{
  "GSD": {
    "alias": "CVE-2021-37576",
    "description": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.",
    "id": "GSD-2021-37576",
    "references": [
      "https://www.suse.com/security/cve/CVE-2021-37576.html",
      "https://www.debian.org/security/2021/dsa-4978",
      "https://access.redhat.com/errata/RHSA-2021:4000",
      "https://access.redhat.com/errata/RHSA-2021:3987",
      "https://access.redhat.com/errata/RHSA-2021:3814",
      "https://access.redhat.com/errata/RHSA-2021:3812",
      "https://access.redhat.com/errata/RHSA-2021:3801",
      "https://access.redhat.com/errata/RHSA-2021:3768",
      "https://access.redhat.com/errata/RHSA-2021:3766",
      "https://access.redhat.com/errata/RHSA-2021:3725",
      "https://access.redhat.com/errata/RHSA-2021:3447",
      "https://access.redhat.com/errata/RHSA-2021:3446",
      "https://access.redhat.com/errata/RHSA-2021:3444",
      "https://access.redhat.com/errata/RHSA-2021:3443",
      "https://access.redhat.com/errata/RHSA-2021:3442",
      "https://access.redhat.com/errata/RHSA-2021:3436",
      "https://ubuntu.com/security/CVE-2021-37576",
      "https://alas.aws.amazon.com/cve/html/CVE-2021-37576.html",
      "https://linux.oracle.com/cve/CVE-2021-37576.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-37576"
      ],
      "details": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.",
      "id": "GSD-2021-37576",
      "modified": "2023-12-13T01:23:10.254163Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2021-37576",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://lore.kernel.org/linuxppc-dev/87im0x1lqi.fsf@mpe.ellerman.id.au/T/#u",
            "refsource": "MISC",
            "url": "https://lore.kernel.org/linuxppc-dev/87im0x1lqi.fsf@mpe.ellerman.id.au/T/#u"
          },
          {
            "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a",
            "refsource": "MISC",
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a"
          },
          {
            "name": "[oss-security] 20210727 Re: Linux kernel: powerpc: KVM guest to host memory corruption",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2021/07/27/2"
          },
          {
            "name": "FEDORA-2021-817b3d47d2",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2YZ2DNURMYYVDT2NYAFDESJC35KCUDS/"
          },
          {
            "name": "FEDORA-2021-12618d9b08",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WDFA7DSQIPM7XPNXJBXFWXHJFVUBCAG6/"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20210917-0005/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20210917-0005/"
          },
          {
            "name": "DSA-4978",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2021/dsa-4978"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.4.277",
                "versionStartIncluding": "3.10",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.9.277",
                "versionStartIncluding": "4.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.14.241",
                "versionStartIncluding": "4.10",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "4.19.199",
                "versionStartIncluding": "4.15",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.4.136",
                "versionStartIncluding": "4.20",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.10.54",
                "versionStartIncluding": "5.5",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.13.6",
                "versionStartIncluding": "5.11",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-37576"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lore.kernel.org/linuxppc-dev/87im0x1lqi.fsf@mpe.ellerman.id.au/T/#u",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://lore.kernel.org/linuxppc-dev/87im0x1lqi.fsf@mpe.ellerman.id.au/T/#u"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a"
            },
            {
              "name": "[oss-security] 20210727 Re: Linux kernel: powerpc: KVM guest to host memory corruption",
              "refsource": "MLIST",
              "tags": [
                "Exploit",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2021/07/27/2"
            },
            {
              "name": "FEDORA-2021-817b3d47d2",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z2YZ2DNURMYYVDT2NYAFDESJC35KCUDS/"
            },
            {
              "name": "FEDORA-2021-12618d9b08",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WDFA7DSQIPM7XPNXJBXFWXHJFVUBCAG6/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210917-0005/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20210917-0005/"
            },
            {
              "name": "DSA-4978",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2021/dsa-4978"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-03-01T20:15Z",
      "publishedDate": "2021-07-26T22:15Z"
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2021-37576 arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs aka CID-f62f3c20647e. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-37576.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs aka CID-f62f3c20647e.",
    "tracking": {
      "current_release_date": "2021-12-16T00:00:00.000Z",
      "generator": {
        "date": "2025-12-27T18:44:53.609Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2021-37576",
      "initial_release_date": "2021-07-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2021-08-06T00:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2021-12-16T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Added kernel to CBL-Mariner 2.0"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 kernel 5.10.60.1-1",
                "product": {
                  "name": "\u003ccm1 kernel 5.10.60.1-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 kernel 5.10.60.1-1",
                "product": {
                  "name": "cm1 kernel 5.10.60.1-1",
                  "product_id": "16919"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 kernel 5.10.78.1-1",
                "product": {
                  "name": "\u003ccbl2 kernel 5.10.78.1-1",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 kernel 5.10.78.1-1",
                "product": {
                  "name": "cbl2 kernel 5.10.78.1-1",
                  "product_id": "16920"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 kernel 5.10.60.1-1 as a component of CBL Mariner 1.0",
          "product_id": "16820-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 kernel 5.10.60.1-1 as a component of CBL Mariner 1.0",
          "product_id": "16919-16820"
        },
        "product_reference": "16919",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 kernel 5.10.78.1-1 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 kernel 5.10.78.1-1 as a component of CBL Mariner 2.0",
          "product_id": "16920-17086"
        },
        "product_reference": "16920",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-37576",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "general",
          "text": "mitre",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "16919-16820",
          "16920-17086"
        ],
        "known_affected": [
          "16820-2",
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2021-37576 arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs aka CID-f62f3c20647e. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-37576.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-08-06T00:00:00.000Z",
          "details": "-:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2021-08-06T00:00:00.000Z",
          "details": "5.10.78.1-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "16820-2",
            "17086-1"
          ]
        }
      ],
      "title": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs aka CID-f62f3c20647e."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n\nThe openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2021-3679: A lack of CPU resource in the Linux kernel tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service (bnc#1189057).\n- CVE-2021-3659: Fix general protection fault via NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).\n- CVE-2021-37576: arch/powerpc/kvm/book3s_rtas.c on the powerpc platform allowed KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e (bnc#1188838 bnc#1188842).\n- CVE-2021-22543: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM could bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bnc#1186482).\n- CVE-2021-21781: A SIGPAGE information disclosure vulnerability on ARM was fixed (bsc#1188445).\n\nThe following non-security bugs were fixed:\n\n- ACPI: AMBA: Fix resource name in /proc/iomem (git-fixes).\n- ACPI: video: Add quirk for the Dell Vostro 3350 (git-fixes).\n- ALSA: ac97: fix PM reference leak in ac97_bus_remove() (git-fixes).\n- ALSA: bebob: add support for ToneWeal FW66 (git-fixes).\n- ALSA: hda: Add IRQ check for platform_get_irq() (git-fixes).\n- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (git-fixes).\n- ALSA: hda/realtek: Fix headset mic for Acer SWIFT SF314-56 (ALC256) (git-fixes).\n- ALSA: hdmi: Expose all pins on MSI MS-7C94 board (git-fixes).\n- ALSA: ppc: fix error return code in snd_pmac_probe() (git-fixes).\n- ALSA: sb: Fix potential ABBA deadlock in CSP driver (git-fixes).\n- ALSA: sb: Fix potential double-free of CSP mixer elements (git-fixes).\n- ALSA: seq: Fix racy deletion of subscriber (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (git-fixes).\n- ALSA: usb-audio: Fix superfluous autosuspend recovery (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix data_mutex lock (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (git-fixes).\n- ALSA: usx2y: Do not call free_pages_exact() with NULL address (git-fixes).\n- ASoC: img: Fix PM reference leak in img_i2s_in_probe() (git-fixes).\n- ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (git-fixes).\n- ASoC: rt5631: Fix regcache sync errors on resume (git-fixes).\n- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (git-fixes).\n- backlight: lm3630a: Fix return code of .update_status() callback (git-fixes).\n- bcache: avoid oversized read request in cache missing code path (bsc#1184631).\n- bcache: remove bcache device self-defined readahead (bsc#1184631).\n- Bluetooth: defer cleanup of resources in hci_unregister_dev() (git-fixes).\n- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Check abort error state in bnxt_half_open_nic() (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: do not disable an already disabled PCI device (git-fixes).\n- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (jsc#SLE-8371 bsc#1153274).\n- bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc (bsc#1154353).\n- btrfs: factor out create_chunk() (bsc#1189077).\n- btrfs: factor out decide_stripe_size() (bsc#1189077).\n- btrfs: factor out gather_device_info() (bsc#1189077).\n- btrfs: factor out init_alloc_chunk_ctl (bsc#1189077).\n- btrfs: fix deadlock with concurrent chunk allocations involving system chunks (bsc#1189077).\n- btrfs: handle invalid profile in chunk allocation (bsc#1189077).\n- btrfs: introduce alloc_chunk_ctl (bsc#1189077).\n- btrfs: introduce chunk allocation policy (bsc#1189077).\n- btrfs: move the chunk_mutex in btrfs_read_chunk_tree (bsc#1189077).\n- btrfs: parameterize dev_extent_min for chunk allocation (bsc#1189077).\n- btrfs: refactor find_free_dev_extent_start() (bsc#1189077).\n- btrfs: Rename __btrfs_alloc_chunk to btrfs_alloc_chunk (bsc#1189077).\n- btrfs: rework chunk allocation to avoid exhaustion of the system chunk array (bsc#1189077).\n- cadence: force nonlinear buffers to be cloned (git-fixes).\n- can: ems_usb: fix memory leak (git-fixes).\n- can: esd_usb2: fix memory leak (git-fixes).\n- can: hi311x: fix a signedness bug in hi3110_cmd() (git-fixes).\n- can: mcba_usb_start(): add missing urb-\u003etransfer_dma initialization (git-fixes).\n- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (git-fixes).\n- can: ti_hecc: Fix memleak in ti_hecc_probe (git-fixes).\n- can: usb_8dev: fix memory leak (git-fixes).\n- ceph: do not WARN if we\u0027re still opening a session to an MDS (bsc#1188748).\n- cfg80211: Fix possible memory leak in function cfg80211_bss_update (git-fixes).\n- cifs: avoid starvation when refreshing dfs cache (bsc#1185902).\n- cifs: constify get_normalized_path() properly (bsc#1185902).\n- cifs: do not cargo-cult strndup() (bsc#1185902).\n- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (git-fixes).\n- cifs: do not send tree disconnect to ipc shares (bsc#1185902).\n- cifs: do not share tcp servers with dfs mounts (bsc#1185902).\n- cifs: do not share tcp sessions of dfs connections (bsc#1185902).\n- cifs: fix check of dfs interlinks (bsc#1185902).\n- cifs: fix interrupted close commands (git-fixes).\n- cifs: fix memory leak in smb2_copychunk_range (git-fixes).\n- cifs: fix path comparison and hash calc (bsc#1185902).\n- cifs: Fix preauth hash corruption (git-fixes).\n- cifs: get rid of @noreq param in __dfs_cache_find() (bsc#1185902).\n- cifs: handle different charsets in dfs cache (bsc#1185902).\n- cifs: keep referral server sessions alive (bsc#1185902).\n- cifs: missing null pointer check in cifs_mount (bsc#1185902).\n- cifs: prevent NULL deref in cifs_compose_mount_options() (bsc#1185902).\n- cifs: Remove unused inline function is_sysvol_or_netlogon() (bsc#1185902).\n- cifs: Return correct error code from smb2_get_enc_key (git-fixes).\n- cifs: set a minimum of 2 minutes for refreshing dfs cache (bsc#1185902).\n- clk: fix leak on devm_clk_bulk_get_all() unwind (git-fixes).\n- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (git-fixes).\n- cxgb4: fix IRQ free race during driver unload (git-fixes).\n- dmaengine: fsl-qdma: check dma_set_mask return value (git-fixes).\n- drm/panel: raspberrypi-touchscreen: Prevent double-free (git-fixes).\n- drm: Return -ENOTTY for non-drm ioctls (git-fixes).\n- Drop media rtl28xxu fix patch (bsc#1188683)\n- e1000e: Check the PCIm state (git-fixes).\n- e1000e: Fix an error handling path in \u0027e1000_probe()\u0027 (git-fixes).\n- firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (git-fixes).\n- firmware: arm_scmi: Fix range check for the maximum number of pending messages (git-fixes).\n- firmware/efi: Tell memblock about EFI iomem reservations (git-fixes).\n- gpio: pca953x: Add support for the On Semi pca9655 (git-fixes).\n- gpio: tqmx86: really make IRQ optional (git-fixes).\n- gpio: zynq: Check return value of pm_runtime_get_sync (git-fixes).\n- gtp: fix an use-before-init in gtp_newlink() (git-fixes).\n- i2c: core: Disable client irq on reboot/shutdown (git-fixes).\n- i40e: Fix autoneg disabling for non-10GBaseT links (git-fixes).\n- i40e: Fix error handling in i40e_vsi_open (git-fixes).\n- iavf: Fix an error handling path in \u0027iavf_probe()\u0027 (git-fixes).\n- ibmvnic: Remove the proper scrq flush (bsc#1188504 ltc#192075).\n- ibmvnic: retry reset if there are no other resets (bsc#1184350 ltc#191533).\n- ice: Re-organizes reqstd/avail {R, T}XQ check/code for efficiency (jsc#SLE-7926).\n- igb: Check if num of q_vectors is smaller than max before array access (git-fixes).\n- igb: Fix an error handling path in \u0027igb_probe()\u0027 (git-fixes).\n- igb: Fix position of assignment to *ring (git-fixes).\n- igb: Fix use-after-free error during reset (git-fixes).\n- igc: change default return of igc_read_phy_reg() (git-fixes).\n- igc: Fix an error handling path in \u0027igc_probe()\u0027 (git-fixes).\n- igc: Fix use-after-free error during reset (git-fixes).\n- iio: accel: bma180: Use explicit member assignment (git-fixes).\n- iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get() (git-fixes).\n- iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (git-fixes).\n- Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (git-fixes).\n- Input: ili210x - add missing negation for touch indication on ili210x (git-fixes).\n- ixgbe: Fix an error handling path in \u0027ixgbe_probe()\u0027 (git-fixes).\n- ixgbe: Fix packet corruption due to missing DMA sync (git-fixes).