (jsc#SLE-11834).
   - x86/entry/64: Fix unwind hints in kernel exit path (bsc#1058115).
   - x86/entry/64: Fix unwind hints in register clearing code (bsc#1058115).
   - x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (bsc#1058115).
   - x86/entry/64: Fix unwind hints in __switch_to_asm() (bsc#1058115).
   - x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170620).
   - x86/Hyper-V: Allow guests to enable InvariantTSC (bsc#1170621,
     bsc#1170620).
   - x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump
     (bsc#1170617, bsc#1170618).
   - x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump
     (bsc#1170618).
   - x86/Hyper-V: Report crash data in die() when panic_on_oops is set
     (bsc#1170617, bsc#1170618).
   - x86/Hyper-V: Report crash data in die() when panic_on_oops is set
     (bsc#1170618).
   - x86/Hyper-V: Report crash register data or kmsg before running crash
     kernel (bsc#1170617, bsc#1170618).
   - x86/Hyper-V: Report crash register data or kmsg before running crash
     kernel (bsc#1170618).
   - x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is
     not set (bsc#1170617, bsc#1170618).
   - x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is
     not set (bsc#1170618).
   - x86: Hyper-V: report value of misc_features (git fixes).
   - x86/Hyper-V: Trigger crash enlightenment only once during system crash
     (bsc#1170617, bsc#1170618).
   - x86/Hyper-V: Trigger crash enlightenment only once during system crash
     (bsc#1170618).
   - x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170617,
     bsc#1170618).
   - x86/Hyper-V: Unload vmbus channel in hv panic callback (bsc#1170618).
   - x86/kprobes: Avoid kretprobe recursion bug (bsc#1114279).
   - x86/MCE/AMD: Add a KABI workaround for enum smca_bank_types
     (jsc#SLE-11833).
   - x86/MCE/AMD, EDAC/mce_amd: Add new Load Store unit McaType
     (jsc#SLE-11833).
   - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE (bsc#1169005).
   - x86/resctrl: Preserve CDP enable over CPU hotplug (bsc#1114279).
   - x86/unwind/orc: Do not skip the first frame for inactive tasks
     (bsc#1058115).
   - x86/unwind/orc: Fix error handling in __unwind_start() (bsc#1058115).
   - x86/unwind/orc: Fix error path for bad ORC entry type (bsc#1058115).
   - x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
     (bsc#1058115).
   - x86/unwind/orc: Prevent unwinding before ORC initialization
     (bsc#1058115).
   - x86/unwind: Prevent false warnings for non-current tasks (bsc#1058115).
   - x86/xen: fix booting 32-bit pv guest (bsc#1071995).
   - x86/xen: Make the boot CPU idle task reliable (bsc#1071995).
   - x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).
   - xen/pci: reserve MCFG areas earlier (bsc#1170145).
   - xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
     (networking-stable-20_04_27).
   - xfs: Correctly invert xfs_buftarg LRU isolation logic (git-fixes).
   - xfs: do not ever return a stale pointer from __xfs_dir3_free_read
     (git-fixes).
   - xprtrdma: Fix completion wait during device removal (git-fixes).


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Workstation Extension 12-SP5:

      zypper in -t patch SUSE-SLE-WE-12-SP5-2020-1602=1

   - SUSE Linux Enterprise Software Development Kit 12-SP5:

      zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-1602=1

   - SUSE Linux Enterprise Server 12-SP5:

      zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-1602=1

   - SUSE Linux Enterprise High Availability 12-SP5:

      zypper in -t patch SUSE-SLE-HA-12-SP5-2020-1602=1



Package List:

   - SUSE Linux Enterprise Workstation Extension 12-SP5 (x86_64):

      kernel-default-debuginfo-4.12.14-122.23.1
      kernel-default-debugsource-4.12.14-122.23.1
      kernel-default-extra-4.12.14-122.23.1
      kernel-default-extra-debuginfo-4.12.14-122.23.1

   - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64):

      kernel-obs-build-4.12.14-122.23.1
      kernel-obs-build-debugsource-4.12.14-122.23.1

