[El-errata] ELSA-2014-3002 Important: Oracle Linux 6 Unbreakable Enterprise kernel security and bug fix update (Unbreakable Enterprise Kernel Release 3 Quarterly Update 1)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Wed Feb 12 09:57:47 PST 2014

Oracle Linux Security Advisory ELSA-2014-3002

The following updated rpms for Oracle Linux 6 have been uploaded to the 
Unbreakable Linux Network:



Description of changes:

Release Notes : 

- spec: Don't remove crashkernel=auto setting (Jerry Snitselaar) 
[Orabug: 18137993]

- ocfs2: fix i_mutex deadlock between aio_write and sync_file (Darrick 
J. Wong) [Orabug: 18068931]
- Revert "x86, mm: Revert back good_end setting for 64bit" (Jerry 
Snitselaar) [Orabug: 18128986]

- tg3: remove spin_lock_bh() in tg3_get_stats64() to fix dead lock 
(Ethan Zhao) [Orabug: 18070676]
- net/core: use GFP_NOWAIT allocation flag in rtmsg_ifinfo() to fix 
lockup warning (Ethan Zhao) [Orabug: 18070676]
- mptsas: do not call __mptsas_probe in kthread (Jerry Snitselaar) 
[Orabug: 18120337]
- config: enable CONFIG_KEXEC_AUTO_RESERVE (Jerry Snitselaar) [Orabug: 
- Btrfs: allow compressed extents to be merged during defragment (Liu 
Bo) [Orabug: 18098511]
- Btrfs: reset ret in record_one_backref (Josef Bacik) [Orabug: 18098511]
- Btrfs: fix a crash when running balance and defrag concurrently (Liu 
Bo) [Orabug: 18098511]
- Btrfs: fix a bug of snapshot-aware defrag to make it work on partial 
extents (Liu Bo) [Orabug: 18098511]
- Btrfs: get better concurrency for snapshot-aware defrag work (Liu Bo) 
[Orabug: 18098511]
- Btrfs: snapshot-aware defrag (Liu Bo) [Orabug: 18098511]
- btrfs: add cancellation points to defrag (David Sterba) [Orabug: 18098511]
- qla4xxx: Updated driver version to (Vikas 
Chaudhary) [Orabug: 18103905]
- qla4xxx: Fix memory leak in qla4xxx_destroy_ddb (Vikas Chaudhary) 
[Orabug: 18103905]
- x86: add support for crashkernel=auto (Brian Maly)
- x86, mm: Revert back good_end setting for 64bit (Yinghai Lu) [Orabug: 

- [SCSI] storvsc: avoid usage of WRITE_SAME (Olaf Hering) [Orabug: 18037923]
- Fix balloon driver to work properly with balloon_hugepages but no 
superpage flag (Dave McCracken)
- config: disable BUILD_DOCSRC (Jerry Snitselaar) [Orabug: 17504426]
- ext4: Fix non-O_SYNC AIO DIO unwritten extent conversion after dio 
finishes (Darrick J. Wong) [Orabug: 18069802]
- memcg: don't initialize kmem-cache destroying work for root caches 
(Andrey Vagin) [Orabug: 17791895]
- ocfs2: ocfs2 punch hole retrun EINVAL if the length argument in ioctl 
is negative (Tariq Saeed) [Orabug: 14789508]
- writeback: fix data corruption on NFS (Jan Kara) [Orabug: 16677609]
- Btrfs: handle a bogus chunk tree nicely (Josef Bacik) [Orabug: 17334825]
- Drivers: hv: Execute shutdown in a thread context (K. Y. Srinivasan) 
[Orabug: 18053264]
- Increase scsi_mod parameter max_report_luns to 1023. (Zhigang Wang) 
[Orabug: 17445498]
- NFSv4.1 Fix gdia_maxcount calculation to fit in ca_maxresponsesize 
(Andy Adamson) [Orabug: 17419831]
- config: disable fragile PSTORE options (Ethan Zhao) [Orabug: 17928723]
- ocfs2/o2net: o2net_listen_data_ready should do nothing if socket state 
is not TCP_LISTEN (Tariq Saeed) [Orabug: 17330860]
- qla4xxx: Updated driver version to (Tej Parkash) 
[Orabug: 18050491]
- qla4xxx: Fix sparse warnings (Vikas Chaudhary) [Orabug: 18050491]
- qla4xxx: Handle IPv6 AEN notifications (Nilesh Javali) [Orabug: 18050491]
- qla4xxx: Update print statements in func qla4xxx_do_dpc() (Vikas 
Chaudhary) [Orabug: 18050491]
- qla4xxx: Update print statements in func qla4xxx_eh_abort() (Vikas 
Chaudhary) [Orabug: 18050491]
- qla4xxx: Update print statements in qla4xxx_mailbox_command() (Vikas 
Chaudhary) [Orabug: 18050491]
- qla4xxx: Updated print for device login, logout path (Vikas Chaudhary) 
[Orabug: 18050491]
- qla4xxx: Remove unused code from qla4xxx_set_ifcb() (Vikas Chaudhary) 
[Orabug: 18050491]
- qla4xxx: Fix failure of mbox 0x31 (Vikas Chaudhary) [Orabug: 18050491]
- qla4xxx: Reduce rom-lock contention during reset recovery. (Vikas 