\n- kabi fix for NFSv4.1: Do not rebind to the same source port when reconnecting to the server (bnc#1186264 bnc#1189021)\n- kvm: i8254: remove redundant assignment to pointer s (bsc#1188770).\n- KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled (bsc#1188771).\n- kvm: LAPIC: Restore guard to prevent illegal APIC register access (bsc#1188772).\n- KVM: nVMX: Consult only the \u0027basic\u0027 exit reason when routing nested exit (bsc#1188773).\n- KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (bsc#1188774).\n- KVM: nVMX: Preserve exception priority irrespective of exiting behavior (bsc#1188777).\n- KVM: nVMX: Really make emulated nested preemption timer pinned (bsc#1188780).\n- KVM: nVMX: Reset the segment cache when stuffing guest segs (bsc#1188781).\n- KVM: nVMX: Skip IBPB when switching between vmcs01 and vmcs02 (bsc#1188782).\n- KVM: nVMX: Sync unsync\u0027d vmcs02 state to vmcs12 on migration (bsc#1188783).\n- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (bsc#1188784).\n- KVM: VMX: Drop guest CPUID check for VMXE in vmx_set_cr4() (bsc#1188786).\n- KVM: VMX: Enable machine check support for 32bit targets (bsc#1188787).\n- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (bsc#1188788).\n- KVM: x86: bit 8 of non-leaf PDPEs is not reserved (bsc#1188790).\n- lib/decompress_unlz4.c: correctly handle zero-padding around initrds (git-fixes).\n- liquidio: Fix unintentional sign extension issue on left shift of u16 (git-fixes).\n- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: videobuf2-core: dequeue if start_streaming fails (git-fixes).\n- mfd: cpcap: Fix cpcap dmamask not set warnings (git-fixes).\n- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (git-fixes).\n- misc: alcor_pci: fix inverted branch condition (git-fixes).\n- misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (git-fixes).\n- misc/libmasm/module: Fix two use after free in ibmasm_init_one (git-fixes).\n- Move upstreamed patches to sorted section\n- mt76: mt7603: set 0 as min coverage_class value (git-fixes).\n- mt76: mt7615: fix endianness in mt7615_mcu_set_eeprom (git-fixes).\n- mt76: mt7615: increase MCU command timeout (git-fixes).\n- mt76: set dma-done flag for flushed descriptors (git-fixes).\n- mvpp2: suppress warning (git-fixes).\n- net: atlantic: fix ip dst and ipv6 address filters (git-fixes).\n- net: dp83867: Fix OF_MDIO config check (git-fixes).\n- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (git-fixes).\n- net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (git-fixes).\n- net: ethernet: ti: Remove TI_CPTS_MOD workaround (git-fixes).\n- net: hns3: Clear the CMDQ registers before unmapping BAR region (git-fixes).\n- net: Make PTP-specific drivers depend on PTP_1588_CLOCK (git-fixes).\n- net: marvell: Fix OF_MDIO config check (git-fixes).\n- net/mlx5: Do not fail driver on failure to create debugfs (git-fixes).\n- net/mlx5e: Block offload of outer header csum for GRE tunnel (git-fixes).\n- net/mlx5: Properly convey driver version to firmware (git-fixes).\n- net: mvpp2: Put fwnode in error case during -\u003eprobe() (git-fixes).\n- net: phy: microchip_t1: add lan87xx_phy_init to initialize the lan87xx phy (git-fixes).\n- net: stmmac: free tx skb buffer in stmmac_resume() (git-fixes).\n- net: usb: fix possible use-after-free in smsc75xx_bind (git-fixes).\n- net: wilc1000: clean up resource in error path of init mon interface (git-fixes).\n- nfc: nfcsim: fix use after free during module unload (git-fixes).\n- NFSv4.1: Do not rebind to the same source port when (bnc#1186264 bnc#1189021)\n- PCI: tegra: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- platform/chrome: cros_ec_lightbar: Reduce ligthbar get version command (git-fixes).\n- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (git-fixes).\n- platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when using s2idle (git-fixes).\n- platform/x86: intel_int0002_vgpio: Pass irqchip when adding gpiochip (git-fixes).\n- platform/x86: intel_int0002_vgpio: Remove dev_err() usage after platform_get_irq() (git-fixes).\n- platform/x86: intel_int0002_vgpio: Use device_init_wakeup (git-fixes).\n- powerpc/64s: Move branch cache flushing bcctr variant to ppc-ops.h (bsc#1188885 ltc#193722).\n- powerpc/64s: rename pnv|pseries_setup_rfi_flush to _setup_security_mitigations (bsc#1188885 ltc#193722).\n- powerpc/mm: Fix lockup on kernel exec fault (bsc#1156395).\n- powerpc: Offline CPU in stop_this_cpu() (bsc#1156395).\n- powerpc/papr_scm: Properly handle UUID types and API (bsc#1113295, git-fixes).\n- powerpc/pesries: Get STF barrier requirement from H_GET_CPU_CHARACTERISTICS (bsc#1188885 ltc#193722).\n- powerpc/pseries: add new branch prediction security bits for link stack (bsc#1188885 ltc#193722).\n- powerpc/pseries: export LPAR security flavor in lparcfg (bsc#1188885 ltc#193722).\n- powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS (bsc#1188885 ltc#193722).\n- powerpc/security: Add a security feature for STF barrier (bsc#1188885 ltc#193722).\n- powerpc/security: Allow for processors that flush the link stack using the special bcctr (bsc#1188885 ltc#193722).\n- powerpc/security: change link stack flush state to the flush type enum (bsc#1188885 ltc#193722).\n- powerpc/security: Fix link stack flush instruction (bsc#1188885 ltc#193722).\n- powerpc/security: make display of branch cache flush more consistent (bsc#1188885 ltc#193722).\n- powerpc/security: re-name count cache flush to branch cache flush (bsc#1188885 ltc#193722).\n- powerpc/security: split branch cache flush toggle from code patching (bsc#1188885 ltc#193722).\n- powerpc/stacktrace: Fix spurious \u0027stale\u0027 traces in raise_backtrace_ipi() (bsc#1156395).\n- powerpc/stacktrace: Include linux/delay.h (bsc#1156395).\n- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: ab8500: Avoid NULL pointers (git-fixes).\n- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (git-fixes).\n- power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- pwm: img: Fix PM reference leak in img_pwm_enable() (git-fixes).\n- pwm: imx1: Do not disable clocks at device remove time (git-fixes).\n- pwm: spear: Do not modify HW state in .remove callback (git-fixes).\n- r8152: Fix a deadlock by doubly PM resume (bsc#1186194).\n- r8152: Fix potential PM refcount imbalance (bsc#1186194).\n- ravb: Fix bit fields checking in ravb_hwtstamp_get() (git-fixes).\n- rbd: always kick acquire on \u0027acquired\u0027 and \u0027released\u0027 notifications (bsc#1188746).\n- rbd: do not hold lock_rwsem while running_list is being drained (bsc#1188747).\n- RDMA/cma: Fix incorrect Packet Lifetime calculation (jsc#SLE-8449).\n- RDMA/cma: Protect RMW with qp_mutex (git-fixes).\n- regulator: hi6421: Fix getting wrong drvdata (git-fixes).\n- regulator: hi6421: Use correct variable type for regmap api val argument (git-fixes).\n- replaced with upstream security mitigation cleanup\n- reset: ti-syscon: fix to_ti_syscon_reset_data macro (git-fixes).\n- Revert \u0027ACPI: resources: Add checks for ACPI IRQ override\u0027 (git-fixes).\n- Revert \u0027be2net: disable bh with spin_lock in be_process_mcc\u0027 (git-fixes).\n- Revert \u0027USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem\u0027 (git-fixes).\n- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (git-fixes).\n- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (git-fixes).\n- scsi: fc: Add 256GBit speed setting to SCSI FC transport (bsc#1188101).\n- sfp: Fix error handing in sfp_probe() (git-fixes).\n- soc/tegra: fuse: Fix Tegra234-only builds (git-fixes).\n- spi: cadence: Correct initialisation of runtime PM again (git-fixes).\n- spi: imx: add a check for speed_hz before calculating the clock (git-fixes).\n- spi: mediatek: fix fifo rx mode (git-fixes).\n- staging: rtl8723bs: fix macro value for 2.4Ghz only device (git-fixes).\n- SUNRPC: prevent port reuse on transports which do not request it (bnc#1186264 bnc#1189021).\n- thermal/core: Correct function name thermal_zone_device_unregister() (git-fixes).\n- tracing: Do not reference char * as a string in histograms (git-fixes).\n- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (git-fixes).\n- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (git-fixes).\n- Update patches.suse/ibmvnic-account-for-bufs-already-saved-in-indir_buf.patch (jsc#SLE-17268 jsc#SLE-17043 bsc#1179243 ltc#189290 bsc#1188620 ltc#192221).\n- Update patches.suse/ibmvnic-free-tx_pool-if-tso_pool-alloc-fails.patch (bsc#1085224 ltc#164363 bsc#1188620 ltc#192221).\n- Update patches.suse/ibmvnic-parenthesize-a-check.patch (bsc#1184114 ltc#192237 bsc#1183871 ltc#192139 git-fixes bsc#1188620 ltc#192221).\n- Update patches.suse/ibmvnic-set-ltb-buff-to-NULL-after-freeing.patch (bsc#1094840 ltc#167098 bsc#1188620 ltc#192221).\n- Update patches.suse/Revert-ibmvnic-remove-duplicate-napi_schedule-call-i.patch (bsc#1065729 bsc#1188405 ltc#193509 bsc#1187476 ltc#193646).\n- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode (git-fixes).\n- usb: gadget: f_hid: fix endianness issue with descriptors (git-fixes).\n- usb: gadget: hid: fix error return code in hid_bind() (git-fixes).\n- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (git-fixes).\n- usb: hub: Fix link power management max exit latency (MEL) calculations (git-fixes).\n- usb: max-3421: Prevent corruption of freed memory (git-fixes).\n- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (git-fixes).\n- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (git-fixes).\n- USB: serial: cp210x: fix comments for GE CS1000 (git-fixes).\n- USB: serial: option: add support for u-blox LARA-R6 family (git-fixes).\n- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (git-fixes).\n- uuid: Add inline helpers to import / export UUIDs (bsc#1113295, git-fixes).\n- virtio_console: Assure used length from device is limited (git-fixes).\n- virtio_net: move tx vq operation under tx queue lock (git-fixes).\n- vxlan: add missing rcu_read_lock() in neigh_reduce() (git-fixes).\n- w1: ds2438: fixing bug that would always get page0 (git-fixes).\n- watchdog: Fix possible use-after-free by calling del_timer_sync() (git-fixes).\n- watchdog: Fix possible use-after-free in wdt_startup() (git-fixes).\n- watchdog: iTCO_wdt: Account for rebooting on second timeout (git-fixes).\n- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (git-fixes).\n- wilc1000: write value to WILC_INTR2_ENABLE register (git-fixes).\n- workqueue: fix UAF in pwq_unbound_release_workfn() (bsc#1188973).\n- xen/events: reset active flag for lateeoi events later (git-fixes).\n- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).\n- xhci: Fix lost USB 2 remote wake (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2021-1142",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1142-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:1142-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BN7VVRY72WW4I46CQCFBKXWN6CBHKRXO/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:1142-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BN7VVRY72WW4I46CQCFBKXWN6CBHKRXO/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1085224",
        "url": "https://bugzilla.suse.com/1085224"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094840",
        "url": "https://bugzilla.suse.com/1094840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113295",
        "url": "https://bugzilla.suse.com/1113295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153274",
        "url": "https://bugzilla.suse.com/1153274"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154353",
        "url": "https://bugzilla.suse.com/1154353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156395",
        "url": "https://bugzilla.suse.com/1156395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179243",
        "url": "https://bugzilla.suse.com/1179243"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1183871",
        "url": "https://bugzilla.suse.com/1183871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184114",
        "url": "https://bugzilla.suse.com/1184114"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184350",
        "url": "https://bugzilla.suse.com/1184350"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184631",
        "url": "https://bugzilla.suse.com/1184631"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185377",
        "url": "https://bugzilla.suse.com/1185377"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185902",
        "url": "https://bugzilla.suse.com/1185902"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186194",
        "url": "https://bugzilla.suse.com/1186194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186264",
        "url": "https://bugzilla.suse.com/1186264"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186482",
        "url": "https://bugzilla.suse.com/1186482"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187476",
        "url": "https://bugzilla.suse.com/1187476"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188101",
        "url": "https://bugzilla.suse.com/1188101"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188405",
        "url": "https://bugzilla.suse.com/1188405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188445",
        "url": "https://bugzilla.suse.com/1188445"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188504",
        "url": "https://bugzilla.suse.com/1188504"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188620",
        "url": "https://bugzilla.suse.com/1188620"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188683",
        "url": "https://bugzilla.suse.com/1188683"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188746",
        "url": "https://bugzilla.suse.com/1188746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188747",
        "url": "https://bugzilla.suse.com/1188747"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188748",
        "url": "https://bugzilla.suse.com/1188748"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188770",
        "url": "https://bugzilla.suse.com/1188770"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188771",
        "url": "https://bugzilla.suse.com/1188771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188772",
        "url": "https://bugzilla.suse.com/1188772"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188773",
        "url": "https://bugzilla.suse.com/1188773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188774",
        "url": "https://bugzilla.suse.com/1188774"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188777",
        "url": "https://bugzilla.suse.com/1188777"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188780",
        "url": "https://bugzilla.suse.com/1188780"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188781",
        "url": "https://bugzilla.suse.com/1188781"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188782",
        "url": "https://bugzilla.suse.com/1188782"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188783",
        "url": "https://bugzilla.suse.com/1188783"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188784",
        "url": "https://bugzilla.suse.com/1188784"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188786",
        "url": "https://bugzilla.suse.com/1188786"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188787",
        "url": "https://bugzilla.suse.com/1188787"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188788",
        "url": "https://bugzilla.suse.com/1188788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188790",
        "url": "https://bugzilla.suse.com/1188790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188838",
        "url": "https://bugzilla.suse.com/1188838"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188842",
        "url": "https://bugzilla.suse.com/1188842"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188876",
        "url": "https://bugzilla.suse.com/1188876"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188885",
        "url": "https://bugzilla.suse.com/1188885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188973",
