[El-errata] ELSA-2014-3070 Important: Oracle Linux 7 Unbreakable Enterprise kernel security and bug fix update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Fri Aug 22 12:17:15 PDT 2014


Oracle Linux Security Advisory ELSA-2014-3070

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:


x86_64:
kernel-uek-firmware-3.8.13-44.el7uek.noarch.rpm
kernel-uek-doc-3.8.13-44.el7uek.noarch.rpm
kernel-uek-3.8.13-44.el7uek.x86_64.rpm
kernel-uek-devel-3.8.13-44.el7uek.x86_64.rpm
kernel-uek-debug-devel-3.8.13-44.el7uek.x86_64.rpm
kernel-uek-debug-3.8.13-44.el7uek.x86_64.rpm
dtrace-modules-3.8.13-44.el7uek-0.4.3-4.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-3.8.13-44.el7uek.src.rpm
http://oss.oracle.com/ol7/SRPMS-updates/dtrace-modules-3.8.13-44.el7uek-0.4.3-4.el7.src.rpm

Release Notes: 
https://oss.oracle.com/ol7/docs/RELEASE-NOTES-UEK3-QU3-en.html

Description of changes:

kernel-uek
[3.8.13-44.el7uek]
- net: Use netlink_ns_capable to verify the permisions of netlink 
messages (Eric W. Biederman)  [Orabug: 19404229]  {CVE-2014-0181}
- net: Add variants of capable for use on netlink messages (Eric W. 
Biederman)  [Orabug: 19404229]
- net: Add variants of capable for use on on sockets (Eric W. Biederman) 
  [Orabug: 19404229]
- netlink: Rename netlink_capable netlink_allowed (Eric W. Biederman) 
[Orabug: 19404229]
- sctp: Fix sk_ack_backlog wrap-around problem (Xufeng Zhang)  [Orabug: 
19404238]  {CVE-2014-4667}
- Revert "xen/fb: allow xenfb initialization for hvm guests" (Vaughan 
Cao)  [Orabug: 19320529]

[3.8.13-43.el7uek]
- init: fix in-place parameter modification regression (Krzysztof Mazur) 
  [Orabug: 18954967]
- drivers: scsi: storvsc: Correctly handle TEST_UNIT_READY failure (K. 
Y. Srinivasan)  [Orabug: 19280065]
- drivers: scsi: storvsc: Set srb_flags in all cases (K. Y. Srinivasan) 
  [Orabug: 19280065]
- Drivers: scsi: storvsc: Implement a timedout handler (K. Y. 
Srinivasan)  [Orabug: 19280065]
- Drivers: scsi: storvsc: Fix a bug in handling VMBUS protocol version 
(K. Y. Srinivasan)  [Orabug: 19280065]
- Drivers: scsi: storvsc: Filter commands based on the storage protocol 
version (K. Y. Srinivasan)  [Orabug: 19280065]
- Drivers: scsi: storvsc: Set cmd_per_lun to reflect value supported by 
the Host (K. Y. Srinivasan)  [Orabug: 19280065]
- Drivers: scsi: storvsc: Change the limits to reflect the values on the 
host (K. Y. Srinivasan)  [Orabug: 19280065]

[3.8.13-42.el7uek]
- filter: prevent nla extensions to peek beyond the end of the message 
(Mathias Krause)  [Orabug: 19315780]  {CVE-2014-3144} {CVE-2014-3145}

[3.8.13-41.el7uek]
- rds: Lost locking in loop connection freeing (Pavel Emelyanov) 
[Orabug: 19124446]
- ocfs2/o2net: incorrect to terminate accepting connections loop upon 
rejecting an invalid one (Tariq Saeed)  [Orabug: 19296823]
- xen/pciback: Don't deadlock when unbinding. (Konrad Rzeszutek Wilk) 
[Orabug: 19296592]
- PCI: Split out pci_dev lock/unlock and save/restore (Alex Williamson) 
  [Orabug: 19296592]

[3.8.13-40.el7uek]
- l2tp: fix an unprivileged user to kernel privilege escalation (Sasha 
Levin)  [Orabug: 19228689]  {CVE-2014-4943} {CVE-2014-4943}
- ptrace,x86: force IRET path after a ptrace_stop() (Tejun Heo) [Orabug: 
19222017]  {CVE-2014-4699}
- mpt3sas: Rework the MSI-X code to work on systems with many processors 
(Martin K. Petersen)  [Orabug: 18182490]
- mpt2sas: Rework the MSI-X code to work on systems with many processors 
(Martin K. Petersen)  [Orabug: 18182490]
- mpt3sas: Bump mpt3sas driver version to 04.100.00.00 (Reddy, 
Sreekanth)  [Orabug: 19015667]
- mpt3sas: Added Reply Descriptor Post Queue (RDPQ) Array support 
(Reddy, Sreekanth)  [Orabug: 19015667]
- mpt3sas: Bump mpt3sas driver version to 03.100.00.00 (Reddy, 
Sreekanth)  [Orabug: 19015667]
- mpt3sas: Added OEM branding Strings (Reddy, Sreekanth)  [Orabug: 19015667]
- mpt3sas: MPI2.5 Rev H (2.5.3) specifications (Reddy, Sreekanth) 
[Orabug: 19015667]
- mpt3sas: Copyright in driver sources is updated for year the 2014 
(Reddy, Sreekanth)  [Orabug: 19015667]
- mpt3sas: Clear PFA Status on SGPIO when PFA Drive is Removed or 
Replaced (Reddy, Sreekanth)  [Orabug: 19015667]
- mpt3sas: MPI2.5 Rev G (2.5.2) specifications (Reddy, Sreekanth) 
[Orabug: 19015667]
- mpt3sas: Remove use of DEF_SCSI_QCMD (Matthew Wilcox)  [Orabug: 19015667]
- mpt3sas: Remove uses of serial_number (Matthew Wilcox)  [Orabug: 19015667]
- Allow MPT Fusion SAS 3.0 driver to be built into the kernel (Greg 
Kroah-Hartman)  [Orabug: 19015667]
- mpt3sas: Remove phys on topology change (Jan Vesely)  [Orabug: 19015667]
- mpt3sas: Added a driver module parameter max_msix_vectors (Sreekanth 
Reddy)  [Orabug: 19015667]
- mpt3sas: fix cleanup on controller resource mapping failure (Joe 
Lawrence)  [Orabug: 19015667]
- Revert "mpt3sas: update from v02.100.00.00 to v3.00.00.00" (Martin K. 
Petersen)  [Orabug: 19015667]
- Revert "mpt3sas: Rework the MSI-X code to work on systems with many 
processors" (Martin K. Petersen)  [Orabug: 19015667]
- mpt2sas: Added module parameter 'unblock_io' to unblock IO's during 
disk addition (Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: Bump mpt2sas driver version to 18.100.00.00 (Reddy, 
Sreekanth)  [Orabug: 19015667]
- mpt2sas: Get IOC_FACTS information using handshake protocol only after 
HBA card gets into READY or Operational state (Reddy, Sreekanth) 
[Orabug: 19015667]
- mpt2sas: Added Reply Descriptor Post Queue (RDPQ) Array support 
(Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: For >2TB volumes, DirectDrive support sends IO's with LBA bit 
31 to IR FW instead of DirectDrive (Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: Copyright in driver sources is updated for year the 2014 
(Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: Clear PFA Status on SGPIO when PFA Drive is Removed or 
Replaced (Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: Bump mpt2sas driver version to 17.100.00.00 (Reddy, 
Sreekanth)  [Orabug: 19015667]
- mpt2sas: MPI2 Rev Y (2.00.17) and Rev Z (2.00.18) specifications 
(Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: Added driver module parameter max_msix_vectors (Reddy, 
Sreekanth)  [Orabug: 19015667]
- mpt2sas: Add free smids to the head, not tail of list (Matthew Wilcox) 
  [Orabug: 19015667]
- mpt2sas: Remove use of DEF_SCSI_QCMD (Matthew Wilcox)  [Orabug: 19015667]
- mpt2sas: Remove uses of serial_number (Matthew Wilcox)  [Orabug: 19015667]
- mpt2sas: Don't disable device twice at suspend. (Tyler Stachecki) 
[Orabug: 19015667]
- mpt2sas: Remove phys on topology change. (Jan Vesely)  [Orabug: 19015667]
- mpt2sas: Bump driver version to v16.100.00.00 (Sreekanth Reddy) 
[Orabug: 19015667]
- mpt2sas: Fix for kernel panic when driver loads with HBA connected to 
non LUN 0 configured expander (Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: when Async scanning is enabled then while scanning, devices 
are removed but their transport layer entries are not removed (Sreekanth 
Reddy)  [Orabug: 19015667]
- mpt2sas: Infinite loop can occur if MPI2_IOCSTATUS_CONFIG_INVALID_PAGE 
is not returned (Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: The copyright in driver sources is updated for the year 2013 
(Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: MPI2 Rev X (2.00.16) specifications (Sreekanth Reddy) 
[Orabug: 19015667]
- mpt2sas: Change in MPI2_RAID_ACTION_SYSTEM_SHUTDOWN_INITIATED 
notification methodology (Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: Null pointer deference possibility in 
mpt2sas_ctl_event_callback function (Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: fix cleanup on controller resource mapping failure (Joe 
Lawrence)  [Orabug: 19015667]
- mpt2sas: fix for unused variable 'event_data' warning (Reddy, 
Sreekanth)  [Orabug: 19015667]
- mpt2sas: Bump driver vesion to v15.100.00.00 (Sreekanth Reddy) 
[Orabug: 19015667]
- mpt2sas: Calulate the Reply post queue depth calculation as per the 
MPI spec (Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: fix firmware failure with wrong task attribute (Sreekanth 
Reddy)  [Orabug: 19015667]
- mpt2sas: Fix for device scan following host reset could get stuck in a 
infinite loop (Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: Update the timing requirements for issuing a Hard Reset 
(Sreekanth Reddy)  [Orabug: 19015667]
- mpt2sas: MPI2 Rev W (2.00.15) specification (Sreekanth Reddy) [Orabug: 
19015667]
- mpt2sas: Fix for issue Missing delay not getting set during system 
bootup (Reddy, Sreekanth)  [Orabug: 19015667]
- mpt2sas: Add support for OEM specific controller (Sreekanth Reddy) 
[Orabug: 19015667]
- mpt2sas: fix for driver fails EEH, recovery from injected pci bus 
error (Sreekanth Reddy)  [Orabug: 19015667]
- Revert "mpt2sas: update to LSI version 16.05.01.00" (Martin K. 
Petersen)  [Orabug: 19015667]
- Revert "mpt2sas: update from 16.05.01.00 to 17.00.00.00" (Martin K. 
Petersen)  [Orabug: 19015667]
- Revert "mpt2sas: Rework the MSI-X code to work on systems with many 
processors" (Martin K. Petersen)  [Orabug: 19015667]
- megaraid_sas: Version and Changelog update (Adam Radford)  [Orabug: 
19015667]
- megaraid_sas: Fix LD/VF affiliation parsing (Adam Radford)  [Orabug: 
19015667]
- megaraid_sas: Remove unused variables in megasas_instance (Adam 
Radford)  [Orabug: 19015667]
- megaraid_sas: Fix reset_mutex leak (Adam Radford)  [Orabug: 19015667]
- megaraid_sas: fix a small problem when reading state value from hw 
(Tomas Henzl)  [Orabug: 19015667]
- megaraid_sas: Version and Changelog update (Adam Radford)  [Orabug: 
19015667]
- megaraid_sas: Add Dell PowerEdge VRTX SR-IOV VF support (Adam Radford) 
  [Orabug: 19015667]
- megaraid_sas: Return leaked MPT frames to MPT frame pool (Adam 
Radford)  [Orabug: 19015667]
- megaraid_sas: Fix megasas_ioc_init_fusion (Adam Radford)  [Orabug: 
19015667]
- megaraid_sas: Load correct raid context timeout (Adam Radford) 
[Orabug: 19015667]
- megaraid_sas: Performance boost fixes (Sumit.Saxena at lsi.com)  [Orabug: 
19015667]
- megaraid_sas: Set 32-bit DMA mask (Sumit.Saxena at lsi.com)  [Orabug: 
19015667]
- megaraid_sas: Big endian code related fixes (Sumit.Saxena at lsi.com) 
[Orabug: 19015667]
- megaraid_sas: Don't wait forever for non-IOCTL DCMDs 
(Sumit.Saxena at lsi.com)  [Orabug: 19015667]
- megaraid_sas: check return value for megasas_get_pd_list() (Hannes 
Reinecke)  [Orabug: 19015667]
- megaraid_sas_fusion: Return correct error value in 
megasas_get_ld_map_info() (Hannes Reinecke)  [Orabug: 19015667]
- megaraid_sas_fusion: correctly pass queue info pointer (Hannes 
Reinecke)  [Orabug: 19015667]
- megaraid: missing bounds check in mimd_to_kioc() (Dan Carpenter) 
[Orabug: 19015667]
- megaraid: Use resource_size_t for PCI resources, not long (Ben 
Collins)  [Orabug: 19015667]

