{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "The SUSE Linux Enterprise 12 SP4 azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).\n- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).\n- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).\n- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).\n- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).\n- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).\n- CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR (bnc#1169390).\n- CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).\n- CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).\n- CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it (bnc#1165111).\n- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).\n\n\nThe following non-security bugs were fixed:\n\n- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).\n- ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).\n- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).\n- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).\n- ALSA: dummy: Fix PCM format loop in proc output (bsc#1111666).\n- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).\n- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).\n- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).\n- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).\n- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).\n- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).\n- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).\n- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).\n- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).\n- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).\n- ALSA: info: remove redundant assignment to variable c (bsc#1051510).\n- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).\n- ALSA: line6: Fix endless MIDI read loop (git-fixes).\n- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).\n- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).\n- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).\n- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).\n- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).\n- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).\n- ALSA: via82xx: Fix endianness annotations (bsc#1051510).\n- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).\n- ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map() (bsc#1051510).\n- ASoC: Intel: mrfld: fix incorrect check on p->sink (bsc#1051510).\n- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).\n- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).\n- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).\n- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).\n- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).\n- ASoC: samsung: Prevent clk_get_rate() calls in atomic context (bsc#1111666).\n- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).\n- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).\n- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).\n- atm: zatm: Fix empty body Clang warnings (bsc#1051510).\n- atomic: Add irqsave variant of atomic_dec_and_lock() (bsc#1166003).\n- b43legacy: Fix -Wcast-function-type (bsc#1051510).\n- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).\n- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).\n- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).\n- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).\n- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).\n- blktrace: fix dereference after null check (bsc#1159285).\n- blktrace: fix trace mutex deadlock (bsc#1159285).\n- block: allow gendisk's request_queue registration to be (bsc#1104967,bsc#1159142).\n- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).\n- block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).\n- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).\n- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).\n- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).\n- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).\n- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).\n- bpf: fix ldx in ld_abs rewrite for large offsets (bsc#1154385).\n- bpf: implement ld_abs/ld_ind in native bpf (bsc#1154385).\n- bpf: make unknown opcode handling more robust (bsc#1154385).\n- bpf: prefix cbpf internal helpers with bpf_ (bsc#1154385).\n- bpf, x64: remove ld_abs/ld_ind (bsc#1154385).\n- bpf, x64: save several bytes by using mov over movabsq when possible (bsc#1154385).\n- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).\n- btrfs: add a flush step for delayed iputs (bsc#1165949).\n- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).\n- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).\n- btrfs: add enospc debug messages for ticket failure (bsc#1165949).\n- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).\n- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).\n- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).\n- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).\n- btrfs: always reserve our entire size for the global reserve (bsc#1165949).\n- btrfs: assert on non-empty delayed iputs (bsc##1165949).\n- btrfs: be more explicit about allowed flush states (bsc#1165949).\n- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).\n- btrfs: catch cow on deleting snapshots (bsc#1165949).\n- btrfs: change the minimum global reserve size (bsc#1165949).\n- btrfs: check if there are free block groups for commit (bsc#1165949).\n- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).\n- btrfs: cleanup extent_op handling (bsc#1165949).\n- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).\n- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).\n- btrfs: clear space cache inode generation always (bsc#1165949).\n- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).\n- btrfs: do not account global reserve in can_overcommit (bsc#1165949).\n- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).\n- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).\n- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).\n- btrfs: do not enospc all tickets on flush failure (bsc#1165949).\n- btrfs: do not run delayed_iputs in commit (bsc##1165949).\n- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).\n- btrfs: do not use ctl->free_space for max_extent_size (bsc##1165949).\n- btrfs: do not use global reserve for chunk allocation (bsc#1165949).\n- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).\n- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).\n- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).\n- btrfs: export block group accounting helpers (bsc#1165949).\n- btrfs: export block_rsv_use_bytes (bsc#1165949).\n- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).\n- btrfs: export __btrfs_block_rsv_release (bsc#1165949).\n- btrfs: export space_info_add_*_bytes (bsc#1165949).\n- btrfs: export the block group caching helpers (bsc#1165949).\n- btrfs: export the caching control helpers (bsc#1165949).\n- btrfs: export the excluded extents helpers (bsc#1165949).\n- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).\n- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).\n- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).\n- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).\n- btrfs: factor out the ticket flush handling (bsc#1165949).\n- btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents (bsc#1163508).\n- btrfs: fix insert_reserved error handling (bsc##1165949).\n- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).\n- btrfs: fix missing delayed iputs on unmount (bsc#1165949).\n- btrfs: fix panic during relocation after ENOSPC before writeback happens (bsc#1163508).\n- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).\n- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).\n- btrfs: fix truncate throttling (bsc#1165949).\n- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).\n- btrfs: Improve global reserve stealing logic (bsc#1165949).\n- btrfs: introduce an evict flushing state (bsc#1165949).\n- btrfs: introduce delayed_refs_rsv (bsc#1165949).\n- btrfs: loop in inode_rsv_refill (bsc#1165949).\n- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).\n- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).\n- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).\n- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).\n- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).\n- btrfs: migrate nocow and reservation helpers (bsc#1165949).\n- btrfs: migrate the alloc_profile helpers (bsc#1165949).\n- btrfs: migrate the block group caching code (bsc#1165949).\n- btrfs: migrate the block group cleanup code (bsc#1165949).\n- btrfs: migrate the block group lookup code (bsc#1165949).\n- btrfs: migrate the block group read/creation code (bsc#1165949).\n- btrfs: migrate the block group ref counting stuff (bsc#1165949).\n- btrfs: migrate the block group removal code (bsc#1165949).\n- btrfs: migrate the block group space accounting helpers (bsc#1165949).\n- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).\n- btrfs: migrate the chunk allocation code (bsc#1165949).\n- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).\n- btrfs: migrate the delayed refs rsv code (bsc#1165949).\n- btrfs: migrate the dirty bg writeout code (bsc#1165949).\n- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).\n- btrfs: move and export can_overcommit (bsc#1165949).\n- btrfs: move basic block_group definitions to their own header (bsc#1165949).\n- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).\n- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).\n- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).\n- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).\n- btrfs: move dump_space_info to space-info.c (bsc#1165949).\n- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).\n- btrfs: move space_info to space-info.h (bsc#1165949).\n- btrfs: move the space_info handling code to space-info.c (bsc#1165949).\n- btrfs: move the space info update macro to space-info.h (bsc#1165949).\n- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).\n- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).\n- btrfs: only check priority tickets for priority flushing (bsc#1165949).\n- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).\n- btrfs: only reserve metadata_size for inodes (bsc#1165949).\n- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).\n- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).\n- btrfs: pass root to various extent ref mod functions (bsc#1165949).\n- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).\n- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).\n- btrfs: refactor the ticket wakeup code (bsc#1165949).\n- btrfs: release metadata before running delayed refs (bsc##1165949).\n- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).\n- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).\n- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).\n- btrfs: Remove redundant argument of flush_space (bsc#1165949).\n- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).\n- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).\n- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).\n- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).\n- btrfs: reserve delalloc metadata differently (bsc#1165949).\n- btrfs: reserve extra space during evict (bsc#1165949).\n- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).\n- btrfs: reset max_extent_size properly (bsc##1165949).\n- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).\n- btrfs: rework wake_all_tickets (bsc#1165949).\n- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).\n- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).\n- btrfs: run delayed iput at unlink time (bsc#1165949).\n- btrfs: run delayed iputs before committing (bsc#1165949).\n- btrfs: set max_extent_size properly (bsc##1165949).\n- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).\n- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).\n- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).\n- btrfs: temporarily export fragment_free_space (bsc#1165949).\n- btrfs: temporarily export inc_block_group_ro (bsc#1165949).\n- btrfs: track DIO bytes in flight (bsc#1165949).\n- btrfs: unexport can_overcommit (bsc#1165949).\n- btrfs: unexport the temporary exported functions (bsc#1165949).\n- btrfs: unify error handling for ticket flushing (bsc#1165949).\n- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).\n- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).\n- btrfs: wait on caching when putting the bg cache (bsc#1165949).\n- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).\n- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).\n- ceph: canonicalize server path in place (bsc#1168443).\n- ceph: remove the extra slashes in the server path (bsc#1168443).\n- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).\n- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).\n- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).\n- cifs: add a debug macro that prints \\\\server\\share for errors (bsc#1144333).\n- cifs: add missing mount option to /proc/mounts (bsc#1144333).\n- cifs: add new debugging macro cifs_server_dbg (bsc#1144333).\n- cifs: add passthrough for smb2 setinfo (bsc#1144333).\n- cifs: add SMB2_open() arg to return POSIX data (bsc#1144333).\n- cifs: add smb2 POSIX info level (bsc#1144333).\n- cifs: add SMB3 change notification support (bsc#1144333).\n- cifs: add support for fallocate mode 0 for non-sparse files (bsc#1144333).\n- cifs: Add support for setting owner info, dos attributes, and create time (bsc#1144333).\n- cifs: Add tracepoints for errors on flush or fsync (bsc#1144333).\n- cifs: Adjust indentation in smb2_open_file (bsc#1144333).\n- cifs: allow chmod to set mode bits using special sid (bsc#1144333).\n- cifs: Avoid doing network I/O while holding cache lock (bsc#1144333).\n- cifs: call wake_up(&server->response_q) inside of cifs_reconnect() (bsc#1144333).\n- cifs: Clean up DFS referral cache (bsc#1144333).\n- cifs: create a helper function to parse the query-directory response buffer (bsc#1144333).\n- cifs: do d_move in rename (bsc#1144333).\n- cifs: Do not display RDMA transport on reconnect (bsc#1144333).\n- cifs: do not ignore the SYNC flags in getattr (bsc#1144333).\n- cifs: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).\n- cifs: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).\n- cifs: enable change notification for SMB2.1 dialect (bsc#1144333).\n- cifs: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).\n- cifs: fix a comment for the timeouts when sending echos (bsc#1144333).\n- cifs: fix a white space issue in cifs_get_inode_info() (bsc#1144333).\n- cifs: fix dereference on ses before it is null checked (bsc#1144333).\n- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).\n- cifs: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).\n- cifs: Fix mode output in debugging statements (bsc#1144333).\n- cifs: Fix mount options set in automount (bsc#1144333).\n- cifs: fix NULL dereference in match_prepath (bsc#1144333).\n- cifs: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).\n- cifs: fix potential mismatch of UNC paths (bsc#1144333).\n- cifs: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).\n- cifs: Fix return value in __update_cache_entry (bsc#1144333).\n- cifs: fix soft mounts hanging in the reconnect code (bsc#1144333).\n- cifs: Fix task struct use-after-free on reconnect (bsc#1144333).\n- cifs: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).\n- cifs: get mode bits from special sid on stat (bsc#1144333).\n- cifs: Get rid of kstrdup_const()'d paths (bsc#1144333).\n- cifs: handle prefix paths in reconnect (bsc#1144333).\n- cifs: ignore cached share root handle closing errors (bsc#1166780).\n- cifs: Introduce helpers for finding TCP connection (bsc#1144333).\n- cifs: log warning message (once) if out of disk space (bsc#1144333).\n- cifs: make sure we do not overflow the max EA buffer size (bsc#1144333).\n- cifs: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).\n- cifs: Merge is_path_valid() into get_normalized_path() (bsc#1144333).\n- cifs: modefromsid: make room for 4 ACE (bsc#1144333).\n- cifs: modefromsid: write mode ACE first (bsc#1144333).\n- cifs: Optimize readdir on reparse points (bsc#1144333).\n- cifs: plumb smb2 POSIX dir enumeration (bsc#1144333).\n- cifs: potential unintitliazed error code in cifs_getattr() (bsc#1144333).\n- cifs: prepare SMB2_query_directory to be used with compounding (bsc#1144333).\n- cifs: print warning once if mounting with vers=1.0 (bsc#1144333).\n- cifs: refactor cifs_get_inode_info() (bsc#1144333).\n- cifs: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).\n- cifs: remove redundant assignment to variable rc (bsc#1144333).\n- cifs: remove set but not used variables (bsc#1144333).\n- cifs: remove set but not used variable 'server' (bsc#1144333).\n- cifs: remove unused variable (bsc#1144333).\n- cifs: remove unused variable 'sid_user' (bsc#1144333).\n- cifs: rename a variable in SendReceive() (bsc#1144333).\n- cifs: rename posix create rsp (bsc#1144333).\n- cifs: replace various strncpy with strscpy and similar (bsc#1144333).\n- cifs: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).\n- cifs: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).\n- cifs: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).\n- cifs: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).\n- cifs: smbd: Only queue work for error recovery on memory registration (bsc#1144333).\n- cifs: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).\n- cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).\n- cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).\n- cifs: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).\n- cifs: use compounding for open and first query-dir for readdir() (bsc#1144333).\n- cifs: Use #define in cifs_dbg (bsc#1144333).\n- cifs: Use memdup_user() rather than duplicating its implementation (bsc#1144333).\n- cifs: use mod_delayed_work() for &server->reconnect if already queued (bsc#1144333).\n- cifs: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).\n- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).\n- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).\n- configfs: Fix bool initialization/comparison (bsc#1051510).\n- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).\n- cpufreq: powernv: Fix use-after-free (bsc#1065729).\n- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).\n- cpuidle: Do not unset the driver if it is there already (bsc#1051510).\n- crypto: arm64/sha-ce - implement export/import (bsc#1051510).\n- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).\n- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).\n- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).\n- debugfs: add support for more elaborate ->d_fsdata (bsc#1159198  bsc#1109911).\n- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911).\n- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).\n- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911).\n- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198).\n- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911).\n- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911).\n- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911).\n- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911).\n- debugfs: simplify __debugfs_remove_file() (bsc#1159198).\n- Delete patches which cause regression (bsc#1165527 ltc#184149).\n- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).\n- device: Use overflow helpers for devm_kmalloc() (bsc#1166003).\n- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).\n- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).\n- dm: fix incomplete request_queue initialization (bsc#1104967,bsc#1159142).\n- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).\n- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).\n- driver core: Print device when resources present in really_probe() (bsc#1051510).\n- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).\n- drivers/md/raid5: Do not disable irq on release_inactive_stripe_list() call (bsc#1166003).\n- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).\n- drivers/md/raid5: Use irqsave variant of atomic_dec_and_lock() (bsc#1166003).\n- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).\n- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)\n- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)\n- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).\n- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).\n- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).\n- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).