        "url": "https://bugzilla.suse.com/1188973"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1189021",
        "url": "https://bugzilla.suse.com/1189021"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1189057",
        "url": "https://bugzilla.suse.com/1189057"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1189077",
        "url": "https://bugzilla.suse.com/1189077"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 802154",
        "url": "https://bugzilla.suse.com/802154"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-21781 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-21781/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-22543 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-22543/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3659 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3659/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3679 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3679/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37576 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37576/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2021-08-10T17:32:52Z",
      "generator": {
        "date": "2021-08-10T17:32:52Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:1142-1",
      "initial_release_date": "2021-08-10T17:32:52Z",
      "revision_history": [
        {
          "date": "2021-08-10T17:32:52Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.3.18-lp152.87.1.noarch",
                "product": {
                  "name": "kernel-devel-5.3.18-lp152.87.1.noarch",
                  "product_id": "kernel-devel-5.3.18-lp152.87.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-5.3.18-lp152.87.1.noarch",
                "product": {
                  "name": "kernel-docs-5.3.18-lp152.87.1.noarch",
                  "product_id": "kernel-docs-5.3.18-lp152.87.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-docs-html-5.3.18-lp152.87.1.noarch",
                "product": {
                  "name": "kernel-docs-html-5.3.18-lp152.87.1.noarch",
                  "product_id": "kernel-docs-html-5.3.18-lp152.87.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.3.18-lp152.87.1.noarch",
                "product": {
                  "name": "kernel-macros-5.3.18-lp152.87.1.noarch",
                  "product_id": "kernel-macros-5.3.18-lp152.87.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.3.18-lp152.87.1.noarch",
                "product": {
                  "name": "kernel-source-5.3.18-lp152.87.1.noarch",
                  "product_id": "kernel-source-5.3.18-lp152.87.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
                "product": {
                  "name": "kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
                  "product_id": "kernel-source-vanilla-5.3.18-lp152.87.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-debug-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-debug-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-debug-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-debug-devel-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-default-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-default-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
                "product": {
                  "name": "kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
                  "product_id": "kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
                "product": {
                  "name": "kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
                  "product_id": "kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-devel-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-default-devel-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-default-devel-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-kvmsmall-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-build-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-obs-build-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-obs-build-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-obs-qa-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-preempt-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-preempt-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-preempt-devel-5.3.18-lp152.87.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-5.3.18-lp152.87.1.x86_64",
                "product": {
                  "name": "kernel-syms-5.3.18-lp152.87.1.x86_64",
                  "product_id": "kernel-syms-5.3.18-lp152.87.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.2",
                "product": {
                  "name": "openSUSE Leap 15.2",
                  "product_id": "openSUSE Leap 15.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-debug-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-default-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64"
        },
        "product_reference": "kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64"
        },
        "product_reference": "kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-devel-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-default-devel-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.3.18-lp152.87.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch"
        },
        "product_reference": "kernel-devel-5.3.18-lp152.87.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-5.3.18-lp152.87.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch"
        },
        "product_reference": "kernel-docs-5.3.18-lp152.87.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-docs-html-5.3.18-lp152.87.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch"
        },
        "product_reference": "kernel-docs-html-5.3.18-lp152.87.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.3.18-lp152.87.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch"
        },
        "product_reference": "kernel-macros-5.3.18-lp152.87.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-build-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-obs-build-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-obs-qa-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-preempt-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-preempt-devel-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.3.18-lp152.87.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch"
        },
        "product_reference": "kernel-source-5.3.18-lp152.87.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.3.18-lp152.87.1.noarch as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch"
        },
        "product_reference": "kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-5.3.18-lp152.87.1.x86_64 as component of openSUSE Leap 15.2",
          "product_id": "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
        },
        "product_reference": "kernel-syms-5.3.18-lp152.87.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-21781",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-21781"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process\u0027s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-21781",
          "url": "https://www.suse.com/security/cve/CVE-2021-21781"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188445 for CVE-2021-21781",
          "url": "https://bugzilla.suse.com/1188445"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T17:32:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-21781"
    },
    {
      "cve": "CVE-2021-22543",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-22543"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-22543",
          "url": "https://www.suse.com/security/cve/CVE-2021-22543"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186482 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1186482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186483 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1186483"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190276 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1190276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197660 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1197660"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T17:32:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-22543"
    },
    {
      "cve": "CVE-2021-3659",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3659"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3659",
          "url": "https://www.suse.com/security/cve/CVE-2021-3659"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188876 for CVE-2021-3659",
          "url": "https://bugzilla.suse.com/1188876"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T17:32:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-3659"
    },
    {
      "cve": "CVE-2021-3679",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3679"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3679",
          "url": "https://www.suse.com/security/cve/CVE-2021-3679"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189057 for CVE-2021-3679",
          "url": "https://bugzilla.suse.com/1189057"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T17:32:52Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-3679"
    },
    {
      "cve": "CVE-2021-37576",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37576"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
          "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
          "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
          "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37576",
          "url": "https://www.suse.com/security/cve/CVE-2021-37576"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188838 for CVE-2021-37576",
          "url": "https://bugzilla.suse.com/1188838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188842 for CVE-2021-37576",
          "url": "https://bugzilla.suse.com/1188842"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190276 for CVE-2021-37576",
          "url": "https://bugzilla.suse.com/1190276"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.2:kernel-debug-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-debug-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-base-rebuild-5.3.18-lp152.87.1.lp152.8.40.1.x86_64",
            "openSUSE Leap 15.2:kernel-default-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-devel-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-docs-html-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-kvmsmall-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-kvmsmall-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-macros-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-obs-build-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-obs-qa-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-preempt-devel-5.3.18-lp152.87.1.x86_64",
            "openSUSE Leap 15.2:kernel-source-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-source-vanilla-5.3.18-lp152.87.1.noarch",
            "openSUSE Leap 15.2:kernel-syms-5.3.18-lp152.87.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T17:32:52Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-37576"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876).\n- CVE-2021-21781: Fixed a information disclosure vulnerability in the ARM SIGPAGE (bsc#1188445).\n- CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM, which could bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bsc#1186482).\n- CVE-2021-37576: Fixed an issue on the powerpc platform, where a KVM guest OS user could cause host OS memory corruption via rtas_args.nargs (bsc#1188838).\n- CVE-2021-3609: Fixed a potential local privilege escalation in the  CAN BCM networking protocol (bsc#1187215).\n- CVE-2021-3612: Fixed an out-of-bounds memory write flaw in the joystick devices subsystem. This flaw allowed a local user to crash the system or possibly escalate their privileges on the system. (bsc#1187585)\n- CVE-2021-35039: Fixed mishandling of signature verification. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, did not occur for a module.sig_enforce=1 command-line argument (bsc#1188080).\n\nThe following non-security bugs were fixed:\n\n- ACPI: AMBA: Fix resource name in /proc/iomem (git-fixes).\n- ACPI: APEI: fix synchronous external aborts in user-mode (git-fixes).\n- ACPI: DPTF: Fix reading of attributes (git-fixes).\n- ACPI: EC: Make more Asus laptops use ECDT _GPE (git-fixes).\n- ACPI: PM / fan: Put fan device IDs into separate header file (git-fixes).\n- ACPI: bus: Call kobject_put() in acpi_init() error path (git-fixes).\n- ACPI: processor idle: Fix up C-state latency if not ordered (git-fixes).\n- ACPI: property: Constify stubs for CONFIG_ACPI=n case (git-fixes).\n- ACPI: resources: Add checks for ACPI IRQ override (git-fixes).\n- ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes).\n- ACPI: video: Add quirk for the Dell Vostro 3350 (git-fixes).\n- ACPICA: Fix memory leak caused by _CID repair function (git-fixes).\n- ALSA: ac97: fix PM reference leak in ac97_bus_remove() (git-fixes).\n- ALSA: bebob: add support for ToneWeal FW66 (git-fixes).\n- ALSA: firewire-motu: fix detection for S/PDIF source on optical interface in v2 protocol (git-fixes).\n- ALSA: firewire-motu: fix stream format for MOTU 8pre FireWire (git-fixes).\n- ALSA: hda/realtek: Add another ALC236 variant support (git-fixes).\n- ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (git-fixes).\n- ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (git-fixes).\n- ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine (git-fixes).\n- ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 830 G8 Notebook PC (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook x360 830 G8 (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G8 (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 450 G8 (git-fixes).\n- ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 630 G8 (git-fixes).\n- ALSA: hda: Add IRQ check for platform_get_irq() (git-fixes).\n- ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID (git-fixes).\n- ALSA: hdmi: Expose all pins on MSI MS-7C94 board (git-fixes).\n- ALSA: intel8x0: Fix breakage at ac97 clock measurement (git-fixes).\n- ALSA: isa: Fix error return code in snd_cmi8330_probe() (git-fixes).\n- ALSA: pcm - fix mmap capability check for the snd-dummy driver (git-fixes).\n- ALSA: pcm: Call substream ack() method upon compat mmap commit (git-fixes).\n- ALSA: pcm: Fix mmap capability check (git-fixes).\n- ALSA: ppc: fix error return code in snd_pmac_probe() (git-fixes).\n- ALSA: sb: Fix potential ABBA deadlock in CSP driver (git-fixes).\n- ALSA: sb: Fix potential double-free of CSP mixer elements (git-fixes).\n- ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (git-fixes).\n- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (git-fixes).\n- ALSA: usb-audio: Fix OOB access at proc output (git-fixes).\n- ALSA: usb-audio: fix rate on Ozone Z90 USB headset (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix data_mutex lock (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (git-fixes).\n- ALSA: usb-audio: scarlett2: Fix wrong resume call (git-fixes).\n- ALSA: usb-audio: scarlett2: Read mixer volumes at init time (git-fixes).\n- ALSA: usb-audio: scarlett2: Read mux at init time (git-fixes).\n- ALSA: usx2y: Avoid camelCase (git-fixes).\n- ALSA: usx2y: Do not call free_pages_exact() with NULL address (git-fixes).\n- ARM: ensure the signal page contains defined contents (bsc#1188445).\n- ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (git-fixes).\n- ASoC: Intel: sof_sdw: add SOF_RT715_DAI_ID_FIX for AlderLake (git-fixes).\n- ASoC: Intel: sof_sdw: add mutual exclusion between PCH DMIC and RT715 (git-fixes).\n- ASoC: SOF: loader: Use snd_sof_dsp_block_read() instead sof_block_read() (git-fixes).\n- ASoC: atmel-i2s: Fix usage of capture and playback at the same time (git-fixes).\n- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (git-fixes).