Chaudhary) [Orabug: 18050491]
- qla4xxx: Fix pending IO completion in reset path before initiating 
chip reset (Tej Parkash) [Orabug: 18050491]
- qla4xxx: Fix processing response queue during probe (Tej Parkash) 
[Orabug: 18050491]
- qla4xxx: Fix failure of IDC Time Extend mailbox command (Vikas 
Chaudhary) [Orabug: 18050491]
- qla4xxx: Clear DDB index map upon connection close failure (Nilesh 
Javali) [Orabug: 18050491]
- qla4xxx: Return correct error status from func qla4xxx_request_irqs() 
(Vikas Chaudhary) [Orabug: 18050491]
- qla4xxx: Fixed AER reset sequence for ISP83xx/ISP84xx (Tej Parkash) 
[Orabug: 18050491]
- qla4xxx: Correctly handle msleep_interruptible (Vikas Chaudhary) 
[Orabug: 18050491]
- qla4xxx: Rename ACB_STATE macros with IP_ADDRSTATE macros (Nilesh 
Javali) [Orabug: 18050491]
- qla4xxx: Improve loopback failure messages (Nilesh Javali) [Orabug: 
- qla4xxx: Use IDC_CTRL bit1 directly instead of AF_83XX_NO_FWDUMP flag. 
(Vikas Chaudhary) [Orabug: 18050491]
- qla4xxx: Fix comments in code (Vikas Chaudhary) [Orabug: 18050491]
- qla4xxx: Print WARN_ONCE() if iSCSI function presence bit removed 
(Vikas Chaudhary) [Orabug: 18050491]
- qla4xxx: ISP8xxx: Correct retry of adapter initialization (Nilesh 
Javali) [Orabug: 18050491]
- qla4xxx: Recreate chap data list during get chap operation (Adheer 
Chandravanshi) [Orabug: 18050491]
- qla4xxx: Add support for ISCSI_PARAM_LOCAL_IPADDR sysfs attr (Adheer 
Chandravanshi) [Orabug: 18050491]
- libiscsi: Add local_ipaddr parameter in iscsi_conn struct (Adheer 
Chandravanshi) [Orabug: 18050491]
- IB/iser: Add Discovery support (Or Gerlitz) [Orabug: 18050491]
- scsi_transport_iscsi: Export ISCSI_PARAM_LOCAL_IPADDR attr for 
iscsi_connection (Adheer Chandravanshi) [Orabug: 18050491]
- qla4xxx: Add host statistics support (Lalit Chandivade) [Orabug: 18050491]
- scsi_transport_iscsi: Add host statistics support (Lalit Chandivade) 
[Orabug: 18050491]
- qla4xxx: Added support for Diagnostics MBOX command (Vikas Chaudhary) 
[Orabug: 18050491]
- ocfs2: update inode size after zeroed the hole (Junxiao Bi) [Orabug: 

- Revert "sparc64: Fix __copy_{to,from}_user_inatomic defines." (Dave 
Kleikamp) [Orabug: 18038851]
- sparc64: prevent solaris control domain warnings about Domain Service 
handles (chris hyser) [Orabug: 18038829]
- libfcoe: Make fcoe_sysfs optional / fix fnic NULL exception 
(ethan.zhao) [Orabug: 17960129]
- scsi/fnic: update to version from (ethan.zhao) 
[Orabug: 17960129]
- sctp: sctp_close: fix release of bindings for deferred call_rcu's 
(Daniel Borkmann) [Orabug: 17886746]
- dtrace: vtimestamp implementation (Kris Van Hees) [Orabug: 17741477]
- dtrace: implement SDT in kernel modules (Kris Van Hees) [Orabug: 17851716]
- qla4xxx: Driver not able to collect minidump in ISP84xx (Tej Parkash) 
[Orabug: 17960365]
- Modify UEFI anti-bricking code (Matthew Garrett) [Orabug: 17792954]
- ocfs2: make 'buffered' as the default coherency option (Wengang Wang) 
[Orabug: 17988729]
- Fixing kABI breakages in struct sock (Thomas Tanaka) [Orabug: 17901058]
- tcp: TSQ can use a dynamic limit (Eric Dumazet) [Orabug: 17901058]
- tcp: TSO packets automatic sizing (Eric Dumazet) [Orabug: 17901058]
- bonding: fix two race conditions in bond_store_updelay/downdelay 
(Nikolay Aleksandrov) [Orabug: 17931850]
- Update lpfc version for driver release (Gairy Grannum)
- Fixed unassigned variable in ELS timeout message (James Smart)
- Fixed incorrect allocation of iDiags directories/files in debugfs 
(James Smart)
- Fix Crash in lpfc_els_timeout_handler (James Smart)
- Fix kernel panics from corrupted ndlp list. (James Smart)
- Fix Crash in lpfc_els_timeout_handler (James Smart)
- Fix Crash in lpfc_els_timeout_handler (James Smart)
- [SCSI] lpfc: Fix typo on NULL assignment (Felipe Pena)
- Fixed stopped FCF discovery on failed FCF record read. (James Smart)
- Fixed IO hang when in msi mode. (James Smart)
- tg3: update to broadcom version v3.134f (Jerry Snitselaar) [Orabug: 