   - SUSE Linux Enterprise Software Development Kit 12-SP5 (noarch):

      kernel-docs-4.12.14-122.23.1

   - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64):

      kernel-default-4.12.14-122.23.1
      kernel-default-base-4.12.14-122.23.1
      kernel-default-base-debuginfo-4.12.14-122.23.1
      kernel-default-debuginfo-4.12.14-122.23.1
      kernel-default-debugsource-4.12.14-122.23.1
      kernel-default-devel-4.12.14-122.23.1
      kernel-syms-4.12.14-122.23.1

   - SUSE Linux Enterprise Server 12-SP5 (x86_64):

      kernel-default-devel-debuginfo-4.12.14-122.23.1

   - SUSE Linux Enterprise Server 12-SP5 (noarch):

      kernel-devel-4.12.14-122.23.1
      kernel-macros-4.12.14-122.23.1
      kernel-source-4.12.14-122.23.1

   - SUSE Linux Enterprise Server 12-SP5 (s390x):

      kernel-default-man-4.12.14-122.23.1

   - SUSE Linux Enterprise High Availability 12-SP5 (ppc64le s390x x86_64):

      cluster-md-kmp-default-4.12.14-122.23.1
      cluster-md-kmp-default-debuginfo-4.12.14-122.23.1
      dlm-kmp-default-4.12.14-122.23.1
      dlm-kmp-default-debuginfo-4.12.14-122.23.1
      gfs2-kmp-default-4.12.14-122.23.1
      gfs2-kmp-default-debuginfo-4.12.14-122.23.1
      kernel-default-debuginfo-4.12.14-122.23.1
      kernel-default-debugsource-4.12.14-122.23.1
      ocfs2-kmp-default-4.12.14-122.23.1
      ocfs2-kmp-default-debuginfo-4.12.14-122.23.1


References:

   https://www.suse.com/security/cve/CVE-2018-1000199.html
   https://www.suse.com/security/cve/CVE-2019-19462.html
   https://www.suse.com/security/cve/CVE-2019-20806.html
   https://www.suse.com/security/cve/CVE-2019-20812.html
   https://www.suse.com/security/cve/CVE-2019-9455.html
   https://www.suse.com/security/cve/CVE-2020-0543.html
   https://www.suse.com/security/cve/CVE-2020-10690.html
   https://www.suse.com/security/cve/CVE-2020-10711.html
   https://www.suse.com/security/cve/CVE-2020-10720.html
   https://www.suse.com/security/cve/CVE-2020-10732.html
   https://www.suse.com/security/cve/CVE-2020-10751.html
   https://www.suse.com/security/cve/CVE-2020-10757.html
   https://www.suse.com/security/cve/CVE-2020-12114.html
   https://www.suse.com/security/cve/CVE-2020-12464.html
   https://www.suse.com/security/cve/CVE-2020-12652.html
   https://www.suse.com/security/cve/CVE-2020-12653.html
   https://www.suse.com/security/cve/CVE-2020-12654.html
   https://www.suse.com/security/cve/CVE-2020-12655.html
   https://www.suse.com/security/cve/CVE-2020-12656.html
   https://www.suse.com/security/cve/CVE-2020-12657.html
   https://www.suse.com/security/cve/CVE-2020-12659.html
   https://www.suse.com/security/cve/CVE-2020-12768.html
   https://www.suse.com/security/cve/CVE-2020-12769.html
   https://www.suse.com/security/cve/CVE-2020-13143.html
   https://bugzilla.suse.com/1051510
   https://bugzilla.suse.com/1058115
   https://bugzilla.suse.com/1065729
   https://bugzilla.suse.com/1071995
   https://bugzilla.suse.com/1082555
   https://bugzilla.suse.com/1083647
   https://bugzilla.suse.com/1089895
   https://bugzilla.suse.com/1103990
   https://bugzilla.suse.com/1103991
   https://bugzilla.suse.com/1103992
   https://bugzilla.suse.com/1104745
   https://bugzilla.suse.com/1109837
   https://bugzilla.suse.com/1111666
   https://bugzilla.suse.com/1112178
   https://bugzilla.suse.com/1112374
   https://bugzilla.suse.com/1113956
   https://bugzilla.suse.com/1114279
   https://bugzilla.suse.com/1124278
   https://bugzilla.suse.com/1127354
   https://bugzilla.suse.com/1127355
   https://bugzilla.suse.com/1127371
   https://bugzilla.suse.com/1133021
   https://bugzilla.suse.com/1141558
   https://bugzilla.suse.com/1142685
   https://bugzilla.suse.com/1144333
   https://bugzilla.suse.com/1151794
   https://bugzilla.suse.com/1152489
   https://bugzilla.suse.com/1154824
   https://bugzilla.suse.com/1157169
   https://bugzilla.suse.com/1158265
   https://bugzilla.suse.com/1160388
   https://bugzilla.suse.com/1160947
   https://bugzilla.suse.com/1164780
   https://bugzilla.suse.com/1164871
   https://bugzilla.suse.com/1165183
   https://bugzilla.suse.com/1165478
   https://bugzilla.suse.com/1165741
   https://bugzilla.suse.com/1166969
   https://bugzilla.suse.com/1166978
   https://bugzilla.suse.com/1167574
   https://bugzilla.suse.com/1167851
   https://bugzilla.suse.com/1167867
   https://bugzilla.suse.com/1168332
   https://bugzilla.suse.com/1168503
   https://bugzilla.suse.com/1168670
   https://bugzilla.suse.com/1168789
   https://bugzilla.suse.com/1169005
   https://bugzilla.suse.com/1169020
   https://bugzilla.suse.com/1169514
   https://bugzilla.suse.com/1169525
   https://bugzilla.suse.com/1169762
   https://bugzilla.suse.com/1170056
   https://bugzilla.suse.com/1170125
   https://bugzilla.suse.com/1170145
   https://bugzilla.suse.com/1170284
   https://bugzilla.suse.com/1170345
   https://bugzilla.suse.com/1170457
   https://bugzilla.suse.com/1170522
   https://bugzilla.suse.com/1170592
   https://bugzilla.suse.com/1170617
   https://bugzilla.suse.com/1170618
   https://bugzilla.suse.com/1170620
   https://bugzilla.suse.com/1170621
   https://bugzilla.suse.com/1170770
   https://bugzilla.suse.com/1170778
   https://bugzilla.suse.com/1170791
   https://bugzilla.suse.com/1170901
   https://bugzilla.suse.com/1171078
   https://bugzilla.suse.com/1171098
   https://bugzilla.suse.com/1171118
   https://bugzilla.suse.com/1171189
   https://bugzilla.suse.com/1171191
   https://bugzilla.suse.com/1171195
   https://bugzilla.suse.com/1171202
   https://bugzilla.suse.com/1171205
   https://bugzilla.suse.com/1171214
   https://bugzilla.suse.com/1171217
   https://bugzilla.suse.com/1171218
   https://bugzilla.suse.com/1171219
   https://bugzilla.suse.com/1171220
   https://bugzilla.suse.com/1171244
   https://bugzilla.suse.com/1171293
   https://bugzilla.suse.com/1171417
   https://bugzilla.suse.com/1171527
   https://bugzilla.suse.com/1171599
   https://bugzilla.suse.com/1171600
   https://bugzilla.suse.com/1171601
   https://bugzilla.suse.com/1171602
   https://bugzilla.suse.com/1171604
   https://bugzilla.suse.com/1171605
   https://bugzilla.suse.com/1171606
   https://bugzilla.suse.com/1171607
   https://bugzilla.suse.com/1171608
   https://bugzilla.suse.com/1171609
   https://bugzilla.suse.com/1171610
   https://bugzilla.suse.com/1171611
   https://bugzilla.suse.com/1171612
   https://bugzilla.suse.com/1171613
   https://bugzilla.suse.com/1171614
   https://bugzilla.suse.com/1171615
   https://bugzilla.suse.com/1171616
   https://bugzilla.suse.com/1171617
   https://bugzilla.suse.com/1171618
   https://bugzilla.suse.com/1171619
   https://bugzilla.suse.com/1171620
   https://bugzilla.suse.com/1171621
   https://bugzilla.suse.com/1171622
   https://bugzilla.suse.com/1171623
   https://bugzilla.suse.com/1171624
   https://bugzilla.suse.com/1171625
   https://bugzilla.suse.com/1171626
   https://bugzilla.suse.com/1171662
   https://bugzilla.suse.com/1171679
   https://bugzilla.suse.com/1171691
   https://bugzilla.suse.com/1171692
   https://bugzilla.suse.com/1171694
   https://bugzilla.suse.com/1171695
   https://bugzilla.suse.com/1171736
   https://bugzilla.suse.com/1171761
   https://bugzilla.suse.com/1171817
   https://bugzilla.suse.com/1171948
   https://bugzilla.suse.com/1171949
   https://bugzilla.suse.com/1171951
   https://bugzilla.suse.com/1171952
   https://bugzilla.suse.com/1171979
   https://bugzilla.suse.com/1171982
   https://bugzilla.suse.com/1171983
   https://bugzilla.suse.com/1172017
   https://bugzilla.suse.com/1172096
   https://bugzilla.suse.com/1172097
   https://bugzilla.suse.com/1172098
   https://bugzilla.suse.com/1172099
   https://bugzilla.suse.com/1172101
   https://bugzilla.suse.com/1172102
   https://bugzilla.suse.com/1172103
   https://bugzilla.suse.com/1172104
   https://bugzilla.suse.com/1172127
   https://bugzilla.suse.com/1172130
   https://bugzilla.suse.com/1172185
   https://bugzilla.suse.com/1172188
   https://bugzilla.suse.com/1172199
   https://bugzilla.suse.com/1172201
   https://bugzilla.suse.com/1172202
   https://bugzilla.suse.com/1172218
   https://bugzilla.suse.com/1172221
   https://bugzilla.suse.com/1172249
   https://bugzilla.suse.com/1172251
   https://bugzilla.suse.com/1172253
   https://bugzilla.suse.com/1172317
   https://bugzilla.suse.com/1172342
   https://bugzilla.suse.com/1172343
   https://bugzilla.suse.com/1172344
   https://bugzilla.suse.com/1172366
   https://bugzilla.suse.com/1172378
   https://bugzilla.suse.com/1172391
   https://bugzilla.suse.com/1172397
   https://bugzilla.suse.com/1172453