[3.8.13-39.el7uek]
- PCI: Work around Ivytown NTB BAR size issue (Jon Mason)  [Orabug: 
18127862]
- cgroup: make cgroup_path() not print double slashes (Tejun Heo) 
[Orabug: 18510637]
- xen: Introduce 'xen_nopv' to disable PV extensions for HVM guests. 
(Konrad Rzeszutek Wilk)  [Orabug: 19033747]
- spec: reenable pesign module signing (Guangyu Sun)  [Orabug: 19065003]
- [ocfs2]: refcount: take rw_lock in ocfs2_reflink (Wengang Wang) 
[Orabug: 19154247]
- cifs: bugfix for unreclaimed writeback pages in cifs_writev_requeue() 
(Ouyang Maochun)  [Orabug: 18447168]
- xfs: add CRCs to attr leaf blocks (Dave Chinner)  [Orabug: 18504299]
- xfs: add CRCs to dir2/da node blocks (Dave Chinner)  [Orabug: 18504299]
- xfs: shortform directory offsets change for dir3 format (Dave Chinner) 
  [Orabug: 18504299]
- xfs: add CRC checking to dir2 leaf blocks (Dave Chinner)  [Orabug: 
18504299]
- xfs: add CRC checking to dir2 data blocks (Dave Chinner)  [Orabug: 
18504299]
- xfs: add CRC checking to dir2 free blocks (Dave Chinner)  [Orabug: 
18504299]
- xfs: add CRC checks to block format directory blocks (Dave Chinner) 
[Orabug: 18504299]
- xfs: add CRC checks to remote symlinks (Dave Chinner)  [Orabug: 18504299]
- xfs: split out symlink code into it's own file. (Dave Chinner) 
[Orabug: 18504299]
- xfs: add version 3 inode format with CRCs (Christoph Hellwig) [Orabug: 
18504299]
- xfs: add CRC checks for quota blocks (Christoph Hellwig)  [Orabug: 
18504299]
- xfs: add CRC checks to the AGI (Dave Chinner)  [Orabug: 18504299]
- xfs: add CRC checks to the AGFL (Christoph Hellwig)  [Orabug: 18504299]
- xfs: add CRC checks to the AGF (Dave Chinner)  [Orabug: 18504299]
- xfs: add support for large btree blocks (Christoph Hellwig)  [Orabug: 
18504299]
- xfs: xfs_iomap_prealloc_size() tracepoint (Brian Foster)  [Orabug: 
18504299]
- xfs: add quota-driven speculative preallocation throttling (Brian 
Foster)  [Orabug: 18504299]
- xfs: xfs_dquot prealloc throttling watermarks and low free space 
(Brian Foster)  [Orabug: 18504299]
- xfs: pass xfs_dquot to xfs_qm_adjust_dqlimits() instead of 
xfs_disk_dquot_t (Brian Foster)  [Orabug: 18504299]
- xfs: push rounddown_pow_of_two() to after prealloc throttle (Brian 
Foster)  [Orabug: 18504299]
- xfs: reorganize xfs_iomap_prealloc_size to remove indentation (Brian 
Foster)  [Orabug: 18504299]
- xfs: take inode version into account in XFS_LITINO (Christoph Hellwig) 
  [Orabug: 18504299]
- xfs: rearrange some code in xfs_bmap for better locality (Dave 
Chinner)  [Orabug: 18504299]
- xfs: don't verify buffers after IO errors (Dave Chinner)  [Orabug: 
18504299]
- xfs: limit speculative prealloc size on sparse files (Dave Chinner) 
[Orabug: 18504299]
- xfs: memory barrier before wake_up_bit() (Alex Elder)  [Orabug: 18504299]
- xfs: refactor space log reservation for XFS_TRANS_ATTR_SET (Jeff Liu) 
  [Orabug: 18504299]
- xfs: make use of XFS_SB_LOG_RES() at xfs_fs_log_dummy() (Jeff Liu) 
[Orabug: 18504299]
- xfs: make use of XFS_SB_LOG_RES() at xfs_mount_log_sb() (Jeff Liu) 
[Orabug: 18504299]
- xfs: make use of XFS_SB_LOG_RES() at xfs_log_sbcount() (Jeff Liu) 
[Orabug: 18504299]
- xfs: introduce XFS_SB_LOG_RES() for transactions that modify sb on 
disk (Jeff Liu)  [Orabug: 18504299]
- xfs: calculate XFS_TRANS_QM_QUOTAOFF_END space log reservation at 
mount time (Jeff Liu)  [Orabug: 18504299]
- xfs: calculate XFS_TRANS_QM_QUOTAOFF space log reservation at mount 
time (Jeff Liu)  [Orabug: 18504299]
- xfs: calculate XFS_TRANS_QM_DQALLOC space log reservation at mount 
time (Jeff Liu)  [Orabug: 18504299]
- xfs: calcuate XFS_TRANS_QM_SETQLIM space log reservation at mount time 
(Jeff Liu)  [Orabug: 18504299]
- xfs: calculate xfs_qm_write_sb_changes() space log reservation at 
mount time (Jeff Liu)  [Orabug: 18504299]
- xfs: calculate XFS_TRANS_QM_SBCHANGE space log reservation at mount 
time (Jeff Liu)  [Orabug: 18504299]
- xfs: make use of xfs_calc_buf_res() in xfs_trans.c (Jeff Liu) [Orabug: 
18504299]
- xfs: add a helper to figure out the space log reservation per item 
(Jeff Liu)  [Orabug: 18504299]
- xfs: fix fs/xfs/xfs_log.c:1740:39: error: 'B_TRUE' undeclared (Ben 
Myers)  [Orabug: 18504299]
- xfs: Remove boolean_t typedef completely. (Thiago Farina)  [Orabug: 
18504299]
(Abhijit Pawar)  [Orabug: 18504299]
- xfs: don't zero structure members after a memset(0) (Eric Sandeen) 
[Orabug: 18504299]
- xfs remove the XFS_TRANS_DEBUG routines (Mark Tinguely)  [Orabug: 
18504299]
- spec: list linux-firmware as a dependency (Guangyu Sun)  [Orabug: 
18539100]
- kbuild/ctf: Fix out-of-tree module build when CONFIG_CTF=n. (Nick 
Alcock)  [Orabug: 19078361]
- dtrace: support order-only-prerequisites for sdtstub generation (Kris 
Van Hees)  [Orabug: 18906444]
- qlcnic: Add SRIOV helper function to determine if VFs are assigned to 
guest (Vaughan Cao)  [Orabug: 19167877]
- qlcnic: make Kconfig changes (Vaughan Cao)  [Orabug: 19167877]
- qlcnic: sysfs interface for PCI BAR access (Sony Chacko)  [Orabug: 
19167877]
- qlcnic: Update version to 5.3.59 (Rajesh Borundia)  [Orabug: 19167877]
- qlcnic: Collect firmware dump using DMA on 82xx adapters (Shahed 
Shaikh)  [Orabug: 19167877]
- qlcnic: Add mac learning support to SR-IOV VF. (Rajesh Borundia) 
[Orabug: 19167877]
- qlcnic: Add support to process commands in atomic context (Rajesh 
Borundia)  [Orabug: 19167877]
- qlcnic: Allow SR-IOV VF probe in hypervisor. (Rajesh Borundia) 
[Orabug: 19167877]
- qlcnic: Set real_num_{tx|rx}_queues properly (Shahed Shaikh)  [Orabug: 
19167877]
- qlcnic: Fix panic while dumping TX queues on TX timeout (Manish 
Chopra)  [Orabug: 19167877]
- qlcnic: Update version to 5.3.58 (Jitendra Kalsaria)  [Orabug: 19167877]
- qlcnic: Limit vNIC support in legacy interrupt mode (Sucheta 
Chakraborty)  [Orabug: 19167877]
- qlcnic: Add driver logs in error path. (Sucheta Chakraborty)  [Orabug: 
19167877]
- qlcnic: Allow setting TX interrupt coalescing parameters from VF. 
(Sucheta Chakraborty)  [Orabug: 19167877]
- qlcnic: Add hwmon-sysfs interface to export board temperature. (Harish 
Patil)  [Orabug: 19167877]
- qlcnic: Optimize MAC learning code (Shahed Shaikh)  [Orabug: 19167877]
- qlcnic: Fix memory leak. (Rajesh Borundia)  [Orabug: 19167877]
- qlcnic: Reset firmware API lock at driver load time (Sony Chacko) 
[Orabug: 19167877]
- qlcnic: Fix MSI-X initialization code (Alexander Gordeev)  [Orabug: 
19167877]
- qlcnic: Do not disable SR-IOV when VFs are assigned to VMs (Manish 
Chopra)  [Orabug: 19167877]
- qlcnic: Fix QLogic application/driver interface for virtual NIC 
configuration (Jitendra Kalsaria)  [Orabug: 19167877]
- qlcnic: Fix PVID configuration on eSwitch port. (Jitendra Kalsaria) 
[Orabug: 19167877]
- qlcnic: Fix max ring count calculation (Shahed Shaikh)  [Orabug: 19167877]
- qlcnic: Fix to send INIT_NIC_FUNC as first mailbox. (Sucheta 
Chakraborty)  [Orabug: 19167877]
- qlcnic: Fix panic due to uninitialzed delayed_work struct in use. 
(Sucheta Chakraborty)  [Orabug: 19167877]
- net: qlcnic: include irq.h for irq definitions (Josh Boyer)  [Orabug: 
19167877]
- qlcnic: Remove casts of pointer to same type (Joe Perches)  [Orabug: 
19167877]
- qlcnic: Update version to 5.3.57 (Shahed Shaikh)  [Orabug: 19167877]
- qlcnic: dcb: a couple off by one bugs (Dan Carpenter)  [Orabug: 19167877]
- qlcnic: Fix number of rings when we fall back from msix to legacy. 
(Rajesh Borundia)  [Orabug: 19167877]
- qlcnic: Allow any VLAN to be configured from VF. (Sucheta Chakraborty) 
  [Orabug: 19167877]
- qlcnic: Fix usage of use_msi and use_msi_x module parameters (Shahed 
Shaikh)  [Orabug: 19167877]
- qlcnic: Fix function return error check (Shahed Shaikh)  [Orabug: 
19167877]
- qlcnic: Update version to 5.3.56 (Shahed Shaikh)  [Orabug: 19167877]
- qlcnic: Enhance semaphore lock access failure error message (Harish 
Patil)  [Orabug: 19167877]
- qlcnic: Allow vlan0 traffic (Rajesh Borundia)  [Orabug: 19167877]
- qlcnic: Enhance driver message in failed state. (Sucheta Chakraborty) 
  [Orabug: 19167877]
- qlcnic: Updates to QLogic application/driver interface for virtual NIC 
configuration (Jitendra Kalsaria)  [Orabug: 19167877]
- qlcnic: Re-factor firmware minidump template header handling (Shahed 
Shaikh)  [Orabug: 19167877]
- qlcnic: Cleanup qlcnic_enable_msix() return values (Alexander Gordeev) 
  [Orabug: 19167877]
- qlcnic: Reverse patches till 5.3.55. (Sucheta Chakraborty)  [Orabug: 
19167877]
- qla4xxx: Update driver verion to v5.04.00.06.06.02-uek3 (Tej Parkash) 
  [Orabug: 19144350]