\n- ASoC: fsl_spdif: Fix error handler with pm_runtime_enable (git-fixes).\n- ASoC: fsl_spdif: Fix unexpected interrupt after suspend (git-fixes).\n- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (git-fixes).\n- ASoC: img: Fix PM reference leak in img_i2s_in_probe() (git-fixes).\n- ASoC: intel/boards: add missing MODULE_DEVICE_TABLE (git-fixes).\n- ASoC: max98373-sdw: add missing memory allocation check (git-fixes).\n- ASoC: max98373-sdw: use first_hw_init flag on resume (git-fixes).\n- ASoC: mediatek: mtk-btcvsd: Fix an error handling path in \u0027mtk_btcvsd_snd_probe()\u0027 (git-fixes).\n- ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (git-fixes).\n- ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (git-fixes).\n- ASoC: rt1308-sdw: use first_hw_init flag on resume (git-fixes).\n- ASoC: rt5631: Fix regcache sync errors on resume (git-fixes).\n- ASoC: rt5682-sdw: set regcache_cache_only false before reading RT5682_DEVICE_ID (git-fixes).\n- ASoC: rt5682-sdw: use first_hw_init flag on resume (git-fixes).\n- ASoC: rt5682: Disable irq on shutdown (git-fixes).\n- ASoC: rt5682: Fix a problem with error handling in the io init function of the soundwire (git-fixes).\n- ASoC: rt5682: fix getting the wrong device id when the suspend_stress_test (git-fixes).\n- ASoC: rt700-sdw: use first_hw_init flag on resume (git-fixes).\n- ASoC: rt711-sdw: use first_hw_init flag on resume (git-fixes).\n- ASoC: rt715-sdw: use first_hw_init flag on resume (git-fixes).\n- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (git-fixes).\n- ASoC: soc-pcm: fix the return value in dpcm_apply_symmetry() (git-fixes).\n- ASoC: tegra: Set driver_name=tegra for all machine drivers (git-fixes).\n- ASoC: wm_adsp: Correct wm_coeff_tlv_get handling (git-fixes).\n- Bluetooth: Fix alt settings for incoming SCO with transparent coding format (git-fixes).\n- Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (git-fixes).\n- Bluetooth: Fix the HCI to MGMT status conversion table (git-fixes).\n- Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails (git-fixes).\n- Bluetooth: L2CAP: Fix invalid access on ECRED Connection response (git-fixes).\n- Bluetooth: Remove spurious error message (git-fixes).\n- Bluetooth: Shutdown controller after workqueues are flushed or cancelled (git-fixes).\n- Bluetooth: btintel: Add infrastructure to read controller information (bsc#1188893).\n- Bluetooth: btintel: Check firmware version before download (bsc#1188893).\n- Bluetooth: btintel: Collect tlv based active firmware build info in FW mode (bsc#1188893).\n- Bluetooth: btintel: Consolidate intel_version parsing (bsc#1188893).\n- Bluetooth: btintel: Consolidate intel_version_tlv parsing (bsc#1188893).\n- Bluetooth: btintel: Fix endianness issue for TLV version information (bsc#1188893).\n- Bluetooth: btintel: Fix offset calculation boot address parameter (bsc#1188893).\n- Bluetooth: btintel: Functions to send firmware header / payload (bsc#1188893).\n- Bluetooth: btintel: Move operational checks after version check (bsc#1188893).\n- Bluetooth: btintel: Refactor firmware download function (bsc#1188893).\n- Bluetooth: btintel: Reorganized bootloader mode tlv checks in intel_version_tlv parsing (bsc#1188893).\n- Bluetooth: btintel: Replace zero-length array with flexible-array member (bsc#1188893).\n- Bluetooth: btintel: Skip reading firmware file version while in bootloader mode (bsc#1188893).\n- Bluetooth: btqca: Do not modify firmware contents in-place (git-fixes).\n- Bluetooth: btusb: Add *setup* function for new generation Intel controllers (bsc#1188893).\n- Bluetooth: btusb: Add support USB ALT 3 for WBS (git-fixes).\n- Bluetooth: btusb: Add support for GarfieldPeak controller (bsc#1188893).\n- Bluetooth: btusb: Consolidate code for waiting firmware download (bsc#1188893).\n- Bluetooth: btusb: Define a function to construct firmware filename (bsc#1188893).\n- Bluetooth: btusb: Enable MSFT extension for Intel controllers (bsc#1188893).\n- Bluetooth: btusb: Fix failing to init controllers with operation firmware (bsc#1188893).\n- Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip (git-fixes).\n- Bluetooth: btusb: Helper function to download firmware to Intel adapters (bsc#1188893).\n- Bluetooth: btusb: Map Typhoon peak controller to BTUSB_INTEL_NEWGEN (bsc#1188893).\n- Bluetooth: btusb: Update boot parameter specific to SKU (bsc#1188893).\n- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc (git-fixes).\n- Bluetooth: btusb: print firmware file name on error loading firmware (bsc#1188893).\n- Bluetooth: hci_intel: drop strange le16_to_cpu() against u8 values (bsc#1188893).\n- Bluetooth: hci_intel: enable on new platform (bsc#1188893).\n- Bluetooth: hci_intel: switch to list_for_each_entry() (bsc#1188893).\n- Bluetooth: hci_qca: fix potential GPF (git-fixes).\n- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (git-fixes).\n- Bluetooth: mgmt: Fix the command returns garbage parameter value (git-fixes).\n- HID: do not use down_interruptible() when unbinding devices (git-fixes).\n- HID: wacom: Correct base usage for capacitive ExpressKey status bits (git-fixes).\n- Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (git-fixes).\n- Input: hil_kbd - fix error return code in hil_dev_connect() (git-fixes).\n- Input: ili210x - add missing negation for touch indication on ili210x (git-fixes).\n- Input: usbtouchscreen - fix control-request directions (git-fixes).\n- KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled (bsc#1188771).\n- KVM: SVM: document KVM_MEM_ENCRYPT_OP, let userspace detect if SEV is available (bsc#1188703).\n- KVM: nVMX: Consult only the \u0027basic\u0027 exit reason when routing nested exit (bsc#1188773).\n- KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (bsc#1188774).\n- KVM: nVMX: Preserve exception priority irrespective of exiting behavior (bsc#1188777).\n- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (git-fixes).\n- PCI: Add AMD RS690 quirk to enable 64-bit DMA (git-fixes).\n- PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (git-fixes).\n- PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (git-fixes).\n- PCI: aardvark: Fix checking for PIO Non-posted Request (git-fixes).\n- PCI: aardvark: Implement workaround for the readback value of VEND_ID (git-fixes).\n- PCI: aardvark: Implement workaround for the readback value of VEND_ID (git-fixes).\n- PCI: intel-gw: Fix INTx enable (git-fixes).\n- PCI: intel-gw: Fix INTx enable (git-fixes).\n- PCI: iproc: Fix multi-MSI base vector number allocation (git-fixes).\n- PCI: iproc: Fix multi-MSI base vector number allocation (git-fixes).\n- PCI: iproc: Support multi-MSI only on uniprocessor kernel (git-fixes).\n- PCI: quirks: fix false kABI positive (git-fixes).\n- PCI: tegra194: Fix tegra_pcie_ep_raise_msi_irq() ill-defined shift (git-fixes).\n- PCI: tegra194: Fix tegra_pcie_ep_raise_msi_irq() ill-defined shift (git-fixes).\n- PCI: tegra: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- RDMA/cma: Fix incorrect Packet Lifetime calculation (jsc#SLE-8449).\n- RDMA/cma: Protect RMW with qp_mutex (git-fixes).\n- RDMA/hns: Remove unused parameter udata (jsc#SLE-15176).\n- RDMA/mlx4: Remove unused parameter udata (jsc#SLE-15176).\n- RDMA/mlx5: Remove unused parameter udata (jsc#SLE-15176).\n- RDMA/rtrs-clt: Check if the queue_depth has changed during a reconnection (jsc#SLE-15176).\n- RDMA/rtrs-clt: Check state of the rtrs_clt_sess before reading its stats (jsc#SLE-15176).\n- RDMA/rtrs-clt: Fix memory leak of not-freed sess-\u003estats and stats-\u003epcpu_stats (jsc#SLE-15176).\n- RDMA/rtrs-srv: Fix memory leak of unfreed rtrs_srv_stats object (jsc#SLE-15176).\n- RDMA/rtrs-srv: Fix memory leak when having multiple sessions (jsc#SLE-15176).\n- RDMA/rtrs-srv: Replace atomic_t with percpu_ref for ids_inflight (jsc#SLE-15176).\n- RDMA/rtrs-srv: Set minimal max_send_wr and max_recv_wr (jsc#SLE-15176).\n- RDMA/rtrs: Do not reset hb_missed_max after re-connection (jsc#SLE-15176).\n- RDMA/srp: Fix a recently introduced memory leak (jsc#SLE-15176).\n- Revert \u0027ACPI: resources: Add checks for ACPI IRQ override\u0027 (git-fixes).\n- Revert \u0027ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro\u0027 (git-fixes).\n- Revert \u0027Bluetooth: btintel: Fix endianness issue for TLV version information\u0027 (bsc#1188893).\n- Revert \u0027USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem\u0027 (git-fixes).\n- Revert \u0027be2net: disable bh with spin_lock in be_process_mcc\u0027 (git-fixes).\n- Revert \u0027drm/i915: Propagate errors on awaiting already signaled fences\u0027 (git-fixes).\n- Revert \u0027drm: add a locked version of drm_is_current_master\u0027 (git-fixes).\n- Revert \u0027ibmvnic: remove duplicate napi_schedule call in open function\u0027 (bsc#1065729).\n- Revert \u0027iwlwifi: remove wide_cmd_header field\u0027 (bsc#1187495).\n- USB: cdc-acm: blacklist Heimann USB Appset device (git-fixes).\n- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (git-fixes).\n- USB: serial: cp210x: fix comments for GE CS1000 (git-fixes).\n- USB: serial: option: add support for u-blox LARA-R6 family (git-fixes).\n- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (git-fixes).\n- [xarray] iov_iter_fault_in_readable() should do nothing in xarray case (git-fixes).\n- amdgpu: fix GEM obj leak in amdgpu_display_user_framebuffer_create (bsc#1152472).\n- ata: ahci_sunxi: Disable DIPM (git-fixes).\n- ath10k: Fix an error code in ath10k_add_interface() (git-fixes).\n- ath10k: add missing error return code in ath10k_pci_probe() (git-fixes).\n- ath10k: go to path err_unsupported when chip id is not supported (git-fixes).\n- ath10k: remove unused more_frags variable (git-fixes).\n- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (git-fixes).\n- backlight: lm3630a: Fix return code of .update_status() callback (git-fixes).\n- backlight: lm3630a_bl: Put fwnode in error case during -\u003eprobe() (git-fixes).\n- bcache: avoid oversized read request in cache missing code path (bsc#1184631).\n- bcache: remove bcache device self-defined readahead (bsc#1184631).\n- blk-mq: Add blk_mq_delay_run_hw_queues() API call (bsc#1180092).\n- blk-mq: In blk_mq_dispatch_rq_list() \u0027no budget\u0027 is a reason to kick (bsc#1180092).\n- blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget (bsc#1180092).\n- blk-mq: Rerun dispatching in the case of budget contention (bsc#1180092).\n- blk-mq: insert flush request to the front of dispatch queue (bsc#1180092).\n- blk-mq: insert passthrough request into hctx-\u003edispatch directly (bsc#1180092).\n- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Check abort error state in bnxt_half_open_nic() (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: do not disable an already disabled PCI device (git-fixes).\n- bonding: Add struct bond_ipesc to manage SA (bsc#1176447).\n- bonding: disallow setting nested bonding + ipsec offload (bsc#1176447).\n- bonding: fix build issue (git-fixes).\n- bonding: fix incorrect return value of bond_ipsec_offload_ok() (bsc#1176447).\n- bonding: fix null dereference in bond_ipsec_add_sa() (bsc#1176447).\n- bonding: fix suspicious RCU usage in bond_ipsec_add_sa() (bsc#1176447).\n- bonding: fix suspicious RCU usage in bond_ipsec_del_sa() (bsc#1176447).\n- bonding: fix suspicious RCU usage in bond_ipsec_offload_ok() (bsc#1176447).\n- bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc (bsc#1154353).\n- bpftool: Properly close va_list \u0027ap\u0027 by va_end() on error (bsc#1155518).\n- brcmfmac: Fix a double-free in brcmf_sdio_bus_reset (git-fixes).\n- brcmfmac: correctly report average RSSI in station info (git-fixes).\n- brcmfmac: fix setting of station info chains bitmask (git-fixes).\n- brcmsmac: mac80211_if: Fix a resource leak in an error handling path (git-fixes).\n- cadence: force nonlinear buffers to be cloned (git-fixes).\n- can: ems_usb: fix memory leak (git-fixes).\n- can: esd_usb2: fix memory leak (git-fixes).\n- can: gw: synchronize rcu operations before removing gw job entry (git-fixes).\n- can: hi311x: fix a signedness bug in hi3110_cmd() (git-fixes).\n- can: hi311x: hi3110_can_probe(): silence clang warning (git-fixes).\n- can: mcba_usb_start(): add missing urb-\u003etransfer_dma initialization (git-fixes).\n- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (git-fixes).\n- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (git-fixes).\n- can: usb_8dev: fix memory leak (git-fixes).\n- ceph: do not WARN if we\u0027re still opening a session to an MDS (bsc#1188748).\n- cfg80211: call cfg80211_leave_ocb when switching away from OCB (git-fixes).\n- char: pcmcia: error out if \u0027num_bytes_read\u0027 is greater than 4 in set_protocol() (git-fixes).\n- cifs: Fix preauth hash corruption (git-fixes).\n- cifs: Return correct error code from smb2_get_enc_key (git-fixes).\n- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (git-fixes).\n- cifs: fix interrupted close commands (git-fixes).\n- cifs: fix memory leak in smb2_copychunk_range (git-fixes).\n- clk: actions: Fix SD clocks factor table on Owl S500 SoC (git-fixes).\n- clk: actions: Fix UART clock dividers on Owl S500 SoC (git-fixes).\n- clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (git-fixes).\n- clk: imx8mq: remove SYS PLL 1/2 clock gates (git-fixes).\n- clk: meson: g12a: fix gp0 and hifi ranges (git-fixes).\n- clk: renesas: r8a77995: Add ZA2 clock (git-fixes).\n- clk: renesas: rcar-gen3: Update Z clock rate formula in comments (git-fixes).\n- clk: si5341: Avoid divide errors due to bogus register contents (git-fixes).\n- clk: si5341: Update initialization magic (git-fixes).\n- clk: tegra: Ensure that PLLU configuration is applied properly (git-fixes).\n- clk: zynqmp: pll: Remove some dead code (git-fixes).\n- clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround (git-fixes).\n- clocksource: Retry clock read if long delays detected (git-fixes).\n- coresight: Propagate symlink failure (git-fixes).\n- coresight: core: Fix use of uninitialized pointer (git-fixes).\n- cpu/hotplug: Cure the cpusets trainwreck (git fixes (sched/hotplug)).\n- cpufreq: sc520_freq: add \u0027fallthrough\u0027 to one case (git-fixes).\n- crypto: ccp - Fix a resource leak in an error handling path (git-fixes).\n- crypto: ixp4xx - dma_unmap the correct address (git-fixes).\n- crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (git-fixes).\n- crypto: nx - add missing MODULE_DEVICE_TABLE (git-fixes).\n- crypto: omap-sham - Fix PM reference leak in omap sham ops (git-fixes).\n- crypto: qat - check return code of qat_hal_rd_rel_reg() (git-fixes).\n- crypto: qat - remove unused macro in FW loader (git-fixes).\n- crypto: sun4i-ss - IV register does not work on A10 and A13 (git-fixes).\n- crypto: sun4i-ss - checking sg length is not sufficient (git-fixes).\n- crypto: sun4i-ss - initialize need_fallback (git-fixes).\n- crypto: ux500 - Fix error return code in hash_hw_final() (git-fixes).\n- crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req() (git-fixes).\n- crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (git-fixes).\n- cw1200: Revert unnecessary patches that fix unreal use-after-free bugs (git-fixes).\n- cw1200: add missing MODULE_DEVICE_TABLE (git-fixes).\n- cxgb4: fix IRQ free race during driver unload (git-fixes).\n- dma-buf/sync_file: Do not leak fences on merge failure (git-fixes).\n- dmaengine: fsl-qdma: check dma_set_mask return value (git-fixes).\n- dmaengine: mediatek: do not issue a new desc if one is still current (git-fixes).\n- dmaengine: mediatek: free the proper desc in desc_free handler (git-fixes).\n- dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (git-fixes).\n- dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (git-fixes).\n- dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (git-fixes).\n- docs: admin-guide: update description for kernel.hotplug sysctl (git-fixes).\n- docs: virt/kvm: close inline string literal (bsc#1188703).\n- dpaa2-eth: fix memory leak in XDP_REDIRECT (git-fixes).\n- dpaa2-eth: fix memory leak in XDP_REDIRECT (git-fixes).\n- drm/amd/amdgpu/sriov disable all ip hw status by default (git-fixes).