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates

SUSE: 2020:1602-1 important: the Linux Kernel

June 10, 2020
An update that solves 24 vulnerabilities and has 133 fixes is now available

Summary

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824). - CVE-2020-13143: Fixed an out-of-bounds read in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (bsc#1171982). - CVE-2020-12769: Fixed an issue which could have allowed attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one (bsc#1171983). - CVE-2020-12768: Fixed a memory leak in svm_cpu_uninit in arch/x86/kvm/svm.c (bsc#1171736). - CVE-2020-12659: Fixed an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) due to improper headroom validation (bsc#1171214). -...

Read the Full Advisory

References

#1051510 #1058115 #1065729 #1071995 #1082555

#1083647 #1089895 #1103990 #1103991 #1103992

#1104745 #1109837 #1111666 #1112178 #1112374

#1113956 #1114279 #1124278 #1127354 #1127355

#1127371 #1133021 #1141558 #1142685 #1144333

#1151794 #1152489 #1154824 #1157169 #1158265

#1160388 #1160947 #1164780 #1164871 #1165183

#1165478 #1165741 #1166969 #1166978 #1167574

#1167851 #1167867 #1168332 #1168503 #1168670

#1168789 #1169005 #1169020 #1169514 #1169525

#1169762 #1170056 #1170125 #1170145 #1170284

#1170345 #1170457 #1170522 #1170592 #1170617

#1170618 #1170620 #1170621 #1170770 #1170778

#1170791 #1170901 #1171078 #1171098 #1171118

#1171189 #1171191 #1171195 #1171202 #1171205

#1171214 #117...

Read the Full Advisory

Severity
Announcement ID: SUSE-SU-2020:1602-1
Rating: important

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved