SUSE-IU-2023:5-1 SUSE Image security@suse.de SUSE Security Team SUSE Image SUSE-IU-2023:5-1 Interim 1 1 2023-08-11T06:50:52Z current 2023-01-11T01:00:00Z 2023-01-11T01:00:00Z cve-database/bin/generate-cvrf-publiccloud.pl 2021-02-18T01:00:00Z Image update for SUSE-IU-2023:5-1 / google/sles-15-sp4-chost-byos-v20230111-arm64 This image update for google/sles-15-sp4-chost-byos-v20230111-arm64 contains the following changes: Package ca-certificates-mozilla was updated: - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: - DIGITALSIGN GLOBAL ROOT ECDSA CA - DIGITALSIGN GLOBAL ROOT RSA CA - Security Communication ECC RootCA1 - Security Communication RootCA3 Changed trust: - TrustCor certificates only trusted up to Nov 30 (bsc#1206212) - Removed CAs (bsc#1206212) as most code does not handle &quot;/valid before nov 30 2022&quot;/ and it is not clear how many certs were issued for SSL middleware by TrustCor: - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 Patch: remove-trustcor.patch Package catatonit was updated: - Update to catatont v0.1.7- This release adds the ability for catatonit to be used as the only process in a pause container, by passing the -P flag (in this mode no subprocess is spawned and thus no signal forwarding is done). - Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only once. Fix build with autocnf 2.71 / automake 1.16.5. - Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to socket activation or features somewhat adjacent to socket activation (such as passing file descriptors). - Update catatonit-rpmlintrc in order to cover that static binaries are now an error not a warning. Package curl was updated: - Security Fix: [bsc#1206309, CVE-2022-43552] * HTTP Proxy deny use-after-free * Add curl-CVE-2022-43552.patch - Security Fix: [bsc#1206308, CVE-2022-43551] * Fix Another HSTS bypass via IDN * Add curl-CVE-2022-43551.patch Package glib2 was updated: - Update to version 2.70.5: Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537, glgo#GNOME/GLib!2555 - Split gtk-docs from -devel package, these are not needed during building projects using glib2 - Use _multibuild as the meson buildprocess is very awkward regarding the documentation - builds single-jobs only and twice (again during %install). This way the rest of distribution waiting for glib2-devel to be available is not blocked by this Package kdump was updated: - Make the kdump-save.service reboot after kdump-save is finished (bsc#1204000) - fix renaming of qeth interfaces (bsc#1204743, bsc#1144337) - ppc64: rebuild initrd image after migration (bsc#1191410) Package kernel-default was updated: - Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)- commit cab6fa7 - Revert &quot;/drm/vc4: hvs: Reset muxes at probe time (git-fixes).&quot;/ (bsc#1202341) This reverts commit 303122d0f2160411fa1068220bc59849d848550d. The reverted change clears hardware state on the RPi4, which leaves the screen blank. Without it, the display works correctly. - commit 957f968 - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (git-fixes). - vmxnet3: use correct intrConf reference when using extended queues (git-fixes). - vmxnet3: correctly report encapsulated LRO packet (git-fixes). - proc: proc_skip_spaces() shouldn't think it is working on C strings (git-fixes). - proc: avoid integer type confusion in get_proc_long (git-fixes). - commit 3a866aa - macsec: add missing attribute validation for offload (git-fixes). - net: thunderbolt: fix memory leak in tbnet_open() (git-fixes). - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (git-fixes). - ca8210: Fix crash by zero initializing data (git-fixes). - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (git-fixes). - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() (git-fixes). - NFC: nci: Bounds check struct nfc_target arrays (git-fixes). - Bluetooth: Fix not cleanup led when bt_init fails (git-fixes). - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (git-fixes). - e1000e: Fix TX dispatch condition (git-fixes). - HID: core: fix shift-out-of-bounds in hid_report_raw_event (git-fixes). - HID: hid-lg4ff: Add check for empty lbuf (git-fixes). - gpio: amd8111: Fix PCI device reference count leak (git-fixes). - ACPI: HMAT: Fix initiator registration for single-initiator systems (git-fixes). - ACPI: HMAT: remove unnecessary variable initialization (git-fixes). - pinctrl: intel: Save and restore pins in &quot;/direct IRQ&quot;/ mode (git-fixes). - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (git-fixes). - commit a0e4929 - kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693). - Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch - commit 5addeac - btrfs: check if root is readonly while setting security xattr (bsc#1206147). - commit 50a73ba - btrfs: do not allow compression on nodatacow files (bsc#1206149). - commit 5167f62 - btrfs: export a helper for compression hard check (bsc#1206149). - commit f5cf2dc - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (bsc#1206037). - commit 6215cd5 - xen/netback: don't call kfree_skb() with interrupts disabled (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329). - commit 90098d3 - xen/netback: Ensure protocol headers don't fall in the non-linear area (bsc#1206113, XSA-423, CVE-2022-3643). - commit 6c8da66 - btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057). - commit 83a8ed2 - btrfs: fix processing of delayed data refs during backref walking (bsc#1206056). - commit 2ec426f - btrfs: send: fix send failure of a subcase of orphan inodes (bsc#1206036). - commit 90cbaac - btrfs: send: fix failures when processing inodes with no links (bsc#1206036). - commit f017ade - btrfs: send: use boolean types for current inode status (bsc#1206036). - commit 36f86c0 - btrfs: send: refactor arguments of get_inode_info() (bsc#1206036). - commit a80bf85 - ceph: avoid putting the realm twice when decoding snaps fails (bsc#1206051). - ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050). - ceph: fix memory leak in ceph_readdir when note_last_dentry returns error (bsc#1206049). - ceph: fix inode reference leakage in ceph_get_snapdir() (bsc#1206048). - ceph: do not update snapshot context when there is no new snapshot (bsc#1206047). - ceph: switch netfs read ops to use rreq-&gt;inode instead of rreq-&gt;mapping-&gt;host (bsc#1206046). - ceph: properly handle statfs on multifs setups (bsc#1206045). - commit 777e847 - btrfs: send: remove unused type parameter to iterate_inode_ref_t (bsc#1206036). - commit 0e9e4f2 - btrfs: send: remove unused found_type parameter to lookup_dir_item_inode() (bsc#1206036). - commit 7f2d376 - blacklist.conf: added 1b2ba3c5616e (&quot;/ceph: flush the mdlog for filesystem sync&quot;/) - commit a1975bc - btrfs: send: always use the rbtree based inode ref management infrastructure (bsc#1206036). - commit e503e70 - blacklist.conf: added 5bd76b8de5b7 (&quot;/ceph: fix NULL pointer dereference for req-&gt;r_session&quot;/) - commit 33375e7 - btrfs: send: fix sending link commands for existing file paths (bsc#1206036). - commit 382a30f - blacklist.conf: added aa1d627207ca (&quot;/ceph: Use kcalloc for allocating multiple elements&quot;/) - commit 169da79 - blacklist.conf: added 89d43d0551a8 (&quot;/ceph: put the requests/sessions when it fails to alloc memory&quot;/) - commit e095309 - blacklist.conf: added 0e24421ac431 (&quot;/ceph: fix mdsmap decode when there are MDS's beyond max_mds&quot;/) - commit 0e95811 - btrfs: send: introduce recorded_ref_alloc and recorded_ref_free (bsc#1206036). - commit f582043 - btrfs: prevent subvol with swapfile from being deleted (bsc#1206035). - commit 17d1de0 - sched: Disable sched domain debugfs creation on ppc64 unless sched_verbose is specified (bnc#1205653). - commit 039564b - char: tpm: Protect tpm_pm_suspend with locks (git-fixes). - Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() (git-fixes). - commit 0216ffd - usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (git-fixes). - Refresh patches.suse/usb-dwc3-gadget-Clear-ep-descriptor-last.patch. - commit eede34a - usb: dwc3: gadget: conditionally remove requests (git-fixes). - Refresh patches.suse/usb-dwc3-gadget-Clear-ep-descriptor-last.patch. - commit baddb4e - i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set (git-fixes). - i2c: npcm7xx: Fix error handling in npcm_i2c_init() (git-fixes). - pinctrl: single: Fix potential division by zero (git-fixes). - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (git-fixes). - mmc: mmc_test: Fix removal of debugfs file (git-fixes). - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (git-fixes). - mmc: core: Fix ambiguous TRIM and DISCARD arg (git-fixes). - ASoC: ops: Fix bounds check for _sx controls (git-fixes). - ALSA: dice: fix regression for Lexicon I-ONIX FW810S (git-fixes). - wifi: wilc1000: validate number of channels (git-fixes). - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_CHANNEL_LIST attribute (git-fixes). - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute (git-fixes). - wifi: wilc1000: validate pairwise and authentication suite offsets (git-fixes). - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (git-fixes). - dma-buf: fix racing conflict of dma_heap_add() (git-fixes). - selftests: mptcp: fix mibit vs mbit mix up (git-fixes). - Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] (git-fixes). - Input: soc_button_array - add use_low_level_irq module parameter (git-fixes). - Input: goodix - try resetting the controller when no config is set (git-fixes). - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (git-fixes). - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on - &gt;set_termios() (git-fixes). - tools: iio: iio_generic_buffer: Fix read size (git-fixes). - iio: pressure: ms5611: fixed value compensation bug (git-fixes). - ASoC: stm32: dfsdm: manage cb buffers cleanup (git-fixes). - ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N (git-fixes). - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (git-fixes). - net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes). - platform/x86: hp-wmi: Ignore Smart Experience App event (git-fixes). - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (git-fixes). - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (git-fixes). - ata: libata-core: do not issue non-internal commands once EH is pending (git-fixes). - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (git-fixes). - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI (git-fixes). - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (git-fixes). - wifi: ath11k: Fix QCN9074 firmware boot on x86 (git-fixes). - wifi: mac80211: Fix ack frame idr leak when mesh has no route (git-fixes). - wifi: airo: do not assign -1 to unsigned char (git-fixes). - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (git-fixes). - wifi: mac80211: fix memory free error when registering wiphy fail (git-fixes). - audit: fix undefined behavior in bit shift for AUDIT_BIT (git-fixes). - platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (git-fixes). - platform/x86: ideapad-laptop: Disable touchpad_switch (git-fixes). - selftests: mptcp: make sendfile selftest work (git-fixes). - ASoC: fsl_sai: use local device pointer (git-fixes). - mmc: sdhci-brcmstb: Enable Clock Gating to save power (git-fixes). - mmc: sdhci-brcmstb: Re-organize flags (git-fixes). - ata: libata-scsi: simplify __ata_scsi_queuecmd() (git-fixes). - iio: ms5611: Simplify IO callback parameters (git-fixes). - selftests: mptcp: more stable simult_flows tests (git-fixes). - commit 4ec7214 - Blacklist io-wq-max_worker-fixes on SP4 Commit bc369921d670 (&quot;/io-wq: max_worker fixes&quot;/) claims to fix 2e480058ddc2 (&quot;/io-wq: provide a way to limit max number of workers&quot;/) but actually fixes 7a842fb589e3 (&quot;/io-wq: code clean of io_wqe_create_worker()&quot;/) which we don't carry in SP4. Blacklist it to silent git-fixes. Nevertheless, it is required in SP5. This commit must be reverted there. - commit 4da02f1 - io-wq: exclusively gate signal based exit on get_signal() return (git-fixes). - commit 0f61b91 - Do not enable CONFIG_ATARI_PARTITION (jsc#PED-1573) - commit 51c7091 - Fix patches.suse/MM-reclaim-mustn-t-enter-FS-for-swap-over-NFS.patch Fixed implicit-function-declaration warning when swap is disabled (bsc#1205993). - commit 2816166 - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (git-fixes). - hwmon: (coretemp) Check for null before removing sysfs attrs (git-fixes). - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (git-fixes). - hwmon: (i5500_temp) fix missing pci_disable_device() (git-fixes). - hwmon: (ina3221) Fix shunt sum critical calculation (git-fixes). - hwmon: (ltc2947) fix temperature scaling (git-fixes). - ARM: at91: rm9200: fix usb device clock id (git-fixes). - commit e077c40 - Update patch reference for ATM fix (CVE-2022-3635 bsc#1204631) - commit 7ef6216 - Move upstreamed i915 fix into sorted section - commit 8ee5ebf - x86/hyperv: Update 'struct hv_enlightened_vmcs' definition (git-fixes). - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (git-fixes). - commit 86dd4ce - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (git-fixes). - net: mdiobus: fix unbalanced node reference count (git-fixes). - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration (git-fixes). - wifi: cfg80211: don't allow multi-BSSID in S1G (git-fixes). - wifi: cfg80211: fix buffer overflow in elem comparison (git-fixes). - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type (git-fixes). - net: wwan: iosm: fix kernel test robot reported error (git-fixes). - net: ethernet: nixge: fix NULL dereference (git-fixes). - net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() (git-fixes). - e100: Fix possible use after free in e100_xmit_prepare (git-fixes). - fm10k: Fix error handling in fm10k_init_module() (git-fixes). - net: phy: fix null-ptr-deref while probe() failed (git-fixes). - can: m_can: Add check for devm_clk_get (git-fixes). - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods (git-fixes). - can: etas_es58x: es58x_init_netdev(): free netdev when register_candev() (git-fixes). - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (git-fixes). - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (git-fixes). - Revert &quot;/net: phy: meson-gxl: improve link-up behavior&quot;/ (git-fixes). - commit 225e8fd - net: stmmac: work around sporadic tx issue on link-up (git-fixes). - commit e5a3408 - KVM: x86/mmu: Fix race condition in direct_page_fault (bsc#1205882, CVE-2022-45869). - commit e2a86d6 - Add support for enabling livepatching related packages on -RT (jsc#PED-1706) - commit 9d41244 - blacklist.conf: faeture, not fix - commit 8c4e5cb - blacklist.conf: kABI - commit e518f66 - blacklist.conf: misattributed - commit dd8dac1 - blacklist.conf: kABI - commit 267578b - blacklist.conf: kABI - commit ca10017 - mac80211: radiotap: Use BIT() instead of shifts (git-fixes). - commit fa4dbfe - char: xillybus: Fix trivial bug with mutex (bsc#1205764 CVE-2022-45888). - char: xillybus: Prevent use-after-free due to race condition (bsc#1205764 CVE-2022-45888). - commit 8d88aac - platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (jsc#PED-2684 bsc#1205683). - commit a6ac9d8 - Refresh patches.suse/ibmvnic-Properly-dispose-of-all-skbs-during-a-failov.patch. Fix metadata - commit f4fe6e0 - ibmvnic: Free rwi on reset success (bsc#1184350 ltc#191533 git-fixes). - commit 9f37b44 - blacklist.conf: kABI - commit 27ebcbb - Move upstreamed input patch into sorted section (bsc#1190256) - commit 32c618e - usb: dwc3: gadget: Clear ep descriptor last (git-fixes). - commit 17b7c9d - blacklist.conf: kABI - commit 3301053 - usb: xhci-mtk: check boundary before check tt (git-fixes). - commit 401f88b - usb: xhci-mtk: update fs bus bandwidth by bw_budget_table (git-fixes). - commit bfe9566 - xen/pcpu: fix possible memory leak in register_pcpu() (git-fixes). - commit dab6b8a - x86/entry: Work around Clang __bdos() bug (git-fixes). - commit e06d1d8 - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (git-fixes). - commit ec4c7d4 - x86/Xen: streamline (and fix) PV CPU enumeration (git-fixes). - commit eddf207 - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (git-fixes). - commit 9e93e06 - io_uring: fix possible poll event lost in multi shot mode (git-fixes). - commit 2b11ccf - io-wq: ensure we exit if thread group is exiting (git-fixes). - io_uring: fix missing sigmask restore in io_cqring_wait() (git-fixes). - io_uring: pin SQPOLL data before unlocking ring lock (git-fixes). - io_uring: drop ctx-&gt;uring_lock before acquiring sqd-&gt;lock (git-fixes). - io_uring: fix missing mb() before waitqueue_active (git-fixes). - commit 83b832a - cifs: fix missing unlock in cifs_file_copychunk_range() (git-fixes). - commit c1df133 - cifs: Use after free in debug code (git-fixes). - commit 64acc9c - cifs: add check for returning value of SMB2_set_info_init (git-fixes). - commit 98fbee7 - cifs: Fix wrong return value checking when GETFLAGS (git-fixes). - commit 70eda18 - cifs: add check for returning value of SMB2_close_init (git-fixes). - commit f80dd26 - cifs: Fix connections leak when tlink setup failed (git-fixes). - commit 173646f - KVM: x86: Retry page fault if MMU reload is pending and root has no sp (bsc#1205744). - commit 2631fac - drm/i915: fix TLB invalidation for Gen12 video and compute engines (CVE-2022-4139 bsc#1205700). - commit 80818ce - Refresh patches.suse/misc-sgi-gru-fix-use-after-free-error-in-gru_set_con.patch (CVE-2022-3424 bsc#1204166) Taken from v10 patch in char-misc subsystem tree - commit 70dae18 - Update patches.suse/HID-roccat-Fix-use-after-free-in-roccat_read.patch (bsc#1203960 CVE-2022-41850). - commit 94bd71f - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (git-fixes). - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (git-fixes). - v3 of &quot;/PCI: hv: Only reuse existing IRTE allocation for Multi-MSI&quot;/ - scsi: storvsc: Fix handling of srb_status and capacity change events (git-fixes). - commit a5fb15b - Bluetooth: L2CAP: Fix u8 overflow (CVE-2022-45934 bsc#1205796). - commit 966bbc0 - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (git-fixes). - usb: dwc3: exynos: Fix remove() function (git-fixes). - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (git-fixes). - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (git-fixes). - iio: light: rpr0521: add missing Kconfig dependencies (git-fixes). - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (git-fixes). - iio: health: afe4403: Fix oob read in afe4403_read_raw (git-fixes). - iio: light: apds9960: fix wrong register for gesture gain (git-fixes). - scripts/faddr2line: Fix regression in name resolution on ppc64le (git-fixes). - commit 45d3e4c - x86/kexec: Fix double-free of elf header buffer (bsc#1205567). - commit 0c767bc - Move upstreamed sound and WiFi patches into sorted section - commit 5e6ff3d - drm/amd/display: Add HUBP surface flip interrupt handler (git-fixes). - USB: serial: option: add u-blox LARA-L6 modem (git-fixes). - USB: serial: option: add u-blox LARA-R6 00B modem (git-fixes). - USB: serial: option: remove old LARA-R6 PID (git-fixes). - USB: serial: option: add Fibocom FM160 0x0111 composition (git-fixes). - USB: serial: option: add Sierra Wireless EM9191 (git-fixes). - usb: add NO_LPM quirk for Realforce 87U Keyboard (git-fixes). - usb: cdns3: host: fix endless superspeed hub port reset (git-fixes). - USB: bcma: Make GPIO explicitly optional (git-fixes). - serial: 8250_lpss: Configure DMA also w/o DMA filter (git-fixes). - docs: update mediator contact information in CoC doc (git-fixes). - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (git-fixes). - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (git-fixes). - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (git-fixes). - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (git-fixes). - i2c: tegra: Allocate DMA memory for DMA engine (git-fixes). - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (git-fixes). - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (git-fixes). - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (git-fixes). - ASoC: codecs: jz4725b: Fix spelling mistake &quot;/Sourc&quot;/ -&gt; &quot;/Source&quot;/, &quot;/Routee&quot;/ -&gt; &quot;/Route&quot;/ (git-fixes). - ASoC: codecs: jz4725b: fix capture selector naming (git-fixes). - ASoC: codecs: jz4725b: use right control for Capture Volume (git-fixes). - ASoC: codecs: jz4725b: fix reported volume for Master ctl (git-fixes). - ASoC: codecs: jz4725b: add missed Line In power control bit (git-fixes). - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (git-fixes). - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (git-fixes). - ASoC: rt1019: Fix the TDM settings (git-fixes). - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (git-fixes). - selftests/intel_pstate: fix build for ARCH=x86_64 (git-fixes). - wifi: wext: use flex array destination for memcpy() (git-fixes). - docs, kprobes: Fix the wrong location of Kprobes (git-fixes). - docs/core-api: expand Fedora instructions for GCC plugins (git-fixes). - mtd: spi-nor: intel-spi: Disable write protection only if asked (git-fixes). - commit 26e07a5 - io_uring: ensure IORING_REGISTER_IOWQ_MAX_WORKERS works with SQPOLL (git-fixes). - commit 8665d84 - Refresh patches.suse/xfs-move-recovery-needed-state-updates-to-xfs_log_mo.patch. - commit 4ec24fa - regulator: twl6030: re-add TWL6032_SUBCLASS (git-fixes). - regulator: core: fix UAF in destroy_regulator() (git-fixes). - regulator: core: fix kobject release warning and memory leak in regulator_register() (git-fixes). - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (git-fixes). - ASoC: max98373: Add checks for devm_kcalloc (git-fixes). - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() (git-fixes). - net: thunderx: Fix the ACPI memory leak (git-fixes). - nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes). - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (git-fixes). - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (git-fixes). - arcnet: fix potential memory leak in com20020_probe() (git-fixes). - NFC: nci: fix memory leak in nci_rx_data_packet() (git-fixes). - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (git-fixes). - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (git-fixes). - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (git-fixes). - macsec: Fix invalid error code set (git-fixes). - nfc/nci: fix race with opening and closing (git-fixes). - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (git-fixes). - arm64: dts: rockchip: add enable-strobe-pulldown to emmc phy on nanopi4 (git-fixes). - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (git-fixes). - ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (git-fixes). - ARM: mxs: fix memory leak in mxs_machine_init() (git-fixes). - bus: sunxi-rsb: Support atomic transfers (git-fixes). - bus: sunxi-rsb: Remove the shutdown callback (git-fixes). - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (git-fixes). - commit 39ef4db - l2tp: Serialize access to sk_user_data with sk_callback_lock (bsc#1205711 CVE-2022-4129). - commit ad37086 - Update metadata references - commit a01d008 - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (git-fixes) - commit 396a739 - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (git-fixes) - commit 981cb44 - RDMA/hns: Disable local invalidate operation (git-fixes) - commit 90ecfab - IB/hfi1: Correctly move list in sc_disable() (git-fixes) - commit fa439f0 - RDMA/cma: Use output interface for net_dev check (git-fixes) - commit 568074d - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (git-fixes) - commit 569a9cb - RDMA/cm: Use SLID in the work completion as the DLID in responder side (git-fixes) - commit e86643f - RDMA/irdma: Use s/g array in post send only when its valid (git-fixes) - commit 6692dc0 - RDMA/mlx5: Set local port to one when accessing counters (git-fixes) - commit 9acd436 - RDMA/hns: Remove the num_qpc_timer variable (git-fixes) - commit 89b5b80 - RDMA/hns: Fix wrong fixed value of qp-&gt;rq.wqe_shift (git-fixes) - commit c586fc0 - RDMA/hns: Fix supported page size (git-fixes) - commit 64653d9 - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (git-fixes) - commit 78022ca - RDMA/rxe: Limit the number of calls to each tasklet (git-fixes) - commit 37d447b - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (git-fixes) - commit ba2976b - RDMA/hns: Fix incorrect clearing of interrupt status register (git-fixes) - commit 97ffea6 - RDMA/rtrs-srv: Fix modinfo output for stringify (git-fixes) - commit 46a2a2b - RDMA/rxe: Remove useless pkt parameters (git-fixes) - commit 06b2d37 - RDMA/cm: Fix memory leak in ib_cm_insert_listen (git-fixes) - commit 7ec3772 - RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes) - commit ba8caf3 - RDMA/hfi1: Prevent use of lock before it is initialized (git-fixes) - commit b510b17 - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (git-fixes) - commit 6c11e07 - RDMA/hns: Remove the num_cqc_timer variable (git-fixes) - commit ed86cd6 - RDMA/hns: Correct the type of variables participating in the shift operation (git-fixes) - commit cecc570 - RDMA/hns: Replace tab with space in the right-side comments (git-fixes) - commit 4c89a77 - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() (git-fixes) - commit 40de52c - RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP (git-fixes) - commit 36c1898 - RDMA/hns: Remove magic number (git-fixes) - commit 014def9 - KVM: s390: pv: don't allow userspace to set the clock under PV (git-fixes). - KVM: s390: Add a routine for setting userspace CPU state (git-fixes jsc#PED-611). - KVM: s390: Simplify SIGP Set Arch handling (git-fixes jsc#PED-611). - commit c226df2 - Update patch references for Bluetooth fixes (CVE-2022-42896 bsc#1205709 CVE-2022-42895 bsc#1205705) - commit 30ec8de - spi: tegra210-quad: Fix duplicate resource error (git-fixes). - spi: dw-dma: decrease reference count in dw_spi_dma_init_mfld() (git-fixes). - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (git-fixes). - commit 019145b - blacklist.conf: duplicate - commit 5eaee0f - blacklist.conf: duplicate - commit d84acf3 - blacklist.conf: duplicate - commit 5ea51bc - blacklist.conf: duplicate - commit f3d467e - scsi: zfcp: Fix double free of FSF request when qdio send fails (git-fixes). - s390: fix nospec table alignments (git-fixes). - KVM: s390: pv: leak the topmost page table when destroy fails (git-fixes). - commit 378329e - xfs: reserve quota for target dir expansion when renaming files (bsc#1205679). - commit d93b22e - drivers: net: slip: fix NPD bug in sl_tx_timeout() (bsc#1205671 CVE-2022-41858). - commit 99b5127 - dm: remove unnecessary assignment statement in alloc_dev() (git-fixes). - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (git-fixes). - md/raid5: Ensure stripe_fill happens on non-read IO with journal (git-fixes). - commit 79ca470 - md: Replace snprintf with scnprintf (git-fixes, bsc#1164051). - Replace the in-house patch by the above upstream version, patches.suse/md-raid0-fix-buffer-overflow-at-debug-print.patch. - commit e122ea5 - dm: return early from dm_pr_call() if DM device is suspended (git-fixes). - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (git-fixes). - dm raid: fix accesses beyond end of raid member array (git-fixes). - dm mirror log: clear log bits up to BITS_PER_LONG boundary (git-fixes). - dm era: commit metadata in postsuspend after worker stops (git-fixes). - dm crypt: make printing of the key constant-time (git-fixes). - dm stats: add cond_resched when looping over entries (git-fixes). - dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes). - dm: fix double accounting of flush with data (git-fixes). - dm: interlock pending dm_io and dm_wait_for_bios_completion (git-fixes). - dm: properly fix redundant bio-based IO accounting (git-fixes). - dm: revert partial fix for redundant bio-based IO accounting (git-fixes). - dm btree remove: fix use after free in rebalance_children() (git-fixes). - commit 6214ae1 - blacklist.conf: add non-backport git-fixes commit - commit 054a1a9 - NFSD: Cap rsize_bop result based on send buffer size (bsc#1205128 CVE-2022-43945). - NFSD: Protect against send buffer overflow in NFSv3 READ (bsc#1205128 CVE-2022-43945). - NFSD: Protect against send buffer overflow in NFSv2 READ (bsc#1205128 CVE-2022-43945). - NFSD: Protect against send buffer overflow in NFSv3 READDIR (bsc#1205128 CVE-2022-43945). - NFSD: Protect against send buffer overflow in NFSv2 READDIR (bsc#1205128 CVE-2022-43945). - SUNRPC: Fix svcxdr_init_encode's buflen calculation (bsc#1205128 CVE-2022-43945). - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (bsc#1205128 CVE-2022-43945). - commit dd4f720 - xfs: reserve quota for dir expansion when linking/unlinking files (bsc#1205616). - commit 1330e05 - add another bug reference to some hyperv changes (bsc#1205617). - commit 0b5e3d4 - net/smc: kABI workarounds for struct smc_sock (git-fixes). - commit d9f52e8 - blacklist.conf: kABI - commit f550bb4 - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (git-fixes). - commit dc34c13 - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (git-fixes). - commit 23caa81 - tracing: Fix wild-memory-access in register_synth_event() (git-fixes). - commit 9bbef30 - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (git-fixes). - commit 68dace2 - ftrace: Fix null pointer dereference in ftrace_add_mod() (git-fixes). - commit 2e9b117 - ring_buffer: Do not deactivate non-existant pages (git-fixes). - commit 0458d7a - ftrace: Optimize the allocation for mcount entries (git-fixes). - commit 5b2b25a - ftrace: Fix the possible incorrect kernel message (git-fixes). - commit 7323c8c - tracing: Fix memory leak in tracing_read_pipe() (git-fixes). - commit 690c08a - net/smc: kABI workarounds for struct smc_link (git-fixes). - commit 0cbe94a - ring-buffer: Include dropped pages in counting dirty patches (git-fixes). - commit 11920bc - blacklist.conf: duplicate - commit ddd82f9 - powerpc/kvm: Fix kvm_use_magic_page (bsc#1156395). - Refresh patches.suse/gup-Turn-fault_in_pages_-readable-writeable-into-fault_in_-readable-writeable.patch. - commit aec526a - blacklist.conf: duplicate - commit dcdcbbd - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon (git-fixes). - commit 16f21a3 - tracing/ring-buffer: Have polling block on watermark (git-fixes). - commit 5c3e4d5 - powerpc/pseries/vas: Declare pseries_vas_fault_thread_fn() as static (bsc#1194869). - commit 02a3582 - ftrace: Fix use-after-free for dynamic ftrace_ops (git-fixes). - commit f98b221 - blacklist.conf: kABI - commit 431bd9c - blacklist.conf: duplicate - commit 53c7bfc - platform/x86/intel: hid: add quirk to support Surface Go 3 (git-fixes). - commit 23ccaa2 - blacklist.conf: too intrusive - commit 67ad270 - powerpc/boot: Explicitly disable usage of SPE instructions (bsc#1156395). - commit 7c94cdb - blacklist.conf: Add fixes for unsupported platforms - commit 10ca02b - net: smsc95xx: add support for Microchip EVB-LAN8670-USB (git-fixes). - commit af40ba9 - Update patch reference for rtl8712 driver fix (CVE-2022-4095 bsc#1205514) - commit 67f2ad4 - usbnet: smsc95xx: Don't reset PHY behind PHY driver's back (git-fixes). - commit b693ef6 - usb: smsc: use eth_hw_addr_set() (git-fixes). - commit 67dd1e9 - powerpc/64: Fix build failure with allyesconfig in book3s_64_entry.S (bsc#1194869). - commit 6d56eff - patches.suse/btrfs-fix-deadlock-between-quota-enable-and-other-qu.patch: (bsc#1205521). - commit a75b0e8 - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (git-fixes). - commit c6c293f - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (git-fixes). - commit 287b2ba - Input: i8042 - fix leaking of platform device on module removal (git-fixes). - Input: iforce - invert valid length check when fetching device IDs (git-fixes). - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (git-fixes). - drm/drv: Fix potential memory leak in drm_dev_init() (git-fixes). - drm/panel: simple: set bpc field for logic technologies displays (git-fixes). - drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (git-fixes). - usb: chipidea: fix deadlock in ci_otg_del_timer (git-fixes). - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (git-fixes). - Revert &quot;/usb: dwc3: disable USB core PHY management&quot;/ (git-fixes). - serial: 8250: Flush DMA Rx on RLSI (git-fixes). - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (git-fixes). - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (git-fixes). - Revert &quot;/tty: n_gsm: replace kicktimer with delayed_work&quot;/ (git-fixes). - Revert &quot;/tty: n_gsm: avoid call of sleeping functions from atomic context&quot;/ (git-fixes). - serial: imx: Add missing .thaw_noirq hook (git-fixes). - tty: serial: fsl_lpuart: don't break the on-going transfer when global reset (git-fixes). - serial: 8250: omap: Flush PM QOS work on remove (git-fixes). - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (git-fixes). - serial: 8250_omap: remove wait loop from Errata i202 workaround (git-fixes). - firmware: coreboot: Register bus in module init (git-fixes). - slimbus: stream: correct presence rate frequencies (git-fixes). - parport_pc: Avoid FIFO port location truncation (git-fixes). - siox: fix possible memory leak in siox_device_add() (git-fixes). - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (git-fixes). - speakup: fix a segfault caused by switching consoles (git-fixes). - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (git-fixes). - iio: adc: mp2629: fix potential array out of bound access (git-fixes). - iio: adc: mp2629: fix wrong comparison of channel (git-fixes). - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (git-fixes). - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (git-fixes). - ASoC: tas2764: Fix set_tdm_slot in case of single slot (git-fixes). - ASoC: tas2770: Fix set_tdm_slot in case of single slot (git-fixes). - ASoC: core: Fix use-after-free in snd_soc_exit() (git-fixes). - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (git-fixes). - mmc: core: properly select voltage range without power cycle (git-fixes). - commit 5d6506d - net/smc: Fix possible leaked pernet namespace in smc_init() (git-fixes). - net/smc: Fix an error code in smc_lgr_create() (git-fixes). - net/smc: Fix possible access to freed memory in link clear (git-fixes). - net/smc: Fix slab-out-of-bounds issue in fallback (git-fixes). - net/smc: Only save the original clcsock callback functions (git-fixes). - net/smc: Fix sock leak when release after smc_shutdown() (git-fixes). - net/smc: send directly on setting TCP_NODELAY (git-fixes). - net/smc: Send directly when TCP_CORK is cleared (git-fixes). - net/smc: Avoid overwriting the copies of clcsock callback functions (git-fixes). - net/smc: Forward wakeup to smc socket waitqueue after fallback (git-fixes). - commit a5aa4ad - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (git-fixes). - x86/hyperv: fix invalid writes to MSRs during root partition kexec (git-fixes). - clocksource/drivers/hyperv: add data structure for reference TSC MSR (git-fixes). - Drivers: hv: fix repeated words in comments (git-fixes). - HID: hyperv: fix possible memory leak in mousevsc_probe() (git-fixes). - drm/hyperv: Add ratelimit on error message (git-fixes). - scsi: storvsc: remove an extraneous &quot;/to&quot;/ in a comment (git-fixes). - Drivers: hv: vmbus: Don't wait for the ACPI device upon initialization (git-fixes). - Drivers: hv: vmbus: Use PCI_VENDOR_ID_MICROSOFT for better discoverability (git-fixes). - Drivers: hv: vmbus: Fix kernel-doc (git-fixes). - drm/hyperv: Don't overwrite dirt_needed value set by host (git-fixes). - Drivers: hv: vmbus: Optimize vmbus_on_event (git-fixes). - scsi: storvsc: Drop DID_TARGET_FAILURE use (git-fixes). - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (git-fixes). - Drivers: hv: Always reserve framebuffer region for Gen1 VMs (git-fixes). - PCI: Move PCI_VENDOR_ID_MICROSOFT/PCI_DEVICE_ID_HYPERV_VIDEO definitions to pci_ids.h (git-fixes). - tools: hv: kvp: remove unnecessary (void*) conversions (git-fixes). - Drivers: hv: remove duplicate word in a comment (git-fixes). - tools: hv: Remove an extraneous &quot;/the&quot;/ (git-fixes). - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (git-fixes). - Drivers: hv: vmbus: Release cpu lock in error case (git-fixes). - Drivers: hv: Fix syntax errors in comments (git-fixes). - scsi: storvsc: Fix typo in comment (git-fixes). - Drivers: hv: vmbus: fix typo in comment (git-fixes). - PCI: hv: Add validation for untrusted Hyper-V values (git-fixes). - x86/hyperv: Disable hardlockup detector by default in Hyper-V guests (git-fixes). - Drivers: hv: vmbus: Accept hv_sock offers in isolated guests (git-fixes). - hv_sock: Add validation for untrusted Hyper-V values (git-fixes). - hv_sock: Copy packets sent by Hyper-V out of the ring buffer (git-fixes). - hv_sock: Check hv_pkt_iter_first_raw()'s return value (git-fixes). - Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes). - hv_netvsc: Fix potential dereference of NULL pointer (git-fixes). - hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete}() (git-fixes). - net: hyperv: remove use of bpf_op_t (git-fixes). - commit 5a5a746 - Update kabi files. Update using the released November MU kernel 5.14.21-150400.24.33.2 - commit b0daa6c - sched: Clear ttwu_pending after enqueue_task() (git fixes (sched/core)). - commit 8216675 - soc: imx8m: Enable OCOTP clock before reading the register (git-fixes). - arm64: dts: imx8mn: Fix NAND controller size-cells (git-fixes). - arm64: dts: imx8mm: Fix NAND controller size-cells (git-fixes). - ARM: dts: imx7: Fix NAND controller size-cells (git-fixes). - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (git-fixes). - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (git-fixes). - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (git-fixes). - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (git-fixes). - net: thunderbolt: Fix error handling in tbnet_init() (git-fixes). - net/x25: Fix skb leak in x25_lapb_receive_frame() (git-fixes). - bridge: switchdev: Fix memory leaks when changing VLAN protocol (git-fixes). - net: phy: marvell: add sleep time after enabling the loopback bit (git-fixes). - mISDN: fix misuse of put_device() in mISDN_register_device() (git-fixes). - mISDN: fix possible memory leak in mISDN_dsp_element_register() (git-fixes). - commit f0f96f8 - soundwire: intel: Initialize clock stop timeout (bsc#1205507). - commit ed7ad85 - io_uring: fix io_timeout_remove locking (git-fixes). - io_uring: correct __must_hold annotation (git-fixes). - commit afa1999 - Update metadata references - commit 48537d5 - KVM: SVM: move guest vmsave/vmload back to assembly (git-fixes). - commit 64aefe3 - KVM: SVM: retrieve VMCB from assembly (git-fixes). - commit fdd0aa2 - blk-mq: Properly init requests from blk_mq_alloc_request_hctx() (git-fixes). - rbd: fix possible memory leak in rbd_sysfs_init() (git-fixes). - blk-wbt: call rq_qos_add() after wb_normal is initialized (git-fixes). - block: blk_queue_enter() / __bio_queue_enter() must return - EAGAIN for nowait (git-fixes). - blk-mq: fix io hung due to missing commit_rqs (git-fixes). - block/rnbd-srv: Set keep_id to true after mutex_trylock (git-fixes). - blktrace: Trace remapped requests correctly (git-fixes). - blk-mq: don't create hctx debugfs dir until q-&gt;debugfs_dir is created (git-fixes). - block: add bio_start_io_acct_time() to control start_time (git-fixes). - blk-cgroup: fix missing put device in error path from blkg_conf_pref() (git-fixes). - commit 58eed28 - nbd: Fix incorrect error handle when first_minor is illegal in nbd_dev_add (git-fixes). - Refresh for the above change, patches.suse/0002-nbd-fix-possible-overflow-on-first_minor-in-nbd_dev_.patch. - commit 8281951 - KVM: SVM: adjust register allocation for __svm_vcpu_run() (git-fixes). - commit 7b25718 - KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm (git-fixes). - commit 7867341 - KVM: x86: use a separate asm-offsets.c file (git-fixes). - commit 