- qla4xxx: Use kmemdup instead of kmalloc + memcpy (Benoit Taine) 
[Orabug: 19144350]
- qla4xxx: Fix smatch warning in func qla4xxx_conn_get_param (Adheer 
Chandravanshi)  [Orabug: 19144350]
- qla4xxx: Fix smatch warning in func qla4xxx_get_ep_param (Adheer 
Chandravanshi)  [Orabug: 19144350]
- qla4xxx: Fix memory leak for ha->saved_acb (Nilesh Javali)  [Orabug: 
19144350]
- qla4xxx: Export sysfs DDBs from DPC handler (Nilesh Javali)  [Orabug: 
19144350]
- qla4xxx: Disable INTx interrupt for ISP82XX (Tej Parkash)  [Orabug: 
19144350]
- hpsa: add previously missing pci_device_id (Vaughan Cao)  [Orabug: 
19137821]
- hpsa: fix handling of hpsa_volume_offline return value (Stephen M. 
Cameron)  [Orabug: 19137821]
- hpsa: return -ENOMEM not -1 on kzalloc failure in hpsa_get_device_id 
(Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: remove messages about volume status VPD inquiry page not 
supported (Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: report check condition even if no sense data present for 
ioaccel2 mode (Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: remove bad unlikely annotation from device list updating code 
(Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: fix event filtering to prevent excessive rescans with old 
firmware (Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: kill annoying messages about SSD Smart Path retries (Stephen M. 
Cameron)  [Orabug: 19137821]
- hpsa: define extended_report_lun_entry data structure (Stephen M. 
Cameron)  [Orabug: 19137821]
- hpsa: Rearrange start_io to avoid one unlock/lock sequence in main io 
path (Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: avoid unnecessary readl on every command submission (Stephen M. 
Cameron)  [Orabug: 19137821]
- hpsa: use per-cpu variable for lockup_detected (Stephen M. Cameron) 
[Orabug: 19137821]
- hpsa: set irq affinity hints to route MSI-X vectors across CPUs 
(Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: allocate reply queues individually (Stephen M. Cameron) [Orabug: 
19137821]
- hpsa: choose number of reply queues more intelligently. (Stephen M. 
Cameron)  [Orabug: 19137821]
- hpsa: remove dev_dbg() calls from hot paths (Stephen M. Cameron) 
[Orabug: 19137821]
- hpsa: use gcc aligned attribute instead of manually padding structs 
(Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: change doorbell reset delay to ten seconds (Justin Lindley) 
[Orabug: 19137821]
- hpsa: allow passthru ioctls to work with bidirectional commands 
(Stephen M. Cameron)  [Orabug: 19137821]
- hpsa: remove unused fields from struct ctlr_info (Stephen M. Cameron) 
  [Orabug: 19137821]
- hpsa: fix bad comparison of signed with unsigned in 
hpsa_update_scsi_devices (Joe Handzik)  [Orabug: 19137821]
- hpsa: do not ignore failure of sense controller parameters command 
(Joe Handzik)  [Orabug: 19137821]
- hpsa: fix memory leak in hpsa_hba_mode_enabled (Joe Handzik)  [Orabug: 
19137821]
- hpsa: Checking for a NULL return from a kzalloc call (Joe Handzik) 
[Orabug: 19137821]
- hpsa: unnecessary type conversion for physdev_list (Vaughan Cao) 
[Orabug: 19137821]
- hpsa: detect_controller_lockup don't need return value (Vaughan Cao) 
[Orabug: 19137821]
- hpsa: fixup MSI-X registration (Hannes Reinecke)  [Orabug: 19137821]
- xen/microcode: Use dummy microcode_ops for non initial domain guest 
(Zhenzhong Duan)  [Orabug: 19053626]
- hyperv: Change the receive buffer size for legacy hosts (Haiyang 
Zhang)  [Orabug: 19050496]
- be2net: fix qnq mode detection on VFs (Suresh Reddy)  [Orabug: 19006455]
- be2net: cleanup MCC async event processing code (Sathya Perla) 
[Orabug: 19006455]
- be2net: move async cmd processing to a separate routine (Sathya Perla) 
  [Orabug: 19006455]
- be2net: re-factor MCCQ error status handling code (Kalesh AP) [Orabug: 
19006455]
- be2net: support flashing new regions on Skyhawk-R (Vasundhara Volam) 
[Orabug: 19006455]
- be2net: skip multicast promiscuos setting in already set (Kalesh AP) 
[Orabug: 19006455]
- be2net: enable interrupts in EEH resume (Kalesh AP)  [Orabug: 19006455]
- net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19006455]
- be2net: use MCCQ instead of MBOX in be_cmd_rss_config() (Kalesh AP) 
[Orabug: 19006455]
- be2net: include rx-compl error counter in ethtool stats (Kalesh AP) 
[Orabug: 19006455]
- be2net: remove unused code in be_cmd_vlan_config() (Kalesh AP) 
[Orabug: 19006455]
- be2net: covert vlan array to bit-map (Ravikumar Nelavelli)  [Orabug: 
19006455]
- be2net: fix line wrap and function call indentation in be_ethtool.c 
(Sathya Perla)  [Orabug: 19006455]
- be2net: fix function call indentation in be_cmds.c (Sathya Perla) 
[Orabug: 19006455]
- be2net: fix line wrap and function call indentation in be_main.c 
(Sathya Perla)  [Orabug: 19006455]
- be2net: Fix invocation of be_close() after be_clear() (Kalesh AP) 
[Orabug: 19006455]
- be2net: Fix to reap TX compls till HW doesn't respond for some time 
(Vasundhara Volam)  [Orabug: 19006455]
- selinux: correctly label /proc inodes in use before the policy is 
loaded (Paul Moore)  [Orabug: 18823621]
- mm, hugetlb: improve page-fault scalability (Davidlohr Bueso) [Orabug: 
18757256]
- config: build TPM HW Random Number Generator as module (Guangyu Sun) 
[Orabug: 18502024]
- cpufreq: Drop rwsem lock around CPUFREQ_GOV_POLICY_EXIT (Viresh Kumar) 
  [Orabug: 18464169]
- cpufreq: Preserve sysfs files across suspend/resume (Srivatsa S. Bhat) 
  [Orabug: 18464169]
- cpufreq, ondemand: Remove leftover debug line (Borislav Petkov) 
[Orabug: 18464169]
- cpufreq: Issue CPUFREQ_GOV_POLICY_EXIT notifier before dropping policy 
refcount (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: governors: Fix CPUFREQ_GOV_POLICY_{INIT|EXIT} notifiers 
(Viresh Kumar)  [Orabug: 18464169]
- cpufreq: Revert incorrect commit 5800043 (Rafael J. Wysocki)  [Orabug: 
18464169]
- cpufreq: Don't call __cpufreq_governor() for drivers without target() 
(Viresh Kumar)  [Orabug: 18464169]
- cpufreq: convert cpufreq_driver to using RCU (Nathan Zimmer)  [Orabug: 
18464169]
- cpufreq: Call __cpufreq_governor() with correct policy->cpus mask 
(Viresh Kumar)  [Orabug: 18464169]
- cpufreq: Correct header guards typo (Borislav Petkov)  [Orabug: 18464169]
- cpufreq: Fix unsigned variable being checked for negative value 
(jhbird.choi at samsung.com)  [Orabug: 18464169]
- cpufreq: conservative: Fix the logic in frequency decrease checking 
(Stratos Karafotis)  [Orabug: 18464169]
- cpufreq: conservative: Fix sampling_down_factor functionality (Stratos 
Karafotis)  [Orabug: 18464169]
- cpufreq: governors: Calculate iowait time only when necessary (Stratos 
Karafotis)  [Orabug: 18464169]
- cpufreq: conservative: Fix relation when decreasing frequency 
(Namhyung Kim)  [Orabug: 18464169]
- cpufreq: conservative: Break out earlier on the lowest frequency 
(Namhyung Kim)  [Orabug: 18464169]
- cpufreq: governors: Avoid unnecessary per cpu timer interrupts (Viresh 
Kumar)  [Orabug: 18464169]
- cpufreq: ondemand: Don't update sample_type if we don't evaluate load 
again (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: governor: Set MIN_LATENCY_MULTIPLIER to 20 (Viresh Kumar) 
[Orabug: 18464169]
- cpufreq: governor: Implement per policy instances of governors (Viresh 
Kumar)  [Orabug: 18464169]
- cpufreq: Add per policy governor-init/exit infrastructure (Viresh 
Kumar)  [Orabug: 18464169]
- cpufreq: Convert the cpufreq_driver_lock to a rwlock (Nathan Zimmer) 
[Orabug: 18464169]
- cpufreq: acpi-cpufreq: Don't set policy->related_cpus from .init() 
(Viresh Kumar)  [Orabug: 18464169]
- cpufreq: stats: do cpufreq_cpu_put() corresponding to 
cpufreq_cpu_get() (viresh kumar)  [Orabug: 18464169]
- cpufreq_stats: do not remove sysfs files if frequency table is not 
present (Dirk Brandewie)  [Orabug: 18464169]
- cpufreq: Do not track governor name for scaling drivers with internal 
governors. (Dirk Brandewie)  [Orabug: 18464169]
- cpufreq: Only call cpufreq_out_of_sync() for driver that implement 
cpufreq_driver.target() (Dirk Brandewie)  [Orabug: 18464169]
- cpufreq: Retrieve current frequency from scaling drivers with internal 
governors (Dirk Brandewie)  [Orabug: 18464169]
- cpufreq: Fix locking issues (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: Create a macro for unlock_policy_rwsem{read,write} (Viresh 
Kumar)  [Orabug: 18464169]
- cpufreq: Remove unused HOTPLUG_CPU code (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: governors: Fix WARN_ON() for multi-policy platforms (Viresh 