- bnx2x: update to broadcom version 1.78.80 (Jerry Snitselaar) [Orabug: 
- PCI: Use pci_wait_for_pending_transaction() instead of for loop (Casey 
Leedom) [Orabug: 18037860]
- PCI: Add pci_wait_for_pending_transaction() (Casey Leedom) [Orabug: 
- bnx2i: update to broadcom version (Jerry Snitselaar) [Orabug: 
- bnx2fc: update to broadcom verison 2.4.1e (Jerry Snitselaar) [Orabug: 
- cnic: update to broadcom version 2.5.18c (Jerry Snitselaar) [Orabug: ]
- bnx2: update to broadcom version 2.2.4g (Jerry Snitselaar) [Orabug: ]
- qla2xxx: update from mainline to qlogic version (Guangyu Sun) [Orabug: 17952066]

- be2iscsi: Bump driver version (Brian Maly) [Orabug: 17799766]
- be2iscsi: Fix SGL posting for unaligned ICD values (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix AER handling in driver (Brian Maly) [Orabug: 17799766]
- be2iscsi: Invalidate WRB in Abort/Reset Path (Brian Maly) [Orabug: 
- be2iscsi: Fix Insufficient Buffer Error returned in MBX Completion 
(Brian Maly) [Orabug: 17799766]
- be2iscsi: Fix log level for protocol specific logs (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix MSIx creation for SKH-R adapter (Brian Maly) [Orabug: 
- be2iscsi: Display Port Identifier for each iSCSI function (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Dispaly CID available for connection offload (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix chute cleanup during drivers unload. (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix connection offload to support Dual Chute. (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix CID allocation/freeing to support Dual chute mode (Brian 
Maly) [Orabug: 17799766]
- be2iscsi: Fix WRB_Q posting to support Dual Chute mode (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix SGL Initilization and posting Pages for Dual Chute 
(Brian Maly) [Orabug: 17799766]
- be2iscsi: Fix Template HDR support for Dual Chute mode (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix changes in ASYNC Path for SKH-R adapter (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Config parameters update for Dual Chute Support (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix soft lock up issue during UE or if FW taking time to 
respond (Brian Maly) [Orabug: 17799766]
- be2iscsi: Fix locking mechanism in Unsol Path (Brian Maly) [Orabug: 
- Subject: [PATCH 04/23] be2iscsi: Fix negotiated parameters upload to 
FW (Brian Maly) [Orabug: 17799766]
- be2iscsi: Fix repeated issue of MAC ADDR get IOCTL (Brian Maly) 
[Orabug: 17799766]
- be2iscsi: Fix the MCCQ count leakage (Brian Maly) [Orabug: 17799766]
- be2iscsi: Fix Template HDR IOCTL (Brian Maly) [Orabug: 17799766]
- cifs: enable SMB2 support (Jerry Snitselaar) [Orabug: 17486287]
- [SCSI] Derive the FLUSH_TIMEOUT from the basic I/O timeout (James 
Bottomley) [Orabug: 17853273]
- hyperv: Fix RNDIS send_completion code path (Haiyang Zhang) [Orabug: 
- [SCSI] fix kabi break (Jerry Snitselaar) [Orabug: 17940334]
- [SCSI] Disable WRITE SAME for RAID and virtual host adapter drivers 
(Martin K. Petersen) [Orabug: 17940334]
- qlcnic: update to qlogic version (Sucheta Chakraborty) 
[Orabug: 17937392]
- netxen: update to qlogic version 4.0.82 (Sucheta Chakraborty) [Orabug: 
- be2net: Warn users of possible broken functionality on BE2 cards with 
very old FW versions with latest driver (Somnath Kotur) [Orabug: 17937784]
- net: be2net: remove unnecessary pci_set_drvdata() (Jingoo Han) 
[Orabug: 17937784]
- be2net: Rework PCIe error report log messaging (Ajit Khaparde) 
[Orabug: 17937784]
- be2net: change the driver version number to (Ajit Khaparde) 
[Orabug: 17937784]
- be2net: Display RoCE specific counters in ethtool -S (Ajit Khaparde) 
[Orabug: 17937784]
- be2net: Call version 2 of GET_STATS ioctl for Skyhawk-R (Ajit 
Khaparde) [Orabug: 17937784]
- be2net: add a counter for pkts dropped in xmit path (Sathya Perla) 
[Orabug: 17937784]
- be2net: fix adaptive interrupt coalescing (Sathya Perla) [Orabug: 
- be2net: call ENABLE_VF cmd for Skyhawk-R too (Vasundhara Volam) 
[Orabug: 17937784]