\n- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)\n- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).\n- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)\n- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279)\n- drm/i915/userptr: fix size calculation (bsc#1114279)\n- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)\n- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)\n- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)\n- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)\n- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).\n- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)\n- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)\n- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).\n- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).\n- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).\n- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).\n- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).\n- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).\n- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)\n- drm: remove the newline for CRC source name (bsc#1051510).\n- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).\n- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).\n- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).\n- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).\n- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).\n- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).\n- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).\n- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).\n- ext4: fix a data race in EXT4_I(inode)->i_disksize (bsc#1166861).\n- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).\n- ext4: fix incorrect inodes per group in error message (bsc#1168764).\n- ext4: fix potential race between online resizing and write operations (bsc#1166864).\n- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).\n- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).\n- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).\n- ext4: fix support for inode sizes > 1024 bytes (bsc#1164284).\n- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).\n- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).\n- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).\n- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).\n- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).\n- fbdev/g364fb: Fix build failure (bsc#1051510).\n- fbdev: potential information leak in do_fb_ioctl() (bsc#1114279)\n- fbmem: Adjust indentation in fb_prepare_logo and fb_blank (bsc#1114279)\n- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).\n- fix memory leak in large read decrypt offload (bsc#1144333).\n- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).\n- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).\n- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).\n- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).\n- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).\n- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).\n- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).\n- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).\n- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).\n- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).\n- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).\n- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).\n- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).\n- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).\n- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).\n- hv_netvsc: pass netvsc_device to rndis halt\n- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).\n- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).\n- i2c: jz4780: silence log flood on txabrt (bsc#1051510).\n- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).\n- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).\n- ibmvfc: do not send implicit logouts prior to NPIV login (bsc#1169625 ltc#184611).\n- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).\n- ibmvnic: Do not process device remove during device reset (bsc#1065729).\n- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).\n- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: imu: adis16480: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).\n- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).\n- Input: add safety guards to input_set_keycode() (bsc#1168075).\n- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).\n- Input: edt-ft5x06 - work around first register access error (bsc#1051510).\n- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).\n- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).\n- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).\n- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).\n- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).\n- intel_th: Fix user-visible error codes (bsc#1051510).\n- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).\n- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).\n- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).\n- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).\n- iommu/dma: Fix MSI reservation allocation (bsc#1166730).\n- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).\n- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).\n- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).\n- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).\n- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).\n- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).\n- ipmi: fix hung processes in __get_guid() (git-fixes).\n- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).\n- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).\n- ipv6: Fix nlmsg_flags when splitting a multipath route (networking-stable-20_03_01).\n- ipv6: Fix route replacement with dev-only route (networking-stable-20_03_01).\n- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).\n- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).\n- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).\n- iwlegacy: Fix -Wcast-function-type (bsc#1051510).\n- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).\n- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).\n- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).\n- kabi fix for (bsc#1168202).\n- kabi: invoke bpf_gen_ld_abs() directly (bsc#1158552).\n- kABI: restore debugfs_remove_recursive() (bsc#1159198).\n- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).\n- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).\n- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).\n- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).\n- KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups (bsc#1133021).\n- KVM: s390: vsie: Fix possible race when shadowing region 3 tables (git-fixes).\n- KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks (git-fixes).\n- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).\n- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).\n- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).\n- libfs: fix infoleak in simple_attr_read() (bsc#1168881).\n- lib/raid6: add missing include for raid6test (bsc#1166003).\n- lib/raid6: add option to skip algo benchmarking (bsc#1166003).\n- lib/raid6/altivec: Add vpermxor implementation for raid6 Q syndrome (bsc#1166003).\n- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).\n- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).\n- mac80211: consider more elements in parsing CRC (bsc#1051510).\n- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).\n- mac80211: free peer keys before vif down in mesh (bsc#1051510).\n- mac80211: mesh: fix RCU warning (bsc#1051510).\n- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).\n- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).\n- macsec: add missing attribute validation for port (bsc#1051510).\n- macsec: fix refcnt leak in module exit routine (bsc#1051510).\n- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).\n- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).\n- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).\n- md: add bitmap_abort label in md_run (bsc#1166003).\n- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).\n- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).\n- md: avoid invalid memory access for array sb->dev_roles (bsc#1166003).\n- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).\n- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).\n- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).\n- md-bitmap: small cleanups (bsc#1166003).\n- md/bitmap: use mddev_suspend/resume instead of ->quiesce() (bsc#1166003).\n- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).\n- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).\n- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).\n- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).\n- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).\n- md-cluster/raid10: support add disk under grow mode (bsc#1166003).\n- md-cluster: remove suspend_info (bsc#1166003).\n- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).\n- md: convert to kvmalloc (bsc#1166003).\n- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).\n- md: do not set In_sync if array is frozen (bsc#1166003).\n- md: fix an error code format and remove unsed bio_sector (bsc#1166003).\n- md: fix a typo s/creat/create (bsc#1166003).\n- md: fix for divide error in status_resync (bsc#1166003).\n- md: fix spelling typo and add necessary space (bsc#1166003).\n- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).\n- md: introduce new personality funciton start() (bsc#1166003).\n- md-linear: use struct_size() in kzalloc() (bsc#1166003).\n- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).\n- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).\n- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).\n- md: no longer compare spare disk superblock events in super_load (bsc#1166003).\n- md/r5cache: remove redundant pointer bio (bsc#1166003).\n- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).\n- md raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).\n- md/raid10: end bio when the device faulty (bsc#1166003).\n- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).\n- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).\n- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).\n- md: raid10: Use struct_size() in kmalloc() (bsc#1166003).\n- md/raid1: avoid soft lockup under high load (bsc#1166003).\n- md: raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).\n- md/raid1: end bio when the device faulty (bsc#1166003).\n- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).\n- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).\n- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).\n- md/raid1: get rid of extra blank line and space (bsc#1166003).\n- md/raid5: Assigning NULL to sh->batch_head before testing bit R5_Overlap of a stripe (bsc#1166003).\n- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).\n- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).\n- md/raid6: implement recovery using ARM NEON intrinsics (bsc#1166003).\n- md: remove a bogus comment (bsc#1166003).\n- md: remove redundant code that is no longer reachable (bsc#1166003).\n- md: remove set but not used variable 'bi_rdev' (bsc#1166003).\n- md: rename wb stuffs (bsc#1166003).\n- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).\n- md: use correct type in super_1_load (bsc#1166003).\n- md: use correct type in super_1_sync (bsc#1166003).\n- md: use correct types in md_bitmap_print_sb (bsc#1166003).\n- media: dib0700: fix rc endpoint lookup (bsc#1051510).\n- media: flexcop-usb: fix endpoint sanity check (git-fixes).\n- media: go7007: Fix URB type for interrupt handling (bsc#1051510).\n- media: ov519: add missing endpoint sanity checks (bsc#1168829).\n- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).\n- media: ov6650: Fix some format attributes not under control (bsc#1051510).\n- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).\n- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).\n- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).\n- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).\n- media: usbtv: fix control-message timeouts (bsc#1051510).\n- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).\n- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).\n- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).\n- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).\n- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).\n- misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices (bsc#1051510).\n- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).\n- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).\n- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).\n- MM: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).\n- mm: Use overflow helpers in kvmalloc() (bsc#1166003).\n- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).\n- net: core: another layer of lists, around PF_MEMALLOC skb handling (bsc#1050549).\n- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).\n- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).\n- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).\n- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).\n- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).\n- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).\n- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).\n- net: fib_rules: Correctly set table field when table number exceeds 8 bits (networking-stable-20_03_01).\n- netfilter: conntrack: sctp: use distinct states for new SCTP connections (bsc#1159199).\n- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).\n- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).\n- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).\n- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).\n- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).\n- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).\n- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).\n- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).\n- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).\n- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).\n- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).\n- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).\n- net: phy: restore mdio regs in the iproc mdio driver (networking-stable-20_03_01).\n- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).\n- net_sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).\n- net_sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).\n- net_sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).\n- net_sched: fix datalen for ematch (networking-stable-20_01_27).\n- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).\n- net_sched: keep alloc_hash updated after hash allocation (git-fixes).\n- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).\n- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).\n- net/smc: add fallback check to connect() (git-fixes).\n- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).\n- net/smc: fix refcount non-blocking connect() -part 2 (git-fixes).\n- net: stmmac: Delete txtimer in suspend() (networking-stable-20_02_05).\n- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).\n- net-sysfs: Fix reference count leak (networking-stable-20_01_27).\n- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).\n- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).\n- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).\n- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).\n- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).\n- NFC: pn544: Fix a typo in a debug message (bsc#1051510).\n- nfc: pn544: Fix occasional HW initialization failure (networking-stable-20_03_01).\n- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).\n- NFS: send state management on a single connection (bsc#1167005).\n- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).\n- objtool: Add is_static_jump() helper (bsc#1169514).\n- objtool: Add relocation check for alternative sections (bsc#1169514).\n- OMAP: DSS2: remove non-zero check on variable r (bsc#1114279)\n- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).\n- padata: always acquire cpu_hotplug_lock before pinst->lock (git-fixes).\n- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).\n- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).\n- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).\n- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).\n- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).\n- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).\n- perf: qcom_l2: fix column exclusion check (git-fixes).\n- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).\n- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).\n- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).\n- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).\n- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).\n- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).\n- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).\n- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).\n- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).\n- powerpc/64/tm: Do not let userspace set regs->trap via sigreturn (bsc#1118338 ltc#173734).\n- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).\n- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).\n- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).\n- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).\n- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).\n- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).\n- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).\n- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).\n- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).\n- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).\n- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).\n- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).\n- pwm: bcm2835: Dynamically allocate base (bsc#1051510).\n- pwm: meson: Fix confusing indentation (bsc#1051510).\n- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).\n- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).\n- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).\n- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).\n- qede: Fix race between rdma destroy workqueue and link change event (networking-stable-20_03_01).\n- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).\n- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).\n- raid10: refactor common wait code from regular read/write request (bsc#1166003).\n- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).\n- raid1: simplify raid1_error function (bsc#1166003).\n- raid1: use an int as the return value of raise_barrier() (bsc#1166003).\n- raid5: block failing device if raid will be failed (bsc#1166003).\n- raid5-cache: Need to do start() part job after adding journal device (bsc#1166003).\n- raid5: copy write hint from origin bio to stripe (bsc#1166003).\n- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).\n- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).\n- raid5 improve too many read errors msg by adding limits (bsc#1166003).\n- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).\n- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).\n- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003).\n- raid5: set write hint for PPL (bsc#1166003).\n- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).\n- raid6/test: fix a compilation error (bsc#1166003).\n- raid6/test: fix a compilation warning (bsc#1166003).\n- remoteproc: Initialize rproc_class before use (bsc#1051510).\n- Revert 'HID: add NOGET quirk for Eaton Ellipse MAX UPS' (git-fixes).\n- Revert 'locking/pvqspinlock: Do not wait if vCPU is preempted' (bsc#1050549).\n- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).\n- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).\n- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).\n- s390/cio: avoid duplicated 'ADD' uevents (git-fixes).\n- s390/cio: generate delayed uevent for vfio-ccw subchannels (git-fixes).\n- s390/cpuinfo: fix wrong output when CPU0 is offline (git-fixes).\n- s390/diag: fix display of diagnose call statistics (git-fixes).\n- s390/gmap: return proper error code on ksm unsharing (git-fixes).\n- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).\n- s390/qeth: cancel RX reclaim work earlier (git-fixes).\n- s390/qeth: do not return -ENOTSUPP to userspace (git-fixes).\n- s390/qeth: do not warn for napi with 0 budget (git-fixes).\n- s390/qeth: fix off-by-one in RX copybreak check (git-fixes).