Kumar)  [Orabug: 18464169]
- cpufreq: ondemand: Replace down_differential tuner with 
adj_up_threshold (Stratos Karafotis)  [Orabug: 18464169]
- cpufreq / stats: Get rid of CPUFREQ_STATDEVICE_ATTR (Viresh Kumar) 
[Orabug: 18464169]
- cpufreq: Don't check cpu_online(policy->cpu) (Viresh Kumar)  [Orabug: 
18464169]
- cpufreq: Don't remove sysfs link for policy->cpu (Viresh Kumar) 
[Orabug: 18464169]
- cpufreq: governors: Reset tunables only for 
cpufreq_unregister_governor() (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: governors: Remove code redundancy between governors (Viresh 
Kumar)  [Orabug: 18464169]
- cpufreq: governors: Get rid of dbs_data->enable field (Viresh Kumar) 
[Orabug: 18464169]
- cpufreq: governors: fix misuse of cdbs.cpu (Fabio Baltieri)  [Orabug: 
18464169]
- cpufreq: governors: implement generic policy_is_shared (Fabio 
Baltieri)  [Orabug: 18464169]
- cpufreq: governors: clean timer init and exit code (Fabio Baltieri) 
[Orabug: 18464169]
- cpufreq: Simplify cpufreq_add_dev() (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: Revert "cpufreq: Don't use cpu removed during 
cpufreq_driver_unregister" (Viresh Kumar)  [Orabug: 18464169]
- powernow-k8: Cleanup init function (Borislav Petkov)  [Orabug: 18464169]
- powernow-k8: Cleanup module request (Borislav Petkov)  [Orabug: 18464169]
- cpufreq: Add a get_current_driver helper (Borislav Petkov)  [Orabug: 
18464169]
- cpufreq: Make acpi-cpufreq link first (Borislav Petkov)  [Orabug: 
18464169]
- acpi-cpufreq: Do not load on K8 (Matthew Garrett)  [Orabug: 18464169]
- cpufreq: handle cpufreq being disabled for all exported function. 
(Dirk Brandewie)  [Orabug: 18464169]
- cpufreq: Simplify __cpufreq_remove_dev() (Viresh Kumar)  [Orabug: 
18464169]
- cpufreq: Don't use cpu removed during cpufreq_driver_unregister 
(Viresh Kumar)  [Orabug: 18464169]
- cpufreq: Notify governors when cpus are hot-[un]plugged (Viresh Kumar) 
  [Orabug: 18464169]
- cpufreq: Manage only online cpus (Viresh Kumar)  [Orabug: 18464169]
- cpufreq: ondemand: use all CPUs in update_sampling_rate (Fabio 
Baltieri)  [Orabug: 18464169]
- cpufreq: conservative: call dbs_check_cpu only when necessary (Fabio 
Baltieri)  [Orabug: 18464169]
- cpufreq: ondemand: call dbs_check_cpu only when necessary (Fabio 
Baltieri)  [Orabug: 18464169]
- cpufreq: handle SW coordinated CPUs (Rickard Andersson)  [Orabug: 
18464169]
- PM / tracing: remove deprecated power trace API (Paul Gortmaker) 
[Orabug: 18464169]
- xen/balloon: set ballooned out pages as invalid in p2m (David Vrabel) 
  [Orabug: 19182632]
- xen/manage: fix potential deadlock when resuming the console (David 
Vrabel)  [Orabug: 19182632]
- xen/grant-table: fix suspend for non-PV guests (David Vrabel) [Orabug: 
19182632]
- x86/xen: no need to explicitly register an NMI callback (David Vrabel) 
  [Orabug: 19182632]
- Revert "xen/pvh: Update E820 to work with PVH (v2)" (David Vrabel) 
[Orabug: 19182632]
- x86/xen: fix memory setup for PVH dom0 (David Vrabel)  [Orabug: 19182632]
- x86/xen: map foreign pfns for autotranslated guests (Mukesh Rathor) 
[Orabug: 19182632]
- xen-acpi-processor: Don't display errors when we get -ENOSYS (Konrad 
Rzeszutek Wilk)  [Orabug: 19182632]
- xen/pciback: Document the entry points for 'pcistub_put_pci_dev' 
(Konrad Rzeszutek Wilk)  [Orabug: 19182632]
- xen/pciback: Document when the 'unbind' and 'bind' functions are 
called. (Konrad Rzeszutek Wilk)  [Orabug: 19182632]
- xen-pciback: Document when we FLR an PCI device. (Konrad Rzeszutek 
Wilk)  [Orabug: 19182632]
- xen-pciback: First reset, then free. (Konrad Rzeszutek Wilk)  [Orabug: 
19182632]
- xen-pciback: Cleanup up pcistub_put_pci_dev (Konrad Rzeszutek Wilk) 
[Orabug: 19182632]
- x86/xen: do not use _PAGE_IOMAP in xen_remap_domain_mfn_range() (David 
Vrabel)  [Orabug: 19182632]
- x86/xen: set regions above the end of RAM as 1:1 (David Vrabel) 
[Orabug: 19182632]
- x86/xen: only warn once if bad MFNs are found during setup (David 
Vrabel)  [Orabug: 19182632]
- x86/xen: compactly store large identity ranges in the p2m (David 
Vrabel)  [Orabug: 19182632]
- x86/xen: fix set_phys_range_identity() if pfn_e > MAX_P2M_PFN (David 
Vrabel)  [Orabug: 19182632]
- x86/xen: rename early_p2m_alloc() and early_p2m_alloc_middle() (David 
Vrabel)  [Orabug: 19182632]
- xen/x86: set panic notifier priority to minimum (Radim Krčmář) 
[Orabug: 19182632]
- xen: refactor suspend pre/post hooks (David Vrabel)  [Orabug: 19182632]
- xen-blkback: defer freeing blkif to avoid blocking xenwatch (Valentin 
Priescu)  [Orabug: 19182632]
- xen blkif.h: fix comment typo in discard-alignment (Olaf Hering) 
[Orabug: 19182632]
- xen/blkback: disable discard feature if requested by toolstack (Olaf 
Hering)  [Orabug: 19182632]
- xen-blkfront: remove type check from blkfront_setup_discard (Olaf 
Hering)  [Orabug: 19182632]
- net: flow_dissector: fail on evil iph->ihl (Jason Wang)  [Orabug: 
18681886]  {CVE-2013-4348}
- netxen: fix ethtool rx_dropped information in ethtool 
get_ethtool_stats() (Ethan Zhao)  [Orabug: 19140643]
- ixgbevf: upgrade to intel version 2.14.2 (Ethan Zhao)  [Orabug: 19139349]
- ixgbe: upgrade to intel version 3.21.2 and merge patches based on 
3.19.1 (Ethan Zhao)  [Orabug: 19137937]
- net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19167879]
- qlge: Convert /n to
  (Joe Perches)  [Orabug: 19167879]
- qlge: remove open-coded skb_cow_head. (françois romieu)  [Orabug: 
19167879]
- qlge: Use pci_enable_msix_range() instead of pci_enable_msix() 
(Alexander Gordeev)  [Orabug: 19167879]
- qlge: Get rid of an redundant assignment (Alexander Gordeev)  [Orabug: 
19167879]
(Paul Gortmaker)  [Orabug: 19167879]
- qlge: Fix vlan netdev features. (Vaughan Cao)  [Orabug: 19167879]
- qlge: make local function static (stephen hemminger)  [Orabug: 19167879]
- net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19167878]
- netxen: Use pci_enable_msix_range() instead of pci_enable_msix() 
(Alexander Gordeev)  [Orabug: 19167878]
- net: netxen: slight optimization of addr compare (dingtianhong) 
[Orabug: 19167878]
- netxen: Correct off-by-one errors in bounds checks (David Gibson) 
[Orabug: 19167878]
- ethernet: Fix FSF address in file headers (Jeff Kirsher)  [Orabug: 
19167878]
- net: netxen: remove unnecessary pci_set_drvdata() (Jingoo Han) 
[Orabug: 19167878]
- net:drivers/net: Miscellaneous conversions to ETH_ALEN (Joe Perches) 
[Orabug: 19167878]
- PCI/MSI: Add pci_enable_msi_range() and pci_enable_msix_range() 
(Alexander Gordeev)  [Orabug: 19167878]
- igb: upgrade from 5.0.6 to 5.2.5 (Ethan Zhao)  [Orabug: 19137922]
- e1000e: upgrade to intel version 3.1.0.2 and merge patches based on 
2.5.4 (Ethan Zhao)  [Orabug: 19137899]
- intel_idle: fix IVT idle state table setting (Christoph Jaeger) 
[Orabug: 18899422]
- intel_idle: fine-tune IVT residency targets (Len Brown)  [Orabug: 
18899460]
- intel_idle: Add CPU model 54 (Atom N2000 series) (Jan Kiszka) [Orabug: 
18911404]
- intel_idle: support Bay Trail (Len Brown)  [Orabug: 18899457]
- intel_idle: allow sparse sub-state numbering, for Bay Trail (Len 
Brown)  [Orabug: 18899452]
- intel_idle: remove superfluous dev->state_count initialization 
(Bartlomiej Zolnierkiewicz)  [Orabug: 18899449]
- intel_idle: do C1E promotion disable quirk for hotplugged CPUs 
(Bartlomiej Zolnierkiewicz)  [Orabug: 18899445]
- intel_idle: close avn_cstates array with correct marker (Jiang Liu) 
[Orabug: 18909669]
- Revert "intel_idle: mark states tables with __initdata tag" (Jiang 
Liu)  [Orabug: 18899443]
- x86 idle: Repair large-server 50-watt idle-power regression (Len 
Brown)  [Orabug: 18899435]
- intel_idle: Fixed C6 state on Avoton/Rangeley processors (Bockholdt 
Arne)  [Orabug: 18899432]
- soreuseport: fix up kabi breakage after backporting soreuseport (Chuck 
Anderson)  [Orabug: 18459758]
- udp: fix two sparse errors (Eric Dumazet)  [Orabug: 18459758]
- soreuseport: fix use of uid in tb->fastuid (Tom Herbert)  [Orabug: 
18459758]
- Remove leftover #endif after introducing SO_REUSEPORT (Thomas Graf) 
[Orabug: 18459758]
- soreuseport: UDP/IPv6 implementation (Tom Herbert)  [Orabug: 18459758]
- soreuseport: TCP/IPv6 implementation (Tom Herbert)  [Orabug: 18459758]
- soreuseport: UDP/IPv4 implementation (Tom Herbert)  [Orabug: 18459758]
- soreuseport: TCP/IPv4 implementation (Tom Herbert)  [Orabug: 18459758]
- soreuseport: infrastructure (Tom Herbert)  [Orabug: 18459758]
- pci: fix kabi break due to pci reset nofity backport (Jerry 
Snitselaar)  [Orabug: 19080834]