- be2net: Create single TXQ on BE3-R 1G ports (Vasundhara Volam) 
[Orabug: 17937784]
- be2net: Call be_vf_setup() even when VFs are enbaled from previous 
load (Vasundhara Volam) [Orabug: 17937784]
- be2net: Fix to display the VLAN priority for a VF (Ajit Khaparde) 
[Orabug: 17937784]
- be2net: Fix to configure VLAN priority for a VF interface. (Ajit 
Khaparde) [Orabug: 17937784]
- be2net: Fix to allow VLAN configuration on VF interfaces. (Ajit 
Khaparde) [Orabug: 17937784]
- be2net: Fix number of VLANs supported in UMC mode for BE3-R. (Ajit 
Khaparde) [Orabug: 17937784]
- be2net: Fix VLAN promiscuous mode programming (Ajit Khaparde) [Orabug: 
- be2net: Fix the size of be_nic_res_desc structure (Ajit Khaparde) 
[Orabug: 17937784]
- be2net: Fix to prevent Tx stall on SH-R when packet size < 32 (Ajit 
Khaparde) [Orabug: 17937784]
- emulex: Remove extern from function prototypes (Joe Perches) [Orabug: 
- be2net: missing variable initialization (Antonio Alecrim Jr) [Orabug: 
- be2net: set and query VEB/VEPA mode of the PF interface (Ajit 
Khaparde) [Orabug: 17937784]
- drivers:net: Convert dma_alloc_coherent(...__GFP_ZERO) to 
dma_zalloc_coherent (Joe Perches) [Orabug: 17937784]
- be2net: implement ethtool set/get_channel hooks (Sathya Perla) 
[Orabug: 17937784]
- be2net: refactor be_setup() to consolidate queue creation routines 
(Sathya Perla) [Orabug: 17937784]
- be2net: Fix be_cmd_if_create() to use MBOX if MCCQ is not created 
(Sathya Perla) [Orabug: 17937784]
- be2net: refactor be_get_resources() code (Sathya Perla) [Orabug: 17937784]
- be2net: Fixup profile management routines (Vasundhara Volam) [Orabug: 
- be2net: use EQ_CREATEv2 for SH-R (Sathya Perla) [Orabug: 17937784]
- be2net: Check for POST state in suspend-resume sequence (Sarveshwar 
Bandi) [Orabug: 17937784]
- be2net: fix disabling TX in be_close() (Sathya Perla) [Orabug: 17937784]
- be2net: Clear any capability flags that driver is not interested in. 
(Sarveshwar Bandi) [Orabug: 17937784]
- be2net: Initialize "status" in be_cmd_get_die_temperature() 
(Vasundhara Volam) [Orabug: 17937784]
- be2net: fixup log msgs for async events (Vasundhara Volam) [Orabug: 
- be2net: Missing changes from "fix a Tx stall bug caused by a specific 
ipv6 packet" (Ravikumar Nelavelli) [Orabug: 17937784]
- be2net: Fix displaying supported speeds for BE2 (Vasundhara Volam) 
[Orabug: 17937784]
- be2net: don't limit max MAC and VLAN counts (Vasundhara Volam) 
[Orabug: 17937784]
- be2net: Do not call get_die_temperature cmd for VF (Vasundhara Volam) 
[Orabug: 17937784]
- be2net: Adding more speeds reported by get_settings (Vasundhara Volam) 
[Orabug: 17937784]
- be2net: Staticize local functions (Jingoo Han) [Orabug: 17937784]
- be2net: don't use dev_err when AER enabling fails (Ivan Vecera) 
[Orabug: 17937784]
- be2net: delete primary MAC address while unloading (Sathya Perla) 
[Orabug: 17937784]
- be2net: use SET/GET_MAC_LIST for SH-R (Sathya Perla) [Orabug: 17937784]
- be2net: refactor MAC-addr setup code (Sathya Perla) [Orabug: 17937784]
- be2net: fix pmac_id for BE3 VFs (Sathya Perla) [Orabug: 17937784]
- be2net: allow VFs to program MAC and VLAN filters (Sathya Perla) 
[Orabug: 17937784]
- be2net: fix MAC address modification for VF (Sathya Perla) [Orabug: 
- [SCSI] sd: Reduce buffer size for vpd request (Bernd Schubert) 
[Orabug: 17940334]
- [SCSI] sd: fix array cache flushing bug causing performance problems 
(James Bottomley) [Orabug: 17940334]
- [SCSI] Fix race between starved list and device removal (James 
Bottomley) [Orabug: 17940334]
- [SCSI] enable destruction of blocked devices which fail LUN scanning 
(Bart Van Assche) [Orabug: 17940334]
- ixgbevf: upgrade from 2.8.7 to 2.11.3 (ethan.zhao) [Orabug: 17718254]
- igb: set default RSS to 0 for performance tuning (ethan.zhao) [Orabug: 
- igb: upgrade from 4.3.0 to 5.0.6 (ethan.zhao) [Orabug: 17711645]
- e1000e: Avoid kernel crash during shutdown (Li Zhang) [Orabug: 17854071]
- e1000e: upgrade from 2.4.14 to 2.5.4 (ethan.zhao) [Orabug: 17718216]
- Btrfs: skip subvol entries when checking if we've created a dir 
already (Josef Bacik) [Orabug: 17661845]
- Btrfs: fix incorrect inode acl reset (Filipe David Borba Manana) 
[Orabug: 17669341]
- Btrfs: allow running defrag in parallel to administrative tasks 
(Stefan Behrens) [Orabug: 17886022]
- zram: allow request end to coincide with disksize (Sergey Senozhatsky) 
[Orabug: 17879183]
- configfs: fix race between dentry put and lookup (Junxiao Bi) [Orabug: 
- xfs: fix sgid inheritance for subdirectories inheriting default acls 
[V3] (Carlos Maiolino) [Orabug: 17354234]
- Revert "sg: use rwsem to solve race during exclusive open" (Jerry 
Snitselaar) [Orabug: 17579131]
- Revert "sg: no need sg_open_exclusive_lock" (Jerry Snitselaar) 
[Orabug: 17579131]
- Revert "sg: checking sdp->detached isn't protected when open" (Jerry 
Snitselaar) [Orabug: 17579131]
- Revert "sg: push file descriptor list locking down to per-device 
locking" (Jerry Snitselaar) [Orabug: 17579131]
- NVMe: Merge issue on character device bring-up (Keith Busch) [Orabug: 
- NVMe: Handle ioremap failure (Keith Busch) [Orabug: 17940296]
- NVMe: Add pci suspend/resume driver callbacks (Keith Busch) [Orabug: 
- NVMe: Use normal shutdown (Keith Busch) [Orabug: 17940296]
- NVMe: Separate controller init from disk discovery (Keith Busch) 
[Orabug: 17940296]
- NVMe: Separate queue alloc/free from create/delete (Keith Busch) 
[Orabug: 17940296]
- NVMe: Group pci related actions in functions (Keith Busch) [Orabug: 
- NVMe: Disk stats for read/write commands only (Keith Busch) [Orabug: 
- NVMe: Bring up cdev on set feature failure (Keith Busch) [Orabug: 
- NVMe: Fix checkpatch issues (Keith Busch) [Orabug: 17940296]
- NVMe: Namespace IDs are unsigned (Matthew Wilcox) [Orabug: 17940296]
- NVMe: Call nvme_process_cq from submission path (Matthew Wilcox) 
[Orabug: 17940296]
- NVMe: Remove "process_cq did something" message (Matthew Wilcox) 
[Orabug: 17940296]
- NVMe: Return correct value from interrupt handler (Matthew Wilcox) 
[Orabug: 17940296]
- NVMe: Disk IO statistics (Keith Busch) [Orabug: 17940296]
- NVMe: Restructure MSI / MSI-X setup (Matthew Wilcox) [Orabug: 17940296]
- NVMe: Use kzalloc instead of kmalloc+memset (Tushar Behera) [Orabug: 
- [SCSI] megaraid_sas: Fix synchronization problem between sysPD IO path 
and AEN path (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: fixes for few endianess issues 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: addded support for big endian architecture 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Version and Changelog update (Adam Radford) 
[Orabug: 17940378]
- [SCSI] megaraid_sas: Add High Availability clustering support using 
shared Logical Disks (Adam Radford) [Orabug: 17940378]
- scsi/megaraid fixed several typos in comments (Matthias Schid) 
[Orabug: 17940378]
- [SCSI] megaraid_sas: megaraid_sas driver init fails in kdump kernel 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: fix a bug for 64 bit arches (Dan Carpenter) 
[Orabug: 17940378]
- [SCSI] megaraid_sas: fix memory leak if SGL has zero length entries 
(Bjørn Mork) [Orabug: 17940378]
- [SCSI] megaraid: minor cut and paste error fixed. (James Georgas) 
[Orabug: 17940378]
- [SCSI] megaraid_sas: Changelog and driver version update 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Add support to differentiate between iMR vs MR 
Firmware (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Add support for Uneven Span PRL11 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Add support for Extended MSI-x vectors for 12Gb/s 
controller (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Set IoFlags to enable Fast Path for JBODs for 12 
Gb/s controllers (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Add support to display Customer branding details 
in syslog (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Add support for MegaRAID Fury (device ID-0x005f) 
12Gb/s controllers (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Set IO request timeout value provided by OS 
