openSUSE Build Service

Overview Details Repositories Revisions Requests Users Attributes Meta

Security update for the Linux Kernel

The openSUSE Leap 42.3 kernel was updated to 4.4.79 to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2017-7542: The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel allowed local users to cause a denial of service (integer overflow and infinite loop) by leveraging the ability to open a raw socket (bnc#1049882).
- CVE-2017-11473: Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel allowed local users to gain privileges via a crafted ACPI table (bnc#1049603).
- CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bnc#1049483).
- CVE-2017-7541: The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel allowed local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet (bnc#1049645).

The following non-security bugs were fixed:

- ACPI / processor: Avoid reserving IO regions too early (bsc#1051478).
- ALSA: fm801: Initialize chip after IRQ handler is registered (bsc#1031717).
- Added sbitmap patch to blacklist.conf Add a patch "sbitmap: fix wakeup hang after sbq resize" to the blacklist.conf file because it is not needed in SLE 12 SP2.
- Btrfs: incremental send, fix invalid path for link commands (bsc#1051479).
- Btrfs: incremental send, fix invalid path for unlink commands (bsc#1051479).
- Btrfs: send, fix invalid path after renaming and linking file (bsc#1051479).
- Delete patches.drivers/0004-iommu-amd-reduce-delay-waiting-for-command-buffer-space. Remove the patch because it caused problems for users. See bsc#1048348.
- Drop patches; obsoleted by 'scsi: Add STARGET_CREATE_REMOVE state'
- Fix kABI breakage by KVM CVE fix (bsc#1045922).
- IB/rxe: Fix kernel panic from skb destructor (bsc#1049361).
- KVM: nVMX: Fix nested VPID vmx exec control (bsc#1051478).
- KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC (bsc#1051478).
- KVM: x86: avoid simultaneous queueing of both IRQ and SMI (bsc#1051478).
- NFS: Cache aggressively when file is open for writing (bsc#1033587).
- NFS: Do not flush caches for a getattr that races with writeback (bsc#1033587).
- NFS: invalidate file size when taking a lock (git-fixes).
- PCI / PM: Fix native PME handling during system suspend/resume (bsc#1051478).
- PCI: Add Mellanox device IDs (bsc#1051478).
- PCI: Convert Mellanox broken INTx quirks to be for listed devices only (bsc#1051478).
- PCI: Correct PCI_STD_RESOURCE_END usage (bsc#1051478).
- PCI: Enable ECRC only if device supports it (bsc#1051478).
- PCI: Support INTx masking on ConnectX-4 with firmware x.14.1100+ (bsc#1051478).
- PCI: dwc: Fix uninitialized variable in dw_handle_msi_irq() (bsc#1051478).
- PCI: dwc: dra7xx: Use RW1C for IRQSTATUS_MSI and IRQSTATUS_MAIN (bsc#1051478).
- PM / Hibernate: Fix scheduling while atomic during hibernation (bsc#1051059).
- RDMA/qedr: Prevent memory overrun in verbs' user responses (bsc#1022604 FATE#321747).
- README.BRANCH: Add Oliver as openSUSE-42.3 branch co-maintainer
- Refresh patches.kabi/Fix-kABI-breakage-by-KVM-CVE-fix.patch. Fix a stupid bug where the VCPU_REGS_TF shift was used as a mask.
- Revert "Add "shutdown" to "struct class"." (kabi).
- Revert "mm/list_lru.c: fix list_lru_count_node() to be race free" (kabi).
- Revert "powerpc/numa: Fix percpu allocations to be NUMA aware" (bsc#1048914).
- Revert "powerpc/numa: Fix percpu allocations to be NUMA aware" (bsc#1048914).
- Revert "tpm: Issue a TPM2_Shutdown for TPM2 devices." (kabi).
- Update patches.drivers/0011-hpsa-remove-abort-handler.patch (bsc#1022600 fate#321928 bsc#1016119).
- Update patches.fixes/xfs-refactor-log-record-unpack-and-data-processing.patch (bsc#1043598, bsc#1036215).
- apply mainline tags to some hyperv patches
- arm64: kernel: restrict /dev/mem read() calls to linear region (bsc#1046651).++ kernel-source.spec (revision 3)%define patchversion 4.4.79Version: 4.4.79Release: .g4dc78e3
- arm64: mm: remove page_mapping check in __sync_icache_dcache (bsc#1040347).
- blacklist 2400fd822f46 powerpc/asm: Mark cr0 as clobbered in mftb()
- blacklist.conf: 9eeacd3a2f17 not a bug fix (bnc#1050061)
- blacklist.conf: Blacklist 4e201566402c ('genirq/msi: Drop artificial PCI dependency') (bsc#1051478) This commit just removes an include and does not fix a real issue.
- blacklist.conf: Blacklist aa2369f11ff7 ('mm/gup.c: fix access_ok() argument type') (bsc#1051478) Fixes only a compile-warning.
- blacklist.conf: Blacklist c133c7615751 ('x86/nmi: Fix timeout test in test_nmi_ipi()') It only fixes a self-test (bsc#1051478).
- blacklist.conf: Blacklist c9525a3fab63 ('x86/watchdog: Fix Kconfig help text file path reference to lockup watchdog documentation') Updates only kconfig help-text (bsc#1051478).
- blacklist.conf: Blacklist e80e7edc55ba ('PCI/MSI: Initialize MSI capability for all architectures') This only fixes machines not supported by our kernels.
- blacklist.conf: Do not need 55d728a40d36, we do it differently in SLE
- blacklist.conf: add inapplicable commits for wifi (bsc#1031717)
- blacklist.conf: blacklist 7b73305160f1, unneeded cleanup
- blacklist.conf: da0510c47519fe0999cffe316e1d370e29f952be # FRV not applicable to SLE
- blkfront: add uevent for size change (bnc#1036632).
- block: Fix front merge check (bsc#1051239).
- brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain (bsc#1031717).
- btrfs: Do not clear SGID when inheriting ACLs (bsc#1030552).
- btrfs: add cond_resched to btrfs_qgroup_trace_leaf_items (bsc#1028286).
- btrfs: fix lockup in find_free_extent with read-only block groups (bsc#1046682).
- cpuidle: dt: Add missing 'of_node_put()' (bnc#1022476).
- cxgb4: fix BUG() on interrupt deallocating path of ULD (bsc#1005778).
- cxgb4: fix a NULL dereference (bsc#1005778).
- cxgb4: fix memory leak in init_one() (bsc#1005778).
- dentry name snapshots (bsc#1049483).
- device-dax: fix sysfs attribute deadlock (bsc#1048919).
- drm/i915: Fix scaler init during CRTC HW state readout (bsc#1031717).
- drm/vmwgfx: Fix large topology crash (bsc#1048155).
- drm/vmwgfx: Support topology greater than texture size (bsc#1048155).
- efi/libstub: Skip GOP with PIXEL_BLT_ONLY format (bnc#974215).
- ext2: Do not clear SGID when inheriting ACLs (bsc#1030552).
- ext4: Do not clear SGID when inheriting ACLs (bsc#1030552).
- ext4: avoid unnecessary stalls in ext4_evict_inode() (bsc#1049486).
- ext4: handle the rest of ext4_mb_load_buddy() ENOMEM errors (bsc#1012829).
- gcov: add support for gcc version >= 6 (bsc#1051663).
- gcov: support GCC 7.1 (bsc#1051663).
- gfs2: fix flock panic issue (bsc#1012829).
- hv: print extra debug in kvp_on_msg in error paths (bnc#1039153).
- hv_netvsc: Exclude non-TCP port numbers from vRSS hashing (bsc#1048421).
- hv_netvsc: Fix the queue index computation in forwarding case (bsc#1048421).
- i2c: designware-baytrail: fix potential null pointer dereference on dev (bsc#1011913).
- introduce the walk_process_tree() helper (bnc#1022476).
- iommu/amd: Fix interrupt remapping when disable guest_mode (bsc#1051471).
- iwlwifi: mvm: reset the fw_dump_desc pointer after ASSERT (bsc#1031717).
- iwlwifi: mvm: unconditionally stop device after init (bsc#1031717).
- iwlwifi: pcie: fix command completion name debug (bsc#1031717).
- kABI-fix for "x86/panic: replace smp_send_stop() with kdump friendly version in panic path" (bsc#1051478).
- kABI: protect lwtunnel include in ip6_route.h (kabi).
- kABI: protect struct iscsi_tpg_attrib (kabi).
- kABI: protect struct tpm_chip (kabi).
- kABI: protect struct xfrm_dst (kabi).
- kvm: nVMX: Fix nested_vmx_check_msr_bitmap_controls (bsc#1051478).
- libnvdimm, pmem: fix a NULL pointer BUG in nd_pmem_notify (bsc#1048919).
- libnvdimm, region: fix flush hint detection crash (bsc#1048919).
- libnvdimm: fix badblock range handling of ARS range (bsc#1051048).
- lightnvm: fix "warning: ‘ret’ may be used uninitialized" (FATE#319466).
- md-cluster: Fix a memleak in an error handling path (bsc#1049289).
- mm: make PR_SET_THP_DISABLE immediately active (bnc#1048891).
- mwifiex: do not update MCS set from hostapd (bsc#1031717).
- net/ena: switch to pci_alloc_irq_vectors (bsc#1047121).
- net: ena: add hardware hints capability to the driver (bsc#1047121).
- net: ena: add hardware hints capability to the driver (bsc#1047121).
- net: ena: add missing return when ena_com_get_io_handlers() fails (bsc#1047121).
- net: ena: add missing return when ena_com_get_io_handlers() fails (bsc#1047121).
- net: ena: add missing unmap bars on device removal (bsc#1047121).
- net: ena: add missing unmap bars on device removal (bsc#1047121).
- net: ena: add reset reason for each device FLR (bsc#1047121).
- net: ena: add reset reason for each device FLR (bsc#1047121).
- net: ena: add support for out of order rx buffers refill (bsc#1047121).
- net: ena: add support for out of order rx buffers refill (bsc#1047121).
- net: ena: allow the driver to work with small number of msix vectors (bsc#1047121).
- net: ena: allow the driver to work with small number of msix vectors (bsc#1047121).
- net: ena: bug fix in lost tx packets detection mechanism (bsc#1047121).
- net: ena: bug fix in lost tx packets detection mechanism (bsc#1047121).
- net: ena: change return value for unsupported features unsupported return value (bsc#1047121).
- net: ena: change return value for unsupported features unsupported return value (bsc#1047121).
- net: ena: change sizeof() argument to be the type pointer (bsc#1047121).
- net: ena: change sizeof() argument to be the type pointer (bsc#1047121).
- net: ena: disable admin msix while working in polling mode (bsc#1047121).
- net: ena: disable admin msix while working in polling mode (bsc#1047121).
- net: ena: fix bug that might cause hang after consecutive open/close interface (bsc#1047121).
- net: ena: fix bug that might cause hang after consecutive open/close interface (bsc#1047121).
- net: ena: fix race condition between submit and completion admin command (bsc#1047121).
- net: ena: fix race condition between submit and completion admin command (bsc#1047121).
- net: ena: fix rare uncompleted admin command false alarm (bsc#1047121).
- net: ena: fix rare uncompleted admin command false alarm (bsc#1047121).
- net: ena: fix theoretical Rx hang on low memory systems (bsc#1047121).
- net: ena: fix theoretical Rx hang on low memory systems (bsc#1047121).
- net: ena: separate skb allocation to dedicated function (bsc#1047121).
- net: ena: separate skb allocation to dedicated function (bsc#1047121).
- net: ena: update driver's rx drop statistics (bsc#1047121).
- net: ena: update driver's rx drop statistics (bsc#1047121).
- net: ena: update ena driver to version 1.1.7 (bsc#1047121).
- net: ena: update ena driver to version 1.1.7 (bsc#1047121).
- net: ena: update ena driver to version 1.2.0 (bsc#1047121).
- net: ena: update ena driver to version 1.2.0 (bsc#1047121).
- net: ena: use lower_32_bits()/upper_32_bits() to split dma address (bsc#1047121).
- net: ena: use lower_32_bits()/upper_32_bits() to split dma address (bsc#1047121).
- net: ena: use napi_schedule_irqoff when possible (bsc#1047121).
- net: ena: use napi_schedule_irqoff when possible (bsc#1047121).
- net: hns: Bugfix for Tx timeout handling in hns driver (bsc#1048451).
- net: phy: Do not perform software reset for Generic PHY (bsc#1042286).
- nvme: also provide a UUID in the WWID sysfs attribute (bsc#1048146).
- nvme: wwid_show: strip trailing 0-bytes (bsc#1048146).
- nvmet: identify controller: improve standard compliance (bsc#1048146).
- ocfs2: Do not clear SGID when inheriting ACLs (bsc#1030552).
- ocfs2: Make ocfs2_set_acl() static (bsc#1030552).
- ocfs2: fix deadlock caused by recursive locking in xattr (bsc#1012829).
- perf/x86/intel: Cure bogus unwind from PEBS entries (bsc#1051478).
- perf/x86/intel: Fix PEBSv3 record drain (bsc#1051478).
- perf/x86: Fix spurious NMI with PEBS Load Latency event (bsc#1051478).
- platform/x86: ideapad-laptop: Add IdeaPad 310-15IKB to no_hw_rfkill (bsc#1051022).
- platform/x86: ideapad-laptop: Add IdeaPad V310-15ISK to no_hw_rfkill (bsc#1051022).
- platform/x86: ideapad-laptop: Add IdeaPad V510-15IKB to no_hw_rfkill (bsc#1051022).
- platform/x86: ideapad-laptop: Add Lenovo Yoga 910-13IKB to no_hw_rfkill dmi list (bsc#1051022).
- platform/x86: ideapad-laptop: Add Y520-15IKBN to no_hw_rfkill (bsc#1051022).
- platform/x86: ideapad-laptop: Add Y700 15-ACZ to no_hw_rfkill DMI list (bsc#1051022).
- platform/x86: ideapad-laptop: Add Y720-15IKBN to no_hw_rfkill (bsc#1051022).
- platform/x86: ideapad-laptop: Add several models to no_hw_rfkill (bsc#1051022).
- powerpc/fadump: Add a warning when 'fadump_reserve_mem=' is used (bsc#1049231).
- powerpc: Add POWER9 architected mode to cputable (bsc#1048916, fate#321439).
- powerpc: Support POWER9 in architected mode (bsc#1048916, fate#321439).
- prctl: propagate has_child_subreaper flag to every descendant (bnc#1022476).
- qed: Add missing static/local dcbx info (bsc#1019695).
- qed: Correct print in iscsi error-flow (bsc#1019695).
- reiserfs: Do not clear SGID when inheriting ACLs (bsc#1030552).
- reorder upstream commit d0c2c9973ecd net: use core MTU range checking in virt drivers
- rpm/kernel-binary.spec.in: find-debuginfo.sh should not touch build-id This needs rpm-4.14+ (bsc#964063).
- s390/crash: Remove unused KEXEC_NOTE_BYTES (bsc#1049706).
- s390/kdump: remove code to create ELF notes in the crashed system (bsc#1049706).
- sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (bnc#1022476).
- sched/debug: Print the scheduler topology group mask (bnc#1022476).
- sched/fair, cpumask: Export for_each_cpu_wrap() (bnc#1022476).
- sched/fair: Fix O(nr_cgroups) in load balance path (bnc#1022476).
- sched/fair: Use task_groups instead of leaf_cfs_rq_list to walk all cfs_rqs (bnc#1022476).
- sched/topology: Add sched_group_capacity debugging (bnc#1022476).
- sched/topology: Fix building of overlapping sched-groups (bnc#1022476).
- sched/topology: Fix overlapping sched_group_capacity (bnc#1022476).
- sched/topology: Move comment about asymmetric node setups (bnc#1022476).
- sched/topology: Refactor function build_overlap_sched_groups() (bnc#1022476).
- sched/topology: Remove FORCE_SD_OVERLAP (bnc#1022476).
- sched/topology: Simplify build_overlap_sched_groups() (bnc#1022476).
- sched/topology: Small cleanup (bnc#1022476).
- sched/topology: Verify the first group matches the child domain (bnc#1022476).
- scsi: Add STARGET_CREATE_REMOVE state to scsi_target_state (bsc#1013887).
- scsi: aacraid: Do not copy uninitialized stack memory to userspace (bsc#1048912).
- scsi: aacraid: fix leak of data from stack back to userspace (bsc#1048912).
- scsi: kABI fix for new state STARGET_CREATED_REMOVE (bsc#1013887).
- scsi: lpfc: Add MDS Diagnostic support (bsc#1037838).
- scsi: lpfc: Add auto EQ delay logic (bsc#1042257).
- scsi: lpfc: Added recovery logic for running out of NVMET IO context resources (bsc#1037838).
- scsi: lpfc: Adding additional stats counters for nvme (bsc#1037838).
- scsi: lpfc: Cleanup entry_repost settings on SLI4 queues (bsc#1037838).
- scsi: lpfc: Driver responds LS_RJT to Beacon Off ELS - Linux (bsc#1044623).
- scsi: lpfc: Fix NMI watchdog assertions when running nvmet IOPS tests (bsc#1037838).
- scsi: lpfc: Fix NVME I+T not registering NVME as a supported FC4 type (bsc#1037838).
- scsi: lpfc: Fix NVMEI driver not decrementing counter causing bad rport state (bsc#1037838).
- scsi: lpfc: Fix NVMEI's handling of NVMET's PRLI response attributes (bsc#1037838).
- scsi: lpfc: Fix SLI3 drivers attempting NVME ELS commands (bsc#1044623).
- scsi: lpfc: Fix crash after firmware flash when IO is running (bsc#1044623).
- scsi: lpfc: Fix crash doing IO with resets (bsc#1044623).
- scsi: lpfc: Fix crash in lpfc_sli_ringtxcmpl_put when nvmet gets an abort request (bsc#1044623).
- scsi: lpfc: Fix debugfs root inode "lpfc" not getting deleted on driver unload (bsc#1037838).
- scsi: lpfc: Fix defects reported by Coverity Scan (bsc#1042257).
- scsi: lpfc: Fix nvme io stoppage after link bounce (bsc#1045404).
- scsi: lpfc: Fix nvmet RQ resource needs for large block writes (bsc#1037838).
- scsi: lpfc: Fix system crash when port is reset (bsc#1037838).
- scsi: lpfc: Fix system panic when express lane enabled (bsc#1044623).
- scsi: lpfc: Fix used-RPI accounting problem (bsc#1037838).
- scsi: lpfc: Reduce time spent in IRQ for received NVME commands (bsc#1044623).
- scsi: lpfc: Separate NVMET RQ buffer posting from IO resources SGL/iocbq/context (bsc#1037838).
- scsi: lpfc: Separate NVMET data buffer pool fir ELS/CT (bsc#1037838).
- scsi: lpfc: Vport creation is failing with "Link Down" error (bsc#1044623).
- scsi: lpfc: fix refcount error on node list (bsc#1045404).
- scsi: lpfc: update to revision to 11.4.0.1 (bsc#1044623).
- scsi: lpfc: update version to 11.2.0.14 (bsc#1037838).
- scsi: qedf: Fix a return value in case of error in 'qedf_alloc_global_queues' (bsc#1048912).
- scsi: qedi: Remove WARN_ON for untracked cleanup (bsc#1044443).
- scsi: qedi: Remove WARN_ON from clear task context (bsc#1044443).
- sfc: Add ethtool -m support for QSFP modules (bsc#1049619).
- string.h: add memcpy_and_pad() (bsc#1048146).
- timers: Plug locking race vs. timer migration (bnc#1022476).
- udf: Fix deadlock between writeback and udf_setsize() (bsc#1012829).
- udf: Fix races with i_size changes during readpage (bsc#1012829).
- x86/LDT: Print the real LDT base address (bsc#1051478).
- x86/mce: Make timer handling more robust (bsc#1042422).
- x86/panic: replace smp_send_stop() with kdump friendly version in panic path (bsc#1051478).
- x86/platform/uv/BAU: Disable BAU on single hub configurations (bsc#1050320).
- x86/platform/uv/BAU: Fix congested_response_us not taking effect (bsc#1050322).
- xen/pvh*: Support > 32 VCPUs at domain restore (bnc#1045563).
- xen: hold lock_device_hotplug throughout vcpu hotplug operations (bsc#1042422).
- xfs: Do not clear SGID when inheriting ACLs (bsc#1030552).
- xfs: detect and handle invalid iclog size set by mkfs (bsc#1043598).
- xfs: detect and trim torn writes during log recovery (bsc#1036215).
- xfs: do not BUG() on mixed direct and mapped I/O (bsc#1050188).
- xfs: refactor and open code log record crc check (bsc#1036215).
- xfs: refactor log record start detection into a new helper (bsc#1036215).
- xfs: return start block of first bad log record during recovery (bsc#1036215).
- xfs: support a crc verification only log record pass (bsc#1036215).
- xgene: Do not fail probe, if there is no clk resource for SGMII interfaces (bsc#1048501).

Submitted by Oliver Neukum (oneukum)
Reboot is suggested

Fixed bugs

bnc#1005778

FATE 321658 cxgb4 driver update

bnc#1011913

i2c-designware semaphore timeout error on Cherry Trail devices

bnc#1012829

Backport fixes to SLE12 SP2

bnc#1013887

[NetApp SLES12SP2 Bug] Kernel crash observed with LPe32002-M2 during Target port block test

bnc#1016119

[HPS Bug] multipath failover with operations in progress is unreliable

bnc#1019695

FATE 321703 QLogic/Cavium qed driver updates

bnc#1022476

Backport scheduler fixes to SLE12

bnc#1022600

FATE 321928 Microsemi hpsa driver update

bnc#1022604

FATE 321747 QLogic/Cavium qedr driver inclusion (RDMA)

bnc#1028286

NMI watchdog: BUG: soft lockup - CPU stuck for 22s! [btrfs742]

bnc#1030552

L3: SGID lost when using default ACL

bnc#1031717

Missing SLE12-SP2 fixes

bnc#1033587

L3: After update from SLES12SP1 to SP2, backup via NFS is very slow

bnc#1036215

SLES 12 SP3 Beta1 - While running fsfuzzer (xfs test) system crashed

bnc#1036632

EBS Elastic Volumes - Update to Linux Kernel

bnc#1037838

Patches needed for lpfc NVMe FC production quality (11.2.0.14 driver)

bnc#1039153

[Hyper-V] IP injection failing due to kvp daemon crash

bnc#1040347

gnome-shell and llvmpipe-x show undefined instruction when doing some operations in GNOME

bnc#1042257

lpfc patches for 6/1 - coverity and eq delay

bnc#1042286

tracking bug for SLE12 SP2 networking core base fixes

bnc#1042422

XEN: VMs get unresponsive after increase vCPU to max

bnc#1043598

xfs: generic/388 failure

bnc#1044443

[Cavium 12.3 Bug] qedi: Remove unwanted warnings.

bnc#1044623

lpfc patches for revision 11.4.0.1 - for RC2

bnc#1045404

lpfc: fix io failure on link bounce and null ptr on unload

bnc#1045563

live migration of Xen HVM domU with more than 32 vcpus causes hang of guest

bnc#1045922

VUL-0: CVE-2017-7518: kernel: KVM: debug exception via syscall emulation

bnc#1046651

Recommend to apply restrict /dev/mem read() calls to linear region

bnc#1046682

[Build0450] CPU softlockup during btrfs maintenance cron

bnc#1047121

Update ena driver to version 1.2.0

bnc#1048146

[NetApp SLES12 SP3 Bug]: Multipathd crash while configuring dm-multipath on FC-NVMe namespace devices

bnc#1048155

Fix large topology support for vmwgfx

bnc#1048348

AMD-Vi freeze when iommu is on with kernel > 4.4.72

bnc#1048421

[Hyper-V] hv_netvsc: Exclude non-TCP port numbers from vRSS hashing

bnc#1048451

network interfaces goes down during heavy load testing

bnc#1048501

Second gigabit port is missing on APM mustang and Gigabyte MP30 systems

bnc#1048891

backport 1860033237d4 mm: make PR_SET_THP_DISABLE immediately active

bnc#1048912

SLE12-SP3 SCSI fixes

bnc#1048914

[Regression] SLES12 SP3 GMC (192core+32TB brazos): installation fails with Kernel panic

bnc#1048916

SLES 12 SP3 - POWER9/ZZ - PowerVM LPAR gives cpu as POWER8 in /proc/cpuinfo

bnc#1048919

libnvdimm and dax fixes for SLES 12 SP3

bnc#1049231

81d9eca502fc powerpc/fadump: Add a warning when 'fadump_reserve_mem=' is used

bnc#1049289

md-cluster: a potential memleak in cluster_check_sync_size

bnc#1049361

Soft-RoCE Fixes

bnc#1049483

VUL-0: CVE-2017-7533: kernel: Bug in inotify code allowing privilege escalation

bnc#1049486

ext4 stalls when reclaiming symlinks

bnc#1049603

VUL-0: CVE-2017-11473: kernel: Buffer overflow in mp_override_legacy_irq() inarch/x86/kernel/acpi/boot.c allows local users to gain privileges via a crafted ACPI table

bnc#1049619

sfc: ethtool -m support for QSFP modules

bnc#1049645

VUL-0: CVE-2017-7541 kernel: Heap buffer overflow in brcmf_cfg80211_mgmt_tx()

bnc#1049706

[Regression] SLES 12 SP3 - kernel / kdump: Problem with "kmem -s" due to dump corruption

bnc#1049882

VUL-0: CVE-2017-7542 kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop

bnc#1050061

backport 9eeacd3a2f17 dmaengine: enable DMA_CTRL_REUSE

bnc#1050188

xfs:BUG_ON triggere by generic/446