\n- s390/qeth: fix promiscuous mode after reset (git-fixes).\n- s390/qeth: fix qdio teardown after early init error (git-fixes).\n- s390/qeth: handle error due to unsupported transport mode (git-fixes).\n- s390/qeth: handle error when backing RX buffer (git-fixes).\n- s390/qeth: lock the card while changing its hsuid (git-fixes).\n- s390/qeth: support net namespaces for L3 devices (git-fixes).\n- s390/time: Fix clk type in get_tod_clock (git-fixes).\n- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).\n- scsi: core: kABI fix offline_already (bsc#1145929).\n- scsi: fnic: do not queue commands during fwreset (bsc#1146539).\n- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.\n- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: Improve strings handling (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).\n- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).\n- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).\n- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).\n- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).\n- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).\n- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).\n- scsi: qla2xxx: add more FW debug information (bsc#1157424).\n- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).\n- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).\n- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).\n- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).\n- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).\n- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).\n- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).\n- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).\n- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).\n- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).\n- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).\n- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).\n- scsi: qla2xxx: fix FW resource count values (bsc#1157424).\n- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).\n- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).\n- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).\n- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).\n- scsi: qla2xxx: Fix RDP response size (bsc#1157424).\n- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).\n- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).\n- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).\n- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).\n- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).\n- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).\n- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).\n- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).\n- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).\n- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).\n- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).\n- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).\n- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).\n- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).\n- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).\n- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).\n- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).\n- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).\n- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).\n- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).\n- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).\n- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).\n- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).\n- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).\n- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd->se_cmd.map_tag (bsc#1157424).\n- scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point (git-fixes).\n- sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).\n- sctp: move the format error check out of __sctp_sf_do_9_1_abort (networking-stable-20_03_01).\n- serdev: ttyport: restore client ops on deregistration (bsc#1051510).\n- smb3: add debug messages for closing unmatched open (bsc#1144333).\n- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).\n- smb3: add dynamic tracepoints for flush and close (bsc#1144333).\n- smb3: add missing flag definitions (bsc#1144333).\n- smb3: Add missing reparse tags (bsc#1144333).\n- smb3: add missing worker function for SMB3 change notify (bsc#1144333).\n- smb3: add mount option to allow forced caching of read only share (bsc#1144333).\n- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).\n- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).\n- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).\n- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).\n- smb3: allow disabling requesting leases (bsc#1144333).\n- smb3: allow parallelizing decryption of reads (bsc#1144333).\n- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).\n- SMB3: Backup intent flag missing from some more ops (bsc#1144333).\n- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).\n- smb3: display max smb3 requests in flight at any one time (bsc#1144333).\n- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).\n- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).\n- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).\n- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).\n- smb3: fix performance regression with setting mtime (bsc#1144333).\n- smb3: fix potential null dereference in decrypt offload (bsc#1144333).\n- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).\n- smb3: Fix regression in time handling (bsc#1144333).\n- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).\n- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).\n- smb3: missing ACL related flags (bsc#1144333).\n- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).\n- smb3: pass mode bits into create calls (bsc#1144333).\n- smb3: print warning once if posix context returned on open (bsc#1144333).\n- smb3: query attributes on file close (bsc#1144333).\n- smb3: remove noisy debug message and minor cleanup (bsc#1144333).\n- smb3: remove unused flag passed into close functions (bsc#1144333).\n- staging: ccree: use signal safe completion wait (git-fixes).\n- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).\n- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).\n- staging: rtl8188eu: Fix potential security hole (bsc#1051510).\n- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).\n- staging: rtl8723bs: Fix potential security hole (bsc#1051510).\n- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).\n- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).\n- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).\n- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).\n- tcp: clear tp->data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: clear tp->delivered in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: clear tp->segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: clear tp->total_retrans in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).\n- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).\n- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).\n- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).\n- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).\n- tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure (git-fixes).\n- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).\n- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).\n- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).\n- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).\n- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).\n- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).\n- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).\n- USB: core: add endpoint-blacklist quirk (git-fixes).\n- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).\n- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).\n- USB: Disable LPM on WD19's Realtek Hub (git-fixes).\n- USB: dwc2: Fix in ISOC request length checking (git-fixes).\n- USB: Fix novation SourceControl XL after suspend (git-fixes).\n- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).\n- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).\n- USB: host: xhci-plat: add a shutdown (git-fixes).\n- USB: host: xhci: update event ring dequeue pointer on purpose (git-fixes).\n- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).\n- usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).\n- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).\n- USB: misc: iowarrior: add support for the 100 device (git-fixes).\n- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).\n- USB: musb: Disable pullup at init (git-fixes).\n- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).\n- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).\n- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).\n- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).\n- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).\n- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).\n- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).\n- USB: storage: Add quirk for Samsung Fit flash (git-fixes).\n- USB: uas: fix a plug & unplug racing (git-fixes).\n- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).\n- uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507)\n- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)\n- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).\n- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).\n- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).\n- vxlan: fix tos value before xmit (networking-stable-20_01_11).\n- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).\n- x86/mce/amd: Fix kobject lifetime (bsc#1114279).\n- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).\n- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).\n- x86/mm: Split vmalloc_sync_all() (bsc#1165741).\n- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).\n- x86/xen: fix booting 32-bit pv guest (bsc#1071995).\n- x86/xen: Make the boot CPU idle task reliable (bsc#1071995).\n- x86/xen: Make the secondary CPU idle tasks reliable (bsc#1071995).\n- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).\n- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).\n- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).\n- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).\n- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).\n- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).\n- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2020-1119,SUSE-SLE-SERVER-12-SP4-2020-1119",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1119-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:1119-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20201119-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:1119-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-April/006743.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1044231",
            url: "https://bugzilla.suse.com/1044231",
         },
         {
            category: "self",
            summary: "SUSE Bug 1050549",
            url: "https://bugzilla.suse.com/1050549",
         },
         {
            category: "self",
            summary: "SUSE Bug 1051510",
            url: "https://bugzilla.suse.com/1051510",
         },
         {
            category: "self",
            summary: "SUSE Bug 1051858",
            url: "https://bugzilla.suse.com/1051858",
         },
         {
            category: "self",
            summary: "SUSE Bug 1056686",
            url: "https://bugzilla.suse.com/1056686",
         },
         {
            category: "self",
            summary: "SUSE Bug 1060463",
            url: "https://bugzilla.suse.com/1060463",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065600",
            url: "https://bugzilla.suse.com/1065600",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065729",
            url: "https://bugzilla.suse.com/1065729",
         },
         {
            category: "self",
            summary: "SUSE Bug 1071995",
            url: "https://bugzilla.suse.com/1071995",
         },
         {
            category: "self",
            summary: "SUSE Bug 1083647",
            url: "https://bugzilla.suse.com/1083647",
         },
         {
            category: "self",
            summary: "SUSE Bug 1085030",
            url: "https://bugzilla.suse.com/1085030",
         },
         {
            category: "self",
            summary: "SUSE Bug 1104967",
            url: "https://bugzilla.suse.com/1104967",
         },
         {
            category: "self",
            summary: "SUSE Bug 1109911",
            url: "https://bugzilla.suse.com/1109911",
         },
         {
            category: "self",
            summary: "SUSE Bug 1111666",
            url: "https://bugzilla.suse.com/1111666",
         },
         {
            category: "self",
            summary: "SUSE Bug 1114279",
            url: "https://bugzilla.suse.com/1114279",
         },
         {
            category: "self",
            summary: "SUSE Bug 1118338",
            url: "https://bugzilla.suse.com/1118338",
         },
         {
            category: "self",
            summary: "SUSE Bug 1120386",
            url: "https://bugzilla.suse.com/1120386",
         },
         {
            category: "self",
            summary: "SUSE Bug 1133021",
            url: "https://bugzilla.suse.com/1133021",
         },
         {
            category: "self",
            summary: "SUSE Bug 1136157",
            url: "https://bugzilla.suse.com/1136157",
         },
         {
            category: "self",
            summary: "SUSE Bug 1137325",
            url: "https://bugzilla.suse.com/1137325",
         },
         {
            category: "self",
            summary: "SUSE Bug 1144333",
            url: "https://bugzilla.suse.com/1144333",
         },
         {
            category: "self",
            summary: "SUSE Bug 1145051",
            url: "https://bugzilla.suse.com/1145051",
         },
         {
            category: "self",
            summary: "SUSE Bug 1145929",
            url: "https://bugzilla.suse.com/1145929",
         },
         {
            category: "self",
            summary: "SUSE Bug 1146539",
            url: "https://bugzilla.suse.com/1146539",
         },
         {
            category: "self",
            summary: "SUSE Bug 1148868",
            url: "https://bugzilla.suse.com/1148868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1154385",
            url: "https://bugzilla.suse.com/1154385",
         },
         {
            category: "self",
            summary: "SUSE Bug 1157424",
            url: "https://bugzilla.suse.com/1157424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158552",
            url: "https://bugzilla.suse.com/1158552",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158983",
            url: "https://bugzilla.suse.com/1158983",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159037",
            url: "https://bugzilla.suse.com/1159037",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159142",
            url: "https://bugzilla.suse.com/1159142",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159198",
            url: "https://bugzilla.suse.com/1159198",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159199",
            url: "https://bugzilla.suse.com/1159199",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159285",
            url: "https://bugzilla.suse.com/1159285",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160659",
            url: "https://bugzilla.suse.com/1160659",
         },
         {
            category: "self",
            summary: "SUSE Bug 1161951",
            url: "https://bugzilla.suse.com/1161951",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162929",
            url: "https://bugzilla.suse.com/1162929",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162931",
            url: "https://bugzilla.suse.com/1162931",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163403",
            url: "https://bugzilla.suse.com/1163403",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163508",
            url: "https://bugzilla.suse.com/1163508",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163897",
            url: "https://bugzilla.suse.com/1163897",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164078",
            url: "https://bugzilla.suse.com/1164078",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164284",
            url: "https://bugzilla.suse.com/1164284",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164507",
            url: "https://bugzilla.suse.com/1164507",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164893",
            url: "https://bugzilla.suse.com/1164893",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165019",
            url: "https://bugzilla.suse.com/1165019",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165111",
            url: "https://bugzilla.suse.com/1165111",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165182",
            url: "https://bugzilla.suse.com/1165182",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165404",
            url: "https://bugzilla.suse.com/1165404",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165488",
            url: "https://bugzilla.suse.com/1165488",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165527",
            url: "https://bugzilla.suse.com/1165527",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165741",
            url: "https://bugzilla.suse.com/1165741",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165813",
            url: "https://bugzilla.suse.com/1165813",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165873",
            url: "https://bugzilla.suse.com/1165873",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165949",
            url: "https://bugzilla.suse.com/1165949",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165984",
            url: "https://bugzilla.suse.com/1165984",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165985",
            url: "https://bugzilla.suse.com/1165985",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166003",
            url: "https://bugzilla.suse.com/1166003",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166101",
            url: "https://bugzilla.suse.com/1166101",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166102",
            url: "https://bugzilla.suse.com/1166102",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166103",
            url: "https://bugzilla.suse.com/1166103",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166104",
            url: "https://bugzilla.suse.com/1166104",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166632",
            url: "https://bugzilla.suse.com/1166632",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166730",
            url: "https://bugzilla.suse.com/1166730",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166731",
            url: "https://bugzilla.suse.com/1166731",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166732",
            url: "https://bugzilla.suse.com/1166732",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166733",
            url: "https://bugzilla.suse.com/1166733",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166734",
            url: "https://bugzilla.suse.com/1166734",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166735",
            url: "https://bugzilla.suse.com/1166735",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166780",
            url: "https://bugzilla.suse.com/1166780",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166860",
            url: "https://bugzilla.suse.com/1166860",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166861",
            url: "https://bugzilla.suse.com/1166861",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166862",
            url: "https://bugzilla.suse.com/1166862",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166864",
            url: "https://bugzilla.suse.com/1166864",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166866",
            url: "https://bugzilla.suse.com/1166866",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166867",
            url: "https://bugzilla.suse.com/1166867",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166868",
            url: "https://bugzilla.suse.com/1166868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166870",
            url: "https://bugzilla.suse.com/1166870",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166940",