timeout for Tape devices (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Free event detail memory without device ID check 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Update balance count in driver to be in sync of 
firmware (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Fix the interrupt mask for Gen2 controller 
(Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: Return DID_ERROR for SCSI IO, when controller is 
in critical h/w error (Sumit.Saxena at lsi.com) [Orabug: 17940378]
- [SCSI] megaraid_sas: release lock on error path (Dan Carpenter) 
[Orabug: 17940378]
- [SCSI] megaraid_sas: Use correct #define for MSI-X capability (Bjorn 
Helgaas) [Orabug: 17940378]
- [SCSI] megaraid_sas: Version and Changelog update (Adam Radford) 
[Orabug: 17940378]
- [SCSI] megaraid_sas: Dont load DevHandle unless FastPath enabled (Adam 
Radford) [Orabug: 17940378]
- [SCSI] megaraid_sas: Add 4k FastPath DIF support (Adam Radford) 
[Orabug: 17940378]
- megaraid: Revert driver update (Martin K. Petersen) [Orabug: 17940378]
- cciss: fix broken mutex usage in ioctl (Stephen M. Cameron) [Orabug: 
- cciss: add cciss_mutex (Arnd Bergmann) [Orabug: 17763620]
- cciss: remove cciss_kernel_compat.h (Vaughan Cao) [Orabug: 17763620]
- block: add and use scsi_blk_cmd_ioctl (Paolo Bonzini) [Orabug: 17763620]
- cciss: add small delay when using PCI Power Management to reset for 
kump (Mike Miller) [Orabug: 17763620]
- cciss: set max scatter gather entries to 32 on P600 (Mike Miller) 
[Orabug: 17763620]
- cciss: bug fix to prevent cciss from loading in kdump crash kernel 
(Mike Miller) [Orabug: 17763620]
- cciss: change lowercase to uppercase for P700M def in products 
(Vaughan Cao) [Orabug: 17763620]
- cciss: remove __dev* markings (Vaughan Cao) [Orabug: 17763620]
- cciss: upgrade to 4.6.28 (Vaughan Cao) [Orabug: 17763620]
- Revert "SPEC: Fix xen multiboot support" (Jerry Snitselaar) [Orabug: 
- kbuild: Set objects.builtin dependency to bzImage for CONFIG_CTF 
(Jerry Snitselaar) [Orabug: 17510915]
- ubifs: wait for page writeback to provide stable pages (Jan Kara) 
[Orabug: 17939878]
- ocfs2: wait for page writeback to provide stable pages (Jan Kara) 
[Orabug: 17939878]
- block: optionally snapshot page contents to provide stable pages 
during write (Darrick J. Wong) [Orabug: 17939878]
- mm: only enforce stable page writes if the backing device requires it 
(Darrick J. Wong) [Orabug: 17939878]
- bdi: allow block devices to say that they require stable page writes 
(Darrick J. Wong) [Orabug: 17939878]
- netfilter: enable log target (Jerry Snitselaar) [Orabug: 17885348]
- qla4xxx: Updated driver version to (Tej Parkash) 
[Orabug: 17960427]
- qla4xxx: overflow in qla4xxx_set_chap_entry() (Dan Carpenter) [Orabug: 
- qla4xxx: Add support for additional network parameters settings 
(Harish Zunjarrao) [Orabug: 17960427]
- iscsi_transport: Additional parameters for network settings (Harish 
Zunjarrao) [Orabug: 17960427]
- iscsi_transport: Remove net param enum values (Harish Zunjarrao) 
[Orabug: 17960427]
- qla4xxx: Add support to get CHAP details for flash target session 
(Adheer Chandravanshi) [Orabug: 17960427]
- qla4xxx: Add support to set CHAP entries (Adheer Chandravanshi) 
[Orabug: 17960427]
- scsi_transport_iscsi: Add support to set CHAP entries (Adheer 
Chandravanshi) [Orabug: 17960427]
- qla4xxx: Use offset based on adapter type to set CHAP entry in flash 
(Adheer Chandravanshi) [Orabug: 17960427]
- qla4xxx: Populate local CHAP credentials for flash target sessions 
(Adheer Chandravanshi) [Orabug: 17960427]
- qla4xxx: Support setting of local CHAP index for flash target entry 
(Adheer Chandravanshi) [Orabug: 17960427]
- qla4xxx: Correct the check for local CHAP entry type (Adheer 
Chandravanshi) [Orabug: 17960427]
- qla4xxx: correctly update session discovery_parent_idx. (Manish 
Rangankar) [Orabug: 17960427]
- qla4xxx: Return error if minidump data collection fails (Vikas 
Chaudhary) [Orabug: 17960427]
- qla4xxx: Fix the minidump data collection check in for loop (Santosh 
