The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec . - CVE-2022-3635: Fixed a use-after-free in the tst_timer of the file drivers/atm/idt77252.c . - CVE-2022-41850: Fixed a race condition in roccat_report_event in drivers/hid/hid-roccat.c . - CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c . - CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker in wifi/brcmfmac . - CVE-2022-3567: Fixed a to race condition in inet6_stream_ops/inet6_dgram_ops . - CVE-2022-41858: Fixed a denial of service in sl_tx_timeout in drivers/net/slip . - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation . - CVE-2022-4095: Fixed a use-after-free in rtl8712 driver . - CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver . - CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring . - CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory . - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol . A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. - CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c"s l2cap_parse_conf_req which can be used to leak kernel pointers remotely . - CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c"s l2cap_connect and l2cap_le_connect_req which may have allowed code execution and leaking kernel memory remotely via Bluetooth . - CVE-2022-3707: Fixed a double free in the Intel GVT-g graphics driver . The following non-security bugs were fixed: - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK . - ALSA: hda: fix potential memleak in "add_widget_node" . - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 . - ALSA: usb-audio: Add quirk entry for M-Audio Micro . - ALSA: usb-audio: Drop snd_BUG_ON from snd_usbmidi_output_open . - ASoC: codecs: jz4725b: Fix spelling mistake "Sourc" -greater than "Source", "Routee" -greater than "Route" . - ASoC: codecs: jz4725b: add missed Line In power control bit . - ASoC: codecs: jz4725b: fix capture selector naming . - ASoC: codecs: jz4725b: fix reported volume for Master ctl . - ASoC: codecs: jz4725b: use right control for Capture Volume . - ASoC: core: Fix use-after-free in snd_soc_exit . - ASoC: max98373: Add checks for devm_kcalloc . - ASoC: soc-utils: Remove __exit for snd_soc_util_exit . - ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe" . - ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe" . - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK . - ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe" . - Bluetooth: L2CAP: Fix attempting to access uninitialized memory . - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm . - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu . - Do not enable CONFIG_ATARI_PARTITION - Drivers: hv: vmbus: Add /sys/bus/vmbus/hibernation . - Drivers: hv: vmbus: Add VMbus IMC device to unsupported list . - Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening . - Drivers: hv: vmbus: Drop error message when "No request id available" . - Drivers: hv: vmbus: Fix duplicate CPU assignments within a device . - Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero . - Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj . - Drivers: hv: vmbus: Fix potential crash on module unload . - Drivers: hv: vmbus: Introduce vmbus_request_addr_match . - Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid . - Drivers: hv: vmbus: Introduce {lock,unlock}_requestor . - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer . - Drivers: hv: vmbus: Remove unused linux/version.h header . - Drivers: hv: vmbus: Replace smp_store_mb with virt_store_mb . - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work . - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register . - Drivers: hv: vmbus: remove unused function . - HID: saitek: add madcatz variant of MMO7 mouse device ID . - Input: i8042 - fix leaking of platform device on module removal . - Input: iforce - invert valid length check when fetching device IDs . - KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support . - KVM: nVMX: Invalidate all EPTP contexts when emulating INVEPT for L1 . - KVM: nVMX: Validate the EPTP when emulating INVEPT . - KVM: nVMX: clear PIN_BASED_POSTED_INTR from nested pinbased_ctls only when apicv is globally disabled . - KVM: s390: Add a routine for setting userspace CPU state . - KVM: s390: Fix handle_sske page fault handling . - KVM: s390: Simplify SIGP Set Arch handling . - KVM: s390: get rid of register asm usage . - KVM: s390: pv: avoid stalls when making pages secure . - KVM: s390: pv: do not allow userspace to set the clock under PV . - KVM: s390: pv: leak the topmost page table when destroy fails . - KVM: s390: reduce number of IO pins to 1 . - NFC: nci: fix memory leak in nci_rx_data_packet . - NFS: Refactor nfs_instantiate for dentry referencing callers . - NFSv3: use nfs_add_or_obtain to create and reference inodes . - PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv . - PCI: hv: Add validation for untrusted Hyper-V values . - PCI: hv: Drop msi_controller structure . - PCI: hv: Fix a race condition when removing the device . - PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus . - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg . - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit . - PCI: hv: Fix the definition of vector in hv_compose_msi_msg . - PCI: hv: Fix typo . - PCI: hv: Remove bus device removal unused refcount/functions . - PCI: hv: Remove unnecessary use of %hx . - PCI: hv: Support for create interrupt v3 . - PCI: hv: Use PCI_ERROR_RESPONSE to identify config read errors . - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening . - RDMA/core/sa_query: Remove unused argument - RDMA/hns: Fix spelling mistakes of original - RDMA/qedr: Add support for user mode XRC-SRQ"s - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs - RDMA/qedr: Remove unsupported qedr_resize_cq callback - RDMA/rxe: Fix memory leak in error path code - SCSI: scsi_probe_lun: retry INQUIRY after timeout . - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM . - USB: serial: option: add Fibocom FM160 0x0111 composition . - USB: serial: option: add Sierra Wireless EM9191 . - USB: serial: option: add u-blox LARA-L6 modem . - USB: serial: option: add u-blox LARA-R6 00B modem . - USB: serial: option: remove old LARA-R6 PID . - USB: serial: option: remove old LARA-R6 PID. - Xen/gntdev: do not ignore kernel unmapping error . - add another bug reference to some hyperv changes . - arm/xen: Do not probe xenbus as part of an early initcall . - arm64: dts: imx8mm: Fix NAND controller size-cells - arm64: dts: juno: Add thermal critical trip points - ata: libata-transport: fix double ata_host_put in ata_tport_add . - ata: libata-transport: fix error handling in ata_tdev_add . - ata: libata-transport: fix error handling in ata_tlink_add . - ata: libata-transport: fix error handling in ata_tport_add . - ata: pata_legacy: fix pdc20230_set_piomode . - blk-crypto: fix check for too-large dun_bytes . - blk-mq: Properly init requests from blk_mq_alloc_request_hctx . - blk-mq: do not create hctx debugfs dir until q-greater than debugfs_dir is created . - blk-wbt: call rq_qos_add after wb_normal is initialized . - blktrace: Trace remapped requests correctly . - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern . - block: Add a helper to validate the block size . - block: assign bi_bdev for cloned bios in blk_rq_prep_clone . - block: ataflop: fix breakage introduced at blk-mq refactoring . - block: ataflop: more blk-mq refactoring fixes . - block: fix infinite loop for invalid zone append . - block: limit request dispatch loop duration . - block: nbd: add sanity check for first_minor . - block: use "unsigned long" for blk_validate_block_size . - bus: sunxi-rsb: Support atomic transfers . - can: cc770: cc770_isa_probe: add missing free_cc770dev . - can: sja1000_isa: sja1000_isa_probe: add missing free_sja1000dev . - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK . - ceph: allow ceph.dir.rctime xattr to be updatable . - ceph: do not access the kiocb after aio requests . - ceph: fix fscache invalidation . - ceph: lockdep annotations for try_nonblocking_invalidate . - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty . - ceph: request Fw caps before updating the mtime in ceph_write_iter . - cifs: skip extra NULL byte in filenames . - dm era: commit metadata in postsuspend after worker stops . - dm integrity: set journal entry unused when shrinking device . - dm mirror log: clear log bits up to BITS_PER_LONG boundary . - dm mpath: only use ktime_get_ns in historical selector . - dm raid: fix accesses beyond end of raid member array . - dm raid: fix address sanitizer warning in raid_resume . - dm raid: fix address sanitizer warning in raid_status . - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback . - dm verity fec: fix misaligned RS roots IO . - dm writecache: fix writing beyond end of underlying device when shrinking . - dm writecache: return the exact table values that were set . - dm writecache: set a default MAX_WRITEBACK_JOBS . - dm: fix request-based DM to not bounce through indirect dm_submit_bio . - dm: remove special-casing of bio-based immutable singleton target on NVMe . - dm: return early from dm_pr_call if DM device is suspended . - dma-buf: fix racing conflict of dma_heap_add . - dmaengine: at_hdmac: Check return code of dma_async_device_register . - dmaengine: at_hdmac: Do not allow CPU to reorder channel enable . - dmaengine: at_hdmac: Do not start transactions at tx_submit level . - dmaengine: at_hdmac: Fix at_lli struct definition . - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors . - dmaengine: at_hdmac: Fix impossible condition . - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove . - dmaengine: pxa_dma: use platform_get_irq_optional . - drivers/hv: remove obsolete TODO and fix misleading typo in comment . - drivers: hv: Fix EXPORT_SYMBOL and tab spaces issue . - drivers: hv: Fix hyperv_record_panic_msg path on comment . - drivers: hv: Fix missing error code in vmbus_connect . - drivers: hv: vmbus: Fix call msleep using less than 20ms . - drivers: hv: vmbus: Fix checkpatch LINE_SPACING . - drivers: hv: vmbus: Fix checkpatch SPLIT_STRING . - drivers: hv: vmbus: Replace symbolic permissions by octal permissions . - drivers: net: slip: fix NPD bug in sl_tx_timeout . - drm/drv: Fix potential memory leak in drm_dev_init . - drm/i915/dmabuf: fix sg_table handling in map_dma_buf . - drm/i915/sdvo: Filter out invalid outputs more sensibly . - drm/i915/sdvo: Setup DDC fully before output init . - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid . - drm/panel: simple: set bpc field for logic technologies displays . - drm/rockchip: dsi: Force synchronous probe . - drm/vc4: Fix missing platform_unregister_drivers call in vc4_drm_register . - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker . - fbdev: smscufx: Fix several use-after-free bugs . - firmware: arm_scmi: Suppress the driver"s bind attributes . - ftrace: Fix char print issue in print_ip_ins . - ftrace: Fix null pointer dereference in ftrace_add_mod . - ftrace: Fix the possible incorrect kernel message . - ftrace: Fix use-after-free for dynamic ftrace_ops . - ftrace: Optimize the allocation for mcount entries . - ftrace: Properly unset FTRACE_HASH_FL_MOD . - fuse: add file_modified to fallocate . - fuse: fix readdir cache race . - hamradio: fix issue of dev reference count leakage in bpq_device_event . - hv: hyperv.h: Remove unused inline functions . - hv_netvsc: Add a comment clarifying batching logic . - hv_netvsc: Add check for kvmalloc_array . - hv_netvsc: Add error handling while switching data path . - hv_netvsc: Allocate the recv_buf buffers after NVSP_MSG1_TYPE_SEND_RECV_BUF . - hv_netvsc: Check VF datapath when sending traffic to VF . - hv_netvsc: Fix potential dereference of NULL pointer . - hv_netvsc: Fix race between VF offering and VF association message from host . - hv_netvsc: Print value of invalid ID in netvsc_send_{completion,tx_complete} . - hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove . - hv_netvsc: Use bitmap_zalloc when applicable . - hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening . - hv_netvsc: Validate number of allocated sub-channels . - hv_netvsc: Wait for completion on request SWITCH_DATA_PATH . - hv_netvsc: use netif_is_bond_master instead of open code . - hv_utils: Fix passing zero to "PTR_ERR" warning . - hwmon: Check for null before removing sysfs attrs . - hwmon: fix pci device refcount leak in nv1a_ram_new . - hwmon: fix missing pci_disable_device . - hwmon: Fix possible UAF when ibmpex_register_bmc fails . - i2c: i801: add lis3lv02d"s I2C address for Vostro 5568 . - ibmvnic: Free rwi on reset success . - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger . - iio: core: Fix entry not deleted when iio_register_sw_trigger_type fails . - iio: health: afe4403: Fix oob read in afe4403_read_raw . - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw . - iio: light: apds9960: fix wrong register for gesture gain . - iio: light: rpr0521: add missing Kconfig dependencies . - iio: pressure: ms5611: changed hardcoded SPI speed to value limited . - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init . - isdn: mISDN: netjet: fix wrong check of device registration . - iwlwifi: dbg: disable ini debug in 9000 family and below . - kABI: Fix after adding trace_iterator.wait_index . - kABI: remove new member of usbip_device . - kabi: fix transport_add_device change . - kexec: turn all kexec_mutex acquisitions into trylocks . - kvm: nVMX: reflect MTF VM-exits if injected by L1 . - livepatch: Add a missing newline character in klp_module_coming . - livepatch: fix race between fork and KLP transition . - loop: Check for overflow while configuring loop . - mISDN: fix misuse of put_device in mISDN_register_device . - mISDN: fix possible memory leak in mISDN_dsp_element_register . - mISDN: fix possible memory leak in mISDN_register_device . - md/raid5: Ensure stripe_fill happens on non-read IO with journal . - md: Replace snprintf with scnprintf . - media: dvb-frontends/drxk: initialize err to 0 . - media: meson: vdec: fix possible refcount leak in vdec_probe . - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation . - media: venus: dec: Handle the case where find_format fails . - media: vim2m: initialize the media device earlier . - media: vivid: fix assignment of dev-greater than fbuf_out_flags . - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram . - mmc: core: properly select voltage range without power cycle . - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI . - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI . - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout . - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put . - nbd: Fix use-after-free in pid_show . - nbd: fix possible overflow for "first_minor" in nbd_dev_add . - nbd: fix possible overflow on "first_minor" in nbd_dev_add . - nbd: handle device refs for DESTROY_ON_DISCONNECT properly . - net/x25: Fix skb leak in x25_lapb_receive_frame . - net: ethernet: nixge: fix NULL dereference . - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed . - net: hyperv: remove use of bpf_op_t . - net: netvsc: remove break after return . - net: phy: fix null-ptr-deref while probe failed . - net: thunderbolt: Fix error handling in tbnet_init . - net: usb: qmi_wwan: Set DTR quirk for MR400 . - net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch . - nfc/nci: fix race with opening and closing . - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send . - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send . - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION . - nfc: st-nci: fix memory leaks in EVT_TRANSACTION . - nfsd: set the server_scope during service startup . - null_blk: Fail zone append to conventional zones . - null_blk: synchronization fix for zoned device . - nvmem: core: Check input parameter for NULL in nvmem_unregister . - panic, kexec: make __crash_kexec NMI safe . - parport_pc: Avoid FIFO port location truncation . - phy: stm32: fix an error code in probe . - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map . - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi . - powerpc/boot: Explicitly disable usage of SPE instructions . - powerpc/kvm: Fix kvm_use_magic_page . - printk: add missing memory barrier to wake_up_klogd . - printk: use atomic updates for klogd work . - printk: wake waiters for safe and NMI contexts . - r8152: Add MAC passthrough support to new device . - r8152: add PID for the Lenovo OneLink+ Dock . - r8152: use new helper tcp_v6_gso_csum_prep . - rbd: fix possible memory leak in rbd_sysfs_init . - regulator: core: fix UAF in destroy_regulator . - regulator: core: fix kobject release warning and memory leak in regulator_register . - regulator: twl6030: re-add TWL6032_SUBCLASS . - ring-buffer: Add ring_buffer_wake_waiters . - ring-buffer: Allow splice to read previous partially read pages . - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters . - ring-buffer: Check pending waiters when doing wake ups as well . - ring-buffer: Fix race between reset page and reading page . - ring-buffer: Have the shortest_full queue be the shortest not longest . - ring-buffer: Include dropped pages in counting dirty patches . - ring_buffer: Do not deactivate non-existant pages . - rndis_host: increase sleep time in the query-response loop . - rtc: mt6397: fix alarm register overwrite . - s390/boot: fix absolute zero lowcore corruption on boot . - s390/cpcmd: fix inline assembly register clobbering . - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup . - s390/disassembler: increase ebpf disasm buffer size . - s390/futex: add missing EX_TABLE entry to __futex_atomic_op . - s390/hugetlb: fix prepare_hugepage_range check for 2 GB hugepages . - s390/mm: use non-quiescing sske for KVM switch to keyed guest . - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser/__pcilg_mio_inuser . - s390/ptrace: return -ENOSYS when invalid syscall is supplied . - s390/uaccess: add missing EX_TABLE entries to __clear_user, copy_in_user_mvcos, copy_in_user_mvc, clear_user_xc and __strnlen_user . - s390/vtime: fix inline assembly clobber list . - s390/zcore: fix race when reading from hardware system area . - s390/zcrypt: fix zcard and zqueue hot-unplug memleak . - s390: Remove arch_has_random, arch_has_random_seed . - s390: fix double free of GS and RI CBs on fork failure . - s390: fix nospec table alignments . - s390: mark __cpacf_query as __always_inline . - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND . - scsi: drivers: base: Propagate errors through the transport component . - scsi: drivers: base: Support atomic version of attribute_container_device_trigger . - scsi: ibmvfc: Avoid path failures during live migration . - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 . - scsi: lpfc: Create a sysfs entry called lpfc_xcvr_data for transceiver info . - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs . - scsi: lpfc: Fix memory leak in lpfc_create_port . - scsi: lpfc: Fix spelling mistake "unsolicted" -greater than "unsolicited" . - scsi: lpfc: Log when congestion management limits are in effect . - scsi: lpfc: Set sli4_param"s cmf option to zero when CMF is turned off . - scsi: lpfc: Update lpfc version to 14.2.0.8 . - scsi: lpfc: Update the obsolete adapter list . - scsi: qla2xxx: Fix serialization of DCBX TLV data request . - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds . - scsi: scsi_transport_sas: Fix error handling in sas_phy_add . - scsi: storvsc: Correctly handle multiple flags in srb_status . - scsi: storvsc: Drop DID_TARGET_FAILURE use . - scsi: storvsc: Fix handling of srb_status and capacity change events . - scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and newer . - scsi: storvsc: Fix validation for unsolicited incoming packets . - scsi: storvsc: Log TEST_UNIT_READY errors as warnings . - scsi: storvsc: Miscellaneous code cleanups . - scsi: storvsc: Parameterize number hardware queues . - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq . - scsi: storvsc: Resolve data race in storvsc_probe . - scsi: storvsc: Return DID_ERROR for invalid commands . - scsi: storvsc: Update error logging . - scsi: storvsc: Use blk_mq_unique_tag to generate requestIDs . - scsi: storvsc: Use scsi_cmd_to_rq instead of scsi_cmnd.request . - scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening . - scsi: storvsc: Validate length of incoming packet in storvsc_on_channel_callback . - scsi: zfcp: Fix double free of FSF request when qdio send fails . - scsi: zfcp: Fix missing auto port scan and thus missing target ports . - selftests/livepatch: better synchronize test_klp_callbacks_busy . - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs . - serial: 8250: omap: Fix unpaired pm_runtime_put_sync in omap8250_remove . - serial: 8250: omap: Flush PM QOS work on remove . - serial: 8250_lpss: Configure DMA also w/o DMA filter . - serial: 8250_omap: remove wait loop from Errata i202 workaround . - serial: imx: Add missing .thaw_noirq hook . - siox: fix possible memory leak in siox_device_add . - slimbus: stream: correct presence rate frequencies . - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock . - spi: stm32: Print summary "callbacks suppressed" message . - staging: greybus: light: fix a couple double frees . - swiotlb-xen: use vmalloc_to_page on vmalloc virt addresses . - tracing/ring-buffer: Have polling block on watermark . - tracing: Add ioctl to force ring buffer waiters to wake up . - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t . - tracing: Do not free snapshot if tracer is on cmdline . - tracing: Fix wild-memory-access in register_synth_event . - tracing: Simplify conditional compilation code in tracing_set_tracer . - tracing: Wake up ring buffer waiters on closing of the file . - tracing: Wake up waiters when tracing is disabled . - usb: add NO_LPM quirk for Realforce 87U Keyboard . - usb: chipidea: fix deadlock in ci_otg_del_timer . - usb: dwc3: exynos: Fix remove function . - usb: dwc3: fix PHY disable sequence . - usb: dwc3: gadget: Clear ep descriptor last . - usb: dwc3: gadget: Fix null pointer exception . - usb: dwc3: qcom: fix runtime PM wakeup. - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup . - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller . - usbip: add sysfs_lock to synchronize sysfs code paths . - usbip: stub-dev synchronize sysfs code paths . - usbip: stub_dev: remake locking for kABI . - usbip: synchronize event handler with sysfs code paths . - usbip: usbip_event: use global lock . - usbip: vudc synchronize sysfs code paths . - usbip: vudc_sysfs: use global lock . - use __netdev_notify_peers in hyperv . - v3 of "PCI: hv: Only reuse existing IRTE allocation for Multi-MSI" - v3 of "PCI: hv: Only reuse existing IRTE allocation for Multi-MSI" - vfio/ccw: Do not change FSM state in subchannel event . - virtio-blk: Do not use MAX_DISCARD_SEGMENTS if max_discard_seg is zero . - virtio-blk: Use blk_validate_block_size to validate block size . - virtio_blk: eliminate anonymous module_init module_exit . - virtio_blk: fix the discard_granularity and discard_alignment queue limits . - vmlinux.lds.h: Fix placement of ".data..decrypted" section . - wifi: cfg80211: fix buffer overflow in elem comparison . - wifi: cfg80211: fix memory leak in query_regdb_file . - wifi: cfg80211: silence a sparse RCU warning . - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration . - workqueue: do not skip lockdep work dependency in cancel_work_sync . - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 . - x86/cpu: Restore AMD"s DE_CFG MSR after resume . - x86/hyperv: Output host build info as normal Windows version number . - x86/hyperv: check cpu mask after interrupt has been disabled . - x86/kexec: Fix double-free of elf header buffer . - x86/microcode/AMD: Apply the patch early on every logical thread . - x86/xen: Add xen_no_vector_callback option to test PCI INTX delivery . - x86/xen: Distribute switch variables for initialization . - x86/xen: do not unbind uninitialized lock_kicker_irq . - xen-blkback: prevent premature module unload . - xen-netback: correct success/error reporting for the SKB-with-fraglist case . - xen/balloon: fix balloon kthread freezing . - xen/balloon: fix ballooned page accounting without hotplug enabled . - xen/balloon: fix cancelled balloon action . - xen/balloon: use a kernel thread instead a workqueue . - xen/gntdev: Avoid blocking in unmap_grant_pages . - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE . - xen/gntdev: Prevent leaking grants . - xen/pcpu: fix possible memory leak in register_pcpu . - xen/privcmd: Corrected error handling path . - xen/privcmd: fix error exit of privcmd_ioctl_dm_op . - xen/xenbus: Fix granting of vmalloc"d memory . - xen/xenbus: ensure xenbus_map_ring_valloc returns proper grant status . - xen: Fix XenStore initialisation for XS_LOCAL . - xen: Fix event channel callback via INTX/GSI . - xen: delay xen_hvm_init_time_ops if kdump is boot on vcpugreater than =32 . - xenbus: req-greater than body should be updated before req-greater than state . - xenbus: req-greater than err should be updated before req-greater than state . - xfs: Lower CIL flush limit for large logs . - xfs: Throttle commits on delayed background CIL push . - xfs: Use scnprintf for avoiding potential buffer overflow . - xfs: check owner of dir3 blocks . - xfs: factor common AIL item deletion code . - xfs: open code insert range extent split helper . - xfs: rework collapse range into an atomic operation . - xfs: rework insert range into an atomic operation . - xfs: tail updates only need to occur when LSN changes . - xfs: trylock underlying buffer on dquot flush . - xfs: xfs_buf_corruption_error should take __this_address . - xhci: Remove device endpoints from bandwidth list when freeing the device . Special Instructions and Notes: Please reboot the system after installing this update.