            url: "https://bugzilla.suse.com/1166940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167005",
            url: "https://bugzilla.suse.com/1167005",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167288",
            url: "https://bugzilla.suse.com/1167288",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167290",
            url: "https://bugzilla.suse.com/1167290",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167316",
            url: "https://bugzilla.suse.com/1167316",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167421",
            url: "https://bugzilla.suse.com/1167421",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167423",
            url: "https://bugzilla.suse.com/1167423",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167629",
            url: "https://bugzilla.suse.com/1167629",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168075",
            url: "https://bugzilla.suse.com/1168075",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168202",
            url: "https://bugzilla.suse.com/1168202",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168276",
            url: "https://bugzilla.suse.com/1168276",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168295",
            url: "https://bugzilla.suse.com/1168295",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168424",
            url: "https://bugzilla.suse.com/1168424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168443",
            url: "https://bugzilla.suse.com/1168443",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168486",
            url: "https://bugzilla.suse.com/1168486",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168760",
            url: "https://bugzilla.suse.com/1168760",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168762",
            url: "https://bugzilla.suse.com/1168762",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168763",
            url: "https://bugzilla.suse.com/1168763",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168764",
            url: "https://bugzilla.suse.com/1168764",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168765",
            url: "https://bugzilla.suse.com/1168765",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168829",
            url: "https://bugzilla.suse.com/1168829",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168854",
            url: "https://bugzilla.suse.com/1168854",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168881",
            url: "https://bugzilla.suse.com/1168881",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168884",
            url: "https://bugzilla.suse.com/1168884",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168952",
            url: "https://bugzilla.suse.com/1168952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169057",
            url: "https://bugzilla.suse.com/1169057",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169390",
            url: "https://bugzilla.suse.com/1169390",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169514",
            url: "https://bugzilla.suse.com/1169514",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169625",
            url: "https://bugzilla.suse.com/1169625",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19768 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19768/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19770 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19770/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-3701 page",
            url: "https://www.suse.com/security/cve/CVE-2019-3701/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9458 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9458/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10942 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10942/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11494 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11494/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11669 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11669/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8647 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8647/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8649 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8649/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8834 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8834/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-9383 page",
            url: "https://www.suse.com/security/cve/CVE-2020-9383/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2020-04-27T07:37:01Z",
         generator: {
            date: "2020-04-27T07:37:01Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:1119-1",
         initial_release_date: "2020-04-27T07:37:01Z",
         revision_history: [
            {
               date: "2020-04-27T07:37:01Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-azure-4.12.14-6.40.1.noarch",
                        product: {
                           name: "kernel-devel-azure-4.12.14-6.40.1.noarch",
                           product_id: "kernel-devel-azure-4.12.14-6.40.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-azure-4.12.14-6.40.1.noarch",
                        product: {
                           name: "kernel-source-azure-4.12.14-6.40.1.noarch",
                           product_id: "kernel-source-azure-4.12.14-6.40.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-azure-4.12.14-6.40.1.x86_64",
                           product_id: "cluster-md-kmp-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "dlm-kmp-azure-4.12.14-6.40.1.x86_64",
                           product_id: "dlm-kmp-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "gfs2-kmp-azure-4.12.14-6.40.1.x86_64",
                           product_id: "gfs2-kmp-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kernel-azure-4.12.14-6.40.1.x86_64",
                           product_id: "kernel-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-base-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kernel-azure-base-4.12.14-6.40.1.x86_64",
                           product_id: "kernel-azure-base-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-devel-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kernel-azure-devel-4.12.14-6.40.1.x86_64",
                           product_id: "kernel-azure-devel-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-extra-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kernel-azure-extra-4.12.14-6.40.1.x86_64",
                           product_id: "kernel-azure-extra-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-azure-kgraft-devel-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kernel-azure-kgraft-devel-4.12.14-6.40.1.x86_64",
                           product_id: "kernel-azure-kgraft-devel-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kernel-syms-azure-4.12.14-6.40.1.x86_64",
                           product_id: "kernel-syms-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kselftests-kmp-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "kselftests-kmp-azure-4.12.14-6.40.1.x86_64",
                           product_id: "kselftests-kmp-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-azure-4.12.14-6.40.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-azure-4.12.14-6.40.1.x86_64",
                           product_id: "ocfs2-kmp-azure-4.12.14-6.40.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP4",
                           product_id: "SUSE Linux Enterprise Server 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-azure-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-base-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-azure-base-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-devel-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-azure-devel-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-azure-4.12.14-6.40.1.noarch as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
            },
            product_reference: "kernel-devel-azure-4.12.14-6.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-azure-4.12.14-6.40.1.noarch as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
            },
            product_reference: "kernel-source-azure-4.12.14-6.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-azure-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-syms-azure-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-azure-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-base-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-azure-base-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-azure-devel-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-azure-devel-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-azure-4.12.14-6.40.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
            },
            product_reference: "kernel-devel-azure-4.12.14-6.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-azure-4.12.14-6.40.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
            },
            product_reference: "kernel-source-azure-4.12.14-6.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-azure-4.12.14-6.40.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            },
            product_reference: "kernel-syms-azure-4.12.14-6.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2019-19768",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19768",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19768",
               url: "https://www.suse.com/security/cve/CVE-2019-19768",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159285 for CVE-2019-19768",
               url: "https://bugzilla.suse.com/1159285",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19768",
      },
      {
         cve: "CVE-2019-19770",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19770",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19770",
               url: "https://www.suse.com/security/cve/CVE-2019-19770",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159198 for CVE-2019-19770",
               url: "https://bugzilla.suse.com/1159198",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171295 for CVE-2019-19770",
               url: "https://bugzilla.suse.com/1171295",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19770",
      },
      {
         cve: "CVE-2019-3701",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-3701",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user \"root\" with CAP_NET_ADMIN can create a CAN frame modification rule that makes the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgw_csum_xor_rel) the tail of the skb (e.g. frag_list pointer in skb_shared_info) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-3701",
               url: "https://www.suse.com/security/cve/CVE-2019-3701",
            },
            {
               category: "external",
               summary: "SUSE Bug 1120386 for CVE-2019-3701",
               url: "https://bugzilla.suse.com/1120386",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-3701",
      },
      {
         cve: "CVE-2019-9458",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9458",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9458",
               url: "https://www.suse.com/security/cve/CVE-2019-9458",
            },
            {
               category: "external",
               summary: "SUSE Bug 1168295 for CVE-2019-9458",
               url: "https://bugzilla.suse.com/1168295",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173963 for CVE-2019-9458",
               url: "https://bugzilla.suse.com/1173963",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-9458",
      },
      {
         cve: "CVE-2020-10942",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10942",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10942",
               url: "https://www.suse.com/security/cve/CVE-2020-10942",
            },
            {
               category: "external",
               summary: "SUSE Bug 1167629 for CVE-2020-10942",
               url: "https://bugzilla.suse.com/1167629",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10942",
      },
      {
         cve: "CVE-2020-11494",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11494",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11494",
               url: "https://www.suse.com/security/cve/CVE-2020-11494",
            },
            {
               category: "external",
               summary: "SUSE Bug 1168424 for CVE-2020-11494",
               url: "https://bugzilla.suse.com/1168424",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-11494",
      },
      {
         cve: "CVE-2020-11669",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11669",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11669",
               url: "https://www.suse.com/security/cve/CVE-2020-11669",
            },
            {
               category: "external",
               summary: "SUSE Bug 1169390 for CVE-2020-11669",
               url: "https://bugzilla.suse.com/1169390",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-11669",
      },
      {
         cve: "CVE-2020-8647",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8647",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8647",
               url: "https://www.suse.com/security/cve/CVE-2020-8647",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162929 for CVE-2020-8647",
               url: "https://bugzilla.suse.com/1162929",
            },
            {
               category: "external",
               summary: "SUSE Bug 1164078 for CVE-2020-8647",
               url: "https://bugzilla.suse.com/1164078",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-8647",
      },
      {
         cve: "CVE-2020-8649",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8649",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8649",
               url: "https://www.suse.com/security/cve/CVE-2020-8649",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162929 for CVE-2020-8649",
               url: "https://bugzilla.suse.com/1162929",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162931 for CVE-2020-8649",
               url: "https://bugzilla.suse.com/1162931",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-8649",
      },
      {
         cve: "CVE-2020-8834",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8834",
            },
         ],
         notes: [
            {
               category: "general",
               text: "KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 (\"KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures\") 87a11bb6a7f7 (\"KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode\") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 (\"KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()\") 7b0e827c6970 (\"KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm\") 009c872a8bc4 (\"KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file\")",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8834",
               url: "https://www.suse.com/security/cve/CVE-2020-8834",
            },
            {
               category: "external",
               summary: "SUSE Bug 1168276 for CVE-2020-8834",
               url: "https://bugzilla.suse.com/1168276",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173945 for CVE-2020-8834",
               url: "https://bugzilla.suse.com/1173945",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "important",
            },
         ],
         title: "CVE-2020-8834",
      },
      {
         cve: "CVE-2020-9383",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-9383",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-9383",
               url: "https://www.suse.com/security/cve/CVE-2020-9383",
            },
            {
               category: "external",
               summary: "SUSE Bug 1165111 for CVE-2020-9383",
               url: "https://bugzilla.suse.com/1165111",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-base-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-azure-devel-4.12.14-6.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-azure-4.12.14-6.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-azure-4.12.14-6.40.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-27T07:37:01Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-9383",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for the Linux Kernel",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "The SUSE Linux Enterprise 12 SP4 RT kernel was updated to 3.12.31 to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic (bnc#1168276).\n- CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL (bnc#1168424).\n- CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls (bnc#1167629).\n- CVE-2020-8647: Fixed a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c (bnc#1162929).\n- CVE-2020-8649: Fixed a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c (bnc#1162931).\n- CVE-2020-9383: Fixed an issue in set_fdc in drivers/block/floppy.c, which leads to a wait_til_ready out-of-bounds read (bnc#1165111).\n- CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed (bnc#1168295).\n- CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash (bnc#1120386).\n- CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c (bnc#1159285).\n- CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function (bsc#1159198).\n\nThe following non-security bugs were fixed:\n\n- ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro (bsc#1051510).\n- ACPI: watchdog: Fix gas->access_width usage (bsc#1051510).\n- ALSA: ali5451: remove redundant variable capture_flag (bsc#1051510).\n- ALSA: core: Replace zero-length array with flexible-array member (bsc#1051510).\n- ALSA: emu10k1: Fix endianness annotations (bsc#1051510).\n- ALSA: hda/ca0132 - Replace zero-length array with flexible-array member (bsc#1051510).\n- ALSA: hda_codec: Replace zero-length array with flexible-array member (bsc#1051510).\n- ALSA: hda: Fix potential access overflow in beep helper (bsc#1051510).\n- ALSA: hda/realtek: Fix pop noise on ALC225 (git-fixes).\n- ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 (bsc#1051510).\n- ALSA: hda: remove redundant assignment to variable timeout (bsc#1051510).\n- ALSA: hda: Use scnprintf() for string truncation (bsc#1051510).\n- ALSA: hdsp: remove redundant assignment to variable err (bsc#1051510).\n- ALSA: ice1724: Fix invalid access for enumerated ctl items (bsc#1051510).\n- ALSA: info: remove redundant assignment to variable c (bsc#1051510).\n- ALSA: korg1212: fix if-statement empty body warnings (bsc#1051510).\n- ALSA: line6: Fix endless MIDI read loop (git-fixes).\n- ALSA: pcm: oss: Avoid plugin buffer overflow (git-fixes).\n- ALSA: pcm: oss: Fix regression by buffer overflow fix (bsc#1051510).\n- ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks (git-fixes).\n- ALSA: seq: oss: Fix running status after receiving sysex (git-fixes).\n- ALSA: seq: virmidi: Fix running status after receiving sysex (git-fixes).\n- ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status (bsc#1051510).\n- ALSA: via82xx: Fix endianness annotations (bsc#1051510).\n- ASoC: dapm: Correct DAPM handling of active widgets during shutdown (bsc#1051510).\n- ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map() (bsc#1051510).\n- ASoC: Intel: mrfld: fix incorrect check on p->sink (bsc#1051510).\n- ASoC: Intel: mrfld: return error codes when an error occurs (bsc#1051510).\n- ASoC: jz4740-i2s: Fix divider written at incorrect offset in register (bsc#1051510).\n- ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path (bsc#1051510).\n- ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output (bsc#1051510).\n- ASoC: pcm: update FE/BE trigger order based on the command (bsc#1051510).\n- ASoC: sun8i-codec: Remove unused dev from codec struct (bsc#1051510).\n- ASoC: topology: Fix memleak in soc_tplg_link_elems_load() (bsc#1051510).\n- ath9k: Handle txpower changes even when TPC is disabled (bsc#1051510).\n- atm: zatm: Fix empty body Clang warnings (bsc#1051510).\n- atomic: Add irqsave variant of atomic_dec_and_lock() (bsc#1166003).\n- b43legacy: Fix -Wcast-function-type (bsc#1051510).\n- batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation (bsc#1051510).\n- batman-adv: Do not schedule OGM for disabled interface (bsc#1051510).\n- batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs (bsc#1051510).\n- blk: Fix kabi due to blk_trace_mutex addition (bsc#1159285).\n- blk-mq: Allow blocking queue tag iter callbacks (bsc#1167316).\n- blktrace: fix dereference after null check (bsc#1159285).