Vernekar) [Orabug: 17960427]
- qla4xxx: Add pex-dma support for capturing minidump (Santosh Vernekar) 
[Orabug: 17960427]
- qla4xxx: Update Copyright header (Vikas Chaudhary) [Orabug: 17960427]
- qla4xxx: Implementation of ACB configuration during Loopback for 
ISP8042 (Nilesh Javali) [Orabug: 17960427]
- qla4xxx: Added support for ISP8042 (Vikas Chaudhary) [Orabug: 17960427]
- ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) 
[Orabug: 17951078] {CVE-2013-4470}
- ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri 
Pirko) [Orabug: 17951080] {CVE-2013-4470}
- KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376) (Gleb 
Natapov) [Orabug: 17951067] {CVE-2013-6376}
- KVM: x86: Convert vapic synchronization to _cached functions 
(CVE-2013-6368) (Andy Honig) [Orabug: 17951071] {CVE-2013-6368}
- KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367) (Andy 
Honig) [Orabug: 17951073] {CVE-2013-6367}
- SUNRPC: don't map EKEYEXPIRED to EACCES in call_refreshresult (Andy 
Adamson) [Orabug: 17931738]
- NFSv4: Fix state reference counting in 
_nfs4_opendata_reclaim_to_nfs4_state (Trond Myklebust) [Orabug: 17931293]
- NFSv4: don't reprocess cached open CLAIM_PREVIOUS (Weston Andros 
Adamson) [Orabug: 17931292]
- NFSv4: don't fail on missing fattr in open recover (Weston Andros 
Adamson) [Orabug: 17931290]
- NFSv4: fix NULL dereference in open recover (Weston Andros Adamson) 
[Orabug: 17931281]
- NFSv4: Fix a use-after-free situation in _nfs4_proc_getlk() (Trond 
Myklebust) [Orabug: 17931272]
- xen/blkback: fix reference counting (Vegard Nossum) [Orabug: 17931209]
- blk-core: Fix memory corruption if blkcg_init_queue fails (Mikulas 
Patocka) [Orabug: 17931205]
- xfs: add capability check to free eofblocks ioctl (Dwight Engen) 
[Orabug: 17931096]
- compiler-gcc.h: Add gcc-recommended GCC_VERSION macro (Daniel Santos) 
[Orabug: 17882877]
- fix kabi breakage (Darrick J. Wong) [Orabug: 14548775]
- direct-io: Handle O_(D)SYNC AIO (Darrick J. Wong) [Orabug: 14548775]
- direct-io: Implement generic deferred AIO completions for ext4 
(Darrick J. Wong) [Orabug: 14548775]
- direct-io: Implement generic deferred AIO completions (Darrick J. 
Wong) [Orabug: 14548775]

- KVM: Fix iommu map/unmap to handle memory slot moves (Alex Williamson) 
[Orabug: 17841960] {CVE-2013-4592}
- ansi_cprng: Fix off by one error in non-block size request (Jerry 
Snitselaar) [Orabug: 17837997] {CVE-2013-4345}
- ixgbe: update from 3.15.1 to 3.18.7 (ethan.zhao) [Orabug: 17718073]
- x86, mtrr: Fix original mtrr range get for mtrr_cleanup (Yinghai Lu) 
[Orabug: 17812759]
- SUNRPC: Fix a data corruption issue when retransmitting RPC calls 
(Trond Myklebust) [Orabug: 17821884]
- [SCSI] hpsa: remove unneeded variable (Tomas Henzl) [Orabug: 17719404]
- [SCSI] hpsa: housekeeping patch for device_id and product arrays (Mike 
Miller) [Orabug: 17719404]
- hpsa: add HP Smart Array Gen8 name P822se (Vaughan Cao) [Orabug: 17719404]
- [SCSI] hpsa: add HP Smart Array Gen9 PCI ID's (Mike Miller) [Orabug: 
- hpsa: Convert retrun typos to return (Joe Perches) [Orabug: 17719404]
- [SCSI] hpsa: fix warning with smp_processor_id() in preemptible (John 
Kacur) [Orabug: 17719404]
- [SCSI] hpsa: fix a race in cmd_free/scsi_done (Tomas Henzl) [Orabug: 
- hpsa: fix compilation error of __dev* markings (Vaughan Cao) [Orabug: 
- hpsa: upgrade to 3.4.2-5 (Vaughan Cao) [Orabug: 17719404]

- net: fix cipso packet validation when !NETLABEL (Seif Mazareeb) 
[Orabug: 17806518]
- can: dev: fix nlmsg size calculation in can_get_size() (Marc 
Kleine-Budde) [Orabug: 17806517]
- ipv4: fix ineffective source address selection (Jiri Benc) [Orabug: 
- ecryptfs: Fix memory leakage in keystore.c (Geyslan G. Bem) [Orabug: 
- connector: use nlmsg_len() to check message length (Mathias Krause) 
[Orabug: 17806512]
- net: vlan: fix nlmsg size calculation in vlan_get_size() (Marc 
Kleine-Budde) [Orabug: 17806510]
- SPEC: Fix xen multiboot support (Zhigang Wang) [Orabug: 17792303]
- config: enable CONFIG_PANIC_ON_OOPS on sparc (Jerry Snitselaar) 
