Title of the patch: Security update for the Linux Kernel

---

Description of the patch: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560). - CVE-2022-48983: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() (bsc#1231959). - CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590). - CVE-2024-26906: Fixed invalid vsyscall page read for copy_from_kernel_nofault() (bsc#1223202). - CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656). - CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head (bsc#1224518). - CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully (bsc#1224526). - CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725). - CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730). - CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (bsc#1225742). - CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append (bsc#1225764). - CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl() (bsc#1226748). - CVE-2024-38615: cpufreq: exit() callback is optional (bsc#1226592). - CVE-2024-40997: cpufreq: amd-pstate: fix memory leak on CPU EPP exit (bsc#1227853). - CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430). - CVE-2024-44932: idpf: fix UAFs when destroying the queues (bsc#1229808). - CVE-2024-44964: idpf: fix memory leaks and crashes while performing a soft reset (bsc#1230220). - CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231). - CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558). - CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827). - CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode()&iput() (bsc#1231930). - CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920). - CVE-2024-47745: mm: call the security_mmap_file() LSM hook in remap_file_pages() (bsc#1232135). - CVE-2024-47757: nilfs2: fix potential oob read in nilfs_btree_check_delete() (bsc#1232187). - CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272). - CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371). - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224) - CVE-2024-49934: fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (bsc#1232387). - CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165). - CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159). - CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash (bsc#1232264). - CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free (bsc#1232096). - CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483). - CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (bsc#1232318). - CVE-2024-50073: tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (bsc#1232520). - CVE-2024-50082: blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (bsc#1232500). - CVE-2024-50089: unicode: Do not special case ignorable code points (bsc#1232860). - CVE-2024-50093: thermal: intel: int340x: processor: Fix warning during module unload (bsc#1232877). - CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881). - CVE-2024-50108: drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (bsc#1232884). - CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885). - CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919). - CVE-2024-50125: Bluetooth: SCO: Fix UAF on sco_sock_timeout (bsc#1232928). - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907). - CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905). - CVE-2024-50134: drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape (bsc#1232890). - CVE-2024-50135: nvme-pci: fix race condition between reset and nvme_dev_disable() (bsc#1232888). - CVE-2024-50138: bpf: Use raw_spinlock_t in ringbuf (bsc#1232935). - CVE-2024-50146: net/mlx5e: Do not call cleanup on profile rollback failure (bsc#1233056). - CVE-2024-50147: net/mlx5: Fix command bitmask initialization (bsc#1233067). - CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in target_alloc_device() (bsc#1233061). - CVE-2024-50154: tcp/dccp: Do not use timer_pending() in reqsk_queue_unlink() (bsc#1233070). - CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049). - CVE-2024-50171: net: systemport: fix potential memory leak in bcm_sysport_xmit() (bsc#1233057). - CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129). - CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135). - CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110). - CVE-2024-50188: net: phy: dp83869: fix memory corruption when enabling fiber (bsc#1233107). - CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106). - CVE-2024-50195: posix-clock: Fix missing timespec64 check in pc_clock_settime() (bsc#1233103). - CVE-2024-50196: pinctrl: ocelot: fix system hang on level based interrupts (bsc#1233113). - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233293). - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233117). - CVE-2024-50229: nilfs2: fix potential deadlock with newly created symlinks (bsc#1233205). - CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206). - CVE-2024-50259: netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (bsc#1233214). - CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453). - CVE-2024-50267: usb: serial: io_edgeport: fix use after free in debug printk (bsc#1233456). - CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460). - CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462). - CVE-2024-50274: idpf: avoid vport access in idpf_get_link_ksettings (bsc#1233463). - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468). - CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478). - CVE-2024-50295: net: arc: fix the device for dma_map_single/dma_unmap_single (bsc#1233484). - CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487). - CVE-2024-53052: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (bsc#1233548). - CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552). - CVE-2024-53061: media: s5p-jpeg: prevent buffer overflows (bsc#1233555). - CVE-2024-53063: media: dvbdev: prevent the risk of out of memory access (bsc#1233557). - CVE-2024-53068: firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() (bsc#1233561). - CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570). - CVE-2024-53088: i40e: fix race condition by adding filter's intermediate sync state (bsc#1233580). - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025). - CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085). The following non-security bugs were fixed: - Drop OCFS2 patch causing a regression (bsc#1233255) - Fix regression on AMDGPU driver (bsc#1233134) - Removed the duplicated check of static_assert(sizeof(struct work_struct) >= sizeof(struct rcu_head)). - Removed unnecessary white-space change in kernel/bpf/syscall.c - Revert 'cgroup: Fix memory leak caused by missing cgroup_bpf_offline' (bsc#1234108). - Revert 'ixgbe: Manual AN-37 for troublesome link partners for X550 SFI' (git-fixes). - Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (git-fixes). - Revert 'usb: gadget: composite: fix OS descriptors w_value logic' (git-fixes). - Update config files (bsc#1218644). - Update config files. Enabled IDPF for ARM64 (bsc#1221309) - acpi: CPPC: Fix _CPC register setting issue (git-fixes). - acpi: CPPC: Make rmw_lock a raw_spin_lock (git-fixes). - acpi: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes). - acpi: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (stable-fixes). - ad7780: fix division by zero in ad7780_write_raw() (git-fixes). - adapt same struct naming as similar kABI workaround in SLE15-SP6 (prefixed with 'suse_' to make it more obvious its a downstream thing. - add bugreference to a hv_netvsc patch (bsc#1232413). - add commit message for the kABI patch - alsa: 6fire: Release resources at card release (git-fixes). - alsa: ac97: bus: Fix the mistake in the comment (git-fixes). - alsa: caiaq: Use snd_card_free_when_closed() at disconnection (git-fixes). - alsa: firewire-lib: fix return value on fail in amdtp_tscm_init() (git-fixes). - alsa: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes). - alsa: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes). - alsa: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes). - alsa: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes). - alsa: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes). - alsa: hda/realtek: Update ALC225 depop procedure (git-fixes). - alsa: hda/realtek: Update ALC256 depop procedure (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes). - alsa: us122l: Use snd_card_free_when_closed() at disconnection (git-fixes). - alsa: usb-audio: Add quirk for HP 320 FHD Webcam (stable-fixes). - alsa: usb-audio: Add quirks for Dell WD19 dock (stable-fixes). - alsa: usx2y: Use snd_card_free_when_closed() at disconnection (git-fixes). - amd-pstate: Set min_perf to nominal_perf for active mode performance gov (git-fixes). - arm64/sve: Discard stale CPU state when handling SVE traps (git-fixes) - arm64: Force position-independent veneers (git-fixes). - arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes). - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes) - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes) - arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() (git-fixes) - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes) - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (git-fixes) - asoc: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes). - asoc: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (git-fixes). - asoc: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (stable-fixes). - asoc: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes). - asoc: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes). - asoc: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes). - asoc: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (git-fixes). - blk-throttle: Fix io statistics for cgroup v1 (bsc#1233528). - block: Avoid leaking hctx->nr_active counter on batched completion (bsc#1231923). - bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (git-fixes). - bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (git-fixes). - bnxt_en: Fix the PCI-AER routines (git-fixes). - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (git-fixes). - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes). - bnxt_en: Reset PTP tx_avail after possible firmware reset (git-fixes). - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (git-fixes). - bnxt_en: Wait for FLR to complete during probe (git-fixes). - bnxt_en: refactor reset close code (git-fixes). - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes). - can: c_can: fix {rx,tx}_errors statistics (git-fixes). - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes). - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes). - can: j1939: j1939_session_new(): fix skb reference counting (git-fixes). - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes). - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes). - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes). - cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108). - chtls: fix tp->rcv_tstamp initialization (git-fixes). - comedi: Flush partial mappings in error case (git-fixes). - crypto: bcm - add error check in the ahash_hmac_init function (git-fixes). - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (git-fixes). - crypto: caam - add error check to caam_rsa_set_priv_key_form (git-fixes). - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (git-fixes). - crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes). - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init() (git-fixes). - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes). - cxgb4: Properly lock TX queue for the selftest (git-fixes). - cxgb4: add forgotten u64 ivlan cast before shift (git-fixes). - cxgb4: unnecessary check for 0 in the free_sge_txq_uld() function (git-fixes). - drivers: net: prevent tun_build_skb() to exceed the packet size limit (git-fixes). - drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes). - drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes). - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (stable-fixes). - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes). - drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes). - drm/bridge: tc358767: Fix link properties discovery (git-fixes). - drm/bridge: tc358768: Fix DSI command tx (git-fixes). - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes). - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (git-fixes). - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (git-fixes). - drm/omap: Fix locking in omap_gem_new_dmabuf() (git-fixes). - drm/omap: Fix possible NULL dereference (git-fixes). - drm/panfrost: Remove unused id_mask from struct panfrost_model (git-fixes). - drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes). - drm/sti: avoid potential dereference of error pointers (git-fixes). - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (git-fixes). - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (git-fixes). - drm/v3d: Address race-condition in MMU flush (git-fixes). - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (stable-fixes). - drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes). - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes). - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes). - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (stable-fixes). - e1000e: Fix S0ix residency on corporate systems (git-fixes). - efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465). - eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes). - firmware: google: Unregister driver_info on failure (git-fixes). - genirq/msi: Fix off-by-one error in msi_domain_alloc() (git-fixes). - goldfish: Fix unused const variable 'goldfish_pipe_acpi_match' (git-fixes). - gve: Fix XDP TX completion handling when counters overflow (git-fixes). - gve: Fix an edge case for TSO skb validity check (git-fixes). - gve: Fix skb truesize underestimation (git-fixes). - gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes). - hid: core: zero-initialize the report buffer (git-fixes). - hid: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes). - hid: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes). - hid: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes). - hid: multitouch: Add support for B2402FVA track point (stable-fixes). - hid: wacom: Defer calculation of resolution until resolution_code is known (git-fixes). - hid: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes). - hid: wacom: fix when get product name maybe null pointer (git-fixes). - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (git-fixes). - hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes). - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (git-fixes). - i40e: Fix XDP program unloading while removing the driver (git-fixes). - i40e: Fix filter input checks to prevent config with invalid values (git-fixes). - i40e: Fix waiting for queues of all VSIs to be disabled (git-fixes). - i40e: Report MFS in decimal base instead of hex (git-fixes). - i40e: Restore VF MSI-X state during PCI reset (git-fixes). - i40e: avoid double calling i40e_pf_rxq_wait() (git-fixes). - i40e: disable NAPI right after disabling irqs when handling xsk_pool (git-fixes). - i40e: fix use-after-free in i40e_aqc_add_filters() (git-fixes). - i40e: take into account XDP Tx queues when stopping rings (git-fixes). - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes). - iavf: Fix TC config comparison with existing adapter TC config (git-fixes). - iavf: Fix promiscuous mode configuration flow messages (git-fixes). - iavf: Introduce new state machines for flow director (git-fixes). - iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set (git-fixes). - iavf: fix FDIR rule fields masks validation (git-fixes). - iavf: in iavf_down, disable queues when removing the driver (git-fixes). - iavf: initialize waitqueues before starting watchdog_task (git-fixes). - iavf: send VLAN offloading caps once after VFR (git-fixes). - iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero (git-fixes). - ibmvnic: Do partial reset on login failure (bsc#1233150). - ibmvnic: Enforce stronger sanity checks on login response (bsc#1233150). - ibmvnic: Ensure login failure recovery is safe from other resets (bsc#1233150). - ibmvnic: Handle DMA unmapping of login buffs in release functions (bsc#1233150). - ibmvnic: Unmap DMA login rsp buffer on send login fail (bsc#1233150). - ice: Block switchdev mode when ADQ is active and vice versa (git-fixes). - ice: Fix NULL pointer deref during VF reset (git-fixes). - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (git-fixes). - ice: Fix link_down_on_close message (git-fixes). - ice: Fix netif_is_ice() in Safe Mode (git-fixes). - ice: Interpret .set_channels() input differently (git-fixes). - ice: Shut down VSI with 'link-down-on-close' enabled (git-fixes). - ice: avoid executing commands on other ports