\n- drm/amd/dc: Fix a missing check bug in dm_dp_mst_detect() (git-fixes).\n- drm/amd/display: Avoid HDCP over-read and corruption (git-fixes).\n- drm/amd/display: Fix DCN 3.01 DSCCLK validation (git-fixes).\n- drm/amd/display: Fix build warnings (git-fixes).\n- drm/amd/display: Fix off-by-one error in DML (git-fixes).\n- drm/amd/display: Release MST resources on switch from MST to SST (git-fixes).\n- drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7 (git-fixes).\n- drm/amd/display: Verify Gamma \u0026 Degamma LUT sizes in amdgpu_dm_atomic_check (git-fixes).\n- drm/amd/display: fix HDCP reset sequence on reinitialize (git-fixes).\n- drm/amd/display: fix incorrrect valid irq check (git-fixes).\n- drm/amd/display: fix use_max_lb flag for 420 pixel formats (git-fixes).\n- drm/amdgpu: Do not query CE and UE errors (bsc#1152472)\n- drm/amdgpu: Update NV SIMD-per-CU to 2 (git-fixes).\n- drm/amdgpu: enable sdma0 tmz for Raven/Renoir(V2) (git-fixes).\n- drm/amdgpu: remove unsafe optimization to drop preamble ib (git-fixes).\n- drm/amdgpu: update golden setting for sienna_cichlid (git-fixes).\n- drm/amdgpu: wait for moving fence after pinning (git-fixes).\n- drm/amdkfd: Fix circular lock in nocpsch path (git-fixes).\n- drm/amdkfd: Walk through list with dqm lock hold (git-fixes).\n- drm/amdkfd: fix circular locking on get_wave_state (git-fixes).\n- drm/amdkfd: use allowed domain for vmbo validation (git-fixes).\n- drm/arm/malidp: Always list modifiers (git-fixes).\n- drm/bridge/sii8620: fix dependency on extcon (git-fixes).\n- drm/bridge: Fix the stop condition of drm_bridge_chain_pre_enable() (git-fixes).\n- drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer() (git-fixes).\n- drm/bridge: nwl-dsi: Force a full modeset when crtc_state-\u003eactive is changed to be true (git-fixes).\n- drm/dp_mst: Do not set proposed vcpi directly (git-fixes).\n- drm/gma500: Add the missed drm_gem_object_put() in psb_user_framebuffer_create() (git-fixes).\n- drm/i915/display: Do not zero past infoframes.vsc (git-fixes).\n- drm/i915/gvt: Clear d3_entered on elsp cmd submission (git-fixes).\n- drm/i915/selftests: use vma_lookup() in __igt_mmap() (git-fixes).\n- drm/mcde/panel: Inverse misunderstood flag (bsc#1152472)\n- drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init() (git-fixes).\n- drm/msm/dpu: Fix error return code in dpu_mdss_init() (git-fixes).\n- drm/msm/dpu: Fix sm8250_mdp register length (git-fixes).\n- drm/msm/mdp4: Fix modifier support enabling (git-fixes).\n- drm/msm: Fix error return code in msm_drm_init() (git-fixes).\n- drm/msm: Small msm_gem_purge() fix (bsc#1152489)\n- drm/mxsfb: Do not select DRM_KMS_FB_HELPER (git-fixes).\n- drm/nouveau: Do not set allow_fb_modifiers explicitly (git-fixes).\n- drm/nouveau: fix dma_address check for CPU/GPU sync (git-fixes).\n- drm/nouveau: wait for moving fence after pinning v2 (git-fixes).\n- drm/panel: nt35510: Do not fail if DSI read fails (git-fixes).\n- drm/panel: raspberrypi-touchscreen: Prevent double-free (git-fixes).\n- drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (git-fixes).\n- drm/radeon: Call radeon_suspend_kms() in radeon_pci_shutdown() for Loongson64 (git-fixes).\n- drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() (bsc#1152489)\n- drm/radeon: wait for moving fence after pinning (git-fixes).\n- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (git-fixes).\n- drm/rockchip: cdn-dp: fix sign extension on an int multiply for a u64 result (git-fixes).\n- drm/rockchip: dsi: move all lane config except LCDC mux to bind() (git-fixes).\n- drm/rockchip: dsi: remove extra component_del() call (git-fixes).\n- drm/rockchip: lvds: Fix an error handling path (git-fixes).\n- drm/sched: Avoid data corruptions (git-fixes).\n- drm/scheduler: Fix hang when sched_entity released (git-fixes).\n- drm/stm: Fix bus_flags handling (bsc#1152472)\n- drm/tegra: Do not set allow_fb_modifiers explicitly (git-fixes).\n- drm/vc4: Fix clock source for VEC PixelValve on BCM2711 (git-fixes).\n- drm/vc4: crtc: Skip the TXP (git-fixes).\n- drm/vc4: fix argument ordering in vc4_crtc_get_margins() (git-fixes).\n- drm/vc4: hdmi: Fix PM reference leak in vc4_hdmi_encoder_pre_crtc_co() (git-fixes).\n- drm/vc4: hdmi: Fix error path of hpd-gpios (git-fixes).\n- drm/vc4: hdmi: Make sure the controller is powered in detect (bsc#1152489)\n- drm/vc4: hdmi: Prevent clock unbalance (git-fixes).\n- drm/vc4: txp: Properly set the possible_crtcs mask (git-fixes).\n- drm/virtio: Fix double free on probe failure (git-fixes).\n- drm/vmwgfx: Fix cpu updates of coherent multisample surfaces (git-fixes).\n- drm/vmwgfx: Mark a surface gpu-dirty after the SVGA3dCmdDXGenMips command (git-fixes).\n- drm/zte: Do not select DRM_KMS_FB_HELPER (git-fixes).\n- drm: Return -ENOTTY for non-drm ioctls (git-fixes).\n- drm: add a locked version of drm_is_current_master (git-fixes).\n- drm: bridge/panel: Cleanup connector on bridge detach (bsc#1152489)\n- drm: bridge: add missing word in Analogix help text (git-fixes).\n- drm: qxl: ensure surf.data is ininitialized (git-fixes).\n- drm: rockchip: add missing registers for RK3066 (git-fixes).\n- drm: rockchip: add missing registers for RK3188 (git-fixes).\n- drm: rockchip: set alpha_en to 0 if it is not used (git-fixes).\n- e1000e: Check the PCIm state (git-fixes).\n- e1000e: Fix an error handling path in \u0027e1000_probe()\u0027 (git-fixes).\n- efi/tpm: Differentiate missing and invalid final event log table (bsc#1188036).\n- extcon: extcon-max8997: Fix IRQ freeing at error path (git-fixes).\n- extcon: intel-mrfld: Sync hardware and software state on init (git-fixes).\n- extcon: max8997: Add missing modalias string (git-fixes).\n- extcon: sm5502: Drop invalid register write in sm5502_reg_data (git-fixes).\n- fbmem: Do not delete the mode that is still in use (git-fixes).\n- fbmem: add margin check to fb_check_caps() (git-fixes).\n- firmware/efi: Tell memblock about EFI iomem reservations (git-fixes).\n- firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (git-fixes).\n- firmware: arm_scmi: Fix range check for the maximum number of pending messages (git-fixes).\n- firmware: tegra: Fix error return code in tegra210_bpmp_init() (git-fixes).\n- fm10k: Fix an error handling path in \u0027fm10k_probe()\u0027 (git-fixes).\n- fpga: machxo2-spi: Address warning about unused variable (git-fixes).\n- fpga: stratix10-soc: Add missing fpga_mgr_free() call (git-fixes).\n- fuse: check connected before queueing on fpq-\u003eio (bsc#1188267).\n- fuse: ignore PG_workingset after stealing (bsc#1188268).\n- fuse: reject internal errno (bsc#1188269).\n- gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (git-fixes).\n- gpio: pca953x: Add support for the On Semi pca9655 (git-fixes).\n- gpio: zynq: Check return value of pm_runtime_get_sync (git-fixes).\n- gtp: fix an use-before-init in gtp_newlink() (git-fixes).\n- gve: Add DQO fields for core data structures (bsc#1176940).\n- gve: Add Gvnic stats AQ command and ethtool show/set-priv-flags (bsc#1176940).\n- gve: Add dqo descriptors (bsc#1176940).\n- gve: Add stats for gve (bsc#1176940).\n- gve: Add support for DQO RX PTYPE map (bsc#1176940).\n- gve: Add support for raw addressing device option (bsc#1176940).\n- gve: Add support for raw addressing in the tx path (bsc#1176940).\n- gve: Add support for raw addressing to the rx path (bsc#1176940).\n- gve: Batch AQ commands for creating and destroying queues (bsc#1176940).\n- gve: Check TX QPL was actually assigned (bsc#1176940).\n- gve: DQO: Add RX path (bsc#1176940).\n- gve: DQO: Add TX path (bsc#1176940).\n- gve: DQO: Add core netdev features (bsc#1176940).\n- gve: DQO: Add ring allocation and initialization (bsc#1176940).\n- gve: DQO: Configure interrupts on device up (bsc#1176940).\n- gve: DQO: Fix off by one in gve_rx_dqo() (bsc#1176940).\n- gve: DQO: Remove incorrect prefetch (bsc#1176940).\n- gve: Enable Link Speed Reporting in the driver (bsc#1176940).\n- gve: Fix an error handling path in \u0027gve_probe()\u0027 (git-fixes).\n- gve: Fix swapped vars when fetching max queues (git-fixes).\n- gve: Fix warnings reported for DQO patchset (bsc#1176940).\n- gve: Get and set Rx copybreak via ethtool (bsc#1176940).\n- gve: Introduce a new model for device options (bsc#1176940).\n- gve: Introduce per netdev `enum gve_queue_format` (bsc#1176940).\n- gve: Make gve_rx_slot_page_info.page_offset an absolute offset (bsc#1176940).\n- gve: Move some static functions to a common file (bsc#1176940).\n- gve: NIC stats for report-stats and for ethtool (bsc#1176940).\n- gve: Propagate error codes to caller (bsc#1176940).\n- gve: Replace zero-length array with flexible-array member (bsc#1176940).\n- gve: Rx Buffer Recycling (bsc#1176940).\n- gve: Simplify code and axe the use of a deprecated API (bsc#1176940).\n- gve: Update adminq commands to support DQO queues (bsc#1176940).\n- gve: Use dev_info/err instead of netif_info/err (bsc#1176940).\n- gve: Use link status register to report link status (bsc#1176940).\n- gve: adminq: DQO specific device descriptor logic (bsc#1176940).\n- gve: gve_rx_copy: Move padding to an argument (bsc#1176940).\n- hwmon: (max31722) Remove non-standard ACPI device IDs (git-fixes).\n- hwmon: (max31790) Fix fan speed reporting for fan7..12 (git-fixes).\n- hwmon: (max31790) Fix pwmX_enable attributes (git-fixes).\n- hwmon: (max31790) Report correct current pwm duty cycles (git-fixes).\n- hwrng: exynos - Fix runtime PM imbalance on error (git-fixes).\n- i2c: core: Disable client irq on reboot/shutdown (git-fixes).\n- i2c: designware: Adjust bus_freq_hz when refuse high speed mode set (git-fixes).\n- i2c: dev: Add __user annotation (git-fixes).\n- i2c: robotfuzz-osif: fix control-request directions (git-fixes).\n- i40e: Fix autoneg disabling for non-10GBaseT links (git-fixes).\n- i40e: Fix error handling in i40e_vsi_open (git-fixes).\n- i40e: Fix missing rtnl locking when setting up pf switch (jsc#SLE-13701).\n- i40e: fix PTP on 5Gb links (jsc#SLE-13701).\n- iavf: Fix an error handling path in \u0027iavf_probe()\u0027 (git-fixes).\n- ibmvnic: Allow device probe if the device is not ready at boot (bsc#1184114 ltc#192237).\n- ibmvnic: Remove the proper scrq flush (bsc#1188504 ltc#192075).\n- ibmvnic: Use \u0027skb_frag_address()\u0027 instead of hand coding it (bsc#1184114 ltc#192237).\n- ibmvnic: Use list_for_each_entry() to simplify code in ibmvnic.c (bsc#1184114 ltc#192237).\n- ibmvnic: Use strscpy() instead of strncpy() (bsc#1184114 ltc#192237).\n- ibmvnic: account for bufs already saved in indir_buf (jsc#SLE-17268 jsc#SLE-17043 bsc#1179243 ltc#189290).\n- ibmvnic: clean pending indirect buffs during reset (jsc#SLE-17268 jsc#SLE-17043 bsc#1179243 ltc#189290).\n- ibmvnic: fix kernel build warning (bsc#1184114 ltc#192237).\n- ibmvnic: fix kernel build warning in strncpy (bsc#1184114 ltc#192237).\n- ibmvnic: fix kernel build warnings in build_hdr_descs_arr (bsc#1184114 ltc#192237).\n- ibmvnic: fix send_request_map incompatible argument (bsc#1184114 ltc#192237).\n- ibmvnic: free tx_pool if tso_pool alloc fails (bsc#1085224 ltc#164363).\n- ibmvnic: parenthesize a check (bsc#1184114 ltc#192237 bsc#1183871 ltc#192139 git-fixes).\n- ibmvnic: retry reset if there are no other resets (bsc#1184350 ltc#191533).\n- ibmvnic: set ltb-\u003ebuff to NULL after freeing (bsc#1094840 ltc#167098).\n- ice: Re-organizes reqstd/avail {R, T}XQ check/code for efficiency (jsc#SLE-7926).\n- igb: Check if num of q_vectors is smaller than max before array access (git-fixes).\n- igb: Fix an error handling path in \u0027igb_probe()\u0027 (git-fixes).\n- igb: Fix position of assignment to *ring (git-fixes).\n- igb: Fix use-after-free error during reset (git-fixes).\n- igc: Fix an error handling path in \u0027igc_probe()\u0027 (git-fixes).\n- igc: Fix use-after-free error during reset (git-fixes).\n- igc: change default return of igc_read_phy_reg() (git-fixes).\n- iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: accel: bma180: Use explicit member assignment (git-fixes).\n- iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: accel: mxc4005: Fix overread of data and alignment issue (git-fixes).\n- iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: adis16400: do not return ints in irq handlers (git-fixes).\n- iio: adis_buffer: do not return ints in irq handlers (git-fixes).\n- iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (git-fixes).\n- iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get() (git-fixes).\n- iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: light: tcs3472: do not free unallocated IRQ (git-fixes).\n- iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: ltr501: ltr501_read_ps(): add missing endianness conversion (git-fixes).\n- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (git-fixes).\n- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (git-fixes).\n- iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (git-fixes).\n- iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (git-fixes).\n- iio: si1133: fix format string warnings (git-fixes).\n- iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (git-fixes).\n- integrity: use arch_ima_get_secureboot instead of checking EFI_SECURE_BOOT when loading MokListRT (bsc#1188366).\n- intel_th: Wait until port is in reset before programming it (git-fixes).\n- iwl-trans: move dev_cmd_offs, page_offs to a common trans header (bsc#1187495).\n- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() (git-fixes).\n- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() (git-fixes).\n- iwlwifi: acpi: evaluate dsm to disable 5.8GHz channels (bsc#1187495).\n- iwlwifi: acpi: in non acpi compilations remove iwl_sar_geo_init (bsc#1187495).\n- iwlwifi: acpi: prepare SAR profile selection code for multiple sizes (bsc#1187495).\n- iwlwifi: acpi: remove dummy definition of iwl_sar_set_profile() (bsc#1187495).\n- iwlwifi: acpi: rename geo structs to contain versioning (bsc#1187495).\n- iwlwifi: acpi: support ppag table command v2 (bsc#1187495).\n- iwlwifi: add a common struct for all iwl_tx_power_cmd versions (bsc#1187495).\n- iwlwifi: add trans op to set PNVM (bsc#1187495).\n- iwlwifi: align RX status flags with firmware (bsc#1187495).\n- iwlwifi: api: fix u32 -\u003e __le32 (bsc#1187495).\n- iwlwifi: bump FW API to 57 for AX devices (bsc#1187495).\n- iwlwifi: bump FW API to 59 for AX devices (bsc#1187495).\n- iwlwifi: calib: Demote seemingly unintentional kerneldoc header (bsc#1187495).\n- iwlwifi: dbg: Do not touch the tlv data (bsc#1187495).\n- iwlwifi: dbg: add debug host notification (DHN) time point (bsc#1187495).\n- iwlwifi: dbg: add dumping special device memory (bsc#1187495).\n- iwlwifi: dbg: remove IWL_FW_INI_TIME_POINT_WDG_TIMEOUT (bsc#1187495).\n- iwlwifi: do not export acpi functions unnecessarily (bsc#1187495).\n- iwlwifi: dvm: Demote a couple of nonconformant kernel-doc headers (bsc#1187495).\n- iwlwifi: dvm: Demote non-compliant kernel-doc headers (bsc#1187495).\n- iwlwifi: dvm: devices: Fix function documentation formatting issues (bsc#1187495).\n- iwlwifi: dvm: lib: Demote non-compliant kernel-doc headers (bsc#1187495).\n- iwlwifi: dvm: rxon: Demote non-conformant kernel-doc headers (bsc#1187495).\n- iwlwifi: dvm: scan: Demote a few nonconformant kernel-doc headers (bsc#1187495).\n- iwlwifi: dvm: sta: Demote a bunch of nonconformant kernel-doc headers (bsc#1187495).\n- iwlwifi: dvm: tx: Demote non-compliant kernel-doc headers (bsc#1187495).\n- iwlwifi: enable twt by default (bsc#1187495).\n- iwlwifi: fix 11ax disabled bit in the regulatory capability flags (bsc#1187495).\n- iwlwifi: fix sar geo table initialization (bsc#1187495).\n- iwlwifi: fw: add default value for iwl_fw_lookup_cmd_ver (bsc#1187495).\n- iwlwifi: fw: move assert descriptor parser to common code (bsc#1187495).\n- iwlwifi: increase PNVM load timeout (bsc#1187495).\n- iwlwifi: iwl-drv: Provide descriptions debugfs dentries (bsc#1187495).\n- iwlwifi: iwl-trans: move tfd to trans layer (bsc#1187495).\n- iwlwifi: move PNVM implementation to common code (bsc#1187495).\n- iwlwifi: move all bus-independent TX functions to common code (bsc#1187495).