File _patchinfo of Package patchinfo.1621
<patchinfo incident="1621">
<issue id="315482" tracker="fate"></issue>
<issue id="315784" tracker="fate"></issue>
<issue id="316350" tracker="fate"></issue>
<issue id="758040" tracker="bnc">[i845] - *ERROR* Hangcheck timer elapsed... GPU hung</issue>
<issue id="814440" tracker="bnc">HP CSBU SP3 bug: driver for Creative Recon3D audio working in Beta3, broken in Beta4</issue>
<issue id="904348" tracker="bnc">[NetApp SLES11 SP3 Bug] Seeing better rewrite IO performance with 2 paths compared to 4 paths to a LUN</issue>
<issue id="921949" tracker="bnc">VFIO device attaching: setrlimit DENIED</issue>
<issue id="924493" tracker="bnc">VPD Read/write fail when access through PCI sysfs node "vpd".</issue>
<issue id="926238" tracker="bnc">VUL-0: CVE-2015-2925: kernel-source: vfs: Do not allow escaping from bind mounts</issue>
<issue id="933514" tracker="bnc">LIO: unit attention not flagged following logical unit reset</issue>
<issue id="936773" tracker="bnc">SUSE12 - sporadically hangs during boot</issue>
<issue id="939826" tracker="bnc">processes hang while trying to mount snapshot</issue>
<issue id="939926" tracker="bnc">Sendtargets discovery process consumes a SCSI host structure entry</issue>
<issue id="940776" tracker="bnc">VUL-0: CVE-2015-5156: kernel: virt-io max-skb-frags heap overflow</issue>
<issue id="941113" tracker="bnc">Brightness will automatically dim after account log out and re-login</issue>
<issue id="941202" tracker="bnc">pvusb appears broken after latest kernel update</issue>
<issue id="943959" tracker="bnc">BUG: Bad page state in process bash pfn:3fe0d85 during hibernation [page flags: 0x4000(waiters)]</issue>
<issue id="944296" tracker="bnc">VUL-0: CVE-2015-0272: kernel-source NetworkManager: remote DoS using IPv6 RA with bogus MTU</issue>
<issue id="947241" tracker="bnc">ocfs2 test case: flock testing hung for ever on multiple nodes</issue>
<issue id="947478" tracker="bnc">nfs exportfs mixes up entries with different ro/rw settings</issue>
<issue id="949100" tracker="bnc">Fix task and run queue sched_info::run_delay inconsistencies</issue>
<issue id="949192" tracker="bnc">TGCS: Ichigan Distorted login page on SLEPOS11SP3 client image with TGCS TCxWave 6140-x3x driver kit</issue>
<issue id="949706" tracker="bnc">Regression causes deadlock during cpu hotplug on vmware guest</issue>
<issue id="949744" tracker="bnc">SLES 11 SP3: XFS overwritten / zeroed page</issue>
<issue id="949936" tracker="bnc">VUL-0: CVE-2015-7799: kernel: Using the PPP character device driver caused the system to restart</issue>
<issue id="950013" tracker="bnc">SLES12, audit log problems while writing a file.</issue>
<issue id="950580" tracker="bnc">cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes</issue>
<issue id="950750" tracker="bnc">ETHTOOL_OPTIONS error ''/sbin/ethtool -G eth1 rx 2048'': [81] Cannot set device ring parameters: Invalid argument</issue>
<issue id="950998" tracker="bnc">VUL-1: CVE-2015-7833: kernel: usbvision: crash on invalid USB device descriptors</issue>
<issue id="951110" tracker="bnc">Kernel panic when using NFS over RDMA</issue>
<issue id="951165" tracker="bnc">Some Haswell laptops wake up without reason from S3</issue>
<issue id="951440" tracker="bnc">VUL-0: CVE-2015-7872: kernel: Keyrings crash triggerable by unprivileged user</issue>
<issue id="951638" tracker="bnc">Partner-L3: bcach issue: bcache backing device gets registered but not started</issue>
<issue id="951864" tracker="bnc">Writing to a target lun above 140K using Intel x550 adapter fails</issue>
<issue id="952384" tracker="bnc">VUL-1: CVE-2015-7990: kernel: Incomplete fix for CVE-2015-6937, RDS socket handling</issue>
<issue id="952666" tracker="bnc">Persistent Reservation checks for non-holders incorrectly return RESERVATION CONFLICT</issue>
<issue id="953717" tracker="bnc">[SLES12 SP1] x86/tsc: Let high latency PIT fail fast in quick_pit_calibrate()</issue>
<issue id="953826" tracker="bnc">i915: "BUG: scheduling while atomic" with GM45 gfx</issue>
<issue id="953830" tracker="bnc">i915: [drm:intel_pipe_config_compare] *ERROR* mismatch in adjusted_mode.clock (expected 108000, found 0)</issue>
<issue id="953971" tracker="bnc">i915: Backlight control lost on PineView laptop</issue>
<issue id="953980" tracker="bnc">i915: WARNING at ../drivers/gpu/drm/i915/i915_irq.c:91 i915_hpd_irq_setup</issue>
<issue id="954635" tracker="bnc">kABI Breakage in kernel update 3.12.48-52.27.1</issue>
<issue id="954986" tracker="bnc">SLES 12 SP1 - IBM LTC System z maintenance kernel patches (#03)</issue>
<issue id="955136" tracker="bnc">perf/x86/intel/uncore: Fix multi-segment problem of perf_event_intel_uncore</issue>
<issue id="955148" tracker="bnc">additional memory hotplug patches required for PRIMEQUEST</issue>
<issue id="955224" tracker="bnc">PMTU flapping problem in SLES12</issue>
<issue id="955354" tracker="bnc">VUL-1: CVE-2015-8215: kernel: net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does notvalidate attempted cha...</issue>
<issue id="955422" tracker="bnc">fragmented IPv6 multicast frames sometimes missing with bridged macvlan</issue>
<issue id="955533" tracker="bnc">LTP: syscall.tcf fanotify06 failed in all platforms</issue>
<issue id="955644" tracker="bnc">unify CONFIG_CRASHER on all archs</issue>
<issue id="956047" tracker="bnc">"setting latency timer to 64" message spams</issue>
<issue id="956053" tracker="bnc">VUL-0: CVE-2015-8374: kernel: Btrfs: data loss, file corruption and security vulnerability when using the clone ioctl</issue>
<issue id="956147" tracker="bnc">PV images do not boot</issue>
<issue id="956284" tracker="bnc">"Regenerating hibernation key" popup at boot screen</issue>
<issue id="956703" tracker="bnc">Kernel oops when tracing task interacting with NFS</issue>
<issue id="956711" tracker="bnc">Scheduling while atomic bug in ring_buffer code</issue>
<issue id="956717" tracker="bnc">[Intel SLES12SP1 Bug] MD: Reshape with IMSM metadata does not start (regression)</issue>
<issue id="956801" tracker="bnc">reboot error in VMware ESXi host (5.1, 5.5 or 6.0)</issue>
<issue id="956876" tracker="bnc">L3: 'shutdown -r -t 0' causes kernel panic: kernel BUG at ../drivers/gpu/drm/vmwgfx/vmwgfx_drv.c:904</issue>
<issue id="957395" tracker="bnc">isolcpus is ignored by load balancer when used with cpusets</issue>
<issue id="957546" tracker="bnc">Partner-L3: IERROR at loading xhci_hcd driver</issue>
<issue id="958504" tracker="bnc">Constant background noise on T440s and loud cracking noise after audio powersave</issue>
<issue id="958510" tracker="bnc">Spurious 'modversion changed' messages in drivers/edac</issue>
<issue id="958647" tracker="bnc">Btrfs: several ENOSPC fixes from upstream</issue>
<issue id="CVE-2015-0272" tracker="cve" />
<issue id="CVE-2015-5156" tracker="cve" />
<issue id="CVE-2015-7872" tracker="cve" />
<issue id="CVE-2015-7799" tracker="cve" />
<issue id="CVE-2015-2925" tracker="cve" />
<issue id="CVE-2015-7990" tracker="cve" />
<issue id="CVE-2015-8215" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>michal-m</packager>
<reboot_needed/>
<description>
The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.51 to receive
various security and bugfixes.
Following features were added:
- hwrng: Add a driver for the hwrng found in power7+ systems (fate#315784).
Following security bugs were fixed:
- CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 stack in the Linux
kernel did not validate attempted changes to the MTU value, which allowed
context-dependent attackers to cause a denial of service (packet loss)
via a value that is (1) smaller than the minimum compliant value or
(2) larger than the MTU of an interface, as demonstrated by a Router
Advertisement (RA) message that is not validated by a daemon, a different
vulnerability than CVE-2015-0272. (bsc#955354)
- CVE-2015-5156: The virtnet_probe function in drivers/net/virtio_net.c in
the Linux kernel attempted to support a FRAGLIST feature without proper
memory allocation, which allowed guest OS users to cause a denial of
service (buffer overflow and memory corruption) via a crafted sequence
of fragmented packets (bnc#940776).
- CVE-2015-7872: The key_gc_unused_keys function in security/keys/gc.c
in the Linux kernel allowed local users to cause a denial of service
(OOPS) via crafted keyctl commands (bnc#951440).
- CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in
the Linux kernel did not ensure that certain slot numbers are valid,
which allowed local users to cause a denial of service (NULL
pointer dereference and system crash) via a crafted PPPIOCSMAXCID ioctl
call (bnc#949936).
- CVE-2015-2925: The prepend_path function in fs/dcache.c in the Linux
kernel did not properly handle rename actions inside a bind mount, which
allowed local users to bypass an intended container protection mechanism
by renaming a directory, related to a "double-chroot attack (bnc#926238).
- CVE-2015-7990: RDS: Verify the underlying transport exists before
creating a connection, preventing possible DoS (bsc#952384).
The following non-security bugs were fixed:
- af_iucv: avoid path quiesce of severed path in shutdown() (bnc#954986, LTC#131684).
- alsa: hda - Disable 64bit address for Creative HDA controllers (bnc#814440).
- alsa: hda - Fix noise problems on Thinkpad T440s (boo#958504).
- alsa: hda - Fix noise problems on Thinkpad T440s (boo#958504).
- apparmor: allow SYS_CAP_RESOURCE to be sufficient to prlimit another task (bsc#921949).
- audit: correctly record file names with different path name types (bsc#950013).
- audit: create private file name copies when auditing inodes (bsc#950013).
- bcache: Add btree_insert_node() (bnc#951638).
- bcache: Add explicit keylist arg to btree_insert() (bnc#951638).
- bcache: backing device set to clean after finishing detach (bsc#951638).
- bcache: backing device set to clean after finishing detach (bsc#951638).
- bcache: Clean up keylist code (bnc#951638).
- bcache: Convert btree_insert_check_key() to btree_insert_node() (bnc#951638).
- bcache: Convert bucket_wait to wait_queue_head_t (bnc#951638).
- bcache: Convert try_wait to wait_queue_head_t (bnc#951638).
- bcache: Explicitly track btree node's parent (bnc#951638).
- bcache: Fix a bug when detaching (bsc#951638).
- bcache: Fix a lockdep splat in an error path (bnc#951638).
- bcache: Fix a shutdown bug (bsc#951638).
- bcache: Fix more early shutdown bugs (bsc#951638).
- bcache: Fix sysfs splat on shutdown with flash only devs (bsc#951638).
- bcache: Insert multiple keys at a time (bnc#951638).
- bcache: kill closure locking usage (bnc#951638).
- bcache: Refactor journalling flow control (bnc#951638).
- bcache: Refactor request_write() (bnc#951638).
- bcache: Use blkdev_issue_discard() (bnc#951638).
- btrfs: Adjust commit-transaction condition to avoid NO_SPACE more (bsc#958647).
- btrfs: Adjust commit-transaction condition to avoid NO_SPACE more (bsc#958647).
- btrfs: cleanup: remove no-used alloc_chunk in btrfs_check_data_free_space() (bsc#958647).
- btrfs: cleanup: remove no-used alloc_chunk in btrfs_check_data_free_space() (bsc#958647).
- btrfs: fix condition of commit transaction (bsc#958647).
- btrfs: fix condition of commit transaction (bsc#958647).
- btrfs: fix file corruption and data loss after cloning inline extents (bnc#956053).
- btrfs: Fix out-of-space bug (bsc#958647).
- btrfs: Fix out-of-space bug (bsc#958647).
- btrfs: Fix tail space processing in find_free_dev_extent() (bsc#958647).
- btrfs: Fix tail space processing in find_free_dev_extent() (bsc#958647).
- btrfs: fix the number of transaction units needed to remove a block group (bsc#958647).
- btrfs: fix the number of transaction units needed to remove a block group (bsc#958647).
- btrfs: fix truncation of compressed and inlined extents (bnc#956053).
- btrfs: Set relative data on clear btrfs_block_group_cache-&gt;pinned (bsc#958647).
- btrfs: Set relative data on clear btrfs_block_group_cache->pinned (bsc#958647).
- btrfs: use global reserve when deleting unused block group after ENOSPC (bsc#958647).
- btrfs: use global reserve when deleting unused block group after ENOSPC (bsc#958647).
- cache: Fix sysfs splat on shutdown with flash only devs (bsc#951638).
- cpu: Defer smpboot kthread unparking until CPU known to scheduler (bsc#936773).
- cpusets, isolcpus: exclude isolcpus from load balancing in cpusets (bsc#957395).
- cxgb4i: Increased the value of MAX_IMM_TX_PKT_LEN from 128 to 256 bytes (bsc#950580).
- dlm: make posix locks interruptible, (bsc#947241).
- dmapi: Fix xfs dmapi to not unlock & lock XFS_ILOCK_EXCL (bsc#949744).
- dm: do not start current request if it would've merged with the previous (bsc#904348).
- dm: impose configurable deadline for dm_request_fn's merge heuristic (bsc#904348).
- dm-snap: avoid deadock on s-&gt;lock when a read is split (bsc#939826).
- dm sysfs: introduce ability to add writable attributes (bsc#904348).
- drm: Allocate new master object when client becomes master (bsc#956876, bsc#956801).
- drm: Fix KABI of "struct drm_file" (bsc#956876, bsc#956801).
- drm/i915: add hotplug activation period to hotplug update mask (bsc#953980).
- drm/i915: clean up backlight conditional build (bsc#941113).
- drm/i915: debug print on backlight register (bsc#941113).
- drm/i915: do full backlight setup at enable time (bsc#941113).
- drm/i915: do not save/restore backlight registers in KMS (bsc#941113).
- drm/i915: Eliminate lots of WARNs when there's no backlight present (bsc#941113).
- drm/i915: fix gen2-gen3 backlight set (bsc#941113,bsc#953971).
- drm/i915: Fix gen3 self-refresh watermarks (bsc#953830,bsc#953971).
- drm/i915: Fix missing backlight update during panel disablement (bsc#941113).
- drm/i915: Fix SRC_COPY width on 830/845g (bsc#758040).
- drm/i915: gather backlight information at setup (bsc#941113).
- drm/i915: handle backlight through chip specific functions (bsc#941113).
- drm/i915: Ignore "digital output" and "not HDMI output" bits for eDP detection (bsc#949192).
- drm/i915: make asle notifications update backlight on all connectors (bsc#941113).
- drm/i915: make backlight info per-connector (bsc#941113).
- drm/i915: move backlight level setting in enable/disable to hooks (bsc#941113).
- drm/i915: move opregion asle request handling to a work queue (bsc#953826).
- drm/i915: nuke get max backlight functions (bsc#941113).
- drm/i915/opregion: fix build error on CONFIG_ACPI=n (bsc#953826).
- drm/i915: restore backlight precision when converting from ACPI (bsc#941113).
- drm/i915/tv: add -&gt;get_config callback (bsc#953830).
- drm/i915: use backlight legacy combination mode also for i915gm/i945gm (bsc#941113).
- drm/i915: use the initialized backlight max value instead of reading it (bsc#941113).
- drm/i915: vlv does not have pipe field in backlight registers (bsc#941113).
- fanotify: fix notification of groups with inode & mount marks (bsc#955533).
- Fix remove_and_add_spares removes drive added as spare in slot_store (bsc#956717).
- genksyms: Handle string literals with spaces in reference files (bsc#958510).
- genksyms: Handle string literals with spaces in reference files (bsc#958510).
- hwrng: Add a driver for the hwrng found in power7+ systems (fate#315784).
in the non-RT kernel to minimize the differences.
- ipv4: Do not increase PMTU with Datagram Too Big message (bsc#955224).
- ipv6: distinguish frag queues by device for multicast and link-local packets (bsc#955422).
- ixgbe: fix broken PFC with X550 (bsc#951864).
- ixgbe: use correct fcoe ddp max check (bsc#951864).
- kabi: Fix spurious kabi change in mm/util.c.
- kABI: protect struct ahci_host_priv.
- kabi: Restore kabi in struct iscsi_tpg_attrib (bsc#954635).
- kabi: Restore kabi in struct se_cmd (bsc#954635).
- kabi: Restore kabi in struct se_subsystem_api (bsc#954635).
- ktime: add ktime_after and ktime_before helper (bsc#904348).
- mm: factor commit limit calculation (VM Performance).
- mm: get rid of "vmalloc_info" from /proc/meminfo (VM Performance).
- mm: hugetlbfs: skip shared VMAs when unmapping private pages to satisfy a fault (Automatic NUMA Balancing (fate#315482)).
- mm: remove PG_waiters from PAGE_FLAGS_CHECK_AT_FREE (bnc#943959).
- mm: vmscan: never isolate more pages than necessary (VM Performance).
- Move ktime_after patch to the networking section
- nfsrdma: Fix regression in NFSRDMA server (bsc#951110).
- pci: Drop "setting latency timer" messages (bsc#956047).
- pci: Update VPD size with correct length (bsc#924493).
- perf/x86/intel/uncore: Delete an unnecessary check before pci_dev_put() call (bsc#955136).
- perf/x86/intel/uncore: Delete an unnecessary check before pci_dev_put() call (bsc#955136).
- perf/x86/intel/uncore: Fix multi-segment problem of perf_event_intel_uncore (bsc#955136).
- perf/x86/intel/uncore: Fix multi-segment problem of perf_event_intel_uncore (bsc#955136).
- pm, hinernate: use put_page in release_swap_writer (bnc#943959).
- rcu: Eliminate deadlock between CPU hotplug and expedited grace periods (bsc#949706).
- Re-add copy_page_vector_to_user()
- ring-buffer: Always run per-cpu ring buffer resize with schedule_work_on() (bnc#956711).
- route: Use ipv4_mtu instead of raw rt_pmtu (bsc#955224).
- rpm/constraints.in: Require 14GB worth of disk space on POWER The builds started to fail randomly due to ENOSPC errors.
- rpm/kernel-binary.spec.in: Always build zImage for ARM
- rpm/kernel-binary.spec.in: Do not explicitly set DEBUG_SECTION_MISMATCH CONFIG_DEBUG_SECTION_MISMATCH is a selectable Kconfig option since 2.6.39 and is enabled in our configs.
- rpm/kernel-binary.spec.in: Drop the %build_src_dir macro It is the parent directory of the O= directory.
- rpm/kernel-binary.spec.in: really pass down %{?_smp_mflags}
- rpm/kernel-binary.spec.in: Use parallel make in all invocations Also, remove the lengthy comment, since we are using a standard rpm macro now.
- rpm/kernel-binary.spec.in: Use upstream script to support config.addon
- s390/dasd: fix disconnected device with valid path mask (bnc#954986, LTC#132707).
- s390/dasd: fix invalid PAV assignment after suspend/resume (bnc#954986, LTC#132706).
- s390/dasd: fix list_del corruption after lcu changes (bnc#954986, LTC#133077).
- sched: Call select_idle_sibling() when not affine_sd (Scheduler Performance).
- sched/core: Fix task and run queue sched_info::run_delay inconsistencies (bnc#949100).
- sched, isolcpu: make cpu_isolated_map visible outside scheduler (bsc#957395).
- sched/numa: Check all nodes when placing a pseudo-interleaved group (Automatic NUMA Balancing (fate#315482)).
- sched/numa: Fix math underflow in task_tick_numa() (Automatic NUMA Balancing (fate#315482)).
- sched/numa: Only consider less busy nodes as numa balancing destinations (Automatic NUMA Balancing (fate#315482)).
- sched: Put expensive runtime debugging checks under a separate Kconfig entry (Scheduler performance).
- scsi: hosts: update to use ida_simple for host_no (bsc#939926)
- sunrpc/cache: make cache flushing more reliable (bsc#947478).
- sunrpc: Fix oops when trace sunrpc_task events in nfs client (bnc#956703).
- supported.conf: Support peak_pci and sja1000: These 2 CAN drivers are
supported in the RT kernel for a long time so we can also support them
- target/pr: fix core_scsi3_pr_seq_non_holder() caller (bnc#952666).
- target: Send UA upon LUN RESET tmr completion (bsc#933514).
- target: use "se_dev_entry" when allocating UAs (bsc#933514).
- Update config files. (bnc#955644)
- Update kabi files with sbc_parse_cdb symbol change (bsc#954635).
- usbvision fix overflow of interfaces array (bnc#950998).
- vmxnet3: adjust ring sizes when interface is down (bsc#950750).
- vmxnet3: Fix ethtool -S to return correct rx queue stats (bsc#950750).
- x86/efi: Fix invalid parameter error when getting hibernation key (fate#316350, bsc#956284).
- x86/evtchn: make use of PHYSDEVOP_map_pirq.
- x86/mm: Add parenthesis for TLB tracepoint size calculation (VM Performance (Reduce IPIs during reclaim)).
- x86/mm/hotplug: Modify PGD entry when removing memory (VM Functionality, bnc#955148).
- x86/mm/hotplug: Pass sync_global_pgds() a correct argument in remove_pagetable() (VM Functionality, bnc#955148).
- x86/tsc: Let high latency PIT fail fast in quick_pit_calibrate() (bsc#953717).
- xen: fix boot crash in EC2 settings (bsc#956147).
- xen: refresh patches.xen/xen-x86_64-m2p-strict (bsc#956147).
- xen: Update Xen patches to 3.12.50.
- xfs: always drain dio before extending aio write submission (bsc#949744).
- xfs: DIO needs an ioend for writes (bsc#949744).
- xfs: DIO write completion size updates race (bsc#949744).
- xfs: DIO writes within EOF do not need an ioend (bsc#949744).
- xfs: direct IO EOF zeroing needs to drain AIO (bsc#949744).
- xfs: do not allocate an ioend for direct I/O completions (bsc#949744).
- xfs: factor DIO write mapping from get_blocks (bsc#949744).
- xfs: handle DIO overwrite EOF update completion correctly (bsc#949744).
- xfs: move DIO mapping size calculation (bsc#949744).
- xfs: using generic_file_direct_write() is unnecessary (bsc#949744).
- xhci: Add spurious wakeup quirk for LynxPoint-LP controllers (bnc#951165).
- xhci: Workaround to get Intel xHCI reset working more reliably (bnc#957546).
- zfcp: fix fc_host port_type with NPIV (bnc#954986, LTC#132479).
</description>
<summary>Security update for the Linux Kernel</summary>
</patchinfo>