[3.8.13-38.el7uek]
- NVMe: Fix START_STOP_UNIT Scsi->NVMe translation. (Dan McLeran) 
[Orabug: 18940591]
- NVMe: Use Log Page constants in SCSI emulation (Matthew Wilcox) 
[Orabug: 18940591]
- NVMe: Define Log Page constants (Matthew Wilcox)  [Orabug: 18940591]
- NVMe: Fix hot cpu notification dead lock (Keith Busch)  [Orabug: 18940591]
- NVMe: Rename io_timeout to nvme_io_timeout (Matthew Wilcox)  [Orabug: 
18940591]
- NVMe: Use last bytes of f/w rev SCSI Inquiry (Keith Busch)  [Orabug: 
18940591]
- NVMe: Adhere to request queue block accounting enable/disable (Sam 
Bradshaw)  [Orabug: 18940591]
- NVMe: Fix nvme get/put queue semantics (Keith Busch)  [Orabug: 18940591]
- NVMe: Delete NVME_GET_FEAT_TEMP_THRESH (Matthew Wilcox)  [Orabug: 
18940591]
- NVMe: Make admin timeout a module parameter (Keith Busch)  [Orabug: 
18940591]
- NVMe: Make iod bio timeout a parameter (Keith Busch)  [Orabug: 18940591]
- NVMe: Prevent possible NULL pointer dereference (Santosh Y)  [Orabug: 
18940591]
- NVMe: Fix the buffer size passed in GetLogPage(CDW10.NUMD) (Indraneel 
Mukherjee)  [Orabug: 18940591]
- NVMe: Enable BUILD_BUG_ON checks (Matthew Wilcox)  [Orabug: 18940591]
- NVMe: Add tracepoints (Keith Busch)  [Orabug: 18940591]
- NVMe: Protect against badly formatted CQEs (Keith Busch)  [Orabug: 
18940591]
- NVMe: Improve error messages (Matthew Wilcox)  [Orabug: 18940591]
- NVMe: Update copyright headers (Matthew Wilcox)  [Orabug: 18940591]
- NVMe: Implement PCIe reset notification callback (Martin K. Petersen) 
  [Orabug: 18940591]
- PCI: Notify driver before and after device reset (Martin K. Petersen) 
  [Orabug: 18940591]
- floppy: don't write kernel-only members to FDRAWCMD ioctl output 
(Matthew Daley)  [Orabug: 19028442]  {CVE-2014-1738}
- floppy: ignore kernel-only members in FDRAWCMD ioctl input (Matthew 
Daley)  [Orabug: 19028435]  {CVE-2014-1737}
- [SCSI] sd: notify block layer when using temporary change to 
cache_type (Vaughan Cao)  [Orabug: 18829236]
- [SCSI] sd: Fix parsing of 'temporary ' cache mode prefix (Ben 
Hutchings)  [Orabug: 18829236]
- drivers: net: xen-netfront: fix array initialization bug (Vincenzo 
Maffione)
- xen-netback: Fix handling of skbs requiring too many slots (Zoltan Kiss)
- xen-netback: fix race between napi_complete() and interrupt handler 
(David Vrabel)
- xen-netback: Fix grant ref resolution in RX path (Zoltan Kiss)
- xen-netback: Trivial format string fix (Zoltan Kiss)
- xen-netback: Grant copy the header instead of map and memcpy (Zoltan Kiss)
- xen-netback: Rename map ops (Zoltan Kiss)
- xen-netback: BUG_ON in xenvif_rx_action() not catching overflow (Paul 
Durrant)
- Revert "xen/mmu: Move the setting of pvops.write_cr3 to later phase in 
bootup." (Konrad Rzeszutek Wilk)
- xen-netback: worse-case estimate in xenvif_rx_action is 
underestimating (Paul Durrant)
- xen-netback: remove pointless clause from if statement (Paul Durrant)
- xen-netback: Functional follow-up patch for grant mapping series 
(Zoltan Kiss)
- xen-netback: Non-functional follow-up patch for grant mapping series 
(Zoltan Kiss)
- xen-netback: Stop using xenvif_tx_pending_slots_available (Zoltan Kiss)
- xen-netback: Proper printf format for ptrdiff_t is 't'. (David S. Miller)
- Revert "xen-netback: Aggregate TX unmap operations" (Zoltan Kiss)
- xen-netback: use skb_is_gso in xenvif_start_xmit (Wei Liu)
- Xen-netback: Fix issue caused by using gso_type wrongly (Annie Li)
- xen-netback: Aggregate TX unmap operations (Zoltan Kiss)
- xen-netback: Timeout packets in RX path (Zoltan Kiss)
- xen-netback: Handle guests with too many frags (Zoltan Kiss)
- xen-netback: Add stat counters for zerocopy (Zoltan Kiss)
- xen-netback: Remove old TX grant copy definitons and fix indentations 
(Zoltan Kiss)
- xen-netback: Introduce TX grant mapping (Zoltan Kiss)
- xen-netback: Handle foreign mapped pages on the guest RX path (Zoltan 
Kiss)
- xen-netback: Minor refactoring of netback code (Zoltan Kiss)
- xen-netback: Use skb->cb for pending_idx (Zoltan Kiss)
- Revert "Xen-netback: Fix issue caused by using gso_type wrongly" 
(Annie Li)
- arm64: introduce virt_to_pfn (Stefano Stabellini)
- xen/events/fifo: correctly align bitops (Vladimir Murzin)
- arm/xen: Remove definiition of virt_to_pfn in asm/xen/page.h (Julien 
Grall)
- xen/manage: Poweroff forcefully if user-space is not yet up. (Konrad 
Rzeszutek Wilk)
- xen/xenbus: Avoid synchronous wait on XenBus stalling 
shutdown/restart. (Konrad Rzeszutek Wilk)
- xen-pciback: silence an unwanted debug printk (Dan Carpenter)
- xen: fix memory leak in __xen_pcibk_add_pci_dev() (Daeseok Youn)
- xen/acpi-processor: fix enabling interrupts on syscore_resume 
(Stanislaw Gruszka)
- xen/grant-table: Refactor gnttab_[un]map_refs to avoid m2p_override 
(Zoltan Kiss)
- xen: remove XEN_PRIVILEGED_GUEST (Michael Opdenacker)
- xen/xenbus: remove unused xenbus_bind_evtchn() (David Vrabel)
- xen/events: remove unnecessary call to bind_evtchn_to_cpu() (David Vrabel)
- xen/events: remove the unused resend_irq_on_evtchn() (David Vrabel)
- drivers:xen-selfballoon:reset 'frontswap_inertia_counter' after 
frontswap_shrink (Bob Liu)
- drivers: xen: Include appropriate header file in pcpu.c (Rashika Kheria)
- drivers: xen: Mark function as static in platform-pci.c (Rashika Kheria)
- xen-blkif: drop struct blkif_request_segment_aligned (Roger Pau Monne)
- xen-blkback: fix shutdown race (Roger Pau Monne)
- xen/balloon: flush persistent kmaps in correct position (Wei Liu)
- ia64/xen: Remove Xen support for ia64 even more (Paul Bolle)
- xen: install xen/gntdev.h and xen/gntalloc.h (David Vrabel)
- xen/events: bind all new interdomain events to VCPU0 (David Vrabel)
- xen/pvh: set CR4 flags for APs (Mukesh Rathor)
- Revert "xen/grant-table: Avoid m2p_override during mapping" (Konrad 
Rzeszutek Wilk)
- xen/pvh: Fix misplaced kfree from xlated_setup_gnttab_pages (Dave Jones)
- drivers: xen: deaggressive selfballoon driver (Bob Liu)
- xen/grant-table: Avoid m2p_override during mapping (Zoltan Kiss)
- xen/gnttab: Use phys_addr_t to describe the grant frame base address 
(Julien Grall)
- xen: swiotlb: handle sizeof(dma_addr_t) != sizeof(phys_addr_t) (Ian 
Campbell)
- arm/xen: Initialize event channels earlier (Julien Grall)
- xen/pvh: Set X86_CR0_WP and others in CR0 (v2) (Roger Pau Monne)
- MAINTAINERS: add git repository for Xen (David Vrabel)
- xen/pvh: Use 'depend' instead of 'select'. (Konrad Rzeszutek Wilk)
- xen: delete new instances of __cpuinit usage (Paul Gortmaker)
- xen/fb: allow xenfb initialization for hvm guests (Stefano Stabellini)
- xen/evtchn_fifo: fix error return code in evtchn_fifo_setup() (Wei 
Yongjun)
- xen-platform: fix error return code in platform_pci_init() (Wei Yongjun)
- xen/pvh: remove duplicated include from enlighten.c (Wei Yongjun)
- xen/pvh: Fix compile issues with xen_pvh_domain() (Konrad Rzeszutek Wilk)
- xen: Use dev_is_pci() to check whether it is pci device (Yijing Wang)
- xen/grant-table: Force to use v1 of grants. (Konrad Rzeszutek Wilk)
- xen/pvh: Support ParaVirtualized Hardware extensions (v3). (Mukesh Rathor)
- xen/pvh: Piggyback on PVHVM XenBus. (Mukesh Rathor)
- xen/pvh: Piggyback on PVHVM for grant driver (v4) (Konrad Rzeszutek Wilk)
- xen/grant: Implement an grant frame array struct (v3). (Konrad 
Rzeszutek Wilk)
- xen/grant-table: Refactor gnttab_init (Konrad Rzeszutek Wilk)
- xen/grants: Remove gnttab_max_grant_frames dependency on gnttab_init. 
(Konrad Rzeszutek Wilk)
- xen/pvh: Piggyback on PVHVM for event channels (v2) (Mukesh Rathor)
- xen/pvh: Update E820 to work with PVH (v2) (Mukesh Rathor)
- xen/pvh: Secondary VCPU bringup (non-bootup CPUs) (Mukesh Rathor)
- xen/pvh: Load GDT/GS in early PV bootup code for BSP. (Mukesh Rathor)
- xen/pvh: Setup up shared_info. (Mukesh Rathor)
- xen/pvh/mmu: Use PV TLB instead of native. (Mukesh Rathor)
- xen/pvh: MMU changes for PVH (v2) (Mukesh Rathor)
- xen/mmu: Cleanup xen_pagetable_p2m_copy a bit. (Konrad Rzeszutek Wilk)
- xen/mmu/p2m: Refactor the xen_pagetable_init code (v2). (Konrad 
Rzeszutek Wilk)
- xen/pvh: Don't setup P2M tree. (Konrad Rzeszutek Wilk)
- xen/pvh: Early bootup changes in PV code (v4). (Mukesh Rathor)
- xen/pvh/x86: Define what an PVH guest is (v3). (Mukesh Rathor)
- xen/p2m: Check for auto-xlat when doing mfn_to_local_pfn. (Mukesh Rathor)