\n- blktrace: fix trace mutex deadlock (bsc#1159285).\n- block: allow gendisk's request_queue registration to be (bsc#1104967,bsc#1159142).\n- block, bfq: fix use-after-free in bfq_idle_slice_timer_body (bsc#1168760).\n- block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices (bsc#1168762).\n- Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl (bsc#1051510).\n- bnxt_en: Fix TC queue mapping (networking-stable-20_02_05).\n- bonding/alb: properly access headers in bond_alb_xmit() (networking-stable-20_02_09).\n- bpf: Explicitly memset some bpf info structures declared on the stack (bsc#1083647).\n- bpf: Explicitly memset the bpf_attr structure (bsc#1083647).\n- bpf: fix ldx in ld_abs rewrite for large offsets (bsc#1154385).\n- bpf: implement ld_abs/ld_ind in native bpf (bsc#1154385).\n- bpf: make unknown opcode handling more robust (bsc#1154385).\n- bpf: prefix cbpf internal helpers with bpf_ (bsc#1154385).\n- bpf, x64: remove ld_abs/ld_ind (bsc#1154385).\n- bpf, x64: save several bytes by using mov over movabsq when possible (bsc#1154385).\n- btrfs: Account for trans_block_rsv in may_commit_transaction (bsc#1165949).\n- btrfs: add a flush step for delayed iputs (bsc#1165949).\n- btrfs: add assertions for releasing trans handle reservations (bsc#1165949).\n- btrfs: add btrfs_delete_ref_head helper (bsc#1165949).\n- btrfs: add enospc debug messages for ticket failure (bsc#1165949).\n- btrfs: Add enospc_debug printing in metadata_reserve_bytes (bsc#1165949).\n- btrfs: add new flushing states for the delayed refs rsv (bsc#1165949).\n- btrfs: add space reservation tracepoint for reserved bytes (bsc#1165949).\n- btrfs: allow us to use up to 90% of the global rsv for unlink (bsc#1165949).\n- btrfs: always reserve our entire size for the global reserve (bsc#1165949).\n- btrfs: assert on non-empty delayed iputs (bsc##1165949).\n- btrfs: be more explicit about allowed flush states (bsc#1165949).\n- btrfs: call btrfs_create_pending_block_groups unconditionally (bsc#1165949).\n- btrfs: catch cow on deleting snapshots (bsc#1165949).\n- btrfs: change the minimum global reserve size (bsc#1165949).\n- btrfs: check if there are free block groups for commit (bsc#1165949).\n- btrfs: clean up error handling in btrfs_truncate() (bsc#1165949).\n- btrfs: cleanup extent_op handling (bsc#1165949).\n- btrfs: cleanup root usage by btrfs_get_alloc_profile (bsc#1165949).\n- btrfs: cleanup the target logic in __btrfs_block_rsv_release (bsc#1165949).\n- btrfs: clear space cache inode generation always (bsc#1165949).\n- btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock (bsc#1165949).\n- btrfs: do not account global reserve in can_overcommit (bsc#1165949).\n- btrfs: do not allow reservations if we have pending tickets (bsc#1165949).\n- btrfs: do not call btrfs_start_delalloc_roots in flushoncommit (bsc#1165949).\n- btrfs: do not end the transaction for delayed refs in throttle (bsc#1165949).\n- btrfs: do not enospc all tickets on flush failure (bsc#1165949).\n- btrfs: do not run delayed_iputs in commit (bsc##1165949).\n- btrfs: do not run delayed refs in the end transaction logic (bsc#1165949).\n- btrfs: do not use ctl->free_space for max_extent_size (bsc##1165949).\n- btrfs: do not use global reserve for chunk allocation (bsc#1165949).\n- btrfs: drop min_size from evict_refill_and_join (bsc##1165949).\n- btrfs: drop unused space_info parameter from create_space_info (bsc#1165949).\n- btrfs: dump block_rsv details when dumping space info  (bsc#1165949).\n- btrfs: export block group accounting helpers (bsc#1165949).\n- btrfs: export block_rsv_use_bytes (bsc#1165949).\n- btrfs: export btrfs_block_rsv_add_bytes (bsc#1165949).\n- btrfs: export __btrfs_block_rsv_release (bsc#1165949).\n- btrfs: export space_info_add_*_bytes (bsc#1165949).\n- btrfs: export the block group caching helpers (bsc#1165949).\n- btrfs: export the caching control helpers (bsc#1165949).\n- btrfs: export the excluded extents helpers (bsc#1165949).\n- btrfs: extent-tree: Add lockdep assert when updating space info (bsc#1165949).\n- btrfs: extent-tree: Add trace events for space info numbers update (bsc#1165949).\n- btrfs: extent-tree: Detect bytes_may_use underflow earlier (bsc#1165949).\n- btrfs: extent-tree: Detect bytes_pinned underflow earlier (bsc#1165949).\n- btrfs: factor out the ticket flush handling (bsc#1165949).\n- btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents (bsc#1163508).\n- btrfs: fix insert_reserved error handling (bsc##1165949).\n- btrfs: fix may_commit_transaction to deal with no partial filling (bsc#1165949).\n- btrfs: fix missing delayed iputs on unmount (bsc#1165949).\n- btrfs: fix panic during relocation after ENOSPC before writeback happens (bsc#1163508).\n- btrfs: fix qgroup double free after failure to reserve metadata for delalloc (bsc#1165949).\n- btrfs: fix race leading to metadata space leak after task received signal (bsc#1165949).\n- btrfs: fix truncate throttling (bsc#1165949).\n- btrfs: force chunk allocation if our global rsv is larger than metadata (bsc#1165949).\n- btrfs: Improve global reserve stealing logic (bsc#1165949).\n- btrfs: introduce an evict flushing state (bsc#1165949).\n- btrfs: introduce delayed_refs_rsv (bsc#1165949).\n- btrfs: loop in inode_rsv_refill (bsc#1165949).\n- btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock (bsc#1165949).\n- btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head (bsc#1165949).\n- btrfs: make caching_thread use btrfs_find_next_key (bsc#1165949).\n- btrfs: migrate btrfs_trans_release_chunk_metadata (bsc#1165949).\n- btrfs: migrate inc/dec_block_group_ro code (bsc#1165949).\n- btrfs: migrate nocow and reservation helpers (bsc#1165949).\n- btrfs: migrate the alloc_profile helpers (bsc#1165949).\n- btrfs: migrate the block group caching code (bsc#1165949).\n- btrfs: migrate the block group cleanup code (bsc#1165949).\n- btrfs: migrate the block group lookup code (bsc#1165949).\n- btrfs: migrate the block group read/creation code (bsc#1165949).\n- btrfs: migrate the block group ref counting stuff (bsc#1165949).\n- btrfs: migrate the block group removal code (bsc#1165949).\n- btrfs: migrate the block group space accounting helpers (bsc#1165949).\n- btrfs: migrate the block-rsv code to block-rsv.c (bsc#1165949).\n- btrfs: migrate the chunk allocation code (bsc#1165949).\n- btrfs: migrate the delalloc space stuff to it's own home (bsc#1165949).\n- btrfs: migrate the delayed refs rsv code (bsc#1165949).\n- btrfs: migrate the dirty bg writeout code (bsc#1165949).\n- btrfs: migrate the global_block_rsv helpers to block-rsv.c (bsc#1165949).\n- btrfs: move and export can_overcommit (bsc#1165949).\n- btrfs: move basic block_group definitions to their own header (bsc#1165949).\n- btrfs: move btrfs_add_free_space out of a header file (bsc#1165949).\n- btrfs: move btrfs_block_rsv definitions into it's own header (bsc#1165949).\n- btrfs: move btrfs_raid_group values to btrfs_raid_attr table (bsc#1165949).\n- btrfs: move btrfs_space_info_add_*_bytes to space-info.c (bsc#1165949).\n- btrfs: move dump_space_info to space-info.c (bsc#1165949).\n- btrfs: move reserve_metadata_bytes and supporting code to space-info.c (bsc#1165949).\n- btrfs: move space_info to space-info.h (bsc#1165949).\n- btrfs: move the space_info handling code to space-info.c (bsc#1165949).\n- btrfs: move the space info update macro to space-info.h (bsc#1165949).\n- btrfs: move the subvolume reservation stuff out of extent-tree.c (bsc#1165949).\n- btrfs: only check delayed ref usage in should_end_transaction (bsc#1165949).\n- btrfs: only check priority tickets for priority flushing (bsc#1165949).\n- btrfs: only free reserved extent if we didn't insert it (bsc##1165949).\n- btrfs: only reserve metadata_size for inodes (bsc#1165949).\n- btrfs: only track ref_heads in delayed_ref_updates (bsc#1165949).\n- btrfs: Output ENOSPC debug info in inc_block_group_ro (bsc#1165949).\n- btrfs: pass root to various extent ref mod functions (bsc#1165949).\n- btrfs: refactor block group replication factor calculation to a helper (bsc#1165949).\n- btrfs: refactor priority_reclaim_metadata_space (bsc#1165949).\n- btrfs: refactor the ticket wakeup code (bsc#1165949).\n- btrfs: release metadata before running delayed refs (bsc##1165949).\n- btrfs: Remove btrfs_inode::delayed_iput_count (bsc#1165949).\n- btrfs: Remove fs_info from do_chunk_alloc (bsc#1165949).\n- btrfs: remove orig_bytes from reserve_ticket (bsc#1165949).\n- btrfs: Remove redundant argument of flush_space (bsc#1165949).\n- btrfs: rename btrfs_space_info_add_old_bytes (bsc#1165949).\n- btrfs: rename do_chunk_alloc to btrfs_chunk_alloc (bsc#1165949).\n- btrfs: rename the btrfs_calc_*_metadata_size helpers (bsc#1165949).\n- btrfs: replace cleaner_delayed_iput_mutex with a waitqueue (bsc#1165949).\n- btrfs: reserve delalloc metadata differently (bsc#1165949).\n- btrfs: reserve extra space during evict (bsc#1165949).\n- btrfs: reset max_extent_size on clear in a bitmap (bsc##1165949).\n- btrfs: reset max_extent_size properly (bsc##1165949).\n- btrfs: rework btrfs_check_space_for_delayed_refs (bsc#1165949).\n- btrfs: rework wake_all_tickets (bsc#1165949).\n- btrfs: roll tracepoint into btrfs_space_info_update helper (bsc#1165949).\n- btrfs: run btrfs_try_granting_tickets if a priority ticket fails (bsc#1165949).\n- btrfs: run delayed iput at unlink time (bsc#1165949).\n- btrfs: run delayed iputs before committing (bsc#1165949).\n- btrfs: set max_extent_size properly (bsc##1165949).\n- btrfs: stop partially refilling tickets when releasing space (bsc#1165949).\n- btrfs: stop using block_rsv_release_bytes everywhere (bsc#1165949).\n- btrfs: temporarily export btrfs_get_restripe_target (bsc#1165949).\n- btrfs: temporarily export fragment_free_space (bsc#1165949).\n- btrfs: temporarily export inc_block_group_ro (bsc#1165949).\n- btrfs: track DIO bytes in flight (bsc#1165949).\n- btrfs: unexport can_overcommit (bsc#1165949).\n- btrfs: unexport the temporary exported functions (bsc#1165949).\n- btrfs: unify error handling for ticket flushing (bsc#1165949).\n- btrfs: update may_commit_transaction to use the delayed refs rsv (bsc#1165949).\n- btrfs: use btrfs_try_granting_tickets in update_global_rsv (bsc#1165949).\n- btrfs: wait on caching when putting the bg cache (bsc#1165949).\n- btrfs: wait on ordered extents on abort cleanup (bsc#1165949).\n- btrfs: wakeup cleaner thread when adding delayed iput (bsc#1165949).\n- ceph: canonicalize server path in place (bsc#1168443).\n- ceph: remove the extra slashes in the server path (bsc#1168443).\n- cfg80211: check reg_rule for NULL in handle_channel_custom() (bsc#1051510).\n- cfg80211: check wiphy driver existence for drvinfo report (bsc#1051510).\n- cgroup: memcg: net: do not associate sock with unrelated cgroup (bsc#1167290).\n- cifs: add a debug macro that prints \\\\server\\share for errors (bsc#1144333).\n- cifs: add missing mount option to /proc/mounts (bsc#1144333).\n- cifs: add new debugging macro cifs_server_dbg (bsc#1144333).\n- cifs: add passthrough for smb2 setinfo (bsc#1144333).\n- cifs: add SMB2_open() arg to return POSIX data (bsc#1144333).\n- cifs: add smb2 POSIX info level (bsc#1144333).\n- cifs: add SMB3 change notification support (bsc#1144333).\n- cifs: add support for fallocate mode 0 for non-sparse files (bsc#1144333).\n- cifs: Add support for setting owner info, dos attributes, and create time (bsc#1144333).\n- cifs: Add tracepoints for errors on flush or fsync (bsc#1144333).\n- cifs: Adjust indentation in smb2_open_file (bsc#1144333).\n- cifs: allow chmod to set mode bits using special sid (bsc#1144333).\n- cifs: Avoid doing network I/O while holding cache lock (bsc#1144333).\n- cifs: call wake_up(server->response_q) inside of cifs_reconnect() (bsc#1144333).\n- cifs: Clean up DFS referral cache (bsc#1144333).\n- cifs: create a helper function to parse the query-directory response buffer (bsc#1144333).\n- cifs: do d_move in rename (bsc#1144333).\n- cifs: Do not display RDMA transport on reconnect (bsc#1144333).\n- cifs: do not ignore the SYNC flags in getattr (bsc#1144333).\n- cifs: do not leak -EAGAIN for stat() during reconnect (bsc#1144333).\n- cifs: do not use 'pre:' for MODULE_SOFTDEP (bsc#1144333).\n- cifs: enable change notification for SMB2.1 dialect (bsc#1144333).\n- cifs: fail i/o on soft mounts if sessionsetup errors out (bsc#1144333).\n- cifs: fix a comment for the timeouts when sending echos (bsc#1144333).\n- cifs: fix a white space issue in cifs_get_inode_info() (bsc#1144333).\n- cifs: fix dereference on ses before it is null checked (bsc#1144333).\n- cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() (bsc#1144333).\n- cifs: fix mode bits from dir listing when mounted with modefromsid (bsc#1144333).\n- cifs: Fix mode output in debugging statements (bsc#1144333).\n- cifs: Fix mount options set in automount (bsc#1144333).\n- cifs: fix NULL dereference in match_prepath (bsc#1144333).\n- cifs: Fix potential deadlock when updating vol in cifs_reconnect() (bsc#1144333).\n- cifs: fix potential mismatch of UNC paths (bsc#1144333).\n- cifs: fix rename() by ensuring source handle opened with DELETE bit (bsc#1144333).\n- cifs: Fix return value in __update_cache_entry (bsc#1144333).\n- cifs: fix soft mounts hanging in the reconnect code (bsc#1144333).\n- cifs: fix soft mounts hanging in the reconnect code (bsc#1144333).\n- cifs: Fix task struct use-after-free on reconnect (bsc#1144333).\n- cifs: fix unitialized variable poential problem with network I/O cache lock patch (bsc#1144333).\n- cifs: get mode bits from special sid on stat (bsc#1144333).\n- cifs: Get rid of kstrdup_const()'d paths (bsc#1144333).\n- cifs: handle prefix paths in reconnect (bsc#1144333).\n- cifs: ignore cached share root handle closing errors (bsc#1166780).\n- cifs: Introduce helpers for finding TCP connection (bsc#1144333).\n- cifs: log warning message (once) if out of disk space (bsc#1144333).\n- cifs: make sure we do not overflow the max EA buffer size (bsc#1144333).\n- cifs: make use of cap_unix(ses) in cifs_reconnect_tcon() (bsc#1144333).\n- cifs: Merge is_path_valid() into get_normalized_path() (bsc#1144333).\n- cifs: modefromsid: make room for 4 ACE (bsc#1144333).\n- cifs: modefromsid: write mode ACE first (bsc#1144333).\n- cifs: Optimize readdir on reparse points (bsc#1144333).\n- cifs: plumb smb2 POSIX dir enumeration (bsc#1144333).\n- cifs: potential unintitliazed error code in cifs_getattr() (bsc#1144333).\n- cifs: prepare SMB2_query_directory to be used with compounding (bsc#1144333).\n- cifs: print warning once if mounting with vers=1.0 (bsc#1144333).\n- cifs: refactor cifs_get_inode_info() (bsc#1144333).\n- cifs: remove redundant assignment to pointer pneg_ctxt (bsc#1144333).\n- cifs: remove redundant assignment to variable rc (bsc#1144333).\n- cifs: remove set but not used variables (bsc#1144333).\n- cifs: remove set but not used variable 'server' (bsc#1144333).\n- cifs: remove unused variable (bsc#1144333).\n- cifs: remove unused variable 'sid_user' (bsc#1144333).\n- cifs: rename a variable in SendReceive() (bsc#1144333).\n- cifs: rename posix create rsp (bsc#1144333).\n- cifs: replace various strncpy with strscpy and similar (bsc#1144333).\n- cifs: Return directly after a failed build_path_from_dentry() in cifs_do_create() (bsc#1144333).\n- cifs: set correct max-buffer-size for smb2_ioctl_init() (bsc#1144333).\n- cifs: smbd: Add messages on RDMA session destroy and reconnection (bsc#1144333).\n- cifs: smbd: Invalidate and deregister memory registration on re-send for direct I/O (bsc#1144333).\n- cifs: smbd: Only queue work for error recovery on memory registration (bsc#1144333).\n- cifs: smbd: Return -EAGAIN when transport is reconnecting (bsc#1144333).\n- cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state (bsc#1144333).\n- cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE (bsc#1144333).\n- cifs: Use common error handling code in smb2_ioctl_query_info() (bsc#1144333).\n- cifs: use compounding for open and first query-dir for readdir() (bsc#1144333).\n- cifs: Use #define in cifs_dbg (bsc#1144333).\n- cifs: Use memdup_user() rather than duplicating its implementation (bsc#1144333).\n- cifs: use mod_delayed_work() for server->reconnect if already queued (bsc#1144333).\n- cifs: use PTR_ERR_OR_ZERO() to simplify code (bsc#1144333).\n- clk: qcom: rcg: Return failure for RCG update (bsc#1051510).\n- cls_rsvp: fix rsvp_policy (networking-stable-20_02_05).\n- configfs: Fix bool initialization/comparison (bsc#1051510).\n- cpufreq: powernv: Fix unsafe notifiers (bsc#1065729).\n- cpufreq: powernv: Fix use-after-free (bsc#1065729).\n- cpufreq: Register drivers only after CPU devices have been registered (bsc#1051510).\n- cpuidle: Do not unset the driver if it is there already (bsc#1051510).\n- crypto: arm64/sha-ce - implement export/import (bsc#1051510).\n- crypto: mxs-dcp - fix scatterlist linearization for hash (bsc#1051510).\n- crypto: pcrypt - Fix user-after-free on module unload (git-fixes).\n- crypto: tcrypt - fix printed skcipher [a]sync mode (bsc#1051510).\n- debugfs: add support for more elaborate ->d_fsdata (bsc#1159198  bsc#1109911).\n- debugfs: call debugfs_real_fops() only after debugfs_file_get() (bsc#1159198 bsc#1109911).\n- debugfs: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).\n- debugfs: debugfs_real_fops(): drop __must_hold sparse annotation (bsc#1159198 bsc#1109911).\n- debugfs: debugfs_use_start/finish do not exist anymore (bsc#1159198).\n- debugfs: defer debugfs_fsdata allocation to first usage (bsc#1159198 bsc#1109911).\n- debugfs: fix debugfs_real_fops() build error (bsc#1159198 bsc#1109911).\n- debugfs: implement per-file removal protection (bsc#1159198 bsc#1109911).\n- debugfs: purge obsolete SRCU based removal protection (bsc#1159198 bsc#1109911).\n- debugfs: simplify __debugfs_remove_file() (bsc#1159198).\n- Delete patches which cause regression (bsc#1165527 ltc#184149).\n- Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK (bsc#1163403).\n- device: Use overflow helpers for devm_kmalloc() (bsc#1166003).\n- dmaengine: coh901318: Fix a double lock bug in dma_tc_handle() (bsc#1051510).\n- dmaengine: ste_dma40: fix unneeded variable warning (bsc#1051510).\n- dm: fix incomplete request_queue initialization (bsc#1104967,bsc#1159142).\n- driver core: platform: fix u32 greater or equal to zero comparison (bsc#1051510).\n- driver core: platform: Prevent resouce overflow from causing infinite loops (bsc#1051510).\n- driver core: Print device when resources present in really_probe() (bsc#1051510).\n- drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).\n- drivers/md/raid5: Do not disable irq on release_inactive_stripe_list() call (bsc#1166003).\n- drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET (bsc#1166003).\n- drivers/md/raid5: Use irqsave variant of atomic_dec_and_lock() (bsc#1166003).\n- drm/amd/display: remove duplicated assignment to grph_obj_type (bsc#1051510).\n- drm/amdkfd: fix a use after free race with mmu_notifer unregister (bsc#1114279)\n- drm: atmel-hlcdc: enable clock before configuring timing engine (bsc#1114279)\n- drm/bochs: downgrade pci_request_region failure from error to warning (bsc#1051510).\n- drm/bridge: dw-hdmi: fix AVI frame colorimetry (bsc#1051510).\n- drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read() (bsc#1051510).\n- drm/drm_dp_mst:remove set but not used variable 'origlen' (bsc#1051510).\n- drm/etnaviv: fix dumping of iommuv2 (bsc#1114279)\n- drm/gma500: Fixup fbdev stolen size usage evaluation (bsc#1051510).\n- drm/i915/gvt: Separate display reset from ALL_ENGINES reset (bsc#1114279)\n- drm/i915/selftests: Fix return in assert_mmap_offset() (bsc#1114279)\n- drm/i915/userptr: fix size calculation (bsc#1114279)\n- drm/i915/userptr: Try to acquire the page lock around (bsc#1114279)\n- drm/i915: Wean off drm_pci_alloc/drm_pci_free (bsc#1114279)\n- drm/mediatek: Add gamma property according to hardware capability (bsc#1114279)\n- drm/mediatek: disable all the planes in atomic_disable (bsc#1114279)\n- drm/mediatek: handle events when enabling/disabling crtc (bsc#1051510).\n- drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank() (bsc#1114279)\n- drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable (bsc#1114279)\n- drm/msm: Set dma maximum segment size for mdss (bsc#1051510).\n- drm/msm: stop abusing dma_map/unmap for cache (bsc#1051510).\n- drm/msm: Use the correct dma_sync calls harder (bsc#1051510).\n- drm/msm: Use the correct dma_sync calls in msm_gem (bsc#1051510).\n- drm/nouveau/disp/nv50-: prevent oops when no channel method map provided (bsc#1051510).\n- drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw (bsc#1051510).