when driving sync (git-fixes). - ice: change q_index variable type to s16 to store -1 value (git-fixes). - ice: fix ICE_LAST_OFFSET formula (git-fixes). - ice: fix VLAN replay after reset (git-fixes). - ice: fix accounting for filters shared by multiple VSIs (git-fixes). - ice: fix accounting if a VLAN already exists (git-fixes). - ice: fix over-shifted variable (git-fixes). - ice: fix receive buffer size miscalculation (git-fixes). - ice: ice_aq_check_events: fix off-by-one check when filling buffer (git-fixes). - ice: reset first in crash dump kernels (git-fixes). - ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes). - ice: tc: allow zero flags in parsing tc flower (git-fixes). - ice: virtchnl: stop pretending to support RSS over AQ or registers (git-fixes). - idpf: Interpret .set_channels() input differently (git-fixes). - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (git-fixes). - idpf: avoid compiler padding in virtchnl2_ptype struct (git-fixes). - idpf: disable local BH when scheduling napi for marker packets (git-fixes). - idpf: distinguish vports by the dev_port attribute (git-fixes). - idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes). - idpf: fix UAFs when destroying the queues (git-fixes). - idpf: fix corrupted frames and skb leaks in singleq mode (git-fixes). - idpf: fix memleak in vport interrupt configuration (git-fixes). - idpf: fix memory leaks and crashes while performing a soft reset (git-fixes). - igb: Always call igb_xdp_ring_update_tail() under Tx lock (git-fixes). - igb: Fix missing time sync events (git-fixes). - igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes). - igb: extend PTP timestamp adjustments to i211 (git-fixes). - igc: Check VLAN EtherType mask (git-fixes). - igc: Check VLAN TCI mask (git-fixes). - igc: Fix hicredit calculation (git-fixes). - igc: Fix missing time sync events (git-fixes). - igc: Remove temporary workaround (git-fixes). - igc: Report VLAN EtherType matching back to user (git-fixes). - igc: Unlock on error in igc_io_resume() (git-fixes). - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (git-fixes). - iio: adc: ad7606: Fix typo in the driver name (git-fixes). - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer (git-fixes). - iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes). - iio: light: veml6030: fix microlux value calculation (git-fixes). - initramfs: avoid filename buffer overrun (bsc#1232436). - input: i8042 - add Ayaneo Kun to i8042 quirk table (git-fixes). - input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (git-fixes). - input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (git-fixes). - input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (git-fixes). - input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (git-fixes). - irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes). - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (git-fixes). - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (git-fixes). - ixgbe: fix crash with empty VF macvlan list (git-fixes). - ixgbe: fix timestamp configuration code (git-fixes). - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (git-fixes). - kABI: Restore exported __arm_smccc_sve_check (git-fixes) - kernel-binary: Enable livepatch package only when livepatch is enabled Otherwise the filelist may be empty failing the build (bsc#1218644). - kernel.h: split out COUNT_ARGS() and CONCATENATE() to args.h (git-fixes) - kexec: fix a memory leak in crash_shrink_memory() (git-fixes). - kvm: PPC: Book3S HV: remove unused varible (bsc#1194869). - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (git-fixes). - media: adv7604: prevent underflow condition when reporting colorspace (git-fixes). - media: cx24116: prevent overflows on SNR calculus (git-fixes). - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (stable-fixes). - media: dvb-usb-v2: af9035: fix missing unlock (git-fixes). - media: dvb_frontend: do not play tricks with underflow values (git-fixes). - media: dvbdev: prevent the risk of out of memory access (git-fixes). - media: pci: cx23885: check cx23885_vdev_init() return (stable-fixes). - media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes). - media: stb0899_algo: initialize cfr before using it (git-fixes). - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (git-fixes). - media: v4l2-tpg: prevent the risk of a division by zero (git-fixes). - mei: use kvmalloc for read buffer (git-fixes). - misc: apds990x: Fix missing pm_runtime_disable() (git-fixes). - mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012). - mm/memory: add non-anonymous page check in the copy_present_page() (bsc#1231646). - modpost: remove incorrect code in do_eisa_entry() (git-fixes). - net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes). - net/mlx5: Added cond_resched() to crdump collection (git-fixes). - net/mlx5: Allow 0 for total host VFs (git-fixes). - net/mlx5: Correctly compare pkt reformat ids (git-fixes). - net/mlx5: DR, Can't go to uplink vport on RX rule (git-fixes). - net/mlx5: DR, Use the right GVMI number for drop action (git-fixes). - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (git-fixes). - net/mlx5: Drain health before unregistering devlink (git-fixes). - net/mlx5: E-switch, register event handler before arming the event (git-fixes). - net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes). - net/mlx5: Fix fw tracer first block check (git-fixes). - net/mlx5: Handle fw tracer change ownership event based on MTRC (git-fixes). - net/mlx5: LAG, Check correct bucket when modifying LAG (git-fixes). - net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes). - net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes). - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (git-fixes). - net/mlx5: Skip clock update work when device is in error state (git-fixes). - net/mlx5: Unregister notifier on eswitch init failure (git-fixes). - net/mlx5: Update the list of the PCI supported devices (git-fixes). - net/mlx5: Use RMW accessors for changing LNKCTL (git-fixes). - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (git-fixes). - net/mlx5: Use recovery timeout on sync reset flow (git-fixes). - net/mlx5: fix potential memory leak in mlx5e_init_rep_rx (git-fixes). - net/mlx5: fs, lock FTE when checking if active (git-fixes). - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (git-fixes). - net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes). - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (git-fixes). - net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp (git-fixes). - net/mlx5e: Allow software parsing when IPsec crypto is enabled (git-fixes). - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes). - net/mlx5e: Change the warning when ignore_flow_level is not supported (git-fixes). - net/mlx5e: Check return value of snprintf writing to fw_version buffer (git-fixes). - net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (git-fixes). - net/mlx5e: Correct snprintf truncation handling for fw_version buffer (git-fixes). - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (git-fixes). - net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes). - net/mlx5e: Do not offload internal port if filter device is out device (git-fixes). - net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes). - net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes). - net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set (git-fixes). - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes). - net/mlx5e: Fix pedit endianness (git-fixes). - net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work (git-fixes). - net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() (git-fixes). - net/mlx5e: HTB, Fix inconsistencies with QoS SQs number (git-fixes). - net/mlx5e: Move representor neigh cleanup to profile cleanup_tx (git-fixes). - net/mlx5e: Reduce the size of icosq_str (git-fixes). - net/mlx5e: Take state lock during tx timeout reporter (git-fixes). - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (git-fixes). - net/mlx5e: fix a potential double-free in fs_udp_create_groups (git-fixes). - net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups (git-fixes). - net/mlx5e: fix double free of encap_header (git-fixes). - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (git-fixes). - net/mlx5e: kTLS, Fix incorrect page refcounting (git-fixes). - net: ena: Fix potential sign extension issue (git-fixes). - net: ena: Remove ena_select_queue (git-fixes). - net: ena: Wrong missing IO completions check order (git-fixes). - net: qede: use return from qede_parse_flow_attr() for flow_spec (git-fixes). - net: relax socket state check at accept time (git-fixes). - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes). - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes). - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes). - net: usb: usbnet: fix race in probe failure (git-fixes). - nfs: Fix KMSAN warning in decode_getfattr_attrs() (git-fixes). - nvme-fabrics: fix kernel crash while shutting down controller (git-fixes). - nvme-pci: fix freeing of the HMB descriptor table (git-fixes). - nvme-pci: reverse request order in nvme_queue_rqs (git-fixes). - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (git-fixes). - pci: Add T_PVPERL macro (git-fixes). - pci: Fix reset_method_store() memory leak (git-fixes). - pci: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf() (git-fixes). - pci: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds (git-fixes). - pci: keystone: Add link up check to ks_pcie_other_map_bus() (git-fixes). - pci: keystone: Set mode as Root Complex for 'ti,keystone-pcie' compatible (git-fixes). - pci: rockchip-ep: Fix address translation unit programming (git-fixes). - phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes). - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (git-fixes). - platform/surface: aggregator: Fix warning when controller is destroyed in probe (git-fixes). - platform/x86: dell-sysman: add support for alienware products (stable-fixes). - platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes). - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (bsc#1234098). - power: supply: bq27xxx: Fix registers of bq27426 (git-fixes). - power: supply: core: Remove might_sleep() from power_supply_put() (git-fixes). - powerpc/asm: Remove UPD_CONSTR after GCC 4.9 removal (bsc#1194869). - powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869). - powerpc/kexec: Fix return of uninitialized variable (bsc#1194869). - powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869). - powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869). - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869). - powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869). - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869). - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869). - powerpc: remove GCC version check for UPD_CONSTR (bsc#1194869). - qed: avoid truncating work queue length (git-fixes). - rdma/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (git-fixes) - rdma/hns: Add clear_hem return value to log (git-fixes) - rdma/hns: Add mutex_destroy() (git-fixes) - rdma/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (git-fixes) - rdma/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci (git-fixes) - rdma/hns: Fix cpu stuck caused by printings during reset (git-fixes) - rdma/hns: Fix different dgids mapping to the same dip_idx (git-fixes) - rdma/hns: Fix flush cqe error when racing with destroy qp (git-fixes) - rdma/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes) - rdma/hns: Remove unnecessary QP type checks (git-fixes) - rdma/hns: Use dev_* printings in hem code instead of ibdev_* (git-fixes) - rdma/hns: Use macro instead of magic number (git-fixes) - rdma/mlx5: Move events notifier registration to be after device registration (git-fixes) - rdma/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes). - rdma/rxe: Fix the qp flush warnings in req (git-fixes) - rdma/rxe: Set queue pair cur_qp_state when being queried (git-fixes) - rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644) - rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes). - rtc: abx80x: Fix WDT bit position of the status register (git-fixes). - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (git-fixes). - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241). - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths (bsc#1233241). - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (bsc#1233241). - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241). - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241). - scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241). - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241). - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (bsc#1233241). - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (bsc#1233241). - scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241). - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (bsc#1233241). - scsi: scsi_transport_fc: Allow setting rport state to current state (git-fixes). - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes). - security/keys: fix slab-out-of-bounds in key_task_permission (git-fixes). - serial: 8250: omap: Move pm_runtime_get_sync (git-fixes). - sfc: Check firmware supports Ethernet PTP filter (git-fixes). - sfc: do not unregister flow_indr if it was never registered (git-fixes). - sfc: fix a double-free bug in efx_probe_filters (git-fixes). - signal: Replace BUG_ON()s (bsc#1234093). - spi: Fix acpi deferred irq probe (git-fixes). - spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes). - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (git-fixes). - thermal: core: Initialize thermal zones before registering them (git-fixes). - thermal: intel: int340x: processor: Fix warning during module unload (git-fixes). - tpm: Lock TPM chip in tpm_pm_suspend() first (bsc#1082555 git-fixes). - tun: Fix xdp_rxq_info's queue_index when detaching (git-fixes). - tun: prevent negative ifindex (git-fixes). - ucounts: fix counter leak in inc_rlimit_get_ucounts() (bsc#1233460). - usb: chaoskey: Fix possible deadlock chaoskey_list_lock (git-fixes). - usb: chaoskey: fail open after removal (git-fixes). - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes). - usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes). - usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes). - usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes). - usb: musb: sunxi: Fix accessing an released usb phy (git-fixes). - usb: phy: Fix API devm_usb_put_phy() can not release the phy (git-fixes). - usb: serial: ftdi_sio: Fix atomicity violation in get_serial_info() (git-fixes). - usb: serial: io_edgeport: fix use after free in debug printk (git-fixes). - usb: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes). - usb: serial: option: add Quectel RG650V (stable-fixes). - usb: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes). - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (git-fixes). - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (git-fixes). - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (git-fixes). - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes). - usb: yurex: make waiting on yurex_write interruptible (git-fixes). - usbip: tools: Fix detach_port() invalid port error path (git-fixes). - vdpa/mlx5: preserve CVQ vringh index (git-fixes). - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes). - watchdog: rti: of: honor timeout-sec property (git-fixes). - wifi: ath10k: Fix memory leak in management tx (git-fixes). - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (git-fixes). - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (git-fixes). - wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes). - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (git-fixes). - wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes). - wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes). - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (git-fixes). - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (stable-fixes). - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes). - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (git-fixes). - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (git-fixes). - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - x86/kvm: fix is_stale_page_fault() (bsc#1221333). - xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes). - xhci: Separate PORT and CAPs macros into dedicated file (stable-fixes). - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (git-fixes).

---

Patchnames: SUSE-2024-4315,SUSE-SLE-Micro-5.5-2024-4315,SUSE-SLE-Module-Live-Patching-15-SP5-2024-4315,SUSE-SLE-Module-RT-15-SP5-2024-4315,openSUSE-Leap-Micro-5.5-2024-4315,openSUSE-SLE-15.5-2024-4315

---

Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).