- xen/events: use the FIFO-based ABI if available (David Vrabel)
- xen/x86: set VIRQ_TIMER priority to maximum (David Vrabel)
- xen/events: allow event channel priority to be set (David Vrabel)
- xen/events: Add the hypervisor interface for the FIFO-based event 
channels (David Vrabel)
- xen/evtchn: support more than 4096 ports (David Vrabel)
- xen/events: add xen_evtchn_mask_all() (David Vrabel)
- xen/events: Refactor evtchn_to_irq array to be dynamically allocated 
(David Vrabel)
- xen/events: add a evtchn_op for port setup (David Vrabel)
- xen/events: allow setup of irq_info to fail (David Vrabel)
- xen/events: add struct evtchn_ops for the low-level port operations 
(David Vrabel)
- xen/events: move 2-level specific code into its own file (David Vrabel)
- xen/events: move drivers/xen/events.c into drivers/xen/events/ (David 
Vrabel)
- xen/events: replace raw bit ops with functions (Wei Liu)
- xen/events: introduce test_and_set_mask() (Wei Liu)
- xen/events: remove unnecessary init_evtchn_cpu_bindings() (David Vrabel)
- xen/events: refactor retrigger_dynirq() and resend_irq_on_evtchn() 
(David Vrabel)
- xen/pci: Fix build on non-x86 (Ben Hutchings)
- xen: simplify balloon_first_page() with list_first_entry_or_null() 
(Jie Liu)
- asm/xen/page.h: remove redundant semicolon (Wei Liu)
- xen: balloon: enable for ARM (Ian Campbell)
- xen/pvhvm: Remove the xen_platform_pci int. (Konrad Rzeszutek Wilk)
- xen/pvhvm: If xen_platform_pci=0 is set don't blow up (v4). (Konrad 
Rzeszutek Wilk)
- Revert "xen-blkback: fix shutdown race" (Konrad Rzeszutek Wilk)
- block: xen-blkfront: Fix possible NULL ptr dereference (Felipe Pena)
- xen-blkfront: Silence pfn maybe-uninitialized warning (Tim Gardner)
- xen-blkfront: restore the non-persistent data path (Roger Pau Monne)
- xen/balloon: Seperate the auto-translate logic properly (v2) (Konrad 
Rzeszutek Wilk)
- xen/block: Correctly define structures in public headers on ARM32 and 
ARM64 (Julien Grall)
- arm: xen: foreign mapping PTEs are special. (Ian Campbell)
- xen/arm64: do not call the swiotlb functions twice (Stefano Stabellini)
- xen: privcmd: do not return pages which we have failed to unmap (Ian 
Campbell)
- XEN: Grant table address, xen_hvm_resume_frames, is a phys_addr not a 
pfn (Eric Trudeau)
- xen/gnttab: leave lazy MMU mode in the case of a m2p override failure 
(Matt Wilson)
- xen/arm: p2m_init and p2m_lock should be static (Stefano Stabellini)
- arm/xen: Export phys_to_mach to fix Xen module link errors (Josh Boyer)
- swiotlb-xen: add missing xen_dma_map_page call (Stefano Stabellini)
- xen/arm: pfn_to_mfn and mfn_to_pfn return the argument if nothing is 
in the p2m (Stefano Stabellini)
- arm,arm64/include/asm/io.h: define struct bio_vec (Stefano Stabellini)
- swiotlb-xen: missing include dma-direction.h (Stefano Stabellini)
- pci-swiotlb-xen: call pci_request_acs only ifdef CONFIG_PCI (Stefano 
Stabellini)
- xen: delete new instances of added __cpuinit (Paul Gortmaker)
- xen/mcfg: Call PHYSDEVOP_pci_mmcfg_reserved for MCFG areas. (Konrad 
Rzeszutek Wilk)
- xen: remove deprecated IRQF_DISABLED (Michael Opdenacker)
- x86/xen: remove deprecated IRQF_DISABLED (Michael Opdenacker)
- swiotlb-xen: fix error code returned by xen_swiotlb_map_sg_attrs 
(Stefano Stabellini)
- swiotlb-xen: static inline xen_phys_to_bus, xen_bus_to_phys, 
xen_virt_to_bus and range_straddles_page_boundary (Stefano Stabellini)
- grant-table: call set_phys_to_machine after mapping grant refs 
(Stefano Stabellini)
- arm,arm64: do not always merge biovec if we are running on Xen 
(Stefano Stabellini)
- swiotlb: print a warning when the swiotlb is full (Stefano Stabellini)
- swiotlb-xen: use xen_dma_map/unmap_page, 
xen_dma_sync_single_for_cpu/device (Stefano Stabellini)
- xen: introduce xen_dma_map/unmap_page and 
xen_dma_sync_single_for_cpu/device (Stefano Stabellini)
- tracing/events: Fix swiotlb tracepoint creation (Thierry Reding)
- swiotlb-xen: use xen_alloc/free_coherent_pages (Stefano Stabellini)
- xen: introduce xen_alloc/free_coherent_pages (Stefano Stabellini)
- arm64/xen: get_dma_ops: return xen_dma_ops if we are running as 
xen_initial_domain (Stefano Stabellini)
- arm/xen: get_dma_ops: return xen_dma_ops if we are running as 
xen_initial_domain (Stefano Stabellini)
- swiotlb-xen: introduce xen_swiotlb_set_dma_mask (Stefano Stabellini)
- xen/arm,arm64: enable SWIOTLB_XEN (Stefano Stabellini)
- xen: make xen_create_contiguous_region return the dma address (Stefano 
Stabellini)
- xen/x86: allow __set_phys_to_machine for autotranslate guests (Stefano 
Stabellini)
- arm/xen,arm64/xen: introduce p2m (Stefano Stabellini)
- arm64: define DMA_ERROR_CODE (Stefano Stabellini)
- arm: make SWIOTLB available (Stefano Stabellini)
- tracing/events: Add bounce tracing to swiotbl (Zoltan Kiss)
- xen/hvc: If we use xen_raw_printk let it also work on HVM guests. 
(Konrad Rzeszutek Wilk)
- xen/mmu: Correct PAT MST setting. (Konrad Rzeszutek Wilk)
- balloon/pv-superpage: We shouldn't enable this on HVM guests (Konrad 
Rzeszutek Wilk)
- Fix balloon driver to work properly with balloon_hugepages but no 
superpage flag (Dave McCracken)
- Add support for pv hugepages and support for huge balloon pages. (Dave 
McCracken)
- xen: Fix possible user space selector corruption (Frediano Ziglio)
- xen/balloon: don't alloc page while non-preemptible (David Vrabel)
- xen/balloon: remove BUG_ON in increase_reservation (Wei Liu)
- xen/balloon: ensure preemption is disabled when using a scratch page 
(David Vrabel)
- xen/smp: Update pv_lock_ops functions before alternative code starts 
under PVHVM (Konrad Rzeszutek Wilk)
- xen/spinlock: Fix locking path engaging too soon under PVHVM. (Konrad 
Rzeszutek Wilk)
- xen/arm: disable cpuidle and cpufreq when linux is running as dom0 
(Julien Grall)
- xen/p2m: Don't call get_balloon_scratch_page() twice, keep interrupts 
disabled for multicalls (Boris Ostrovsky)
- hvc_xen: Remove unnecessary __GFP_ZERO from kzalloc (Joe Perches)
- xen/balloon: don't set P2M entry for auto translated guest (Wei Liu)
- xen/evtchn: double free on error (Dan Carpenter)
- Xen: Fix retry calls into PRIVCMD_MMAPBATCH*. (Andres Lagar-Cavilla)
- xen/m2p: use GNTTABOP_unmap_and_replace to reinstate the original 
mapping (Stefano Stabellini)
- xen: fix ARM build after 6efa20e4 (Stefano Stabellini)
- MAINTAINERS: Remove Jeremy from the Xen subsystem. (Konrad Rzeszutek Wilk)
- xen/events: document behaviour when scanning the start word for events 
(David Vrabel)
- x86/xen: during early setup, only 1:1 map the ISA region (David Vrabel)
- x86/xen: disable premption when enabling local irqs (David Vrabel)
- swiotlb-xen: replace dma_length with sg_dma_len() macro (Stefano 
Stabellini)
- swiotlb: replace dma_length with sg_dma_len() macro (EunBong Song)
- xen/balloon: set a mapping for ballooned out pages (Stefano Stabellini)
- Revert "Add support for pv hugepages and support for huge balloon 
pages." (Konrad Rzeszutek Wilk)
- Revert "Fix balloon driver to work properly with balloon_hugepages but 
no superpage flag" (Konrad Rzeszutek Wilk)
- xen/evtchn: improve scalability by using per-user locks (David Vrabel)
- xen/p2m: avoid unneccesary TLB flush in m2p_remove_override() (David 
Vrabel)
- MAINTAINERS: Add in two extra co-maintainers of the Xen tree. (Konrad 
Rzeszutek Wilk)
- MAINTAINERS: Update the Xen subsystem's with proper mailing list. 
(Konrad Rzeszutek Wilk)
- xen: replace strict_strtoul() with kstrtoul() (Jingoo Han)
- xen: Support 64-bit PV guest receiving NMIs (Konrad Rzeszutek Wilk)
- xen-blkfront: improve aproximation of required grants per request 
(Roger Pau Monne)
- xen-blkfront: revoke foreign access for grants not mapped by the 
backend (Roger Pau Monne)
- xen/microcode: Fix compile warning. (Konrad Rzeszutek Wilk)
- xen/events: mask events when changing their VCPU binding (David Vrabel)
- xen/events: initialize local per-cpu mask for all possible events 
(David Vrabel)
- x86/xen: do not identity map UNUSABLE regions in the machine E820 
(David Vrabel)
- xen/tmem: do not allow XEN_TMEM on ARM64 (Stefano Stabellini)
- xen/arm: enable PV control for ARM (Julien Grall)
- xen/arm64: Don't compile cpu hotplug (Julien Grall)
- xenbus: frontend resume cleanup (Aurelien Chartier)