\n- drm: rcar-du: Recognize 'renesas,vsps' in addition to 'vsps' (bsc#1114279)\n- drm: remove the newline for CRC source name (bsc#1051510).\n- dt-bindings: allow up to four clocks for orion-mdio (bsc#1051510).\n- EDAC/mc: Fix use-after-free and memleaks during device removal (bsc#1114279).\n- efi: Fix a race and a buffer overflow while reading efivars via sysfs (bsc#1164893).\n- ethtool: Factored out similar ethtool link settings for virtual devices to core (bsc#1136157 ltc#177197).\n- ext4: add cond_resched() to __ext4_find_entry() (bsc#1166862).\n- ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes (bsc#1165019).\n- ext4: Check for non-zero journal inum in ext4_calculate_overhead (bsc#1167288).\n- ext4: do not assume that mmp_nodename/bdevname have NUL (bsc#1166860).\n- ext4: fix a data race in EXT4_I(inode)->i_disksize (bsc#1166861).\n- ext4: fix incorrect group count in ext4_fill_super error message (bsc#1168765).\n- ext4: fix incorrect inodes per group in error message (bsc#1168764).\n- ext4: fix potential race between online resizing and write operations (bsc#1166864).\n- ext4: fix potential race between s_flex_groups online resizing and access (bsc#1166867).\n- ext4: fix potential race between s_group_info online resizing and access (bsc#1166866).\n- ext4: fix race between writepages and enabling EXT4_EXTENTS_FL (bsc#1166870).\n- ext4: fix support for inode sizes > 1024 bytes (bsc#1164284).\n- ext4: potential crash on allocation error in ext4_alloc_flex_bg_array() (bsc#1166940).\n- ext4: rename s_journal_flag_rwsem to s_writepages_rwsem (bsc#1166868).\n- ext4: validate the debug_want_extra_isize mount option at parse time (bsc#1163897).\n- fat: fix uninit-memory access for partial initialized inode (bsc#1051510).\n- fat: work around race with userspace's read via blockdev while mounting (bsc#1051510).\n- fbdev/g364fb: Fix build failure (bsc#1051510).\n- fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name (bsc#1166003).\n- fix memory leak in large read decrypt offload (bsc#1144333).\n- fs/cifs/cifssmb.c: use true,false for bool variable (bsc#1144333).\n- fs: cifs: cifsssmb: remove redundant assignment to variable ret (bsc#1144333).\n- fs: cifs: Initialize filesystem timestamp ranges (bsc#1144333).\n- fs: cifs: mute -Wunused-const-variable message (bsc#1144333).\n- fs/cifs/sess.c: Remove set but not used variable 'capabilities' (bsc#1144333).\n- fs/cifs/smb2ops.c: use true,false for bool variable (bsc#1144333).\n- fs/cifs/smb2pdu.c: Make SMB2_notify_init static (bsc#1144333).\n- fs/xfs: fix f_ffree value for statfs when project quota is set (bsc#1165985).\n- ftrace/kprobe: Show the maxactive number on kprobe_events (git-fixes).\n- gtp: make sure only SOCK_DGRAM UDP sockets are accepted (networking-stable-20_01_27).\n- gtp: use __GFP_NOWARN to avoid memalloc warning (networking-stable-20_02_05).\n- HID: apple: Add support for recent firmware on Magic Keyboards (bsc#1051510).\n- HID: core: fix off-by-one memset in hid_report_raw_event() (bsc#1051510).\n- HID: hiddev: Fix race in in hiddev_disconnect() (git-fixes).\n- hv_netvsc: Fix memory leak when removing rndis device (networking-stable-20_01_20).\n- hv_netvsc: pass netvsc_device to rndis halt\n- hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT() (bsc#1051510).\n- i2c: hix5hd2: add missed clk_disable_unprepare in remove (bsc#1051510).\n- i2c: jz4780: silence log flood on txabrt (bsc#1051510).\n- IB/hfi1: Close window for pq and request coliding (bsc#1060463 ).\n- IB/hfi1: convert to debugfs_file_get() and -put() (bsc#1159198 bsc#1109911).\n- ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551).\n- ibmvnic: Do not process device remove during device reset (bsc#1065729).\n- ibmvnic: Warn unknown speed message only when carrier is present (bsc#1065729).\n- iio: gyro: adis16136: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: imu: adis16400: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: imu: adis: check ret val for non-zero vs less-than-zero (bsc#1051510).\n- iio: magnetometer: ak8974: Fix negative raw values in sysfs (bsc#1051510).\n- iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions (bsc#1051510).\n- Input: add safety guards to input_set_keycode() (bsc#1168075).\n- Input: avoid BIT() macro usage in the serio.h UAPI header (bsc#1051510).\n- Input: edt-ft5x06 - work around first register access error (bsc#1051510).\n- Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger() (bsc#1051510).\n- Input: synaptics - enable RMI on HP Envy 13-ad105ng (bsc#1051510).\n- Input: synaptics - enable SMBus on ThinkPad L470 (bsc#1051510).\n- Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list (bsc#1051510).\n- Input: synaptics - switch T470s to RMI4 by default (bsc#1051510).\n- intel_th: Fix user-visible error codes (bsc#1051510).\n- intel_th: pci: Add Elkhart Lake CPU support (bsc#1051510).\n- iommu/amd: Check feature support bit before accessing MSI capability registers (bsc#1166101).\n- iommu/amd: Fix the configuration of GCR3 table root pointer (bsc#1169057).\n- iommu/amd: Only support x2APIC with IVHD type 11h/40h (bsc#1166102).\n- iommu/dma: Fix MSI reservation allocation (bsc#1166730).\n- iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint (bsc#1166731).\n- iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page (bsc#1166732).\n- iommu/vt-d: Fix compile warning from intel-svm.h (bsc#1166103).\n- iommu/vt-d: Fix the wrong printing in RHSA parsing (bsc#1166733).\n- iommu/vt-d: Ignore devices with out-of-spec domain number (bsc#1166734).\n- iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint (bsc#1166735).\n- ipmi:ssif: Handle a possible NULL pointer reference (bsc#1051510).\n- ipv4: ensure rcu_read_lock() in cipso_v4_error() (git-fixes).\n- ipvlan: do not add hardware address of master to its unicast filter list (bsc#1137325).\n- irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (bsc#1051510).\n- irqdomain: Fix a memory leak in irq_domain_push_irq() (bsc#1051510).\n- iwlegacy: Fix -Wcast-function-type (bsc#1051510).\n- iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices (bsc#1166632).\n- iwlwifi: mvm: Fix thermal zone registration (bsc#1051510).\n- kABI: fixes for debugfs per-file removal protection backports (bsc#1159198 bsc#1109911).\n- kABI: invoke bpf_gen_ld_abs() directly (bsc#1158552).\n- kABI: restore debugfs_remove_recursive() (bsc#1159198).\n- kernel/module.c: Only return -EEXIST for modules that have finished loading (bsc#1165488).\n- kernel/module.c: wakeup processes in module_wq on module unload (bsc#1165488).\n- KVM: arm64: Store vcpu on the stack during __guest_enter() (bsc#1133021).\n- KVM: s390: do not clobber registers during guest reset/store status (bsc#1133021).\n- KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups (bsc#1133021).\n- KVM: VMX: check descriptor table exits on instruction emulation (bsc#1166104).\n- l2tp: Allow duplicate session creation with UDP (networking-stable-20_02_05).\n- lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop (bsc#1050549).\n- libfs: fix infoleak in simple_attr_read() (bsc#1168881).\n- lib/raid6: add missing include for raid6test (bsc#1166003).\n- lib/raid6: add option to skip algo benchmarking (bsc#1166003).\n- lib/raid6/altivec: Add vpermxor implementation for raid6 Q syndrome (bsc#1166003).\n- lib/raid6: avoid __attribute_const__ redefinition (bsc#1166003).\n- locking/rwsem: Prevent decrement of reader count before increment (bsc#1050549).\n- mac80211: consider more elements in parsing CRC (bsc#1051510).\n- mac80211: Do not send mesh HWMP PREQ if HWMP is disabled (bsc#1051510).\n- mac80211: free peer keys before vif down in mesh (bsc#1051510).\n- mac80211: mesh: fix RCU warning (bsc#1051510).\n- mac80211: only warn once on chanctx_conf being NULL (bsc#1051510).\n- mac80211: rx: avoid RCU list traversal under mutex (bsc#1051510).\n- macsec: add missing attribute validation for port (bsc#1051510).\n- macsec: fix refcnt leak in module exit routine (bsc#1051510).\n- md: add __acquires/__releases annotations to handle_active_stripes (bsc#1166003).\n- md: add __acquires/__releases annotations to (un)lock_two_stripes (bsc#1166003).\n- md: add a missing endianness conversion in check_sb_changes (bsc#1166003).\n- md: add bitmap_abort label in md_run (bsc#1166003).\n- md: add feature flag MD_FEATURE_RAID0_LAYOUT (bsc#1166003).\n- md: allow last device to be forcibly removed from RAID1/RAID10 (bsc#1166003).\n- md: avoid invalid memory access for array sb->dev_roles (bsc#1166003).\n- md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit (bsc#1166003).\n- md-bitmap: create and destroy wb_info_pool with the change of backlog (bsc#1166003).\n- md-bitmap: create and destroy wb_info_pool with the change of bitmap (bsc#1166003).\n- md-bitmap: small cleanups (bsc#1166003).\n- md/bitmap: use mddev_suspend/resume instead of ->quiesce() (bsc#1166003).\n- md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage (bsc#1166003).\n- md-cluster: introduce resync_info_get interface for sanity check (bsc#1166003).\n- md-cluster/raid10: call update_size in md_reap_sync_thread (bsc#1166003).\n- md-cluster/raid10: do not call remove_and_add_spares during reshaping stage (bsc#1166003).\n- md-cluster/raid10: resize all the bitmaps before start reshape (bsc#1166003).\n- md-cluster/raid10: support add disk under grow mode (bsc#1166003).\n- md-cluster: remove suspend_info (bsc#1166003).\n- md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted (bsc#1166003).\n- md: convert to kvmalloc (bsc#1166003).\n- md: do not call spare_active in md_reap_sync_thread if all member devices can't work (bsc#1166003).\n- md: do not set In_sync if array is frozen (bsc#1166003).\n- md: fix an error code format and remove unsed bio_sector (bsc#1166003).\n- md: fix a typo s/creat/create (bsc#1166003).\n- md: fix for divide error in status_resync (bsc#1166003).\n- md: fix spelling typo and add necessary space (bsc#1166003).\n- md: introduce mddev_create/destroy_wb_pool for the change of member device (bsc#1166003).\n- md: introduce new personality funciton start() (bsc#1166003).\n- md-linear: use struct_size() in kzalloc() (bsc#1166003).\n- md: Make bio_alloc_mddev use bio_alloc_bioset (bsc#1166003).\n- md: make sure desc_nr less than MD_SB_DISKS (bsc#1166003).\n- md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show (bsc#1166003).\n- md: no longer compare spare disk superblock events in super_load (bsc#1166003).\n- md/r5cache: remove redundant pointer bio (bsc#1166003).\n- md/raid0: Fix an error message in raid0_make_request() (bsc#1166003).\n- md/raid0/linear: Mark array as 'broken' and fail BIOs if a member is gone (bsc#1166003).\n- md/raid10: end bio when the device faulty (bsc#1166003).\n- md/raid10: Fix raid10 replace hang when new added disk faulty (bsc#1166003).\n- md/raid10: prevent access of uninitialized resync_pages offset (bsc#1166003).\n- md/raid10: read balance chooses idlest disk for SSD (bsc#1166003).\n- md/raid10: Use struct_size() in kmalloc() (bsc#1166003).\n- md/raid1: avoid soft lockup under high load (bsc#1166003).\n- md/raid1: check rdev before reference in raid1_sync_request func (bsc#1166003).\n- md/raid1: end bio when the device faulty (bsc#1166003).\n- md/raid1: fail run raid1 array when active disk less than one (bsc#1166003).\n- md/raid1: Fix a warning message in remove_wb() (bsc#1166003).\n- md/raid1: fix potential data inconsistency issue with write behind device (bsc#1166003).\n- md/raid1: get rid of extra blank line and space (bsc#1166003).\n- md/raid5: Assigning NULL to sh->batch_head before testing bit R5_Overlap of a stripe (bsc#1166003).\n- md/raid5: use bio_end_sector to calculate last_sector (bsc#1166003).\n- md/raid6: fix algorithm choice under larger PAGE_SIZE (bsc#1166003).\n- md/raid6: implement recovery using ARM NEON intrinsics (bsc#1166003).\n- md: remove a bogus comment (bsc#1166003).\n- md: remove redundant code that is no longer reachable (bsc#1166003).\n- md: remove set but not used variable 'bi_rdev' (bsc#1166003).\n- md: rename wb stuffs (bsc#1166003).\n- md: return -ENODEV if rdev has no mddev assigned (bsc#1166003).\n- md: use correct type in super_1_load (bsc#1166003).\n- md: use correct type in super_1_sync (bsc#1166003).\n- md: use correct types in md_bitmap_print_sb (bsc#1166003).\n- media: dib0700: fix rc endpoint lookup (bsc#1051510).\n- media: flexcop-usb: fix endpoint sanity check (git-fixes).\n- media: go7007: Fix URB type for interrupt handling (bsc#1051510).\n- media: ov519: add missing endpoint sanity checks (bsc#1168829).\n- media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support (bsc#1051510).\n- media: ov6650: Fix some format attributes not under control (bsc#1051510).\n- media: ov6650: Fix stored crop rectangle not in sync with hardware (bsc#1051510).\n- media: ov6650: Fix stored frame format not in sync with hardware (bsc#1051510).\n- media: stv06xx: add missing descriptor sanity checks (bsc#1168854).\n- media: tda10071: fix unsigned sign extension overflow (bsc#1051510).\n- media: usbtv: fix control-message timeouts (bsc#1051510).\n- media: uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).\n- media: v4l2-core: fix entity initialization in device_register_subdev (bsc#1051510).\n- media: vsp1: tidyup VI6_HGT_LBn_H() macro (bsc#1051510).\n- media: xirlink_cit: add missing descriptor sanity checks (bsc#1051510).\n- mfd: dln2: Fix sanity checking for endpoints (bsc#1051510).\n- misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices (bsc#1051510).\n- mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 (bsc#1051510).\n- mm/filemap.c: do not initiate writeback if mapping has no dirty pages (bsc#1168884).\n- mm/memory_hotplug.c: only respect mem= parameter during boot stage (bsc#1065600).\n- mm: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE (bsc#1163403).\n- mm: Use overflow helpers in kvmalloc() (bsc#1166003).\n- mwifiex: set needed_headroom, not hard_header_len (bsc#1051510).\n- net: core: another layer of lists, around PF_MEMALLOC skb handling (bsc#1050549).\n- net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM (networking-stable-20_01_27).\n- net: dsa: mv88e6xxx: Preserve priority when setting CPU port (networking-stable-20_01_11).\n- net: dsa: tag_qca: fix doubled Tx statistics (networking-stable-20_01_20).\n- net: dsa: tag_qca: Make sure there is headroom for tag (networking-stable-20_02_19).\n- net: ena: Add PCI shutdown handler to allow safe kexec (bsc#1167421, bsc#1167423).\n- net/ethtool: Introduce link_ksettings API for virtual network devices (bsc#1136157 ltc#177197).\n- net: hns: fix soft lockup when there is not enough memory (networking-stable-20_01_20).\n- net: hsr: fix possible NULL deref in hsr_handle_frame() (networking-stable-20_02_05).\n- net: ip6_gre: fix moving ip6gre between namespaces (networking-stable-20_01_27).\n- net, ip6_tunnel: fix namespaces move (networking-stable-20_01_27).\n- net, ip_tunnel: fix namespaces move (networking-stable-20_01_27).\n- net: macb: Limit maximum GEM TX length in TSO (networking-stable-20_02_09).\n- net: macb: Remove unnecessary alignment check for TSO (networking-stable-20_02_09).\n- net/mlxfw: Verify FSM error code translation does not exceed array size (bsc#1051858).\n- net: mvneta: move rx_dropped and rx_errors in per-cpu stats (networking-stable-20_02_09).\n- net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL (bsc#1051510).\n- net: nfc: fix bounds checking bugs on 'pipe' (bsc#1051510).\n- net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers (bsc#1051510).\n- net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() (networking-stable-20_01_27).\n- net/sched: ematch: reject invalid TCF_EM_SIMPLE (networking-stable-20_01_30).\n- net/sched: fix an OOB access in cls_tcindex (networking-stable-20_02_05).\n- net/sched: fix a resource leak in tcindex_set_parms() (networking-stable-20_02_09).\n- net/sched: fix datalen for ematch (networking-stable-20_01_27).\n- net/sched: keep alloc_hash updated after hash allocation (git-fixes).\n- net/sched: flower: add missing validation of TCA_FLOWER_FLAGS (networking-stable-20_02_19).\n- net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS (networking-stable-20_02_19).\n- net: sch_prio: When ungrafting, replace with FIFO (networking-stable-20_01_11).\n- net/smc: fix leak of kernel memory to user space (networking-stable-20_02_19).\n- net: stmmac: Delete txtimer in suspend() (networking-stable-20_02_05).\n- net: stmmac: dwmac-sunxi: Allow all RGMII modes (networking-stable-20_01_11).\n- net-sysfs: Fix reference count leak (networking-stable-20_01_27).\n- net: systemport: Avoid RBUF stuck in Wake-on-LAN mode (networking-stable-20_02_09).\n- net: usb: lan78xx: Add .ndo_features_check (networking-stable-20_01_27).\n- net: usb: lan78xx: fix possible skb leak (networking-stable-20_01_11).\n- net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info (networking-stable-20_01_20).\n- NFC: fdp: Fix a signedness bug in fdp_nci_send_patch() (bsc#1051510).\n- NFC: pn544: Fix a typo in a debug message (bsc#1051510).\n- NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu() (bsc#1051510).\n- NFS: send state management on a single connection (bsc#1167005).\n- nvme-multipath: fix possible I/O hang when paths are updated (bsc#1158983).\n- orinoco: avoid assertion in case of NULL pointer (bsc#1051510).\n- padata: always acquire cpu_hotplug_lock before pinst->lock (git-fixes).\n- partitions/efi: Fix partition name parsing in GUID partition entry (bsc#1168763).\n- PCI/ASPM: Clear the correct bits when enabling L1 substates (bsc#1051510).\n- PCI: endpoint: Fix clearing start entry in configfs (bsc#1051510).\n- PCI: pciehp: Fix MSI interrupt race (bsc#1159037).\n- PCI/switchtec: Fix init_completion race condition with poll_wait() (bsc#1051510).\n- perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag (bsc#1114279).\n- perf: qcom_l2: fix column exclusion check (git-fixes).\n- pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins (bsc#1051510).\n- pinctrl: core: Remove extra kref_get which blocks hogs being freed (bsc#1051510).\n- pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs (bsc#1051510).\n- pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs (bsc#1051510).\n- pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM (networking-stable-20_01_11).\n- platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table (bsc#1051510).\n- PM: core: Fix handling of devices deleted during system-wide resume (git-fixes).\n- powerpc/64: mark start_here_multiplatform as __ref (bsc#1148868).\n- powerpc/64s: Fix section mismatch warnings from boot code (bsc#1148868).\n- powerpc/64/tm: Do not let userspace set regs->trap via sigreturn (bsc#1118338 ltc#173734).\n- powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems (bsc#1056686).\n- powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries (bsc#1065729).\n- powerpc/kprobes: Ignore traps that happened in real mode (bsc#1065729).\n- powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping() (bsc#1148868).\n- powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable (bsc#1160659).\n- powerpc/pseries: group lmb operation and memblock's (bsc#1165404 ltc#183498).\n- powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request (bsc#1165404 ltc#183498).\n- powerpc/pseries: update device tree before ejecting hotplug uevents (bsc#1165404 ltc#183498).\n- powerpc/smp: Use nid as fallback for package_id (bsc#1165813 ltc#184091).\n- powerpc/vmlinux.lds: Explicitly retain .gnu.hash (bsc#1148868).\n- powerpc/xive: Replace msleep(x) with msleep(OPAL_BUSY_DELAY_MS) (bsc#1085030).\n- powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs (bsc#1085030).\n- pwm: bcm2835: Dynamically allocate base (bsc#1051510).\n- pwm: meson: Fix confusing indentation (bsc#1051510).\n- pwm: pca9685: Fix PWM/GPIO inter-operation (bsc#1051510).\n- pwm: rcar: Fix late Runtime PM enablement (bsc#1051510).\n- pwm: renesas-tpu: Fix late Runtime PM enablement (bsc#1051510).\n- pxa168fb: fix release function mismatch in probe failure (bsc#1051510).\n- qmi_wwan: re-add DW5821e pre-production variant (bsc#1051510).\n- qmi_wwan: unconditionally reject 2 ep interfaces (bsc#1051510).\n- raid10: refactor common wait code from regular read/write request (bsc#1166003).\n- raid1: factor out a common routine to handle the completion of sync write (bsc#1166003).\n- raid1: simplify raid1_error function (bsc#1166003).\n- raid1: use an int as the return value of raise_barrier() (bsc#1166003).\n- raid5: block failing device if raid will be failed (bsc#1166003).\n- raid5-cache: Need to do start() part job after adding journal device (bsc#1166003).\n- raid5: copy write hint from origin bio to stripe (bsc#1166003).\n- raid5: do not increment read_errors on EILSEQ return (bsc#1166003).