0602ab1 - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (git-fixes). - commit 499c3ca - drm/amdkfd: Migrate in CPU page fault use current mm (git-fixes). - commit f476661 - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (git-fixes). - pinctrl: rockchip: list all pins in a possible mux route for PX30 (git-fixes). - platform/surface: aggregator: Do not check for repeated unsequenced packets (git-fixes). - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (git-fixes). - arm64: efi: Fix handling of misaligned runtime regions and drop warning (git-fixes). - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (git-fixes). - nilfs2: fix use-after-free bug of ns_writer on remount (git-fixes). - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (git-fixes). - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (git-fixes). - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (git-fixes). - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (git-fixes). - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (git-fixes). - ALSA: hda: fix potential memleak in 'add_widget_node' (git-fixes). - ALSA: hda/realtek: Add Positivo C6300 model quirk (git-fixes). - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (git-fixes). - ALSA: usb-audio: Add quirk entry for M-Audio Micro (git-fixes). - ALSA: hda/hdmi - enable runtime pm for more AMD display audio (git-fixes). - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (git-fixes). - drm/amdgpu: disable BACO on special BEIGE_GOBY card (git-fixes). - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (git-fixes). - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (git-fixes). - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (git-fixes). - thunderbolt: Add DP OUT resource when DP tunnel is discovered (git-fixes). - drm/amdkfd: handle CPU fault on COW mapping (git-fixes). - drm/amdkfd: avoid recursive lock in migrations back to RAM (git-fixes). - commit 438c140 - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (git-fixes). - commit 89491ed - KVM: x86: Report error when setting CPUID if Hyper-V allocation fails (git-fixes). - commit 335e5aa - virtio-blk: Use blk_validate_block_size() to validate block size (git-fixes). - block: drop unused includes in &lt;linux/genhd.h&gt; (git-fixes). - commit a549255 - blacklist.conf: add commits suggested by git-fixes which won't be backported - commit d1fe12d - KVM: SVM: Disable SEV-ES support if MMIO caching is disable (git-fixes). - commit d6a15a7 - KVM: x86/mmu: fix memoryleak in kvm_mmu_vendor_module_init() (git-fixes). - commit ce66979 - KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (git-fixes). - commit 3387324 - KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (git-fixes). - commit 1b36b28 - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (git-fixes). - commit 3ada3ae - tcp: Fix data races around icsk-&gt;icsk_af_ops (CVE-2022-3566 bsc#1204405). - commit f7cc985 - ipv6: Fix data races around sk-&gt;sk_prot (CVE-2022-3567 bsc#1204414). - ipv6: annotate some data-races around sk-&gt;sk_prot (CVE-2022-3567 bsc#1204414). - commit 654a4f7 - KVM: nVMX: Rename handle_vm{on,off}() to handle_vmx{on,off}() (git-fixes). - commit 7218ba7 - KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (git-fixes). - commit b0f3ab9 - KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() (git-fixes). - commit 81fd9e6 - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (git-fixes). - commit 1a1eab3 - KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported (git-fixes). - commit e7e1382 - KVM: SEV: Mark nested locking of vcpu-&gt;lock (git-fixes). - commit 5f6bf6f - KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id (git-fixes). - commit e3ae104 - KVM: x86: avoid loading a vCPU after .vm_destroy was called (git-fixes). - commit 29af845 - KVM: Move wiping of the kvm-&gt;vcpus array to common code (git-fixes). - commit 9720dc5 - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (bsc#1205427 LTC#200502). - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (bsc#1205427 LTC#200502). - s390/uaccess: add missing EX_TABLE entries to __clear_user(), copy_in_user_mvcos(), copy_in_user_mvc(), clear_user_xc() and __strnlen_user() (bsc#1205428 LTC#200501). - commit ad7cfae - nilfs2: fix deadlock in nilfs_count_free_blocks() (git-fixes). - dmaengine: at_hdmac: Check return code of dma_async_device_register (git-fixes). - dmaengine: at_hdmac: Fix impossible condition (git-fixes). - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (git-fixes). - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (git-fixes). - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (git-fixes). - spi: stm32: Print summary 'callbacks suppressed' message (git-fixes). - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (git-fixes). - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (git-fixes). - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (git-fixes). - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (git-fixes). - commit f7fc242 - dmaengine: at_hdmac: Fix concurrency over the active list (git-fixes). - dmaengine: at_hdmac: Free the memset buf without holding the chan lock (git-fixes). - dmaengine: at_hdmac: Fix concurrency over descriptor (git-fixes). - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (git-fixes). - dmaengine: at_hdmac: Protect atchan-&gt;status with the channel lock (git-fixes). - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (git-fixes). - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (git-fixes). - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (git-fixes). - dmaengine: at_hdmac: Don't start transactions at tx_submit level (git-fixes). - dmaengine: at_hdmac: Fix at_lli struct definition (git-fixes). - commit 718fc6d - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (git-fixes). - commit d582f6e - ata: libata-transport: fix error handling in ata_tdev_add() (git-fixes). - ata: libata-transport: fix error handling in ata_tlink_add() (git-fixes). - ata: libata-transport: fix error handling in ata_tport_add() (git-fixes). - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (git-fixes). - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (git-fixes). - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (git-fixes). - dmaengine: pxa_dma: use platform_get_irq_optional (git-fixes). - commit 3e58402 - x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473). - commit d022167 - KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses (git-fixes). - commit af8969b - KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits (git-fixes). - commit 4c10c2f - x86/futex: Remove .fixup usage (git-fixes). - commit 687839d - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1205100). - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (bsc#1205100). - commit ca2ce49 - x86/extable: Extend extable functionality (git-fixes). - commit 28f726d - x86/microcode/AMD: Apply the patch early on every logical thread (bsc#1205264). - commit 6805cb3 - x86/uaccess: Implement macros for CMPXCHG on user addresses (git-fixes). - commit 680ab7c - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug (git-fixes). - Refresh config. - commit 7888244 - KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (git-fixes). - commit e13feb1 - kABI: Fix kABI after &quot;/KVM: x86/pmu: Use different raw event masks for AMD and Intel&quot;/ (git-fixes). - commit d086901 - KVM: x86/pmu: Use different raw event masks for AMD and Intel (git-fixes). - commit fd5bd7c - xen/gntdev: Accommodate VMA splitting (git-fixes). - commit 0745691 - KVM: x86/mmu: WARN if old _or_ new SPTE is REMOVED in non-atomic path (git-fixes). - commit bc980a8 - KVM: x86/mmu: Fix wrong/misleading comments in TDP MMU fast zap (git-fixes). - commit d3e6160 - blacklist.conf: add fcb732d8f8cf (&quot;/KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU&quot;/) - commit d42ecb5 - blacklist.conf: add 55749769fe60 (&quot;/KVM: x86: Fix wall clock writes in Xen shared_info not to mark page dirty&quot;/) - commit 08e6ef4 - KVM: x86: Mask off reserved bits in CPUID.80000001H (git-fixes). - commit a7fc31c - KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes). - commit f0c4a2c - KVM: x86: emulator: update the emulation mode after rsm (git-fixes). - commit debb42a - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (git-fixes). - commit a9da797 - KVM: x86: emulator: em_sysexit should update ctxt-&gt;mode (git-fixes). - commit e252f98 - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (git-fixes). - commit f452678 - KVM: x86: Mask off reserved bits in CPUID.8000001AH (git-fixes). - commit c7494f8 - KVM: x86: Mask off reserved bits in CPUID.80000008H (git-fixes). - commit b042017 - KVM: x86: Mask off reserved bits in CPUID.80000006H (git-fixes). - commit ce5ff67 - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (git-fixes). - commit e0caade - Update patches.suse/kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch Patch (44b3834b2eed5 &quot;/arm64: errata: Remove AES hwcap for COMPAT tasks&quot;/) added new workaround identifier. Remove one placeholder to keep kABI intact. - commit e23b992 - arm64: errata: Remove AES hwcap for COMPAT tasks (git-fixes) Enable CONFIG_ARM64_ERRATUM_1742098 in arm64/default - commit fbe1536 - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (git-fixes) - commit c70ddd5 - arm64: fix rodata=full again (git-fixes) - commit 62260a8 - kabi: sk_buff.scm_io_uring (bsc#1204228 CVE-2022-2602). - commit 9a9bd27 - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (git-fixes). - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (git-fixes). - scsi: qedf: Populate sysfs attributes for vport (git-fixes). - scsi: mpt3sas: Fix return value check of dma_get_required_mask() (git-fixes). - commit 71fe2f3 - intel_idle: make SPR C1 and C1E be independent (jsc#PED-1936). - commit 6f9a5d3 - cpuidle: intel_idle: Drop redundant backslash at line end (jsc#PED-1936). - commit 593da52 - cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (jsc#PED-849). - commit 4bf905f - cpufreq: intel_pstate: Handle no_turbo in frequency invariance (jsc#PED-849). - commit 41e314e - intel_idle: Fix SPR C6 optimization (jsc#PED-824 jsc#PED-1936). - commit 29ea7f2 - intel_idle: Fix the 'preferred_cstates' module parameter (jsc#PED-824 jsc#PED-1936). - commit 07146fb - intel_idle: Add AlderLake support (jsc#PED-824). - commit 6094f58 - panic, kexec: make __crash_kexec() NMI safe (git-fixes). - kexec: turn all kexec_mutex acquisitions into trylocks (git-fixes). - commit 1a14cb1 - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled (bsc#1205007). - commit a0ddd6a - io_uring/af_unix: defer registered files gc to io_uring release (bsc#1204228 CVE-2022-2602). - commit 52299ff - fuse: add file_modified() to fallocate (bsc#1205332). - fuse: fix readdir cache race (bsc#1205331). - commit 75f741e - net: phy: mscc: macsec: clear encryption keys when freeing a flow (git-fixes). - macsec: clear encryption keys from the stack after setting up offload (git-fixes). - macsec: fix detection of RXSCs when toggling offloading (git-fixes). - macsec: fix secy-&gt;n_rx_sc accounting (git-fixes). - macsec: delete new rxsc when offload fails (git-fixes). - wifi: cfg80211: fix memory leak in query_regdb_file() (git-fixes). - wifi: cfg80211: silence a sparse RCU warning (git-fixes). - soundwire: qcom: check for outanding writes before doing a read (git-fixes). - soundwire: qcom: reinit broadcast completion (git-fixes). - phy: ralink: mt7621-pci: add sentinel to quirks table (git-fixes). - phy: stm32: fix an error code in probe (git-fixes). - mtd: parsers: bcm47xxpart: Fix halfblock reads (git-fixes). - media: v4l: subdev: Fail graciously when getting try data for NULL state (git-fixes). - media: meson: vdec: fix possible refcount leak in vdec_probe() (git-fixes). - media: dvb-frontends/drxk: initialize err to 0 (git-fixes). - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes). - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (git-fixes). - media: rkisp1: Zero v4l2_subdev_format fields in when validating links (git-fixes). - media: rkisp1: Use correct macro for gradient registers (git-fixes). - media: rkisp1: Initialize color space on resizer sink and source pads (git-fixes). - media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (git-fixes). - mtd: parsers: bcm47xxpart: print correct offset on read error (git-fixes). - video/fbdev/stifb: Implement the stifb_fillrect() function (git-fixes). - commit 5883e57 - can: j1939: j1939_send_one(): fix missing CAN header initialization (git-fixes). - can: af_can: fix NULL pointer dereference in can_rx_register() (git-fixes). - hamradio: fix issue of dev reference count leakage in bpq_device_event() (git-fixes). - efi: random: Use 'ACPI reclaim' memory for random seed (git-fixes). - efi: random: reduce seed size to 32 bytes (git-fixes). - drm/i915/sdvo: Setup DDC fully before output init (git-fixes). - drm/i915/sdvo: Filter out invalid outputs more sensibly (git-fixes). - drm/rockchip: dsi: Force synchronous probe (git-fixes). - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (git-fixes). - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (git-fixes). - drm/msm/hdmi: fix IRQ lifetime (git-fixes). - i2c: xiic: Add platform module alias (git-fixes). - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (git-fixes). - HID: saitek: add madcatz variant of MMO7 mouse device ID (git-fixes). - HID: playstation: add initial DualSense Edge controller support (git-fixes). - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (git-fixes). - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (git-fixes). - commit 5a3b429 - x86/fpu: Drop fpregs lock before inheriting FPU permissions (bnc#1205282). - commit bbde2ef - blacklist.conf: cleanup designed to break kABI - commit e1ca2ce - blacklist.conf: cleanup designed to break kABI - commit 3471afe - ipv6: ping: fix wrong checksum for large frames (bsc#1203183). - commit f29a164 - io_uring: disable polling signalfd pollfree files (CVE-2022-3176 bsc#1203391). - commit ff11e05 - blacklist.conf: kABI - commit 52ff77d - blacklist.conf: prerequisites would break kABI - commit 3f3b1f5 - blacklist.conf: this patch would need an inordinary number of prerequisites for a race in a corner case - commit 4987ef8 - blacklist.conf: kABI - commit 29e4b4e - Update patch metadata for media fix (CVE-2022-3903 bsc#1205220) - commit 899a453 - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (git-fixes). - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (git-fixes). - commit 9091aa0 - Update patches.suse/scsi-ibmvfc-Avoid-path-failures-during-live-migratio.patch (bsc#1065729 bsc#1204810 ltc#200162). - commit ba4e679 - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (bsc#1204780, CVE-2022-3707) - commit 3d29636 - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (bsc#1156395). - commit 32de176 - Refresh patches.suse/scsi-ibmvfc-Do-not-wait-for-initial-device-scan.patch. Refresh to upstream version of patch. - commit aba4ad9 - Refresh sorted patches. - commit 3d3be93 - scsi: ibmvfc: Avoid path failures during live migration (bsc#1065729). - commit 2f0fa7f - Update patches.suse/arm64-Add-AMPERE1-to-the-Spectre-BHB-affected-list.patch (git-fixes, bsc#1205153). Add reference to bsc#1205153. - commit 08070be - arm64: Add AMPERE1 to the Spectre-BHB affected list (git-fixes). - arm64: errata: Add Cortex-A55 to the repeat tlbi list (git-fixes). Enable CONFIG_ARM64_ERRATUM_2441007, too - commit 57ef351 - ALSA: usb-audio: Remove redundant workaround for Roland quirk (bsc#1205111). - ALSA: usb-audio: Yet more regression for for the delayed card registration (bsc#1205111). - commit fdb6d05 - rpm/check-for-config-changes: add TOOLCHAIN_HAS_* to IGNORED_CONFIGS_RE This new form was added in commit b8c86872d1dc (riscv: fix detection of toolchain Zicbom support). - commit e9f2ba6 - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (git-fixes). - commit 4b18e0d - io-wq: don't retry task_work creation failure on fatal conditions (bnc#1205113). - io-wq: Remove duplicate code in io_workqueue_create() (bnc#1205113). - io-wq: fix silly logic error in io_task_work_match() (bnc#1205113). - io-wq: fix cancellation on create-worker failure (bnc#1205113). - commit f9f6f38 - Add suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149) - commit 888e01e - cifs: fix use-after-free on the link name (bsc#1193629). - commit c8e18d6 - cifs: avoid unnecessary iteration of tcp sessions (bsc#1193629). - commit 3b19f83 - cifs: always iterate smb sessions using primary channel (bsc#1193629). - commit 5cac47b - cifs: fix use-after-free caused by invalid pointer `hostname` (bsc#1193629). - commit 6bd980d - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1193629). - commit 4170ae6 - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1193629). - commit b7ff361 - Move upstreamed tracing patch into sorted section - commit c9209ac - hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850). - commit e9c6d7c - arm64: entry: avoid kprobe recursion (git-fixes). - Documentation: devres: add missing I2C helper (git-fixes). - i2c: piix4: Fix adapter not be removed in piix4_remove() (git-fixes). - efi/tpm: Pass correct address to memblock_reserve (git-fixes). - arm64: dts: juno: Add thermal critical trip points (git-fixes). - firmware: arm_scmi: Make Rx chan_setup fail on memory errors (git-fixes). - firmware: arm_scmi: Suppress the driver's bind attributes (git-fixes). - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (git-fixes). - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (git-fixes). - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (git-fixes). - dt-bindings: power: gpcv2: add power-domains property (git-fixes). - arm64: dts: imx8: correct clock order (git-fixes). - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (git-fixes). - commit 9fbcbe8 - xfs: convert XLOG_FORCED_SHUTDOWN() to xlog_is_shutdown() (git-fixes). - commit ab97572 - xfs: fix xfs_ifree() error handling to not leak perag ref (git-fixes). - commit 2b17a84 - cifs: update internal module number (bsc#1193629). - commit 4202154 - cifs: fix memory leaks in session setup (bsc#1193629). - commit 5c729d0 - cifs: drop the lease for cached directories on rmdir or rename (bsc#1193629). - commit 46e0f22 - smb3: interface count displayed incorrectly (bsc#1193629). - commit e073a89 - cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1193629). - commit 7afbdb6 - cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (bsc#1193629). - commit 328e60a - cifs: use LIST_HEAD() and list_move() to simplify code (bsc#1193629). - commit e5c0c94 - cifs: Fix xid leak in cifs_get_file_info_unix() (bsc#1193629). - commit a50e886 - cifs: Fix xid leak in cifs_ses_add_channel() (bsc#1193629). - commit 45683eb - cifs: Fix xid leak in cifs_flock() (bsc#1193629). - commit d234b14 - cifs: Fix xid leak in cifs_copy_file_range() (bsc#1193629). - commit f56cd1f - cifs: Fix xid leak in cifs_create() (bsc#1193629). - commit a1d5012 - smb3: improve SMB3 change notification support (bsc#1193629). - commit 8a4313f - cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1193629). - commit 181d702 - cifs: lease key is uninitialized in smb1 paths (bsc#1193629). - commit 395fb1f - smb3: must initialize two ACL struct fields to zero (bsc#1193629). - commit 2dfd980 - cifs: fix double-fault crash during ntlmssp (bsc#1193629). - commit 958d087 - cifs: fix static checker warning (bsc#1193629). - commit 6695ea2 - cifs: use ALIGN() and round_up() macros (bsc#1193629). - commit b4d4efd - cifs: find and use the dentry for cached non-root directories also (bsc#1193629). - commit 14482fe - cifs: enable caching of directories for which a lease is held (bsc#1193629). - commit cc4f4c4 - cifs: prevent copying past input buffer boundaries (bsc#1193629). - commit 9130844 - cifs: fix uninitialised var in smb2_compound_op() (bsc#1193629). - commit bdc0943 - cifs: improve symlink handling for smb2+ (bsc#1193629). - commit 0b6be9d - smb3: clarify multichannel warning (bsc#1193629). - commit 96b1224 - cifs: fix skipping to incorrect offset in emit_cached_dirents (bsc#1193629). - commit 6750b0a - smb3: fix oops in calculating shash_setkey (bsc#1193629). - commit fdb4064 - cifs: secmech: use shash_desc directly, remove sdesc (bsc#1193629). - commit d652300 - smb3: rename encryption/decryption TFMs (bsc#1193629). - commit 074ff14 - cifs: replace kfree() with kfree_sensitive() for sensitive data (bsc#1193629). - commit a9c83e0 - cifs: remove initialization value (bsc#1193629). - commit 650b157 - cifs: Replace a couple of one-element arrays with flexible-array members (bsc#1193629). - commit 2e6a4d1 - smb3: do not log confusing message when server returns no network interfaces (bsc#1193629). - commit fe343ed - cifs: store a pointer to a fid in the cfid structure instead of the struct (bsc#1193629). - commit 4bc719f - cifs: improve handlecaching (bsc#1193629). - commit 460040b - cifs: Make tcon contain a wrapper structure cached_fids instead of cached_fid (bsc#1193629). - commit 999f1a7 - smb3: add dynamic trace points for tree disconnect (bsc#1193629). - commit c71b282 - Fix formatting of client smbdirect RDMA logging (bsc#1193629). - commit bc2ae55 - Handle variable number of SGEs in client smbdirect send (bsc#1193629). - commit af0f632 - Reduce client smbdirect max receive segment size (bsc#1193629). - commit e36b32c - Decrease the number of SMB3 smbdirect client SGEs (bsc#1193629). - commit 1c625b9 - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (bsc#1193629). - commit 174687c - cifs: destage dirty pages before re-reading them for cache=none (bsc#1193629). - commit 9eab309 - cifs: return correct error in -&gt;calc_signature() (bsc#1193629). - commit 0ace108 - cifs: misc: fix spelling typo in comment (bsc#1193629). - commit 0177a68 - cifs: update internal module number (bsc#1193629). - commit a83e618 - cifs: add missing spinlock around tcon refcount (bsc#1193629). - commit a915086 - cifs: always initialize struct msghdr smb_msg completely (bsc#1193629). - commit 7ba2dbe - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (bsc#1193629). - commit cc67d16 - cifs: revalidate mapping when doing direct writes (bsc#1193629). - commit 3e6da03 - cifs: fix small mempool leak in SMB2_negotiate() (bsc#1193629). - commit 9ad1214 - smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait (bsc#1193629). - commit 569211d - smb3: fix temporary data corruption in insert range (bsc#1193629). - commit 4153b9f - smb3: fix temporary data corruption in collapse range (bsc#1193629). - commit e11095d - smb3: Move the flush out of smb2_copychunk_range() into its callers (bsc#1193629). - commit 7cc3491 - cifs: Add helper function to check smb1+ server (bsc#1193629). - commit 8d3cf57 - cifs: Use help macro to get the mid header size (bsc#1193629). - commit 56cfb79 - cifs: Use help macro to get the header preamble size (bsc#1193629). - commit a32d0c7 - cifs: skip extra NULL byte in filenames (bsc#1193629). - commit 3c2966f - smb3: missing inode locks in punch hole (bsc#1193629). - commit d5ef2ce - smb3: missing inode locks in zero range (bsc#1193629). - commit 67739d5 - cifs: move from strlcpy with unused retval to strscpy (bsc#1193629). - commit 1545859 - cifs: Fix memory leak on the deferred close (bsc#1193629). - commit 0e66dd6 - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (bsc#1193629). - commit e09b402 - cifs: remove unused server parameter from calc_smb_size() (bsc#1193629). - commit 3f30130 - cifs: Do not access tcon-&gt;cfids-&gt;cfid directly from is_path_accessible (bsc#1193629). - commit 7188f4f - cifs: Add constructor/destructors for tcon-&gt;cfid (bsc#1193629). - commit 7eb31f4 - SMB3: fix lease break timeout when multiple deferred close handles for the same file (bsc#1193629). - commit 7267460 - smb3: allow deferred close timeout to be configurable (bsc#1193629). - commit 19f7caa - cifs: Do not use tcon-&gt;cfid directly, use the cfid we get from open_cached_dir (bsc#1193629). - commit 25de0c1 - cifs: Move cached-dir functions into a separate file (bsc#1193629). - commit fc0e55e - cifs: fix lock length calculation (bsc#1193629). - commit 2661e11 - cifs: update internal module number (bsc#1193629). - commit 53f5daf - cifs: alloc_mid function should be marked as static (bsc#1193629). - commit f066ea5 - cifs: remove &quot;/cifs_&quot;/ prefix from init/destroy mids functions (bsc#1193629). - commit 21e261c - cifs: remove useless DeleteMidQEntry() (bsc#1193629). - commit b684635 - cifs: when insecure legacy is disabled shrink amount of SMB1 code (bsc#1193629). - commit 96f98e3 - cifs: fix wrong unlock before return from cifs_tree_connect() (bsc#1193629). - commit ca24a6e - cifs: avoid use of global locks for high contention data (bsc#1193629). - commit 003b496 - cifs: remove remaining build warnings (bsc#1193629). - commit 2a6d64f - cifs: list_for_each() -&gt; list_for_each_entry() (bsc#1193629). - commit 98f1884 - smb2: small refactor in smb2_check_message() (bsc#1193629). - commit 2913774 - cifs: remove minor build warning (bsc#1193629). - commit 9dd2f9e - cifs: remove some camelCase and also some static build warnings (bsc#1193629). - commit 7a903b5 - cifs: remove unnecessary (void*) conversions (bsc#1193629). - commit 352182a - cifs: remove unnecessary type castings (bsc#1193629). - commit e2ea7fd - cifs: remove redundant initialization to variable mnt_sign_enabled (bsc#1193629). - commit 8c39800 - smb3: check xattr value length earlier (bsc#1193629). - commit 87cd516 - smb3: workaround negprot bug in some Samba servers (bsc#1193629). - commit 031af61 - cifs: remove unnecessary locking of chan_lock while freeing session (bsc#1193629). - commit 0303046 - cifs: fix race condition with delayed threads (bsc#1193629). - commit 491d550 - cifs: update cifs_ses::ip_addr after failover (bsc#1193629). - commit 9ed4aa9 - cifs: avoid deadlocks while updating iface (bsc#1193629). - commit 3a5c612 - cifs: periodically query network interfaces from server (bsc#1193629). - commit dd3e063 - cifs: during reconnect, update interface if necessary (bsc#1193629). - commit 8dea5e1 - cifs: change iface_list from array to sorted linked list (bsc#1193629). - commit 1b05ccf - smb3: use netname when available on secondary channels (bsc#1193629). - commit 6d17daa - smb3: fix empty netname context on secondary channels (bsc#1193629). - commit 51fad96 - cifs: when a channel is not found for server, log its connection id (bsc#1193629). - commit 1b306b2 - smb3: add trace point for SMB2_set_eof (bsc#1193629). - commit c6da1d3 - cifs: populate empty hostnames for extra channels (bsc#1193629). - commit f2f92b2 - cifs: return errors during session setup during reconnects (bsc#1193629). - commit d557671 - smb3: remove unneeded null check in cifs_readdir (bsc#1193629). - commit 7eaa3dc - cifs: cache the dirents for entries in a cached directory (bsc#1193629). - commit 0ddb648 - cifs: truncate the inode and mapping when we simulate fcollapse (bsc#1193629). - commit 3b07034 - blacklist.conf: Add reverted patch d11219ad53dc amdgpu: disable powerpc support for the newer display engine c653c591789b drm/amdgpu: Re-enable DCN for 64-bit powerpc - commit 15ec992 - xfs: fix perag reference leak on iteration race with growfs (git-fixes). - commit fc22ca3 - SCSI: scsi_probe_lun: retry INQUIRY after timeout (bsc#1189297). - commit 623bb84 Package libksba was updated: - Security fix: [bsc#1206579, CVE-2022-47629] * Integer overflow in the CRL signature parser. * Add libksba-CVE-2022-47629.patch Package libtirpc was updated: - consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding to a random port (bsc#1199467) - add binddynport-honor-ip_local_reserved_ports.patch Package libxml2 was updated: - Add W3C conformance tests to the testsuite (bsc#1204585): * Added file xmlts20080827.tar.gz Package shadow was updated: - Added patch: * shadow-4.8.1-AUDIT_NO_ID.patch + fix bsc#1205502: useradd audit event user id field cannot be interpreted Package sqlite3 was updated: - bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch: relying on --safe for execution of an untrusted CLI script Package suse-module-tools was updated: - Update to version 15.4.15: Backport bug fixes from factory * driver-check.sh, unblacklist: convert egrep to grep -E (bsc#1203092) * kernel-scriptlets: don't pass flags to weak-modules2 (bsc#1195391) * driver-check.sh: avoid false positive error messages (boo#1200107) - Update to version 15.4.14: * 80-hotplug-cpu-mem.rules: use CONST{arch} (bsc#1204423) - Update to version 15.4.13: * 80-hotplug-cpu-mem.rules: restrict cpu rule to x86_64 (bsc#1204423) Package systemd was updated: - Fix systemd-coredump to not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415) Add 5000-coredump-Fix-format-string-type-mismatch.patch Add 5001-coredump-drop-an-unused-variable.patch Add 5002-coredump-adjust-whitespace.patch Add 5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch - Import commit bcf040075f682f67370ddf7ab93d7a0d8b9cd9cc ab0f962e4c core/device: Log on every event received from udev 2dcb7c77fe udev/net_id: show the correct identifier in the debug output of dev_pci_onboard() 5b824103e0 udev/net_id: add debug logging for construction of device names cb6925410b udev: add one more assertion 82e343153a udev: drop assertion which is always false cef726986b udev: support by-path devlink for multipath nvme block devices (bsc#1200723) 00b34f08d9 tests: minor simplification in test-execute e5b4571c20 tests: make test-execute pass on openSUSE - Drop the following patches since they have been merged in 'SUSE/v249' branch: 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch Package timezone was updated: - timezone update 2022g (bsc#1177460): * In the Mexican state of Chihuahua, the border strip near the US will change to agree with nearby US locations on 2022-11-30. The strip's western part, represented by Ciudad Juárez, switches from -06 all year to -07/-06 with US DST rules, like El Paso, TX. The eastern part, represented by Ojinaga, will observe US DST next year, like Presidio, TX. A new Zone America/Ciudad_Juarez splits from America/Ojinaga. * Much of Greenland, represented by America/Nuuk, stops observing winter time after March 2023, so its daylight saving time becomes standard time. * Changes for pre-1996 northern Canada * Update to past DST transition in Colombia (1993), Singapore (1981) * timegm is now supported by default Package vim was updated: - Updated to version 9.0 with patch level 1040, fixes the following security problems * Fixing bsc#1206028 VUL-0: CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 * Fixing bsc#1206071 VUL-0: CVE-2022-3520: vim: Heap-based Buffer Overflow * Fixing bsc#1206072 VUL-0: CVE-2022-3591: vim: Use After Free * Fixing bsc#1206075 VUL-0: CVE-2022-4292: vim: Use After Free in GitHub repository vim/vim prior to 9.0.0882. * Fixing bsc#1206077 VUL-0: CVE-2022-4293: vim: Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804. * Fixing bsc#1205797 VUL-0: CVE-2022-4141: vim: heap-buffer-overflow in alloc.c 246:11 * Fixing bsc#1204779 VUL-0: CVE-2022-3705: vim: use after free in function qf_update_buffer of the file quickfix.c - for the complete list of changes see https://github.com/vim/vim/compare/v9.0.814...v9.0.1040 Package xfsprogs was updated: - mkfs: don't trample the gid set in the protofile (bsc#1205266) - Add xfsprogs-mkfs-don-t-trample-the-gid-set-in-the-protofile.patch - mkfs: prevent corruption of passed-in suboption string values (bsc#1205377) - Add xfsprogs-mkfs-prevent-corruption-of-passed-in-suboption-strin.patch - mkfs: terminate getsubopt arrays properly (bsc#1205284) - Add xfsprogs-mkfs-terminate-getsubopt-arrays-properly.patch - xfs_repair: ignore empty xattr leaf blocks (bsc#1205272) - Add xfsprogs-xfs_repair-ignore-empty-xattr-leaf-blocks.patch The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://publiccloudimagechangeinfo.suse.com/google/sles-15-sp4-chost-byos-v20230111-arm64/ Public Cloud Image Info https://www.suse.com/support/security/rating/ SUSE Security Ratings Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 ca-certificates-mozilla-2.6-150200.27.1 catatonit-0.1.7-150300.10.3.1 curl-7.79.1-150400.5.12.1 kdump-1.0.2+git18.g615d6ab-150400.3.8.1 kernel-default-5.14.21-150400.24.38.1 libcurl4-7.79.1-150400.5.12.1 libglib-2_0-0-2.70.5-150400.3.3.1 libksba8-1.3.5-150000.4.6.1 libsqlite3-0-3.39.3-150000.3.20.1 libsystemd0-249.12-150400.8.16.1 libtirpc-netconfig-1.2.6-150300.3.17.1 libtirpc3-1.2.6-150300.3.17.1 libudev1-249.12-150400.8.16.1 libxml2-2-2.9.14-150400.5.13.1 login_defs-4.8.1-150400.10.3.1 shadow-4.8.1-150400.10.3.1 suse-module-tools-15.4.15-150400.3.5.1 systemd-249.12-150400.8.16.1 systemd-sysvinit-249.12-150400.8.16.1 timezone-2022g-150000.75.18.1 udev-249.12-150400.8.16.1 vim-9.0.1040-150000.5.31.1 vim-data-common-9.0.1040-150000.5.31.1 xfsprogs-5.13.0-150400.3.3.1 ca-certificates-mozilla-2.6-150200.27.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 catatonit-0.1.7-150300.10.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 curl-7.79.1-150400.5.12.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 kdump-1.0.2+git18.g615d6ab-150400.3.8.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 kernel-default-5.14.21-150400.24.38.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libcurl4-7.79.1-150400.5.12.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libglib-2_0-0-2.70.5-150400.3.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libksba8-1.3.5-150000.4.6.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libsqlite3-0-3.39.3-150000.3.20.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libsystemd0-249.12-150400.8.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libtirpc-netconfig-1.2.6-150300.3.17.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libtirpc3-1.2.6-150300.3.17.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libudev1-249.12-150400.8.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 libxml2-2-2.9.14-150400.5.13.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 login_defs-4.8.1-150400.10.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 shadow-4.8.1-150400.10.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 suse-module-tools-15.4.15-150400.3.5.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 systemd-249.12-150400.8.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 systemd-sysvinit-249.12-150400.8.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 timezone-2022g-150000.75.18.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 udev-249.12-150400.8.16.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 vim-9.0.1040-150000.5.31.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 vim-data-common-9.0.1040-150000.5.31.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 xfsprogs-5.13.0-150400.3.3.1 as a component of Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2022-2602 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 important There exists a use-after-free in io_uring in the Linux kernel. Signalfd_poll() and binder_poll() use a waitqueue whose lifetime is the current task. It will send a POLLFREE notification to all waiters before the queue is freed. Unfortunately, the io_uring poll doesn't handle POLLFREE. This allows a use-after-free to occur if a signalfd or binder fd is polled with io_uring poll, and the waitqueue gets freed. We recommend upgrading past commit fc78b2fc21f10c4c9c4d5d659a685710ffa63659 CVE-2022-3176 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 important A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-3424 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0742. CVE-2022-3491 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 low Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765. CVE-2022-3520 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 important A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability. CVE-2022-3566 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability. CVE-2022-3567 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate Use After Free in GitHub repository vim/vim prior to 9.0.0789. CVE-2022-3591 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 important A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability. CVE-2022-3635 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 important Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior. CVE-2022-3643 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upgrading to version 9.0.0805 is able to address this issue. The name of the patch is d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-212324. CVE-2022-3705 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 moderate A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This issue could allow a local user to crash the system. CVE-2022-3707 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system. CVE-2022-3903 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges. CVE-2022-4095 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 important A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service. CVE-2022-4129 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system. CVE-2022-4139 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. CVE-2022-4141 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 important roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress. CVE-2022-41850 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 low A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information. CVE-2022-41858 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329). CVE-2022-42328 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url CVE-2022-42896 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate Use After Free in GitHub repository vim/vim prior to 9.0.0882. CVE-2022-4292 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 important Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804. CVE-2022-4293 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-9.0.1040-150000.5.31.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:vim-data-common-9.0.1040-150000.5.31.1 moderate A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded. CVE-2022-43551 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:curl-7.79.1-150400.5.12.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:libcurl4-7.79.1-150400.5.12.1 important A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path. CVE-2022-43552 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:curl-7.79.1-150400.5.12.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:libcurl4-7.79.1-150400.5.12.1 moderate A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-4378 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 important The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-43945 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 important A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting. CVE-2022-4415 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:libsystemd0-249.12-150400.8.16.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:libudev1-249.12-150400.8.16.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:systemd-249.12-150400.8.16.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:systemd-sysvinit-249.12-150400.8.16.1 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:udev-249.12-150400.8.16.1 moderate A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled. CVE-2022-45869 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device. CVE-2022-45888 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 low An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets. CVE-2022-45934 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:kernel-default-5.14.21-150400.24.38.1 moderate SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. CVE-2022-46908 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:libsqlite3-0-3.39.3-150000.3.20.1 important Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser. CVE-2022-47629 Public Cloud Image google/sles-15-sp4-chost-byos-v20230111-arm64:libksba8-1.3.5-150000.4.6.1 important