[3.8.13-37.el7uek]
- e1000: fix possible reset_task running after adapter down (Vladimir 
Davydov)  [Orabug: 18257498]
- e1000: fix lockdep warning in e1000_reset_task (Vladimir Davydov) 
[Orabug: 18257474]
- e1000: prevent oops when adapter is being closed and reset 
simultaneously (yzhu1)  [Orabug: 18257442]
- tools/power turbostat: display C8, C9, C10 residency (Kristen Carlson 
Accardi)  [Orabug: 18520774]
- turbostat: run on HSX (Len Brown)  [Orabug: 18520774]
- tools/power turbostat: support Haswell (Jerry Snitselaar)  [Orabug: 
18520774]
- net: fix kernel deadlock with interface rename and netdev name 
retrieval. (Nicolas Schichan)  [Orabug: 18906608]
- dtrace: ensure that building outside src tree works (Kris Van Hees) 
[Orabug: 18691341]
- futex: Make lookup_pi_state more robust (Thomas Gleixner)  [Orabug: 
18918595]  {CVE-2014-3153}
- futex: Always cleanup owner tid in unlock_pi (Thomas Gleixner) 
[Orabug: 18918595]  {CVE-2014-3153}
- futex: Validate atomic acquisition in futex_lock_pi_atomic() (Thomas 
Gleixner)  [Orabug: 18918595]  {CVE-2014-3153}
- futex: Forbid uaddr == uaddr2 in futex_requeue(..., requeue_pi=1) 
(Thomas Gleixner)  [Orabug: 18918595]  {CVE-2014-3153} {CVE-2014-3153}
- futex: Prevent attaching to kernel threads (Thomas Gleixner)  [Orabug: 
18923481]
- futex: Add another early deadlock detection check (Thomas Gleixner) 
[Orabug: 18923479]
- lockd: ensure we tear down any live sockets when socket creation fails 
during lockd_up (Jeff Layton)  [Orabug: 18918179]
- libceph: resend all writes after the osdmap loses the full flag (Josh 
Durgin)  [Orabug: 18918180]
- dm thin: fix dangling bio in process_deferred_bios error path (Mike 
Snitzer)  [Orabug: 18918178]
- dm transaction manager: fix corruption due to non-atomic transaction 
commit (Joe Thornber)  [Orabug: 18918177]
- locks: allow __break_lease to sleep even when break_time is 0 (Jeff 
Layton)  [Orabug: 18918176]
- iwlwifi: dvm: take mutex when sending SYNC BT config command (Emmanuel 
Grumbach)  [Orabug: 18918175]
- virtio_balloon: don't softlockup on huge balloon changes. (Rusty 
Russell)  [Orabug: 18918174]
- drivers/tty/hvc: don't free hvc_console_setup after init (Tomoki 
Sekiyama)  [Orabug: 18918173]
- usb: musb: avoid NULL pointer dereference (Felipe Balbi)  [Orabug: 
18918172]
- ext4: use i_size_read in ext4_unaligned_aio() (Theodore Ts'o) [Orabug: 
18918171]
- ext4: fix jbd2 warning under heavy xattr load (Jan Kara)  [Orabug: 
18918169]
- ocfs2: do not put bh when buffer_uptodate failed (alex chen)  [Orabug: 
18918168]
- hung_task: check the value of "sysctl_hung_task_timeout_sec" (Liu Hua) 
  [Orabug: 18918167]
- mm: hugetlb: fix softlockup when a large number of hugepages are 
freed. (Mizuma, Masayoshi)  [Orabug: 18918166]
- mm: try_to_unmap_cluster() should lock_page() before mlocking 
(Vlastimil Babka)  [Orabug: 18918165]
- reiserfs: fix race in readdir (Jeff Mahoney)  [Orabug: 18918164]
- x86/efi: Correct EFI boot stub use of code32_start (Matt Fleming) 
[Orabug: 18918162]
- iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug (Nicholas 
Bellinger)  [Orabug: 18918161]
- nfsd: set timeparms.to_maxval in setup_callback_client (Jeff Layton) 
[Orabug: 18918160]
- NFSD: Traverse unconfirmed client through hash-table (Kinglong Mee) 
[Orabug: 18918158]
- nfsd4: fix setclientid encode size (J. Bruce Fields)  [Orabug: 18918157]
- nfsd: check passed socket's net matches NFSd superblock's one 
(Stanislav Kinsbursky)  [Orabug: 18918156]
- nfsd: notify_change needs elevated write count (J. Bruce Fields) 
[Orabug: 18918155]
- nfsd4: fix test_stateid error reply encoding (J. Bruce Fields) 
[Orabug: 18918154]
- nfsd4: buffer-length check for SUPPATTR_EXCLCREAT (J. Bruce Fields) 
[Orabug: 18918153]
- nfsd4: session needs room for following op to error out (J. Bruce 
Fields)  [Orabug: 18918152]
- USB: fix crash during hotplug of PCI USB controller card (Alan Stern) 
  [Orabug: 18918151]
- ftrace/x86: One more missing sync after fixup of function modification 
failure (Petr Mladek)  [Orabug: 18918150]
- wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race (Oleg 
Nesterov)  [Orabug: 18918148]
- sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on 
Simba-bridges (oftedal)  [Orabug: 18918147]
- jffs2: remove from wait queue after schedule() (Li Zefan)  [Orabug: 
18918146]
- jffs2: avoid soft-lockup in jffs2_reserve_space_gc() (Li Zefan) 
[Orabug: 18918144]
- jffs2: Fix crash due to truncation of csize (Ajesh Kunhipurayil 
Vijayan)  [Orabug: 18918143]
- jffs2: Fix segmentation fault found in stress test (Kamlakant Patel) 
[Orabug: 18918142]
- ext4: fix error return from ext4_ext_handle_uninitialized_extents() 
(Eric Whitney)  [Orabug: 18918141]
- pid_namespace: pidns_get() should check task_active_pid_ns() != NULL 
(Oleg Nesterov)  [Orabug: 18918139]
- Char: ipmi_bt_sm, fix infinite loop (Jiri Slaby)  [Orabug: 18918137]
- isdnloop: several buffer overflows (Dan Carpenter)  [Orabug: 18918136]
- vxlan: fix potential NULL dereference in arp_reduce() (David Stevens) 
  [Orabug: 18918133]
- net: socket: error on a negative msg_namelen (Matthew Leach)  [Orabug: 
18918132]
- tcp: tcp_release_cb() should release socket ownership (Eric Dumazet) 
[Orabug: 18918130]
- inet: frag: make sure forced eviction removes all frags (Florian 
Westphal)  [Orabug: 18918129]
- bridge: multicast: add sanity check for query source addresses (Linus 
Lüssing)  [Orabug: 18918127]
- net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk 
(Daniel Borkmann)  [Orabug: 18918126]
- cpuidle: Check the result of cpuidle_get_driver() against NULL (Daniel 
Fu)  [Orabug: 18918124]
- mm: close PageTail race (David Rientjes)  [Orabug: 18918123]
- ext4: atomically set inode->i_flags in ext4_set_inode_flags() 
(Theodore Ts'o)  [Orabug: 18918122]
- sched/autogroup: Fix race with task_groups list (Gerald Schaefer) 
[Orabug: 18918121]
- e100: Fix "disabling already-disabled device" warning (Michele 
Baldessari)  [Orabug: 18918120]
- KVM: VMX: fix use after free of vmx->loaded_vmcs (Marcelo Tosatti) 
[Orabug: 18918119]
- KVM: x86: handle invalid root_hpa everywhere (Marcelo Tosatti) 
[Orabug: 18918117]
- KVM: MMU: handle invalid root_hpa at __direct_map (Marcelo Tosatti) 
[Orabug: 18918116]
- Fix mountpoint reference leakage in linkat (Oleg Drokin)  [Orabug: 
18917998]
- jiffies: Avoid undefined behavior from signed overflow (Paul E. 
McKenney)  [Orabug: 18917997]
- x86, fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU 
(Suresh Siddha)  [Orabug: 18917996]
- SCSI: isci: correct erroneous for_each_isci_host macro (Lukasz Dorau) 
  [Orabug: 18917994]
- SCSI: isci: fix reset timeout handling (Dan Williams)  [Orabug: 18917993]
- mm/compaction: break out of loop on !PageBuddy in 
isolate_freepages_block (Laura Abbott)  [Orabug: 18917992]
- vmxnet3: fix netpoll race condition (Neil Horman)  [Orabug: 18917990]
- NFS: Fix a delegation callback race (Trond Myklebust)  [Orabug: 18917989]
- firewire: net: fix use after free (Stefan Richter)  [Orabug: 18917988]
- cpuset: fix a race condition in __cpuset_node_allowed_softwall() (Li 
Zefan)  [Orabug: 18917986]
- genirq: Remove racy waitqueue_active check (Chuansheng Liu)  [Orabug: 
18917985]
- x86/amd/numa: Fix northbridge quirk to assign correct NUMA node 
(Daniel J Blueman)  [Orabug: 18917984]
- drm/ttm: don't oops if no invalidate_caches() (Rob Clark)  [Orabug: 
18917982]
- mac80211: clear sequence/fragment number in QoS-null frames (Johannes 
Berg)  [Orabug: 18917981]
- mac80211: fix AP powersave TX vs. wakeup race (Emmanuel Grumbach) 
[Orabug: 18917979]
- sfc: check for NULL efx->ptp_data in efx_ptp_event (Edward Cree) 
[Orabug: 18917978]
- sched: Fix double normalization of vruntime (George McCollister) 
[Orabug: 18917977]
- ocfs2 syncs the wrong range... (Al Viro)  [Orabug: 18917976]
- ocfs2: fix quota file corruption (Jan Kara)  [Orabug: 18917975]
- dm thin: fix the error path for the thin device constructor (Mike 
Snitzer)  [Orabug: 18917974]
- i7300_edac: Fix device reference count (Jean Delvare)  [Orabug: 18917973]
- quota: Fix race between dqput() and dquot_scan_active() (Jan Kara) 
[Orabug: 18917972]
- perf: Fix hotplug splat (Peter Zijlstra)  [Orabug: 18917971]
- workqueue: ensure @task is valid across kthread_stop() (Lai Jiangshan) 
  [Orabug: 18917969]
- usb: ehci: fix deadlock when threadirqs option is used (Stanislaw 
Gruszka)  [Orabug: 18917967]
- i7core_edac: Fix PCI device reference count (Jean Delvare)  [Orabug: 
18917966]
- ACPI / PCI: Fix memory leak in acpi_pci_irq_enable() (Tomasz Nowicki) 
  [Orabug: 18917965]
- cpufreq: powernow-k8: Initialize per-cpu data-structures properly 
(Srivatsa S. Bhat)  [Orabug: 18917964]
- perf/x86: Fix event scheduling (Peter Zijlstra)  [Orabug: 18917963]
- x86: dma-mapping: fix GFP_ATOMIC macro usage (Marek Szyprowski) 
[Orabug: 18917962]
- SUNRPC: Fix races in xs_nospace() (Trond Myklebust)  [Orabug: 18917961]
- net: use __GFP_NORETRY for high order allocations (Eric Dumazet) 
[Orabug: 18917959]
- ipv4: fix counter in_slow_tot (Duan Jiong)  [Orabug: 18917958]
- bonding: 802.3ad: make aggregator_identifier bond-private (Jiri Bohac) 
  [Orabug: 18917957]
- tcp: tsq: fix nonagle handling (John Ogness)  [Orabug: 18917955]
- net: fix 'ip rule' iif/oif device rename (Maciej Żenczykowski) 
[Orabug: 18917953]
- ipv4: Fix runtime WARNING in rtmsg_ifa() (Geert Uytterhoeven) [Orabug: 
18917949]
- 9p/trans_virtio.c: Fix broken zero-copy on vmalloc() buffers (Richard 
Yao)  [Orabug: 18917946]
- CIFS: Fix too big maxBuf size for SMB3 mounts (Pavel Shilovsky) 
[Orabug: 18917864]
- ext4: don't leave i_crtime.tv_sec uninitialized (Theodore Ts'o) 
[Orabug: 18917863]
- ext4: fix online resize with a non-standard blocks per group setting 
(Theodore Ts'o)  [Orabug: 18917862]
- ext4: fix online resize with very large inode tables (Theodore Ts'o) 
[Orabug: 18917643]
- modsign: Ksplice certificate for module signing (Sasha Levin) [Orabug: 
18793405]