\n- raid5: do not set STRIPE_HANDLE to stripe which is in batch list (bsc#1166003).\n- raid5 improve too many read errors msg by adding limits (bsc#1166003).\n- raid5: need to set STRIPE_HANDLE for batch head (bsc#1166003).\n- raid5: remove STRIPE_OPS_REQ_PENDING (bsc#1166003).\n- raid5: remove worker_cnt_per_group argument from alloc_thread_groups (bsc#1166003).\n- raid5: set write hint for PPL (bsc#1166003).\n- raid5: use bio_end_sector in r5_next_bio (bsc#1166003).\n- raid6/test: fix a compilation error (bsc#1166003).\n- raid6/test: fix a compilation warning (bsc#1166003).\n- remoteproc: Initialize rproc_class before use (bsc#1051510).\n- rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer (git-fixes).\n- rtlwifi: rtl_pci: Fix -Wcast-function-type (bsc#1051510).\n- rxrpc: Fix insufficient receive notification generation (networking-stable-20_02_05).\n- s390/mm: fix dynamic pagetable upgrade for hugetlbfs (bsc#1165182 LTC#184102).\n- scsi: core: avoid repetitive logging of device offline messages (bsc#1145929).\n- scsi: core: kABI fix offline_already (bsc#1145929).\n- scsi: fnic: do not queue commands during fwreset (bsc#1146539).\n- scsi: ibmvfc: Add failed PRLI to cmd_status lookup array (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Byte swap status and error codes when logging (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Clean up transport events (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: constify dev_pm_ops structures (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Do not call fc_block_scsi_eh() on host reset (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Fix NULL return compiler warning (bsc#1161951 ltc#183551). Refresh sorted patches.\n- scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Mark expected switch fall-throughs (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Remove 'failed' from logged errors (bsc#1161951 ltc#183551).\n- scsi: ibmvfc: Remove unneeded semicolons (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: change strncpy+truncation to strlcpy (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: constify dev_pm_ops structures (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: redo driver work thread to use enum action states (bsc#1161951 ltc#183551).\n- scsi: ibmvscsi: Wire up host_reset() in the driver's scsi_host_template (bsc#1161951 ltc#183551).\n- scsi: qla2xxx: Add 16.0GT for PCI String (bsc#1157424).\n- scsi: qla2xxx: Add beacon LED config sysfs interface (bsc#1157424).\n- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (bsc#1157424).\n- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (bsc#1157424).\n- scsi: qla2xxx: Add endianizer macro calls to fc host stats (bsc#1157424).\n- scsi: qla2xxx: Add fixes for mailbox command (bsc#1157424).\n- scsi: qla2xxx: add more FW debug information (bsc#1157424).\n- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (bsc#1157424).\n- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (bsc#1157424).\n- scsi: qla2xxx: Add vendor extended FDMI commands (bsc#1157424).\n- scsi: qla2xxx: Add vendor extended RDP additions and amendments (bsc#1157424).\n- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options (bsc#1157424).\n- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (bsc#1157424).\n- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (bsc#1157424).\n- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (bsc#1157424).\n- scsi: qla2xxx: Correction to selection of loopback/echo test (bsc#1157424).\n- scsi: qla2xxx: Display message for FCE enabled (bsc#1157424).\n- scsi: qla2xxx: Fix control flags for login/logout IOCB (bsc#1157424).\n- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (bsc#1157424).\n- scsi: qla2xxx: fix FW resource count values (bsc#1157424).\n- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (bsc#1157424).\n- scsi: qla2xxx: Fix NPIV instantiation after FW dump (bsc#1157424).\n- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (bsc#1157424).\n- scsi: qla2xxx: Fix RDP respond data format (bsc#1157424).\n- scsi: qla2xxx: Fix RDP response size (bsc#1157424).\n- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (bsc#1157424).\n- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (bsc#1157424).\n- scsi: qla2xxx: Force semaphore on flash validation failure (bsc#1157424).\n- scsi: qla2xxx: Handle cases for limiting RDP response payload length (bsc#1157424).\n- scsi: qla2xxx: Handle NVME status iocb correctly (bsc#1157424).\n- scsi: qla2xxx: Improved secure flash support messages (bsc#1157424).\n- scsi: qla2xxx: Move free of fcport out of interrupt context (bsc#1157424).\n- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (bsc#1157424).\n- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (bsc#1157424).\n- scsi: qla2xxx: Return appropriate failure through BSG Interface (bsc#1157424).\n- scsi: qla2xxx: Save rscn_gen for new fcport (bsc#1157424).\n- scsi: qla2xxx: Serialize fc_port alloc in N2N (bsc#1157424).\n- scsi: qla2xxx: Set Nport ID for N2N (bsc#1157424).\n- scsi: qla2xxx: Show correct port speed capabilities for RDP command (bsc#1157424).\n- scsi: qla2xxx: Simplify the code for aborting SCSI commands (bsc#1157424).\n- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (bsc#1157424).\n- scsi: qla2xxx: Update BPM enablement semantics (bsc#1157424).\n- scsi: qla2xxx: Update driver version to 10.01.00.24-k (bsc#1157424).\n- scsi: qla2xxx: Update driver version to 10.01.00.25-k (bsc#1157424).\n- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (bsc#1157424).\n- scsi: qla2xxx: Use correct ISP28xx active FW region (bsc#1157424).\n- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (bsc#1157424).\n- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (bsc#1157424).\n- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (bsc#1157424).\n- scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd() set cmd->se_cmd.map_tag (bsc#1157424).\n- sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY (networking-stable-20_01_11).\n- serdev: ttyport: restore client ops on deregistration (bsc#1051510).\n- smb3: add debug messages for closing unmatched open (bsc#1144333).\n- smb3: Add defines for new information level, FileIdInformation (bsc#1144333).\n- smb3: add dynamic tracepoints for flush and close (bsc#1144333).\n- smb3: add missing flag definitions (bsc#1144333).\n- smb3: Add missing reparse tags (bsc#1144333).\n- smb3: add missing worker function for SMB3 change notify (bsc#1144333).\n- smb3: add mount option to allow forced caching of read only share (bsc#1144333).\n- smb3: add mount option to allow RW caching of share accessed by only 1 client (bsc#1144333).\n- smb3: add one more dynamic tracepoint missing from strict fsync path (bsc#1144333).\n- smb3: add some more descriptive messages about share when mounting cache=ro (bsc#1144333).\n- smb3: allow decryption keys to be dumped by admin for debugging (bsc#1144333).\n- smb3: allow disabling requesting leases (bsc#1144333).\n- smb3: allow parallelizing decryption of reads (bsc#1144333).\n- smb3: allow skipping signature verification for perf sensitive configurations (bsc#1144333).\n- SMB3: Backup intent flag missing from some more ops (bsc#1144333).\n- smb3: cleanup some recent endian errors spotted by updated sparse (bsc#1144333).\n- smb3: display max smb3 requests in flight at any one time (bsc#1144333).\n- smb3: dump in_send and num_waiters stats counters by default (bsc#1144333).\n- smb3: enable offload of decryption of large reads via mount option (bsc#1144333).\n- smb3: fix default permissions on new files when mounting with modefromsid (bsc#1144333).\n- smb3: fix mode passed in on create for modetosid mount option (bsc#1144333).\n- smb3: fix performance regression with setting mtime (bsc#1144333).\n- smb3: fix potential null dereference in decrypt offload (bsc#1144333).\n- smb3: fix problem with null cifs super block with previous patch (bsc#1144333).\n- smb3: Fix regression in time handling (bsc#1144333).\n- smb3: improve check for when we send the security descriptor context on create (bsc#1144333).\n- smb3: log warning if CSC policy conflicts with cache mount option (bsc#1144333).\n- smb3: missing ACL related flags (bsc#1144333).\n- smb3: only offload decryption of read responses if multiple requests (bsc#1144333).\n- smb3: pass mode bits into create calls (bsc#1144333).\n- smb3: print warning once if posix context returned on open (bsc#1144333).\n- smb3: query attributes on file close (bsc#1144333).\n- smb3: remove noisy debug message and minor cleanup (bsc#1144333).\n- smb3: remove unused flag passed into close functions (bsc#1144333).\n- staging: ccree: use signal safe completion wait (git-fixes).\n- staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table (bsc#1051510).\n- staging: rtl8188eu: Fix potential overuse of kernel memory (bsc#1051510).\n- staging: rtl8188eu: Fix potential security hole (bsc#1051510).\n- staging: rtl8723bs: Fix potential overuse of kernel memory (bsc#1051510).\n- staging: rtl8723bs: Fix potential security hole (bsc#1051510).\n- staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi (bsc#1051510).\n- staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb (bsc#1051510).\n- staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback (bsc#1051510).\n- SUNRPC: defer slow parts of rpc_free_client() to a workqueue (bsc#1168202).\n- tcp_bbr: improve arithmetic division in bbr_update_bw() (networking-stable-20_01_27).\n- tcp: clear tp->data_segs{in|out} in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: clear tp->delivered in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: clear tp->segs_{in|out} in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: clear tp->total_retrans in tcp_disconnect() (networking-stable-20_02_05).\n- tcp: fix marked lost packets not being retransmitted (networking-stable-20_01_20).\n- tcp: fix 'old stuff' D-SACK causing SACK to be treated as D-SACK (networking-stable-20_01_11).\n- thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n (bsc#1051510).\n- thunderbolt: Prevent crash if non-active NVMem file is read (git-fixes).\n- tick: broadcast-hrtimer: Fix a race in bc_set_next (bsc#1044231).\n- tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure (git-fixes).\n- tools: Update include/uapi/linux/fcntl.h copy from the kernel (bsc#1166003).\n- tpm: ibmvtpm: Wait for buffer to be set before proceeding (bsc#1065729).\n- tty: evh_bytechan: Fix out of bounds accesses (bsc#1051510).\n- ttyprintk: fix a potential deadlock in interrupt context issue (git-fixes).\n- tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode (bsc#1051510).\n- tty: serial: imx: setup the correct sg entry for tx dma (bsc#1051510).\n- USB: cdc-acm: fix rounding error in TIOCSSERIAL (git-fixes).\n- USB: core: add endpoint-blacklist quirk (git-fixes).\n- USB: core: hub: do error out if usb_autopm_get_interface() fails (git-fixes).\n- USB: core: port: do error out if usb_autopm_get_interface() fails (git-fixes).\n- USB: Disable LPM on WD19's Realtek Hub (git-fixes).\n- USB: dwc2: Fix in ISOC request length checking (git-fixes).\n- USB: Fix novation SourceControl XL after suspend (git-fixes).\n- USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus (git-fixes).\n- USB: gadget: f_fs: Fix use after free issue as part of queue failure (bsc#1051510).\n- USB: host: xhci-plat: add a shutdown (git-fixes).\n- USB: host: xhci: update event ring dequeue pointer on purpose (git-fixes).\n- USB: hub: Do not record a connect-change event during reset-resume (git-fixes).\n- usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (git-fixes).\n- USB: misc: iowarrior: add support for 2 OEMed devices (git-fixes).\n- USB: misc: iowarrior: add support for the 100 device (git-fixes).\n- USB: misc: iowarrior: add support for the 28 and 28L devices (git-fixes).\n- USB: musb: Disable pullup at init (git-fixes).\n- USB: musb: fix crash with highmen PIO and usbmon (bsc#1051510).\n- USB: quirks: add NO_LPM quirk for Logitech Screen Share (git-fixes).\n- USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters (git-fixes).\n- USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 (git-fixes).\n- USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback (bsc#1051510).\n- USB: serial: option: add ME910G1 ECM composition 0x110b (git-fixes).\n- USB: serial: pl2303: add device-id for HP LD381 (git-fixes).\n- USB: storage: Add quirk for Samsung Fit flash (git-fixes).\n- USB: uas: fix a plug & unplug racing (git-fixes).\n- USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c (git-fixes).\n- uvcvideo: Refactor teardown of uvc on USB disconnect (bsc#1164507).\n- vgacon: Fix a UAF in vgacon_invert_region (bsc#1114279)\n- virtio-blk: fix hw_queue stopped on arbitrary error (git-fixes).\n- vlan: fix memory leak in vlan_dev_set_egress_priority (networking-stable-20_01_11).\n- vlan: vlan_changelink() should propagate errors (networking-stable-20_01_11).\n- vxlan: fix tos value before xmit (networking-stable-20_01_11).\n- x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF (bsc#1114279).\n- x86/mce/amd: Fix kobject lifetime (bsc#1114279).\n- x86/mce/amd: Publish the bank pointer only after setup has succeeded (bsc#1114279).\n- x86/mce: Fix logic and comments around MSR_PPIN_CTL (bsc#1114279).\n- x86/mm: Split vmalloc_sync_all() (bsc#1165741).\n- x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes (bsc#1114279).\n- xen/blkfront: fix memory allocation flags in blkfront_setup_indirect() (bsc#1168486).\n- xfs: also remove cached ACLs when removing the underlying attr (bsc#1165873).\n- xfs: bulkstat should copy lastip whenever userspace supplies one (bsc#1165984).\n- xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms (git-fixes).\n- xhci: Do not open code __print_symbolic() in xhci trace events (git-fixes).\n- xhci: fix runtime pm enabling for quirky Intel hosts (bsc#1051510).\n- xhci: Force Maximum Packet size for Full-speed bulk devices to valid range (bsc#1051510).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2020-1085,SUSE-SLE-RT-12-SP4-2020-1085",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1085-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:1085-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20201085-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:1085-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-April/006727.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1044231",
            url: "https://bugzilla.suse.com/1044231",
         },
         {
            category: "self",
            summary: "SUSE Bug 1050549",
            url: "https://bugzilla.suse.com/1050549",
         },
         {
            category: "self",
            summary: "SUSE Bug 1051510",
            url: "https://bugzilla.suse.com/1051510",
         },
         {
            category: "self",
            summary: "SUSE Bug 1051858",
            url: "https://bugzilla.suse.com/1051858",
         },
         {
            category: "self",
            summary: "SUSE Bug 1056686",
            url: "https://bugzilla.suse.com/1056686",
         },
         {
            category: "self",
            summary: "SUSE Bug 1060463",
            url: "https://bugzilla.suse.com/1060463",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065600",
            url: "https://bugzilla.suse.com/1065600",
         },
         {
            category: "self",
            summary: "SUSE Bug 1065729",
            url: "https://bugzilla.suse.com/1065729",
         },
         {
            category: "self",
            summary: "SUSE Bug 1083647",
            url: "https://bugzilla.suse.com/1083647",
         },
         {
            category: "self",
            summary: "SUSE Bug 1085030",
            url: "https://bugzilla.suse.com/1085030",
         },
         {
            category: "self",
            summary: "SUSE Bug 1104967",
            url: "https://bugzilla.suse.com/1104967",
         },
         {
            category: "self",
            summary: "SUSE Bug 1109911",
            url: "https://bugzilla.suse.com/1109911",
         },
         {
            category: "self",
            summary: "SUSE Bug 1114279",
            url: "https://bugzilla.suse.com/1114279",
         },
         {
            category: "self",
            summary: "SUSE Bug 1118338",
            url: "https://bugzilla.suse.com/1118338",
         },
         {
            category: "self",
            summary: "SUSE Bug 1120386",
            url: "https://bugzilla.suse.com/1120386",
         },
         {
            category: "self",
            summary: "SUSE Bug 1133021",
            url: "https://bugzilla.suse.com/1133021",
         },
         {
            category: "self",
            summary: "SUSE Bug 1136157",
            url: "https://bugzilla.suse.com/1136157",
         },
         {
            category: "self",
            summary: "SUSE Bug 1137325",
            url: "https://bugzilla.suse.com/1137325",
         },
         {
            category: "self",
            summary: "SUSE Bug 1144333",
            url: "https://bugzilla.suse.com/1144333",
         },
         {
            category: "self",
            summary: "SUSE Bug 1145051",
            url: "https://bugzilla.suse.com/1145051",
         },
         {
            category: "self",
            summary: "SUSE Bug 1145929",
            url: "https://bugzilla.suse.com/1145929",
         },
         {
            category: "self",
            summary: "SUSE Bug 1146539",
            url: "https://bugzilla.suse.com/1146539",
         },
         {
            category: "self",
            summary: "SUSE Bug 1148868",
            url: "https://bugzilla.suse.com/1148868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1154385",
            url: "https://bugzilla.suse.com/1154385",
         },
         {
            category: "self",
            summary: "SUSE Bug 1157424",
            url: "https://bugzilla.suse.com/1157424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158552",
            url: "https://bugzilla.suse.com/1158552",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158983",
            url: "https://bugzilla.suse.com/1158983",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159037",
            url: "https://bugzilla.suse.com/1159037",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159142",
            url: "https://bugzilla.suse.com/1159142",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159198",
            url: "https://bugzilla.suse.com/1159198",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159285",
            url: "https://bugzilla.suse.com/1159285",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160659",
            url: "https://bugzilla.suse.com/1160659",
         },
         {
            category: "self",
            summary: "SUSE Bug 1161951",
            url: "https://bugzilla.suse.com/1161951",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162929",
            url: "https://bugzilla.suse.com/1162929",
         },
         {
            category: "self",
            summary: "SUSE Bug 1162931",
            url: "https://bugzilla.suse.com/1162931",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163403",
            url: "https://bugzilla.suse.com/1163403",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163508",
            url: "https://bugzilla.suse.com/1163508",
         },
         {
            category: "self",
            summary: "SUSE Bug 1163897",
            url: "https://bugzilla.suse.com/1163897",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164078",
            url: "https://bugzilla.suse.com/1164078",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164284",
            url: "https://bugzilla.suse.com/1164284",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164507",
            url: "https://bugzilla.suse.com/1164507",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164893",
            url: "https://bugzilla.suse.com/1164893",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165019",
            url: "https://bugzilla.suse.com/1165019",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165111",
            url: "https://bugzilla.suse.com/1165111",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165182",
            url: "https://bugzilla.suse.com/1165182",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165404",
            url: "https://bugzilla.suse.com/1165404",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165488",
            url: "https://bugzilla.suse.com/1165488",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165527",
            url: "https://bugzilla.suse.com/1165527",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165741",