\n- iwlwifi: move bc_pool to a common trans header (bsc#1187495).\n- iwlwifi: move bc_table_dword to a common trans header (bsc#1187495).\n- iwlwifi: msix: limit max RX queues for 9000 family (bsc#1187495).\n- iwlwifi: mvm: Add FTM initiator RTT smoothing logic (bsc#1187495).\n- iwlwifi: mvm: Do not install CMAC/GMAC key in AP mode (bsc#1187495).\n- iwlwifi: mvm: add PROTECTED_TWT firmware API (bsc#1187495).\n- iwlwifi: mvm: add a get lmac id function (bsc#1187495).\n- iwlwifi: mvm: add an option to add PASN station (bsc#1187495).\n- iwlwifi: mvm: add d3 prints (bsc#1187495).\n- iwlwifi: mvm: add support for new WOWLAN_TSC_RSC_PARAM version (bsc#1187495).\n- iwlwifi: mvm: add support for new version of WOWLAN_TKIP_SETTING_API_S (bsc#1187495).\n- iwlwifi: mvm: add support for range request command ver 11 (bsc#1187495).\n- iwlwifi: mvm: add support for responder dynamic config command version 3 (bsc#1187495).\n- iwlwifi: mvm: assign SAR table revision to the command later (bsc#1187495).\n- iwlwifi: mvm: avoid possible NULL pointer dereference (bsc#1187495).\n- iwlwifi: mvm: clear all scan UIDs (bsc#1187495).\n- iwlwifi: mvm: d3: parse wowlan status version 11 (bsc#1187495).\n- iwlwifi: mvm: d3: support GCMP ciphers (bsc#1187495).\n- iwlwifi: mvm: do not change band on bound PHY contexts (git-fixes).\n- iwlwifi: mvm: do not check if CSA event is running before removing (bsc#1187495).\n- iwlwifi: mvm: do not send a CSA command the firmware does not know (bsc#1187495).\n- iwlwifi: mvm: fix error print when session protection ends (git-fixes).\n- iwlwifi: mvm: fix suspicious rcu usage warnings (bsc#1187495).\n- iwlwifi: mvm: fix the type we use in the PPAG table validity checks (bsc#1187495).\n- iwlwifi: mvm: get number of stations from TLV (bsc#1187495).\n- iwlwifi: mvm: ignore the scan duration parameter (bsc#1187495).\n- iwlwifi: mvm: initiator: add option for adding a PASN responder (bsc#1187495).\n- iwlwifi: mvm: location: set the HLTK when PASN station is added (bsc#1187495).\n- iwlwifi: mvm: ops: Remove unused static struct \u0027iwl_mvm_debug_names\u0027 (bsc#1187495).\n- iwlwifi: mvm: prepare roc_done_wk to work sync (bsc#1187495).\n- iwlwifi: mvm: process ba-notifications also when sta rcu is invalid (bsc#1187495).\n- iwlwifi: mvm: re-enable TX after channel switch (bsc#1187495).\n- iwlwifi: mvm: read and parse SKU ID if available (bsc#1187495).\n- iwlwifi: mvm: remove memset of kek_kck command (bsc#1187495).\n- iwlwifi: mvm: remove redundant log in iwl_mvm_tvqm_enable_txq() (bsc#1187495).\n- iwlwifi: mvm: remove redundant support_umac_log field (bsc#1187495).\n- iwlwifi: mvm: responder: allow to set only the HLTK for an associated station (bsc#1187495).\n- iwlwifi: mvm: ring the doorbell and wait for PNVM load completion (bsc#1187495).\n- iwlwifi: mvm: rs-fw: handle VHT extended NSS capability (bsc#1187495).\n- iwlwifi: mvm: send stored PPAG command instead of local (bsc#1187495).\n- iwlwifi: mvm: set PROTECTED_TWT feature if supported by firmware (bsc#1187495).\n- iwlwifi: mvm: set PROTECTED_TWT in MAC data policy (bsc#1187495).\n- iwlwifi: mvm: set enabled in the PPAG command properly (bsc#1187495).\n- iwlwifi: mvm: stop claiming NL80211_EXT_FEATURE_SET_SCAN_DWELL (bsc#1187495).\n- iwlwifi: mvm: store PPAG enabled/disabled flag properly (bsc#1187495).\n- iwlwifi: mvm: support ADD_STA_CMD_API_S ver 12 (bsc#1187495).\n- iwlwifi: mvm: support more GTK rekeying algorithms (bsc#1187495).\n- iwlwifi: mvm: support new KEK KCK api (bsc#1187495).\n- iwlwifi: mvm: tx: Demote misuse of kernel-doc headers (bsc#1187495).\n- iwlwifi: mvm: use CHECKSUM_COMPLETE (bsc#1187495).\n- iwlwifi: mvm: utils: Fix some doc-rot (bsc#1187495).\n- iwlwifi: pcie: avoid potential PNVM leaks (bsc#1187495).\n- iwlwifi: pcie: do not disable interrupts for reg_lock (bsc#1187495).\n- iwlwifi: pcie: fix context info freeing (git-fixes).\n- iwlwifi: pcie: fix the xtal latency value for a few qu devices (bsc#1187495).\n- iwlwifi: pcie: free IML DMA memory allocation (git-fixes).\n- iwlwifi: pcie: implement set_pnvm op (bsc#1187495).\n- iwlwifi: pcie: make iwl_pcie_txq_update_byte_cnt_tbl bus independent (bsc#1187495).\n- iwlwifi: pcie: properly set LTR workarounds on 22000 devices (bsc#1187495).\n- iwlwifi: phy-ctxt: add new API VER 3 for phy context cmd (bsc#1187495).\n- iwlwifi: pnvm: do not skip everything when not reloading (bsc#1187495).\n- iwlwifi: pnvm: do not try to load after failures (bsc#1187495).\n- iwlwifi: pnvm: increment the pointer before checking the TLV (bsc#1187495).\n- iwlwifi: pnvm: set the PNVM again if it was already loaded (bsc#1187495).\n- iwlwifi: provide gso_type to GSO packets (bsc#1187495).\n- iwlwifi: queue: bail out on invalid freeing (bsc#1187495).\n- iwlwifi: read and parse PNVM file (bsc#1187495).\n- iwlwifi: regulatory: regulatory capabilities api change (bsc#1187495).\n- iwlwifi: remove iwl_validate_sar_geo_profile() export (bsc#1187495).\n- iwlwifi: remove wide_cmd_header field (bsc#1187495).\n- iwlwifi: rs: Demote non-compliant kernel-doc headers (bsc#1187495).\n- iwlwifi: rs: align to new TLC config command API (bsc#1187495).\n- iwlwifi: rs: set RTS protection for all non legacy rates (bsc#1187495).\n- iwlwifi: sta: defer ADDBA transmit in case reclaimed SN != next SN (bsc#1187495).\n- iwlwifi: stats: add new api fields for statistics cmd/ntfy (bsc#1187495).\n- iwlwifi: support REDUCE_TX_POWER_CMD version 6 (bsc#1187495).\n- iwlwifi: support version 3 of GEO_TX_POWER_LIMIT (bsc#1187495).\n- iwlwifi: support version 5 of the alive notification (bsc#1187495).\n- iwlwifi: thermal: support new temperature measurement API (bsc#1187495).\n- iwlwifi: update prph scratch structure to include PNVM data (bsc#1187495).\n- iwlwifi: use correct group for alive notification (bsc#1187495).\n- iwlwifi: wowlan: adapt to wowlan status API version 10 (bsc#1187495).\n- iwlwifi: yoyo: add support for internal buffer allocation in D3 (bsc#1187495).\n- ixgbe: Fix an error handling path in \u0027ixgbe_probe()\u0027 (git-fixes).\n- ixgbe: Fix packet corruption due to missing DMA sync (git-fixes).\n- ixgbevf: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops (bsc#1176447).\n- kABI compatibility fix for max98373_priv struct (git-fixes).\n- kABI workaround for btintel symbol changes (bsc#1188893).\n- kABI workaround for intel_th_driver (git-fixes).\n- kABI workaround for pci/quirks.c (git-fixes).\n- kABI: restore struct tcpc_config definition (git-fixes).\n- kabi/severities: ignore kABI of iwlwifi symbols (bsc#1187495) iwlwifi driver consists of several modules and all exported symbols are internal uses. Let\u0027s ignore kABI checks of those.\n- kernel-binary.spec: Exctract s390 decompression code (jsc#SLE-17042).\n- kernel-binary.spec: Fix up usrmerge for non-modular kernels.\n- kernel-binary.spec: Remove obsolete and wrong comment mkmakefile is repleced by echo on newer kernel\n- kprobes: Do not expose probe addresses to non-CAP_SYSLOG (git-fixes).\n- kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler (git-fixes).\n- kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (git-fixes).\n- kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() (git-fixes).\n- kprobes: fix kill kprobe which has been marked as gone (git-fixes).\n- kvm: LAPIC: Restore guard to prevent illegal APIC register access (bsc#1188772).\n- kvm: i8254: remove redundant assignment to pointer s (bsc#1188770).\n- leds: as3645a: Fix error return code in as3645a_parse_node() (git-fixes).\n- leds: class: The -ENOTSUPP should never be seen by user space (git-fixes).\n- leds: ktd2692: Fix an error handling path (git-fixes).\n- leds: lm3532: select regmap I2C API (git-fixes).\n- lib/decompress_unlz4.c: correctly handle zero-padding around initrds (git-fixes).\n- lib/decompressors: remove set but not used variabled \u0027level\u0027 (git-fixes).\n- lib: vsprintf: Fix handling of number field widths in vsscanf (git-fixes).\n- libbpf: Fixes incorrect rx_ring_setup_done (bsc#1155518).\n- liquidio: Fix unintentional sign extension issue on left shift of u16 (git-fixes).\n- mISDN: fix possible use-after-free in HFC_cleanup() (git-fixes).\n- mac80211: consider per-CPU statistics if present (git-fixes).\n- mac80211: remove iwlwifi specific workaround NDPs of null_response (git-fixes).\n- mac80211: remove iwlwifi specific workaround that broke sta NDP tx (git-fixes).\n- mac80211: remove warning in ieee80211_get_sband() (git-fixes).\n- mac80211: reset profile_periodicity/ema_ap (git-fixes).\n- mac80211_hwsim: add concurrent channels scanning support over virtio (git-fixes).\n- mac80211_hwsim: drop pending frames on stop (git-fixes).\n- math: Export mul_u64_u64_div_u64 (git-fixes).\n- media, bpf: Do not copy more entries than user space requested (git-fixes).\n- media: Fix Media Controller API config checks (git-fixes).\n- media: I2C: change \u0027RST\u0027 to \u0027RSET\u0027 to fix multiple build errors (git-fixes).\n- media: au0828: fix a NULL vs IS_ERR() check (git-fixes).\n- media: bt8xx: Fix a missing check bug in bt878_probe (git-fixes).\n- media: cobalt: fix race condition in setting HPD (git-fixes).\n- media: cpia2: fix memory leak in cpia2_usb_probe (git-fixes).\n- media: dtv5100: fix control-request directions (git-fixes).\n- media: dvb-usb: fix wrong definition (git-fixes).\n- media: dvb_net: avoid speculation from net slot (git-fixes).\n- media: dvd_usb: memory leak in cinergyt2_fe_attach (git-fixes).\n- media: em28xx: Fix possible memory leak of em28xx struct (git-fixes).\n- media: exynos-gsc: fix pm_runtime_get_sync() usage count (git-fixes).\n- media: exynos4-is: Fix a use after free in isp_video_release (git-fixes).\n- media: gspca/gl860: fix zero-length control requests (git-fixes).\n- media: gspca/sq905: fix control-request direction (git-fixes).\n- media: gspca/sunplus: fix zero-length control requests (git-fixes).\n- media: imx-csi: Skip first few frames from a BT.656 source (git-fixes).\n- media: imx: imx7_mipi_csis: Fix logging of only error event counters (git-fixes).\n- media: mdk-mdp: fix pm_runtime_get_sync() usage count (git-fixes).\n- media: mtk-vcodec: fix PM runtime get logic (git-fixes).\n- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (git-fixes).\n- media: pvrusb2: fix warning in pvr2_i2c_core_done (git-fixes).\n- media: rc: i2c: Fix an error message (git-fixes).\n- media: rtl28xxu: fix zero-length control request (git-fixes).\n- media: s5p-g2d: Fix a memory leak on ctx-\u003efh.m2m_ctx (git-fixes).\n- media: s5p-jpeg: fix pm_runtime_get_sync() usage count (git-fixes).\n- media: sh_vou: fix pm_runtime_get_sync() usage count (git-fixes).\n- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (git-fixes).\n- media: siano: fix device register error path (git-fixes).\n- media: st-hva: Fix potential NULL pointer dereferences (git-fixes).\n- media: sti/bdisp: fix pm_runtime_get_sync() usage count (git-fixes).\n- media: sti: fix obj-$(config) targets (git-fixes).\n- media: tc358743: Fix error return code in tc358743_probe_of() (git-fixes).\n- media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (git-fixes).\n- media: v4l2-async: Fix trivial documentation typo (git-fixes).\n- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (git-fixes).\n- media: zr364xx: fix memory leak in zr364xx_start_readpipe (git-fixes).\n- memory: atmel-ebi: add missing of_node_put for loop iteration (git-fixes).\n- memory: fsl_ifc: fix leak of IO mapping on probe failure (git-fixes).\n- memory: fsl_ifc: fix leak of IO mapping on probe failure (git-fixes).\n- memory: fsl_ifc: fix leak of private memory on probe failure (git-fixes).\n- memory: fsl_ifc: fix leak of private memory on probe failure (git-fixes).\n- memory: pl353: Fix error return code in pl353_smc_probe() (git-fixes).\n- memstick: rtsx_usb_ms: fix UAF (git-fixes).\n- mfd: cpcap: Fix cpcap dmamask not set warnings (git-fixes).\n- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (git-fixes).\n- misc/libmasm/module: Fix two use after free in ibmasm_init_one (git-fixes).\n- misc: alcor_pci: fix inverted branch condition (git-fixes).\n- misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (git-fixes).\n- mm, futex: fix shared futex pgoff on shmem huge page (git fixes (kernel/futex)).\n- mmc: block: Disable CMDQ on the ioctl path (git-fixes).\n- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (git-fixes).\n- mmc: core: clear flags before allowing to retune (git-fixes).\n- mmc: sdhci-esdhc-imx: remove unused is_imx6q_usdhc (git-fixes).\n- mmc: sdhci-sprd: use sdhci_sprd_writew (git-fixes).\n- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (git-fixes).\n- mmc: usdhi6rol0: fix error return code in usdhi6_probe() (git-fixes).\n- mmc: via-sdmmc: add a check against NULL pointer dereference (git-fixes).\n- mmc: vub3000: fix control-request direction (git-fixes).\n- mt76: fix possible NULL pointer dereference in mt76_tx (git-fixes).\n- mt76: mt7603: set 0 as min coverage_class value (git-fixes).\n- mt76: mt7615: fix endianness in mt7615_mcu_set_eeprom (git-fixes).\n- mt76: mt7615: fix fixed-rate tx status reporting (git-fixes).\n- mt76: mt7615: increase MCU command timeout (git-fixes).\n- mt76: mt7915: fix IEEE80211_HE_PHY_CAP7_MAX_NC for station mode (git-fixes).\n- mt76: set dma-done flag for flushed descriptors (git-fixes).\n- mtd: partitions: redboot: seek fis-index-block in the right node (git-fixes).\n- mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (git-fixes).\n- mvpp2: suppress warning (git-fixes).\n- mwifiex: re-fix for unaligned accesses (git-fixes).\n- net/mlx5: Do not fail driver on failure to create debugfs (git-fixes).\n- net/mlx5e: Block offload of outer header csum for GRE tunnel (git-fixes).\n- net/sched: act_ct: remove and free nf_table callbacks (jsc#SLE-15172).\n- net: Make PTP-specific drivers depend on PTP_1588_CLOCK (git-fixes).\n- net: atlantic: fix ip dst and ipv6 address filters (git-fixes).\n- net: dp83867: Fix OF_MDIO config check (git-fixes).\n- net: ethernet: ti: Remove TI_CPTS_MOD workaround (git-fixes).\n- net: fec_ptp: fix issue caused by refactor the fec_devtype (git-fixes).\n- net: gve: convert strlcpy to strscpy (bsc#1176940).\n- net: gve: remove duplicated allowed (bsc#1176940).\n- net: hns3: Clear the CMDQ registers before unmapping BAR region (git-fixes).\n- net: ipw2x00,iwlegacy,iwlwifi: Remove in_interrupt() from debug macros (bsc#1187495).\n- net: iwlwifi: Remove in_interrupt() from tracing macro (bsc#1187495).\n- net: marvell: Fix OF_MDIO config check (git-fixes).\n- net: mvpp2: Put fwnode in error case during -\u003eprobe() (git-fixes).\n- net: netdevsim: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops (bsc#1176447).\n- net: phy: fix save wrong speed and duplex problem if autoneg is on (git-fixes).\n- net: phy: microchip_t1: add lan87xx_phy_init to initialize the lan87xx phy (git-fixes).\n- net: phy: microchip_t1: add lan87xx_phy_init to initialize the lan87xx phy (git-fixes).\n- net: phy: realtek: add delay to fix RXC generation issue (git-fixes).\n- net: usb: fix possible use-after-free in smsc75xx_bind (git-fixes).\n- net: wilc1000: clean up resource in error path of init mon interface (git-fixes).\n- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (bsc#1176447).\n- nfc: nfcsim: fix use after free during module unload (git-fixes).\n- nvme-rdma: fix in-casule data send for chained sgls (git-fixes).\n- nvme-rdma: introduce nvme_rdma_sgl structure (git-fixes).\n- nvme-tcp: rerun io_work if req_list is not empty (git-fixes).\n- nvme: verify MNAN value if ANA is enabled (bsc#1185791).\n- pinctrl/amd: Add device HID for new AMD GPIO controller (git-fixes).\n- pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (git-fixes).\n- pinctrl: mcp23s08: fix race condition in irq handler (git-fixes).\n- pinctrl: stm32: fix the reported number of GPIO lines per bank (git-fixes).\n- platform/chrome: cros_ec_lightbar: Reduce ligthbar get version command (git-fixes).\n- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (git-fixes).\n- platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when using s2idle (git-fixes).