[3.8.13-36.el7uek]
- ocfs2: make ocfs2 do not log ENOENT error (Xiaowei.Hu)
- Btrfs: return EPERM when deleting a default subvolume (Guangyu Sun) 
[Orabug: 17661944]
- i2c: i801: SMBus patch for Intel Avoton DeviceIDs (Seth Heasley) 
[Orabug: 17983409]
- ata_piix: IDE-mode SATA patch for Intel Avoton DeviceIDs (Seth 
Heasley)  [Orabug: 17983409]
- i2c: iSMT: add Intel Avoton DeviceIDs (Seth Heasley)  [Orabug: 17983409]
- allow for more than one data extent when creating xattr (Tariq Saeed) 
  [Orabug: 18108070]
- tools / power turbostat: Support Silvermont (Len Brown)  [Orabug: 
18349316]
- intel_idle: Support Intel Atom Processor C2000 Product Family (Len 
Brown)  [Orabug: 18349316]
- ocfs2: quorum: add a log for node not fenced (Junxiao Bi)  [Orabug: 
18363396]
- ocfs2: o2net: set tcp user timeout to max value (Junxiao Bi)  [Orabug: 
18363396]
- ocfs2: o2net: don't shutdown connection when idle timeout (Junxiao Bi) 
  [Orabug: 18363396]
- fix ext4_sync_file deadlock in uek3 (Darrick J. Wong)  [Orabug: 18389351]
- block: properly stack underlying max_segment_size to DM device (Mike 
Snitzer)  [Orabug: 18611974]
- Revert "tcp: tsq: restore minimal amount of queueing" (Guangyu Sun) 
[Orabug: 18621531]
- x86, mm: Probe memory block size for generic x86 64bit (Yinghai Lu) 
[Orabug: 18650337]
- memblock, numa: binary search node id (Yinghai Lu)  [Orabug: 18650337]
- mm: speedup in __early_pfn_to_nid (Russ Anderson)  [Orabug: 18650337]
- netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT 
helper (Daniel Borkmann)  [Orabug: 18681787]  {CVE-2014-1690}
- ath9k_htc: properly set MAC address and BSSID mask (Mathy Vanhoef) 
[Orabug: 18681788]  {CVE-2013-4579}
- perf/ftrace: Fix paranoid level for enabling function tracer (Steven 
Rostedt)  [Orabug: 18681870]  {CVE-2013-2930}
- ext4: fix memory leakage in mext_check_coverage (Dmitry Monakhov) 
[Orabug: 18684170]
- ext4: defragmentation code cleanup (Dmitry Monakhov)  [Orabug: 18684170]
- block: Enable sysfs nomerge control for I/O requests in the plug list 
(Alireza Haghdoost)  [Orabug: 18736016]
- config ol7: enable netfilter reverse path filter support (Jerry 
Snitselaar)  [Orabug: 18845282]
- spec: fix symbolic link to build directory (Jerry Snitselaar) [Orabug: 
18835306]




More information about the El-errata mailing list