            url: "https://bugzilla.suse.com/1165741",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165813",
            url: "https://bugzilla.suse.com/1165813",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165873",
            url: "https://bugzilla.suse.com/1165873",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165949",
            url: "https://bugzilla.suse.com/1165949",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165984",
            url: "https://bugzilla.suse.com/1165984",
         },
         {
            category: "self",
            summary: "SUSE Bug 1165985",
            url: "https://bugzilla.suse.com/1165985",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166003",
            url: "https://bugzilla.suse.com/1166003",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166101",
            url: "https://bugzilla.suse.com/1166101",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166102",
            url: "https://bugzilla.suse.com/1166102",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166103",
            url: "https://bugzilla.suse.com/1166103",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166104",
            url: "https://bugzilla.suse.com/1166104",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166632",
            url: "https://bugzilla.suse.com/1166632",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166730",
            url: "https://bugzilla.suse.com/1166730",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166731",
            url: "https://bugzilla.suse.com/1166731",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166732",
            url: "https://bugzilla.suse.com/1166732",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166733",
            url: "https://bugzilla.suse.com/1166733",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166734",
            url: "https://bugzilla.suse.com/1166734",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166735",
            url: "https://bugzilla.suse.com/1166735",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166780",
            url: "https://bugzilla.suse.com/1166780",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166860",
            url: "https://bugzilla.suse.com/1166860",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166861",
            url: "https://bugzilla.suse.com/1166861",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166862",
            url: "https://bugzilla.suse.com/1166862",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166864",
            url: "https://bugzilla.suse.com/1166864",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166866",
            url: "https://bugzilla.suse.com/1166866",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166867",
            url: "https://bugzilla.suse.com/1166867",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166868",
            url: "https://bugzilla.suse.com/1166868",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166870",
            url: "https://bugzilla.suse.com/1166870",
         },
         {
            category: "self",
            summary: "SUSE Bug 1166940",
            url: "https://bugzilla.suse.com/1166940",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167005",
            url: "https://bugzilla.suse.com/1167005",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167288",
            url: "https://bugzilla.suse.com/1167288",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167290",
            url: "https://bugzilla.suse.com/1167290",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167316",
            url: "https://bugzilla.suse.com/1167316",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167421",
            url: "https://bugzilla.suse.com/1167421",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167423",
            url: "https://bugzilla.suse.com/1167423",
         },
         {
            category: "self",
            summary: "SUSE Bug 1167629",
            url: "https://bugzilla.suse.com/1167629",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168075",
            url: "https://bugzilla.suse.com/1168075",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168202",
            url: "https://bugzilla.suse.com/1168202",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168276",
            url: "https://bugzilla.suse.com/1168276",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168295",
            url: "https://bugzilla.suse.com/1168295",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168424",
            url: "https://bugzilla.suse.com/1168424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168443",
            url: "https://bugzilla.suse.com/1168443",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168486",
            url: "https://bugzilla.suse.com/1168486",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168760",
            url: "https://bugzilla.suse.com/1168760",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168762",
            url: "https://bugzilla.suse.com/1168762",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168763",
            url: "https://bugzilla.suse.com/1168763",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168764",
            url: "https://bugzilla.suse.com/1168764",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168765",
            url: "https://bugzilla.suse.com/1168765",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168829",
            url: "https://bugzilla.suse.com/1168829",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168854",
            url: "https://bugzilla.suse.com/1168854",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168881",
            url: "https://bugzilla.suse.com/1168881",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168884",
            url: "https://bugzilla.suse.com/1168884",
         },
         {
            category: "self",
            summary: "SUSE Bug 1168952",
            url: "https://bugzilla.suse.com/1168952",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169057",
            url: "https://bugzilla.suse.com/1169057",
         },
         {
            category: "self",
            summary: "SUSE Bug 1169390",
            url: "https://bugzilla.suse.com/1169390",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19768 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19768/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19770 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19770/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-3701 page",
            url: "https://www.suse.com/security/cve/CVE-2019-3701/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9458 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9458/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-10942 page",
            url: "https://www.suse.com/security/cve/CVE-2020-10942/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11494 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11494/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-11669 page",
            url: "https://www.suse.com/security/cve/CVE-2020-11669/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8647 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8647/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8649 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8649/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-8834 page",
            url: "https://www.suse.com/security/cve/CVE-2020-8834/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-9383 page",
            url: "https://www.suse.com/security/cve/CVE-2020-9383/",
         },
      ],
      title: "Security update for the Linux Kernel",
      tracking: {
         current_release_date: "2020-04-23T09:33:05Z",
         generator: {
            date: "2020-04-23T09:33:05Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:1085-1",
         initial_release_date: "2020-04-23T09:33:05Z",
         revision_history: [
            {
               date: "2020-04-23T09:33:05Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kernel-devel-rt-4.12.14-8.18.1.noarch",
                        product: {
                           name: "kernel-devel-rt-4.12.14-8.18.1.noarch",
                           product_id: "kernel-devel-rt-4.12.14-8.18.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-source-rt-4.12.14-8.18.1.noarch",
                        product: {
                           name: "kernel-source-rt-4.12.14-8.18.1.noarch",
                           product_id: "kernel-source-rt-4.12.14-8.18.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                           product_id: "cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                           product_id: "dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                           product_id: "gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "kernel-rt-4.12.14-8.18.1.x86_64",
                           product_id: "kernel-rt-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-base-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "kernel-rt-base-4.12.14-8.18.1.x86_64",
                           product_id: "kernel-rt-base-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt-devel-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "kernel-rt-devel-4.12.14-8.18.1.x86_64",
                           product_id: "kernel-rt-devel-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                           product_id: "kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kernel-syms-rt-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "kernel-syms-rt-4.12.14-8.18.1.x86_64",
                           product_id: "kernel-syms-rt-4.12.14-8.18.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                        product: {
                           name: "ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                           product_id: "ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Real Time 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Real Time 12 SP4",
                           product_id: "SUSE Linux Enterprise Real Time 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-linux-enterprise-rt:12:sp4",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "cluster-md-kmp-rt-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
            },
            product_reference: "cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "dlm-kmp-rt-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
            },
            product_reference: "dlm-kmp-rt-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gfs2-kmp-rt-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            },
            product_reference: "gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-devel-rt-4.12.14-8.18.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
            },
            product_reference: "kernel-devel-rt-4.12.14-8.18.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
            },
            product_reference: "kernel-rt-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-base-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
            },
            product_reference: "kernel-rt-base-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt-devel-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
            },
            product_reference: "kernel-rt-devel-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-rt_debug-devel-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
            },
            product_reference: "kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-source-rt-4.12.14-8.18.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
            },
            product_reference: "kernel-source-rt-4.12.14-8.18.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kernel-syms-rt-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
            },
            product_reference: "kernel-syms-rt-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "ocfs2-kmp-rt-4.12.14-8.18.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP4",
               product_id: "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            },
            product_reference: "ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Real Time 12 SP4",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2019-19768",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19768",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19768",
               url: "https://www.suse.com/security/cve/CVE-2019-19768",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159285 for CVE-2019-19768",
               url: "https://bugzilla.suse.com/1159285",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19768",
      },
      {
         cve: "CVE-2019-19770",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19770",
            },
         ],
         notes: [
            {
               category: "general",
               text: "** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19770",
               url: "https://www.suse.com/security/cve/CVE-2019-19770",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159198 for CVE-2019-19770",
               url: "https://bugzilla.suse.com/1159198",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171295 for CVE-2019-19770",
               url: "https://bugzilla.suse.com/1171295",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19770",
      },
      {
         cve: "CVE-2019-3701",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-3701",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user \"root\" with CAP_NET_ADMIN can create a CAN frame modification rule that makes the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgw_csum_xor_rel) the tail of the skb (e.g. frag_list pointer in skb_shared_info) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-3701",
               url: "https://www.suse.com/security/cve/CVE-2019-3701",
            },
            {
               category: "external",
               summary: "SUSE Bug 1120386 for CVE-2019-3701",
               url: "https://bugzilla.suse.com/1120386",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-3701",
      },
      {
         cve: "CVE-2019-9458",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9458",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9458",
               url: "https://www.suse.com/security/cve/CVE-2019-9458",
            },
            {
               category: "external",
               summary: "SUSE Bug 1168295 for CVE-2019-9458",
               url: "https://bugzilla.suse.com/1168295",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173963 for CVE-2019-9458",
               url: "https://bugzilla.suse.com/1173963",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-9458",
      },
      {
         cve: "CVE-2020-10942",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-10942",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-10942",
               url: "https://www.suse.com/security/cve/CVE-2020-10942",
            },
            {
               category: "external",
               summary: "SUSE Bug 1167629 for CVE-2020-10942",
               url: "https://bugzilla.suse.com/1167629",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-10942",
      },
      {
         cve: "CVE-2020-11494",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11494",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL, aka CID-b9258a2cece4.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11494",
               url: "https://www.suse.com/security/cve/CVE-2020-11494",
            },
            {
               category: "external",
               summary: "SUSE Bug 1168424 for CVE-2020-11494",
               url: "https://bugzilla.suse.com/1168424",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-11494",
      },
      {
         cve: "CVE-2020-11669",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-11669",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR, aka CID-53a712bae5dd.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-11669",
               url: "https://www.suse.com/security/cve/CVE-2020-11669",
            },
            {
               category: "external",
               summary: "SUSE Bug 1169390 for CVE-2020-11669",
               url: "https://bugzilla.suse.com/1169390",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-11669",
      },
      {
         cve: "CVE-2020-8647",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8647",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8647",
               url: "https://www.suse.com/security/cve/CVE-2020-8647",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162929 for CVE-2020-8647",
               url: "https://bugzilla.suse.com/1162929",
            },
            {
               category: "external",
               summary: "SUSE Bug 1164078 for CVE-2020-8647",
               url: "https://bugzilla.suse.com/1164078",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-8647",
      },
      {
         cve: "CVE-2020-8649",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8649",
            },
         ],
         notes: [
            {
               category: "general",
               text: "There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8649",
               url: "https://www.suse.com/security/cve/CVE-2020-8649",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162929 for CVE-2020-8649",
               url: "https://bugzilla.suse.com/1162929",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162931 for CVE-2020-8649",
               url: "https://bugzilla.suse.com/1162931",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-8649",
      },
      {
         cve: "CVE-2020-8834",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-8834",
            },
         ],
         notes: [
            {
               category: "general",
               text: "KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to panic. There were two commits that, according to the reporter, introduced the vulnerability: f024ee098476 (\"KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures\") 87a11bb6a7f7 (\"KVM: PPC: Book3S HV: Work around XER[SO] bug in fake suspend mode\") The former landed in 4.8, the latter in 4.17. This was fixed without realizing the impact in 4.18 with the following three commits, though it's believed the first is the only strictly necessary commit: 6f597c6b63b6 (\"KVM: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm()/kvmppc_restore_tm()\") 7b0e827c6970 (\"KVM: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm\") 009c872a8bc4 (\"KVM: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file\")",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-8834",
               url: "https://www.suse.com/security/cve/CVE-2020-8834",
            },
            {
               category: "external",
               summary: "SUSE Bug 1168276 for CVE-2020-8834",
               url: "https://bugzilla.suse.com/1168276",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173945 for CVE-2020-8834",
               url: "https://bugzilla.suse.com/1173945",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "important",
            },
         ],
         title: "CVE-2020-8834",
      },
      {
         cve: "CVE-2020-9383",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-9383",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it, aka CID-2e90ca68b0d2.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
               "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
               "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-9383",
               url: "https://www.suse.com/security/cve/CVE-2020-9383",
            },
            {
               category: "external",
               summary: "SUSE Bug 1165111 for CVE-2020-9383",
               url: "https://bugzilla.suse.com/1165111",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise Real Time 12 SP4:cluster-md-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:dlm-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:gfs2-kmp-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-devel-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-base-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-rt_debug-devel-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-source-rt-4.12.14-8.18.1.noarch",
                  "SUSE Linux Enterprise Real Time 12 SP4:kernel-syms-rt-4.12.14-8.18.1.x86_64",
                  "SUSE Linux Enterprise Real Time 12 SP4:ocfs2-kmp-rt-4.12.14-8.18.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-04-23T09:33:05Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-9383",
      },
   ],
}