\n- platform/x86: intel_int0002_vgpio: Pass irqchip when adding gpiochip (git-fixes).\n- platform/x86: intel_int0002_vgpio: Remove dev_err() usage after platform_get_irq() (git-fixes).\n- platform/x86: intel_int0002_vgpio: Use device_init_wakeup (git-fixes).\n- platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (git-fixes).\n- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: ab8500: Avoid NULL pointers (git-fixes).\n- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (git-fixes).\n- power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- powerpc/64s: Move branch cache flushing bcctr variant to ppc-ops.h (bsc#1188885 ltc#193722).\n- powerpc/64s: rename pnv|pseries_setup_rfi_flush to _setup_security_mitigations (bsc#1188885 ltc#193722).\n- powerpc/mm: Fix lockup on kernel exec fault (bsc#1156395).\n- powerpc/papr_scm: Properly handle UUID types and API (bsc#1113295, git-fixes).\n- powerpc/pesries: Get STF barrier requirement from H_GET_CPU_CHARACTERISTICS (bsc#1188885 ltc#193722).\n- powerpc/pseries: Get entry and uaccess flush required bits from H_GET_CPU_CHARACTERISTICS (bsc#1188885 ltc#193722).\n- powerpc/pseries: add new branch prediction security bits for link stack (bsc#1188885 ltc#193722).\n- powerpc/pseries: export LPAR security flavor in lparcfg (bsc#1188885 ltc#193722).\n- powerpc/security: Add a security feature for STF barrier (bsc#1188885 ltc#193722).\n- powerpc/security: Allow for processors that flush the link stack using the special bcctr (bsc#1188885 ltc#193722).\n- powerpc/security: Fix link stack flush instruction (bsc#1188885 ltc#193722).\n- powerpc/security: change link stack flush state to the flush type enum (bsc#1188885 ltc#193722).\n- powerpc/security: make display of branch cache flush more consistent (bsc#1188885 ltc#193722).\n- powerpc/security: re-name count cache flush to branch cache flush (bsc#1188885 ltc#193722).\n- powerpc/security: split branch cache flush toggle from code patching (bsc#1188885 ltc#193722).\n- powerpc/stacktrace: Fix spurious \u0027stale\u0027 traces in raise_backtrace_ipi() (bsc#1156395).\n- powerpc/stacktrace: Include linux/delay.h (bsc#1156395).\n- powerpc: Offline CPU in stop_this_cpu() (bsc#1156395).\n- prctl: PR_{G,S}ET_IO_FLUSHER to support controlling memory reclaim (bsc#1188752).\n- ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation (git-fixes).\n- pwm: img: Fix PM reference leak in img_pwm_enable() (git-fixes).\n- pwm: imx1: Do not disable clocks at device remove time (git-fixes).\n- pwm: spear: Do not modify HW state in .remove callback (git-fixes).\n- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (git-fixes).\n- r8152: Avoid memcpy() over-reading of ETH_SS_STATS (git-fixes).\n- r8152: Fix a deadlock by doubly PM resume (bsc#1186194).\n- r8152: Fix potential PM refcount imbalance (bsc#1186194).\n- r8169: Avoid memcpy() over-reading of ETH_SS_STATS (git-fixes).\n- r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM (git-fixes).\n- random32: Fix implicit truncation warning in prandom_seed_state() (git-fixes).\n- ravb: Fix bit fields checking in ravb_hwtstamp_get() (git-fixes).\n- rbd: always kick acquire on \u0027acquired\u0027 and \u0027released\u0027 notifications (bsc#1188746).\n- rbd: do not hold lock_rwsem while running_list is being drained (bsc#1188747).\n- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (git-fixes).\n- regulator: hi6421: Fix getting wrong drvdata (git-fixes).\n- regulator: hi6421: Use correct variable type for regmap api val argument (git-fixes).\n- regulator: hi655x: Fix pass wrong pointer to config.driver_data (git-fixes).\n- regulator: uniphier: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- replaced with upstream security mitigation cleanup\n- reset: a10sr: add missing of_match_table reference (git-fixes).\n- reset: bail if try_module_get() fails (git-fixes).\n- reset: brcmstb: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- reset: ti-syscon: fix to_ti_syscon_reset_data macro (git-fixes).\n- rpm/kernel-binary.spec.in: Do not install usrmerged kernel on Leap (boo#1184804).\n- rpm/kernel-binary.spec.in: Remove zdebug define used only once.\n- rsi: Assign beacon rate settings to the correct rate_info descriptor field (git-fixes).\n- rtc: fix snprintf() checking in is_rtc_hctosys() (git-fixes).\n- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (git-fixes).\n- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (git-fixes).\n- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (git-fixes).\n- rtl8xxxu: Fix device info for RTL8192EU devices (git-fixes).\n- rtw88: 8822c: fix lc calibration timing (git-fixes).\n- scsi: fc: Add 256GBit speed setting to SCSI FC transport (bsc#1188101).\n- scsi: ibmvfc: Fix command state accounting and stale response detection (jsc#SLE-15442 bsc#1180814 ltc#187461 git-fixes).\n- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (bsc#1170511).\n- serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (git-fixes).\n- serial: 8250_pci: Add support for new HPE serial device (git-fixes).\n- serial: fsl_lpuart: remove RTSCTS handling from get_mctrl() (git-fixes).\n- serial: fsl_lpuart: remove RTSCTS handling from get_mctrl() (git-fixes).\n- serial: mvebu-uart: correctly calculate minimal possible baudrate (git-fixes).\n- serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (git-fixes).\n- serial: mvebu-uart: fix calculation of clock divisor (git-fixes).\n- serial: tegra-tcu: Reorder channel initialization (git-fixes).\n- serial_cs: Add Option International GSM-Ready 56K/ISDN modem (git-fixes).\n- serial_cs: remove wrong GLOBETROTTER.cis entry (git-fixes).\n- sfp: Fix error handing in sfp_probe() (git-fixes).\n- skbuff: Fix build with SKB extensions disabled (jsc#SLE-15172).\n- skbuff: Release nfct refcount on napi stolen or re-used skbs (jsc#SLE-15172).\n- soc/tegra: fuse: Fix Tegra234-only builds (git-fixes).\n- soc: fsl: qbman: Delete useless kfree code (bsc#1188176).\n- soc: fsl: qbman: Ensure device cleanup is run for kexec (bsc#1188176).\n- soundwire: stream: Fix test for DP prepare complete (git-fixes).\n- spi: Make of_register_spi_device also set the fwnode (git-fixes).\n- spi: cadence: Correct initialisation of runtime PM again (git-fixes).\n- spi: fspi: dynamically alloc AHB memory (bsc#1188121). \n- spi: imx: add a check for speed_hz before calculating the clock (git-fixes).\n- spi: mediatek: fix fifo rx mode (git-fixes).\n- spi: nxp-fspi: Use devm API to fix missed unregistration of controller (bsc#1188121).\n- spi: omap-100k: Fix the length judgment problem (git-fixes).\n- spi: spi-loopback-test: Fix \u0027tx_buf\u0027 might be \u0027rx_buf\u0027 (git-fixes).\n- spi: spi-nxp-fspi: Add ACPI support (bsc#1188121).\n- spi: spi-nxp-fspi: Add support for IP read only (bsc#1188121).\n- spi: spi-nxp-fspi: Enable the Octal Mode in MCR0 (bsc#1188121).\n- spi: spi-nxp-fspi: Fix a NULL vs IS_ERR() check in probe (bsc#1188121).\n- spi: spi-nxp-fspi: Implement errata workaround for LS1028A (bsc#1188121).\n- spi: spi-sun6i: Fix chipselect/clock bug (git-fixes).\n- spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (git-fixes).\n- spi: stm32-qspi: Remove unused qspi field of struct stm32_qspi_flash (git-fixes).\n- spi: tegra114: Fix an error message (git-fixes).\n- ssb: Fix error return code in ssb_bus_scan() (git-fixes).\n- ssb: sdio: Do not overwrite const buffer if block_write fails (git-fixes).\n- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (git-fixes).\n- staging: gdm724x: check for overflow in gdm_lte_netif_rx() (git-fixes).\n- staging: rtl8712: fix memory leak in rtl871x_load_fw_cb (git-fixes).\n- staging: rtl8712: remove redundant check in r871xu_drv_init (git-fixes).\n- staging: rtl8723bs: fix macro value for 2.4Ghz only device (git-fixes).\n- thermal/core: Correct function name thermal_zone_device_unregister() (git-fixes).\n- thermal/drivers/int340x/processor_thermal: Fix tcc setting (git-fixes).\n- thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (git-fixes).\n- thunderbolt: Bond lanes only when dual_link_port != NULL in alloc_dev_default() (git-fixes).\n- timers: Fix get_next_timer_interrupt() with no timers pending (git-fixes)\n- tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (bsc#1188036).\n- tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (bsc#1188036).\n- tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() (bsc#1188036).\n- tpm, tpm_tis: Reserve locality in tpm_tis_resume() (bsc#1188036).\n- tpm: efi: Use local variable for calculating final log size (git-fixes).\n- tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (git-fixes).\n- tracing/histograms: Fix parsing of \u0027sym-offset\u0027 modifier (git-fixes).\n- tracing: Do not reference char * as a string in histograms (git-fixes).\n- tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT (git-fixes).\n- tracing: Simplify \u0026 fix saved_tgids logic (git-fixes).\n- tty: nozomi: Fix a resource leak in an error handling function (git-fixes).\n- tty: nozomi: Fix the error handling path of \u0027nozomi_card_init()\u0027 (git-fixes).\n- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (git-fixes).\n- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (git-fixes).\n- usb: dwc2: Do not reset the core after setting turnaround time (git-fixes).\n- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode (git-fixes).\n- usb: dwc3: Fix debugfs creation flow (git-fixes).\n- usb: gadget: eem: fix echo command packet response issue (git-fixes).\n- usb: gadget: f_fs: Fix setting of device and driver data cross-references (git-fixes).\n- usb: gadget: f_hid: fix endianness issue with descriptors (git-fixes).\n- usb: gadget: hid: fix error return code in hid_bind() (git-fixes).\n- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (git-fixes).\n- usb: hub: Fix link power management max exit latency (MEL) calculations (git-fixes).\n- usb: max-3421: Prevent corruption of freed memory (git-fixes).\n- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (git-fixes).\n- usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (git-fixes).\n- usb: typec: fusb302: Always provide fwnode for the port (git-fixes).\n- usb: typec: fusb302: fix \u0027op-sink-microwatt\u0027 default that was in mW (git-fixes).\n- usb: typec: tcpm: Error handling for tcpm_register_partner_altmodes (git-fixes).\n- usb: typec: tcpm: Move mod_delayed_work(\u0026port-\u003evdm_state_machine) call into tcpm_queue_vdm() (git-fixes).\n- usb: typec: tcpm: Refactor tcpm_handle_vdm_request (git-fixes).\n- usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (git-fixes).\n- usb: typec: tcpm: Remove tcpc_config configuration mechanism (git-fixes).\n- usb: typec: tcpm: Switch to use fwnode_property_count_uXX() (git-fixes).\n- usb: typec: tcpm: move to SNK_UNATTACHED if sink removed for DRP (git-fixes).\n- usb: typec: tcpm: set correct data role for non-DRD (git-fixes).\n- usb: typec: tcpm: update power supply once partner accepts (git-fixes).\n- usb: typec: ucsi: Hold con-\u003elock for the entire duration of ucsi_register_port() (git-fixes).\n- usb: typec: ucsi: Put fwnode in any case during -\u003eprobe() (git-fixes).\n- usb: typec: wcove: Fx wrong kernel doc format (git-fixes).\n- uuid: Add inline helpers to import / export UUIDs (bsc#1113295, git-fixes).\n- vfio/pci: Handle concurrent vma faults (git-fixes).\n- vfs: Convert functionfs to use the new mount API (git -fixes).\n- video: fbdev: imxfb: Fix an error message (git-fixes).\n- virtio_console: Assure used length from device is limited (git-fixes).\n- virtio_net: move tx vq operation under tx queue lock (git-fixes).\n- visorbus: fix error return code in visorchipset_init() (git-fixes).\n- vmxnet3: fix cksum offload issues for tunnels with non-default udp ports (git-fixes).\n- vxlan: add missing rcu_read_lock() in neigh_reduce() (git-fixes).\n- w1: ds2438: fixing bug that would always get page0 (git-fixes).\n- watchdog: Fix possible use-after-free by calling del_timer_sync() (git-fixes).\n- watchdog: Fix possible use-after-free in wdt_startup() (git-fixes).\n- watchdog: aspeed: fix hardware timeout calculation (git-fixes).\n- watchdog: iTCO_wdt: Account for rebooting on second timeout (git-fixes).\n- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (git-fixes).\n- watchdog: sp805: Fix kernel doc description (git-fixes).\n- wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (git-fixes).\n- wilc1000: write value to WILC_INTR2_ENABLE register (git-fixes).\n- wireless: carl9170: fix LEDS build errors \u0026 warnings (git-fixes).\n- wireless: wext-spy: Fix out-of-bounds warning (git-fixes).\n- wl1251: Fix possible buffer overflow in wl1251_cmd_scan (git-fixes).\n- wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (git-fixes).\n- workqueue: fix UAF in pwq_unbound_release_workfn() (bsc#1188973).\n- x86/kvm: Disable all PV features on crash (bsc#1185308).\n- x86/kvm: Disable all PV features on crash (bsc#1185308).\n- x86/kvm: Disable kvmclock on all CPUs on shutdown (bsc#1185308).\n- x86/kvm: Disable kvmclock on all CPUs on shutdown (bsc#1185308).\n- x86/kvm: Fix pr_info() for async PF setup/teardown (bsc#1185308).\n- x86/kvm: Fix pr_info() for async PF setup/teardown (bsc#1185308).\n- x86/kvm: Teardown PV features on boot CPU as well (bsc#1185308).\n- x86/kvm: Teardown PV features on boot CPU as well (bsc#1185308).\n- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (bsc#1185308).\n- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline() (bsc#1185308).\n- xen/events: reset active flag for lateeoi events later (git-fixes).\n- xfrm: Fix xfrm offload fallback fail case (bsc#1176447).\n- xfrm: delete xfrm4_output_finish xfrm6_output_finish declarations (bsc#1176447).\n- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (bsc#1185377).\n- xhci: Fix lost USB 2 remote wake (git-fixes).\n- xhci: solve a double free problem while doing s4 (git-fixes).\n- xsk: Fix missing validation for skb and unaligned mode (jsc#SLE-13706).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-SLE-15.3-2021-2645",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_2645-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2021:2645-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2WMUIJQF7RUSXDRXECLPMVDE6YOS5WIN/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2021:2645-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2WMUIJQF7RUSXDRXECLPMVDE6YOS5WIN/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1085224",
        "url": "https://bugzilla.suse.com/1085224"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1094840",
        "url": "https://bugzilla.suse.com/1094840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113295",
        "url": "https://bugzilla.suse.com/1113295"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152472",
        "url": "https://bugzilla.suse.com/1152472"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1152489",
        "url": "https://bugzilla.suse.com/1152489"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153274",
        "url": "https://bugzilla.suse.com/1153274"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154353",
        "url": "https://bugzilla.suse.com/1154353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1155518",
        "url": "https://bugzilla.suse.com/1155518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156395",
        "url": "https://bugzilla.suse.com/1156395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170511",
        "url": "https://bugzilla.suse.com/1170511"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176447",
        "url": "https://bugzilla.suse.com/1176447"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176940",
        "url": "https://bugzilla.suse.com/1176940"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179243",
        "url": "https://bugzilla.suse.com/1179243"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180092",
        "url": "https://bugzilla.suse.com/1180092"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180814",
        "url": "https://bugzilla.suse.com/1180814"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1183871",
