The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: * CVE-2023-23454: Fixed denial or service in cbq_classify in net/sched/sch_cbq.c . * CVE-2023-0590: Fixed race condition in qdisc_graft . * CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 was missing locks that could have been used in a use-after-free that could have resulted in a priviledge escalation to gain ring0 access from the system user . * CVE-2023-0045: Fixed flush IBP in ib_prctl_set . * CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem . * CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system . * CVE-2022-36280: Fixed an out-of-bounds memory access vulnerability that was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c . * CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component . * CVE-2022-3108: Fixed missing check of return value of kmemdup . * CVE-2022-3107: Fixed missing check of return value of kvmalloc_array . The following non-security bugs were fixed: * Bluetooth: hci_qca: Fix the teardown problem for real . * CDC-NCM: remove "connected" log message . * HID: betop: check shape of output reports . * HID: betop: fix slab-out-of-bounds Write in betop_probe . * HID: check empty report_list in hid_validate_values . * Input: convert autorepeat timer to use timer_setup . * Input: do not use WARN in input_alloc_absinfo . * Input: i8042 - Add quirk for Fujitsu Lifebook T725 . * Input: iforce - reformat the packet dump output . * Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag . * Input: replace hard coded string with **func** in pr_err . * Input: switch to using sizeof when allocating memory . * Input: use seq_putc in input_seq_print_bitmap . * Input: use seq_puts in input_devices_seq_show . * Makefile: link with -z noexecstack --no-warn-rwx-segments . * NFS Handle missing attributes in OPEN reply . * NFS: Correct size calculation for create reply length . * NFS: Fix an Oops in nfs_d_automount . * NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup . * NFS: Fix memory leaks in nfs_pageio_stop_mirroring . * NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails . * NFS: nfs_compare_mount_options always compare auth flavors . * NFS: nfs_find_open_context may only select open files . * NFS: swap IO handling is slightly different for O_DIRECT IO . * NFS: swap-out must always use STABLE writes . * NFSD: Keep existing listeners on portlist error . * NFSD: Return nfserr_serverfault if splice_ok but buf-greater than pages have data . * NFSv2: Fix eof handling . * NFSv2: Fix write regression . * NFSv4 expose nfs_parse_server_name function . * NFSv4 only print the label when its queried . * NFSv4 remove zero number of fs_locations entries error check . * NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall . * NFSv4.1: Fix uninitialised variable in devicenotify . * NFSv4.1: Handle RECLAIM_COMPLETE trunking errors . * NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot . * NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding . * NFSv4.2: Fix a memory stomp in decode_attr_security_label . * NFSv4.2: Fix initialisation of struct nfs4_label . * NFSv4.2: Fixup CLONE dest file size for zero-length count . * NFSv4.x: Fail client initialisation if state manager thread can"t run . * NFSv4.x: fix lock recovery during delegation recall . * NFSv4/pNFS: Always return layout stats on layout return for flexfiles . * NFSv4: Fix a deadlock between nfs4_open_recover_helper and delegreturn . * NFSv4: Fix open create exclusive when the server reboots . * NFSv4: Fix return value in nfs_finish_open . * NFSv4: Fix return values for nfs4_file_open . * PCI/ASPM: Correct LTR_L1.2_THRESHOLD computation . * PCI/ASPM: Declare threshold_ns as u32, not u64 . * PCI/sysfs: Fix double free in error path . * PCI: Check for alloc failure in pci_request_irq . * PCI: Fix pci_device_is_present for VFs by checking PF . * PCI: Fix used_buses calculation in pci_scan_child_bus_extend . * PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge . * Revert "blkdev: check for valid request queue before issuing flush" . * Revert "dm cache: fix arm link errors with inline" . * Revert "scsi: core: run queue if SCSI device queue isn"t ready and queue is idle" . * Revert "scsi: smartpqi: set force_blk_mq=1." * SUNRPC: Do not call __UDPX_INC_STATS from a preemptible context . * SUNRPC: Do not leak netobj memory when gss_read_proxy_verf fails . * SUNRPC: Fix a bogus get/put in generic_key_to_expire . * SUNRPC: Fix a compile warning for cmpxchg64 . * SUNRPC: Fix a race with XPRT_CONNECTING . * SUNRPC: Fix missing release socket in rpc_sockname . * SUNRPC: Handle 0 length opaque XDR object data properly . * SUNRPC: Move simple_get_bytes and simple_get_netobj into private header . * SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer . * SUNRPC: make lockless test safe . * SUNRPC: stop printk reading past end of string . * USB: serial: ch341: fix disabled rx timer on older devices . * USB: serial: console: move mutex_unlock before usb_serial_put . * amiflop: clean up on errors during setup . * arm64/kvm: consistently handle host HCR_EL2 flags * arm64: Fix minor issues with the dcache_by_line_op macro * arm64: alternative: Use true and false for boolean values * arm64: cmpwait: Clear event register before arming exclusive monitor * arm64: fix possible spectre-v1 in ptrace_hbp_get_event * arm64: fix possible spectre-v1 write in ptrace_hbp_set_event * arm64: ftrace: do not adjust the LR value * arm64: io: Ensure calls to delay routines are ordered against prior * arm64: io: Ensure value passed to __iormb is held in a 64-bit * arm64: jump_label.h: use asm_volatile_goto macro instead of "asm * arm64: make secondary_start_kernel notrace * arm64: makefile fix build of .i file in external module case * arm64: ptrace: remove addr_limit manipulation * arm64: rockchip: Force CONFIG_PM on Rockchip systems * arm64: smp: Handle errors reported by the firmware * audit: ensure userspace is penalized the same as the kernel when under pressure . * audit: improve robustness of the audit queue handling . * bcache: fix super block seq numbers comparision in register_cache_set . * blk-cgroup: Fix memleak on error path . * blk-cgroup: Pre-allocate tree node on blkg_conf_prep . * blk-cgroup: fix missing put device in error path from blkg_conf_pref . * blk-mq: fix possible memleak when register "hctx" failed . * blk-mq: insert request not through -greater than queue_rq into sw/scheduler queue . * blk-mq: move cancel of requeue_work into blk_mq_release . * blktrace: Fix output non-blktrace event when blk_classic option enabled . * blktrace: break out of blktrace setup on concurrent calls . * blktrace: ensure our debugfs dir exists . * blktrace: fix endianness for blk_log_remap . * blktrace: fix endianness in get_pdu_int . * blktrace: use errno instead of bi_status . * block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group . * block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group . * block, bfq: increase idling for weight-raised queues . * block, bfq: protect "bfqd-greater than queued" by "bfqd-greater than lock" . * block, bfq: protect "bfqd-greater than queued" by "bfqd-greater than lock" . * block/bio-integrity: do not free "buf" if bio_integrity_add_page failed . * block/bio-integrity: fix a memory leak bug . * block/swim: Check drive type . * block/swim: Do not log an error message for an invalid ioctl . * block/swim: Fix IO error at end of medium . * block/swim: Rename macros to avoid inconsistent inverted logic . * block/swim: Select appropriate drive on device open . * block: Fix use-after-free issue accessing struct io_cq . * block: add a lower-level bio_add_page interface . * block: bio-integrity: Copy flags when bio_integrity_payload is cloned . * block: fix memleak when __blk_rq_map_user_iov is failed . * block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR . * brd: check and limit max_part par . * ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty . * compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES . * cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM . * cryptoloop: add a deprecation warning . * d6810d730022 * dm bio record: save/restore bi_end_io and bi_integrity . * dm btree: add a defensive bounds check to insert_at . * dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort . * dm cache: Fix UAF in destroy . * dm cache: set needs_check flag after aborting metadata . * dm crypt: use u64 instead of sector_t to store iv_offset . * dm flakey: Properly corrupt multi-page bios . * dm ioctl: fix misbehavior if list_versions races with module loading . * dm ioctl: prevent potential spectre v1 gadget . * dm kcopyd: Fix bug causing workqueue stalls . * dm raid: avoid bitmap with raid4/5/6 journal device . * dm space map common: add bounds check to sm_ll_lookup_bitmap . * dm space maps: do not reset space map allocation cursor when committing . * dm table: Remove BUG_ON . * dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata . * dm thin: Fix UAF in run_timer_softirq . * dm thin: Use last transaction"s pmd-greater than root when commit failed . * dm thin: add sanity checks to thin-pool and external snapshot creation . * dm thin: resume even if in FAIL mode . * dm verity: skip verity work if I/O error when system is shutting down . * dm verity: use message limit for data block corruption message . * dm zoned: return NULL if dmz_get_zone_for_reclaim fails to find a zone . * dm: Use kzalloc for all structs with embedded biosets/mempools . * do not dump the threads that had been already exiting when zapped . * drbd: Change drbd_request_detach_interruptible"s return type to int . * drbd: destroy workqueue when drbd device was freed . * drbd: do not block when adjusting "disk-options" while IO is frozen . * drbd: dynamically allocate shash descriptor . * drbd: fix potential silent data corruption . * drbd: fix print_st_err"s prototype to match the definition . * drbd: ignore "all zero" peer volume sizes in handshake . * drbd: reject attach of unsuitable uuids even if connected . * drbd: remove usage of list iterator variable after loop . * drbd: use after free in drbd_create_device . * drivers/block/zram/zram_drv.c: fix bug storing backing_dev . * drivers:md:fix a potential use-after-free bug . * ext4: Detect already used quota file early . * ext4: Fixup pages without buffers . * ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h . * ext4: add reserved GDT blocks check . * ext4: avoid crash when inline data creation follows DIO write . * ext4: avoid resizing to a partial cluster size . * ext4: clear mmp sequence number when remounting read-only . * ext4: continue to expand file system when the target size does not reach . * ext4: correct max_inline_xattr_value_size computing . * ext4: correct the misjudgment in ext4_iget_extra_inode . * ext4: do not BUG if someone dirty pages without asking ext4 first . * ext4: fix a data race at inode-greater than i_disksize . * ext4: fix argument checking in EXT4_IOC_MOVE_EXT . * ext4: fix extent status tree race in writeback error recovery path . * ext4: fix null-ptr-deref in ext4_write_info . * ext4: fix race when reusing xattr blocks . * ext4: fix undefined behavior in bit shift for ext4_check_flag_values . * ext4: fix use-after-free in ext4_ext_shift_extents . * ext4: fix use-after-free in ext4_xattr_set_entry . * ext4: fix warning in "ext4_da_release_space" . * ext4: make ext4_lazyinit_thread freezable . * ext4: prohibit fstrim in norecovery mode . * ext4: recover csum seed of tmp_inode after migrating to extents . * ext4: unindent codeblock in ext4_xattr_block_set . * ext4: update s_overhead_clusters in the superblock during an on-line resize . * ext4: use matching invalidatepage in ext4_writepage . * flexfiles: enforce per-mirror stateid only for v4 DSes . * flexfiles: use per-mirror specified stateid for IO . * floppy: Add max size check for user space request . * fs: nfs: Fix possible null-pointer dereferences in encode_attrs . * ftrace: Enable trampoline when rec count returns back to one . * ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper . * ftrace: Fix updating FTRACE_FL_TRAMP . * ftrace: fpid_next should increase position index . * gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp . * ibmveth: Always stop tx queues during close . * iforce: restore old iforce_dump_packet . * ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module . * ipmi: Move remove_work to dedicated workqueue . * ipmi: fix memleak when unload ipmi driver . * ipmi: fix use after free in _ipmi_destroy_user . * ipv6: raw: Deduct extension header length in rawv6_push_pending_frames . * isofs: reject hardware sector size greater than 2048 bytes . * jbd2: use the correct print format . * kABI: cpu/hotplug: reexport cpu_smt_control . * kABI: mitigate new ufs_stats field . * kbuild: clear LDFLAGS in the top Makefile . * kernel/sys.c: avoid copying possible padding bytes in copy_to_user . * kprobes, x86/alternatives: Use text_mutex to protect smp_alt_modules . * kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth not fault on bad stack . * lockd: fix decoding of TEST results . * loop: Add LOOP_SET_DIRECT_IO to compat ioctl . * loop: use sysfs_emit in the sysfs xxx show . * m68k/mac: Do not remap SWIM MMIO region . * mbcache: add functions to delete entry if unused . * mbcache: do not reclaim used entries . * md/raid1: stop mdx_raid1 thread when raid1 array run failed . * md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d . * md: fix a crash in mempool_free . * md: protect md_unregister_thread from reentrancy . * media: Do not let tvp5150_get_vbi go out of vbi_ram_default array . * media: i2c: tvp5150: remove useless variable assignment in tvp5150_set_vbi . * memcg, kmem: further deprecate kmem.limit_in_bytes . * memcg: Fix possible use-after-free in memcg_write_event_control . * memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc failure . * mm, page_alloc: avoid expensive reclaim when compaction may not succeed . * mm/filemap.c: clear page error before actual read . * module: Do not wait for GOING modules . * module: set MODULE_STATE_GOING state when a module fails to load . * move new members of struct usbnet to end . * nbd: Add the nbd NBD_DISCONNECT_ON_CLOSE config flag . * nbd: Fix NULL pointer in flush_workqueue . * nbd: Fix hung when signal interrupts nbd_start_device_ioctl . * nbd: add a flush_workqueue in nbd_start_device . * nbd: add missing config put . * nbd: call genl_unregister_family first in nbd_cleanup . * nbd: do not requeue the same request twice . * nbd: fix a block_device refcount leak in nbd_release . * nbd: fix crash when the blksize is zero . * nbd: fix io hung while disconnecting device . * nbd: fix max number of supported devs . * nbd: fix possible sysfs duplicate warning . * nbd: fix race between nbd_alloc_config and module removal . * nbd: fix shutdown and recv work deadlock v2 . * nbd: handle racing with error"ed out commands . * nbd: handle unexpected replies better . * nbd: make the config put is called before the notifying the waiter . * nbd: verify socket is supported during setup . * nbd:fix memory leak in nbd_get_socket . * net :sunrpc :clnt :Fix xps refcount imbalance on the error path . * net/ethernet/freescale: rework quiesce/activate for ucc_geth . * net/mlx5e: Set of completion request bit should not clear other adjacent bits . * net/usb/kalmia: use ARRAY_SIZE for various array sizing calculations . * net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path . * net: USB: Fix wrong-direction WARNING in plusb.c . * net: allwinner: Fix use correct return type for ndo_start_xmit . * net: bcmgenet: suppress warnings on failed Rx SKB allocations . * net: bmac: Fix read of MAC address from ROM . * net: dsa: mv88e6xxx: Allow dsa and cpu ports in multiple vlans . * net: kalmia: clean up bind error path . * net: kalmia: fix memory leaks . * net: mana: Fix IRQ name - add PCI and queue number . * net: qed*: Reduce RX and TX default ring count when running inside kdump kernel . * net: sched: atm: dont intepret cls results when asked to drop . * net: sched: cbq: dont intepret cls results when asked to drop . * net: stmmac: Fix sub-second increment . * net: sunrpc: Fix off-by-one issues in "rpc_ntop6" . * net: systemport: suppress warnings on failed Rx SKB allocations . * net: usb: asix: ax88772_bind return error when hw_reset fail . * net: usb: asix: init MAC address buffers . * net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 . * net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 . * net: usb: lan78xx: do not modify phy_device state concurrently . * net: usb: qmi_wwan: Add support for Dell DW5829e . * net: usb: qmi_wwan: Add the BroadMobi BM818 card . * net: usb: qmi_wwan: Set DTR quirk for MR400 . * net: usb: qmi_wwan: add Quectel EM160R-GL . * net: usb: qmi_wwan: add Quectel RM520N . * net: usb: qmi_wwan: add Telit 0x103a composition . * net: usb: qmi_wwan: add u-blox 0x1342 composition . * net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch . * net: usb: rtl8150: demote allmulti message to dev_dbg . * net: usb: sr9700: Handle negative len . * nfs4: Fix kmemleak when allocate slot failed . * nfs: Fix NULL pointer dereference of dev_name . * nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default . * nfs: nfs4clinet: check the return value of kstrdup . * nfs: we do not support removing system.nfs4_acl . * nfsd4: fix crash on writing v4_end_grace before nfsd startup . * nfsd: Fix svc_xprt refcnt leak when setup callback client failed . * nfsd: Return EPERM, not EACCES, in some SETATTR cases . * nfsd: allow fh_want_write to be called twice . * nfsd: fix a warning in __cld_pipe_upcall . * nfsd: fix wrong check in write_v4_end_grace . * null_blk: Handle null_add_dev failures properly . * null_blk: fix spurious IO errors after failed past-wp access . * pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process . * panic: unset panic_on_warn inside panic . * parisc: Fix HP SDC hpa address output . * parisc: Fix serio address output . * powerpc/64/module: REL32 relocation range check . * powerpc/64: Init jump labels before parse_early_param . * powerpc/64s/hash: Fix stab_rr off by one initialization . * powerpc/64s/pgtable: fix an undefined behaviour . * powerpc/boot: Disable vector instructions . * powerpc/boot: Explicitly disable usage of SPE instructions . * powerpc/boot: Fix 64-bit boot wrapper build with non-biarch compiler . * powerpc/boot: Fix missing check of lseek return value . * powerpc/boot: Fixup device-tree on little endian . * powerpc/crashkernel: Take "mem=" option into account . * powerpc/eeh: Fix possible null deref in eeh_dump_dev_log . * powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field . * powerpc/eeh: Only dump stack once if an MMIO loop is detected . * powerpc/futex: Fix warning: "oldval" may be used uninitialized in this function . * powerpc/iommu: Avoid derefence before pointer check . * powerpc/mm: Make NULL pointer deferences explicit on bad page faults . * powerpc/pci/of: Fix OF flags parsing for 64bit BARs . * powerpc/pci: Fix get_phb_number locking . * powerpc/perf: callchain validate kernel stack pointer bounds . * powerpc/powernv/eeh/npu: Fix uninitialized variables in opal_pci_eeh_freeze_status . * powerpc/powernv/iov: Ensure the pdn for VFs always contains a valid PE number . * powerpc/powernv/smp: Fix spurious DBG warning . * powerpc/powernv: add missing of_node_put . * powerpc/powernv: opal_put_chars partial write fix . * powerpc/pseries/cmm: Implement release function for sysfs device . * powerpc/pseries/eeh: use correct API for error log size . * powerpc/pseries/hvconsole: Fix stack overread via udbg . * powerpc/pseries: Fix node leak in update_lmb_associativity_index . * powerpc/pseries: Mark accumulate_stolen_time as notrace . * powerpc/pseries: Stop calling printk in rtas_stop_self . * powerpc/pseries: add of_node_put in dlpar_detach_node . * powerpc/pseries: unregister VPA when hot unplugging a CPU . * powerpc/rtas: avoid device tree lookups in rtas_os_term . * powerpc/rtas: avoid scheduling in rtas_os_term . * powerpc/smp: Set numa node before updating mask . * powerpc/sriov: Remove VF eeh_dev state when disabling SR-IOV . * powerpc/time: Fix clockevent_decrementer initalisation for PR KVM . * powerpc/time: Use clockevents_register_device, fixing an issue with large decrementer . * powerpc/traps: Fix the message printed when stack overflows . * powerpc/xive/spapr: correct bitmap allocation size . * powerpc/xive: Add a check for memory allocation failure . * powerpc/xive: Move a dereference below a NULL test . * powerpc/xive: add missing iounmap in error path in xive_spapr_populate_irq_data . * powerpc/xmon: fix dump_segments . * powerpc: Force inlining of cpu_has_feature to avoid build failure . * powerpc: improve handling of unrecoverable system reset . * powerpc: sysdev: add missing iounmap on error in mpic_msgr_probe . * prlimit: do_prlimit needs to have a speculation check . * ps3disk: use the default segment boundary . * ptrace: make ptrace fail if the tracee changed its pid unexpectedly . * quota: Check next/prev free block number after reading from quota file . * quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls . * rndis_host: increase sleep time in the query-response loop . * rpc: fix NULL dereference on kmalloc failure . * rpc: fix gss_svc_init cleanup on failure . * rpm: Add suse-kernel-rpm-scriptlets to kmp buildreqs * rsxx: add missed destroy_workqueue calls in remove . * sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up . * sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up . * sbitmap: fix lockup while swapping . * scsi: 3w-9xxx: Avoid disabling device if failing to enable it . * scsi: 3ware: fix return 0 on the error path of probe . * scsi: 53c700: pass correct "dev" to dma_alloc_attrs . * scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic . * scsi: NCR5380: Add disconnect_mask module parameter . * scsi: NCR5380: Check for bus reset . * scsi: NCR5380: Check for invalid reselection target . * scsi: NCR5380: Clear all unissued commands on host reset . * scsi: NCR5380: Do not call dsprintk following reselection interrupt . * scsi: NCR5380: Do not clear busy flag when abort fails . * scsi: NCR5380: Handle BUS FREE during reselection . * scsi: NCR5380: Have NCR5380_select return a bool . * scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data . * scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE . * scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session" . * scsi: aacraid: Disabling TM path and only processing IOP reset . * scsi: aacraid: fix illegal IO beyond last LBA . * scsi: advansys: Fix kernel pointer leak . * scsi: aha152x: Fix aha152x_setup __setup handler return value . * scsi: aic7xxx: Adjust indentation in ahc_find_syncrate . * scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 . * scsi: atari_scsi: sun3_scsi: Set sg_tablesize to 1 instead of SG_NONE . * scsi: bfa: Replace snprintf with sysfs_emit . * scsi: core: Avoid printing an error if target_alloc returns -ENXIO . * scsi: core: Cap scsi_host cmd_per_lun at can_queue . * scsi: core: Do not start concurrent async scan on same host . * scsi: core: Fix shost-greater than cmd_per_lun calculation in scsi_add_host_with_dma . * scsi: core: Reduce memory required for SCSI logging . * scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c . * scsi: dc395x: fix dma API usage in srb_done . * scsi: fcoe: Fix possible name leak when device_register fails . * scsi: fcoe: Fix transport not deattached when fcoe_if_init fails . * scsi: fcoe: drop frames in ELS LOGO error path . * scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send . * scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE . * scsi: fnic: fix use after free . * scsi: hisi_sas: Check sas_port before using it . * scsi: hpsa: Fix allocation size for scsi_host_alloc . * scsi: hpsa: Fix error handling in hpsa_add_sas_host . * scsi: hpsa: Fix memory leak in hpsa_init_one . * scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device . * scsi: hpsa: Fix possible memory leak in hpsa_init_one . * scsi: hpsa: correct scsi command status issue after reset . * scsi: ibmvscsis: Ensure partition name is properly NUL terminated . * scsi: ibmvscsis: Fix a stringop-overflow warning . * scsi: ipr: Fix WARNING in ipr_init . * scsi: ipr: Fix missing/incorrect resource cleanup in error case . * scsi: ipr: Fix softlockup when rescanning devices in petitboot . * scsi: ips: fix missing break in switch . * scsi: isci: Change sci_controller_start_task"s return type to sci_status . * scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler . * scsi: iscsi: Add iscsi_cls_conn refcount helpers . * scsi: iscsi: Do not destroy session if there are outstanding connections . * scsi: iscsi: Do not put host in iscsi_set_flashnode_param . * scsi: iscsi: Do not send data to unbound connection . * scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj . * scsi: iscsi: Fix shost-greater than max_id use . * scsi: iscsi: Report unbind session event when the target has been removed . * scsi: iscsi: Unblock session then wake up error handler . * scsi: iscsi: flush running unbind operations when removing a session . * scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param . * scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route . * scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy . * scsi: libfc: Fix a format specifier . * scsi: libfc: Fix use after free in fc_exch_abts_resp . * scsi: libiscsi: Fix NOP race condition . * scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset . * scsi: libiscsi: Fix UAF in iscsi_conn_get_param/iscsi_conn_teardown . * scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu error handling . * scsi: libsas: Check SMP PHY control function result . * scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology . * scsi: megaraid: Fix error check return value of register_chrdev . * scsi: megaraid: disable device when probe failed after enabled device . * scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry . * scsi: megaraid_sas: fix panic on loading firmware crashdump . * scsi: megaraid_sas: reduce module load time . * scsi: mpt3sas: Fix clear pending bit in ioctl status . * scsi: mpt3sas: Fix double free warnings . * scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add . * scsi: mpt3sas: Increase IOCInit request timeout to 30s . * scsi: mvsas: Add PCI ID of RocketRaid 2640 . * scsi: mvsas: Replace snprintf with sysfs_emit . * scsi: mvumi: Fix error return in mvumi_io_attach . * scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort . * scsi: pm8001: Fix pm8001_mpi_task_abort_resp . * scsi: pm80xx: Corrected dma_unmap_sg parameter . * scsi: pm80xx: Fix for SATA device discovery . * scsi: pm80xx: Fixed system hang issue during kexec boot . * scsi: pmcraid: Fix missing resource cleanup in error case . * scsi: qedf: Do not retry ELS request if qedf_alloc_cmd fails . * scsi: qedi: Abort ep termination if offload not scheduled . * scsi: qedi: Do not flush offload work if ARP not resolved . * scsi: qedi: Fix list_del corruption while removing active I/O . * scsi: qedi: Fix null ref during abort handling . * scsi: qedi: Fix termination timeouts in session logout . * scsi: qedi: Protect active command list to avoid list corruption . * scsi: qla2xxx: Check if port is online before sending ELS . * scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests . * scsi: qla2xxx: Fix IOCB resource check warning . * scsi: qla2xxx: Fix crash when I/O abort times out . * scsi: qla2xxx: Fix erroneous link down . * scsi: qla2xxx: Fix exchange oversubscription . * scsi: qla2xxx: Fix exchange oversubscription for management commands . * scsi: qla2xxx: Fix link failure in NPIV environment . * scsi: qla2xxx: Fix printk format string . * scsi: qla2xxx: Fix set-but-not-used variable warnings . * scsi: qla2xxx: Fix stalled login . * scsi: qla2xxx: Initialize vha-greater than unknown_atio_[list, work] for NPIV hosts . * scsi: qla2xxx: Make qla_trim_buf and __qla_adjust_buf static . * scsi: qla2xxx: Relocate/rename vp map . * scsi: qla2xxx: Remove dead code . * scsi: qla2xxx: Remove dead code . * scsi: qla2xxx: Remove dead code . * scsi: qla2xxx: Remove duplicate of vha-greater than iocb_work initialization . * scsi: qla2xxx: Remove increment of interface err cnt . * scsi: qla2xxx: Remove the unused variable wwn . * scsi: qla2xxx: Remove unintended flag clearing . * scsi: qla2xxx: Remove unused variable "found_devs" . * scsi: qla2xxx: Select qpair depending on which CPU post_cmd gets called . * scsi: qla2xxx: Simplify if condition evaluation . * scsi: qla2xxx: Update version to 10.02.08.100-k . * scsi: qla2xxx: Update version to 10.02.08.200-k . * scsi: qla2xxx: Use a variable for repeated mem_size computation . * scsi: qla2xxx: edif: Fix clang warning . * scsi: qla2xxx: edif: Fix performance dip due to lock contention . * scsi: qla2xxx: edif: Fix stall session after app start . * scsi: qla2xxx: edif: Reduce memory usage during low I/O . * scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param . * scsi: qla4xxx: fix a potential NULL pointer dereference . * scsi: scsi_debug: Fix a warning in resp_write_scat . * scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper . * scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper . * scsi: scsi_debug: num_tgts must be greater than = 0 . * scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg . * scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG . * scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions . * scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach . * scsi: scsi_transport_spi: Fix function pointer check . * scsi: scsi_transport_srp: Do not block target in SRP_PORT_LOST state . * scsi: scsi_transport_srp: Do not block target in failfast state . * scsi: sd: Free scsi_disk device via put_device . * scsi: sd: do not crash the host on invalid commands . * scsi: ses: Fix unsigned comparison with less than zero . * scsi: ses: Retry failed Send/Receive Diagnostic commands . * scsi: smartpqi: use processor ID for hwqueue for non-mq case . * scsi: sni_53c710: fix compilation error . * scsi: snic: Fix possible UAF in snic_tgt_create . * scsi: sr: Do not use GFP_DMA . * scsi: sr: Fix sr_probe missing deallocate of device minor . * scsi: sr: Return appropriate error code when disk is ejected . * scsi: sr: Return correct event when media event code is 3 . * scsi: st: Fix a use after free in st_open . * scsi: target: core: Add CONTROL field for trace events . * scsi: target: iscsi: Wait for all commands to finish before freeing a session . * scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk -greater than poweroff . * scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices . * scsi: ufs: Avoid configuring regulator with undefined voltage range . * scsi: ufs: Clean up completed request without interrupt notification . * scsi: ufs: Complete pending requests in host reset and restore path . * scsi: ufs: Fix error handing during hibern8 enter . * scsi: ufs: Fix possible infinite loop in ufshcd_hold . * scsi: ufs: Fix regulator load and icc-level configuration . * scsi: ufs: Fix system suspend status . * scsi: ufs: Improve interrupt handling for shared interrupts . * scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE . * scsi: ufs: fix potential bug which ends in system hang . * scsi: ufs: skip shutdown if hba is not powered . * scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config . * scsi: virtio_scsi: Fix spelling mistake "Unsupport" -greater than "Unsupported" . * scsi: vmw_pscsi: Rearrange code to avoid multiple calls to free_irq during unload . * scsi: vmw_pvscsi: Expand vcpuHint to 16 bits . * scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED . * scsi: vmw_pvscsi: Set correct residual data length . * scsi: vmw_pvscsi: Set residual data length conditionally . * sctp: fail if no bound addresses can be used for a given scope . * signal handling: do not use BUG_ON for debugging . * struct dwc3: move new members to the end . * sunrpc: Fix connect metrics . * sunrpc: do not mark uninitialised items as VALID . * sunrpc: fix cache_head leak due to queued request . * sunvdc: Do not spin in an infinite loop when vio_ldc_send returns EAGAIN . * svcrdma: Ignore source port when computing DRC hash . * swim: fix cleanup on setup error . * tracing/cfi: Fix cmp_entries_* functions signature mismatch . * tracing: Adding NULL checks for trace_array descriptor pointer . * tracing: Ensure trace buffer is at least 4096 bytes large . * tracing: Fix a kmemleak false positive in tracing_map . * tracing: Fix code comments in trace.c . * tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line . * tracing: Fix sleeping function called from invalid context on RT kernel . * tracing: Fix stack trace event size . * tracing: Fix tp_printk option related with tp_printk_stop_on_boot . * tracing: Make sure trace_printk can output as soon as it can be used . * tracing: Set kernel_stack"s caller size properly . * tracing: Use address-of operator on section symbols . * tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate . * trigger_next should increase position index . * udf: Avoid accessing uninitialized data on failed inode read . * udf: Check LVID earlier . * udf: Fix BUG on corrupted inode . * udf: Fix NULL pointer dereference in udf_symlink function . * udf: Fix a slab-out-of-bounds write bug in udf_find_entry . * udf: Fix free space reporting for metadata and virtual partitions . * udf: Limit sparing table size . * udf: fix silent AED tagLocation corruption . * udf_get_extendedattr had no boundary checks . * usb: dwc3: Disable phy suspend after power-on reset . * usb: dwc3: core: Call dwc3_core_get_phy before initializing phys . * usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during suspend/resume . * usb: dwc3: core: initialize ULPI before trying to get the PHY . * usb: dwc3: fix PHY disable sequence . * usb: dwc3: gadget: Fix OTG events when gadget driver isn"t loaded . * usb: dwc3: gadget: Fix event pending check . * usb: dwc3: gadget: only unmap requests from DMA if mapped . * usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe . * usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling . * usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe . * virtio-blk: Fix memory leak among suspend/resume procedure . * virtio_console: break out of buf poll on remove . * virtio_console: eliminate anonymous module_init module_exit . * x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk . * x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models . * x86/asm: Add instruction suffixes to bitops . * x86/asm: Remove unnecessary \n\t in front of CC_SET from asm templates . * x86/bugs: Move the l1tf function and define pr_fmt properly . * x86/earlyprintk: Add a force option for pciserial device . * x86/entry/64: Add instruction suffix . * x86/fpu: Add might_fault to user_insn . * x86/hpet: Prevent potential NULL pointer dereference . * x86/kexec: Do not setup EFI info if EFI runtime is not enabled . * x86/mce-inject: Reset injection struct after injection . * x86/mce/mce-inject: Preset the MCE injection struct . * x86/mce: Fix -Wmissing-prototypes warnings . * x86/mm: Do not leak kernel addresses . * x86/speculation: Add support for STIBP always-on preferred mode . * x86/speculation: Change misspelled STIPB to STIBP . * x86: boot: Fix EFI stub alignment . * x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments . * xen-netfront: Fix hang on device removal . * xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init . * xfs: Fix bulkstat compat ioctls on x32 userspace . * xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init . * xfs: fix attr leaf header freemap.size underflow . * xfs: fix leaks on corruption errors in xfs_bmap.c . * xfs: fix mount failure crash on invalid iclog memory access . * xfs: fix partially uninitialized structure in xfs_reflink_remap_extent . * xfs: fix realtime bitmap/summary file truncation when growing rt volume . * xfs: fix use-after-free race in xfs_buf_rele . * xfs: initialize the shortform attr header padding entry . * xfs: make sure the rt allocator does not run off the end . * xfs: require both realtime inodes to mount . * xhci: Do not show warning for reinit on known broken suspend . * xprtrdma: treat all calls not a bcall when bc_serv is NULL . * zram: fix double free backing device . ## Special Instructions and Notes: * Please reboot the system after installing this update.