        "url": "https://bugzilla.suse.com/1183871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184114",
        "url": "https://bugzilla.suse.com/1184114"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184350",
        "url": "https://bugzilla.suse.com/1184350"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184631",
        "url": "https://bugzilla.suse.com/1184631"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1184804",
        "url": "https://bugzilla.suse.com/1184804"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185308",
        "url": "https://bugzilla.suse.com/1185308"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185377",
        "url": "https://bugzilla.suse.com/1185377"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1185791",
        "url": "https://bugzilla.suse.com/1185791"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186194",
        "url": "https://bugzilla.suse.com/1186194"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186206",
        "url": "https://bugzilla.suse.com/1186206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186482",
        "url": "https://bugzilla.suse.com/1186482"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1186483",
        "url": "https://bugzilla.suse.com/1186483"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187215",
        "url": "https://bugzilla.suse.com/1187215"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187476",
        "url": "https://bugzilla.suse.com/1187476"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187495",
        "url": "https://bugzilla.suse.com/1187495"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1187585",
        "url": "https://bugzilla.suse.com/1187585"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188036",
        "url": "https://bugzilla.suse.com/1188036"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188080",
        "url": "https://bugzilla.suse.com/1188080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188101",
        "url": "https://bugzilla.suse.com/1188101"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188121",
        "url": "https://bugzilla.suse.com/1188121"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188126",
        "url": "https://bugzilla.suse.com/1188126"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188176",
        "url": "https://bugzilla.suse.com/1188176"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188267",
        "url": "https://bugzilla.suse.com/1188267"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188268",
        "url": "https://bugzilla.suse.com/1188268"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188269",
        "url": "https://bugzilla.suse.com/1188269"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188323",
        "url": "https://bugzilla.suse.com/1188323"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188366",
        "url": "https://bugzilla.suse.com/1188366"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188405",
        "url": "https://bugzilla.suse.com/1188405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188445",
        "url": "https://bugzilla.suse.com/1188445"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188504",
        "url": "https://bugzilla.suse.com/1188504"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188620",
        "url": "https://bugzilla.suse.com/1188620"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188683",
        "url": "https://bugzilla.suse.com/1188683"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188703",
        "url": "https://bugzilla.suse.com/1188703"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188720",
        "url": "https://bugzilla.suse.com/1188720"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188746",
        "url": "https://bugzilla.suse.com/1188746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188747",
        "url": "https://bugzilla.suse.com/1188747"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188748",
        "url": "https://bugzilla.suse.com/1188748"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188752",
        "url": "https://bugzilla.suse.com/1188752"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188770",
        "url": "https://bugzilla.suse.com/1188770"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188771",
        "url": "https://bugzilla.suse.com/1188771"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188772",
        "url": "https://bugzilla.suse.com/1188772"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188773",
        "url": "https://bugzilla.suse.com/1188773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188774",
        "url": "https://bugzilla.suse.com/1188774"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188777",
        "url": "https://bugzilla.suse.com/1188777"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188838",
        "url": "https://bugzilla.suse.com/1188838"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188876",
        "url": "https://bugzilla.suse.com/1188876"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188885",
        "url": "https://bugzilla.suse.com/1188885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188893",
        "url": "https://bugzilla.suse.com/1188893"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188973",
        "url": "https://bugzilla.suse.com/1188973"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-21781 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-21781/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-22543 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-22543/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-35039 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-35039/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3609 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3609/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3612 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3612/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3659 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3659/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-37576 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-37576/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2021-08-10T08:03:32Z",
      "generator": {
        "date": "2021-08-10T08:03:32Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2021:2645-1",
      "initial_release_date": "2021-08-10T08:03:32Z",
      "revision_history": [
        {
          "date": "2021-08-10T08:03:32Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-azure-5.3.18-38.17.1.noarch",
                "product": {
                  "name": "kernel-devel-azure-5.3.18-38.17.1.noarch",
                  "product_id": "kernel-devel-azure-5.3.18-38.17.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-azure-5.3.18-38.17.1.noarch",
                "product": {
                  "name": "kernel-source-azure-5.3.18-38.17.1.noarch",
                  "product_id": "kernel-source-azure-5.3.18-38.17.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "cluster-md-kmp-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "dlm-kmp-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "dlm-kmp-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "dlm-kmp-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "gfs2-kmp-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kernel-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "kernel-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-azure-devel-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kernel-azure-devel-5.3.18-38.17.1.x86_64",
                  "product_id": "kernel-azure-devel-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-azure-extra-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kernel-azure-extra-5.3.18-38.17.1.x86_64",
                  "product_id": "kernel-azure-extra-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
                  "product_id": "kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-azure-optional-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kernel-azure-optional-5.3.18-38.17.1.x86_64",
                  "product_id": "kernel-azure-optional-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-syms-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kernel-syms-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "kernel-syms-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "kselftests-kmp-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "ocfs2-kmp-azure-5.3.18-38.17.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "reiserfs-kmp-azure-5.3.18-38.17.1.x86_64",
                "product": {
                  "name": "reiserfs-kmp-azure-5.3.18-38.17.1.x86_64",
                  "product_id": "reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.3",
                "product": {
                  "name": "openSUSE Leap 15.3",
                  "product_id": "openSUSE Leap 15.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cluster-md-kmp-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dlm-kmp-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "dlm-kmp-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gfs2-kmp-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kernel-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-azure-devel-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kernel-azure-devel-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-azure-extra-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kernel-azure-extra-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-azure-optional-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kernel-azure-optional-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-azure-5.3.18-38.17.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch"
        },
        "product_reference": "kernel-devel-azure-5.3.18-38.17.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-azure-5.3.18-38.17.1.noarch as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch"
        },
        "product_reference": "kernel-source-azure-5.3.18-38.17.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-syms-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kernel-syms-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kselftests-kmp-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ocfs2-kmp-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "reiserfs-kmp-azure-5.3.18-38.17.1.x86_64 as component of openSUSE Leap 15.3",
          "product_id": "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        },
        "product_reference": "reiserfs-kmp-azure-5.3.18-38.17.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-21781",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-21781"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process\u0027s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-21781",
          "url": "https://www.suse.com/security/cve/CVE-2021-21781"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188445 for CVE-2021-21781",
          "url": "https://bugzilla.suse.com/1188445"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-21781"
    },
    {
      "cve": "CVE-2021-22543",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-22543"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-22543",
          "url": "https://www.suse.com/security/cve/CVE-2021-22543"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186482 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1186482"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1186483 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1186483"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190276 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1190276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197660 for CVE-2021-22543",
          "url": "https://bugzilla.suse.com/1197660"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-22543"
    },
    {
      "cve": "CVE-2021-35039",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-35039"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-35039",
          "url": "https://www.suse.com/security/cve/CVE-2021-35039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188080 for CVE-2021-35039",
          "url": "https://bugzilla.suse.com/1188080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188126 for CVE-2021-35039",
          "url": "https://bugzilla.suse.com/1188126"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-35039"
    },
    {
      "cve": "CVE-2021-3609",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3609"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": ".A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3609",
          "url": "https://www.suse.com/security/cve/CVE-2021-3609"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187215 for CVE-2021-3609",
          "url": "https://bugzilla.suse.com/1187215"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188323 for CVE-2021-3609",
          "url": "https://bugzilla.suse.com/1188323"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188720 for CVE-2021-3609",
          "url": "https://bugzilla.suse.com/1188720"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190276 for CVE-2021-3609",
          "url": "https://bugzilla.suse.com/1190276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196810 for CVE-2021-3609",
          "url": "https://bugzilla.suse.com/1196810"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-3609"
    },
    {
      "cve": "CVE-2021-3612",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3612"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds memory write flaw was found in the Linux kernel\u0027s joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl JSIOCSBTNMAP. This flaw allows a local user to crash the system or possibly escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3612",
          "url": "https://www.suse.com/security/cve/CVE-2021-3612"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1187585 for CVE-2021-3612",
          "url": "https://bugzilla.suse.com/1187585"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-3612"
    },
    {
      "cve": "CVE-2021-3659",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3659"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A NULL pointer dereference flaw was found in the Linux kernel\u0027s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3659",
          "url": "https://www.suse.com/security/cve/CVE-2021-3659"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188876 for CVE-2021-3659",
          "url": "https://bugzilla.suse.com/1188876"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-3659"
    },
    {
      "cve": "CVE-2021-37576",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-37576"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
          "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
          "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-37576",
          "url": "https://www.suse.com/security/cve/CVE-2021-37576"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188838 for CVE-2021-37576",
          "url": "https://bugzilla.suse.com/1188838"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1188842 for CVE-2021-37576",
          "url": "https://bugzilla.suse.com/1188842"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1190276 for CVE-2021-37576",
          "url": "https://bugzilla.suse.com/1190276"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-extra-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-azure-optional-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kernel-devel-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-source-azure-5.3.18-38.17.1.noarch",
            "openSUSE Leap 15.3:kernel-syms-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-38.17.1.x86_64",
            "openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-38.17.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-08-10T08:03:32Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-37576"
    }
  ]
}