[Orabug: 17762461]
- NFSv4.1: Don't lose locks when a server reboots during delegation 
return (Trond Myklebust) [Orabug: 17419831]
- NFSv4.1 end back channel session draining (Andy Adamson) [Orabug: 
- NFSv4.1 Fix a pNFS session draining deadlock (Andy Adamson) [Orabug: 
- NFSv4.1: Ensure that we free the lock stateid on the server (Trond 
Myklebust) [Orabug: 17419831]
- NFSv4: Convert nfs41_free_stateid to use an asynchronous RPC call 
(Trond Myklebust) [Orabug: 17419831]
- NFSv4: Don't recheck permissions on open in case of recovery cached 
open (Trond Myklebust) [Orabug: 17419831]
- NFSv4: Record the OPEN create mode used in the nfs4_opendata structure 
(Trond Myklebust) [Orabug: 17419831]
- NFSv4: Fix another open/open_recovery deadlock (Trond Myklebust) 
[Orabug: 17419831]
- NLM: Ensure that we resend all pending blocking locks after a reclaim 
(Trond Myklebust) [Orabug: 17419831]
- NFSv4: Fix a reboot recovery race when opening a file (Trond 
Myklebust) [Orabug: 17419831]
- NFSv4: Ensure delegation recall and byte range lock removal don't 
conflict (Trond Myklebust) [Orabug: 17419831]
- NFSv4: Fix up the return values of nfs4_open_delegation_recall (Trond 
Myklebust) [Orabug: 17419831]
- NFSv4.1: Don't lose locks when a server reboots during delegation 
return (Trond Myklebust) [Orabug: 17419831]
- NFSv4.1: Prevent deadlocks between state recovery and file locking 
(Trond Myklebust) [Orabug: 17419831]
- NFSv4: Allow the state manager to mark an open_owner as being 
recovered (Trond Myklebust) [Orabug: 17419831]
- drivers/base/core.c: Always output device renaming messages. 
(ethan.zhao) [Orabug: 17477783]
- ixgbevf: Don't output NIC name before registered. (ethan.zhao) 
[Orabug: 17477783]
- xen/smp: initialize IPI vectors before marking CPU online (Chuck 
Anderson) [Orabug: 17800009]
- cpu: make sure that cpu/online file created before KOBJ_ADD is emitted 
(Igor Mammedov) [Orabug: 17800009]
- cpu: fix "crash_notes" and "crash_notes_size" leaks in register_cpu() 
(Igor Mammedov) [Orabug: 17800009]
- sysfs: fix crash_notes_size build warning (Arnd Bergmann) [Orabug: 
- sysfs: Add crash_notes_size to export percpu note size (Zhang Yanfei) 
[Orabug: 17800009]
- PCI: Init NumVFs register to zero in sriov_init() (ethan.zhao) 
[Orabug: 17799296]
- PCI: Update NumVFs register when disabling SR-IOV (Yijing Wang) 
[Orabug: 17799296]
- xen/balloon: Set balloon's initial state to number of existing RAM 
pages (Boris Ostrovsky) [Orabug: 17798521]
- xfs: fix possible NULL dereference in xlog_verify_iclog (Geyslan G. 
Bem) [Orabug: 17799962]
- xfs: prevent stack overflows from page cache allocation (Dave Chinner) 
[Orabug: 17799962]
- Fix wrong flag ASSERT in xfs_attr_shortform_getvalue (Eric Sandeen) 
[Orabug: 17799962]
- xfs: check correct status variable for xfs_inobt_get_rec() call (Brian 
Foster) [Orabug: 17799962]
- xfs: avoid double-free in xfs_attr_node_addname (Eric Sandeen) 
[Orabug: 17799962]
- xfs: fix assertion failure in xfs_vm_write_failed() (Jie Liu) [Orabug: 
- inet: fix possible memory corruption with UDP_CORK and UFO (Hannes 
Frederic Sowa) [Orabug: 17791997]
- tcp: do not forget FIN in tcp_shifted_skb() (Eric Dumazet) [Orabug: 
- NFSv4.1: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails 
(Trond Myklebust) [Orabug: 17791995]
- NFS4.1 Fix data server connection race (Andy Adamson) [Orabug: 17791994]
- ipv6: udp packets following an UFO enqueued packet need also be 
handled by UFO (Hannes Frederic Sowa) [Orabug: 17791993]
- ip: generate unique IP identificator if local fragmentation is allowed 
(Ansis Atteka) [Orabug: 17791991]
- workqueue: cond_resched() after processing each work item (Tejun Heo) 
[Orabug: 17791990]
- SCSI: sg: Fix user memory corruption when SG_IO is interrupted by a 
signal (Roland Dreier) [Orabug: 17791989]
- block: Add bio_for_each_segment_all() (Kent Overstreet) [Orabug: 17791988]
- writeback: fix negative bdi max pause (Fengguang Wu) [Orabug: 17791986]
- proc connector: fix info leaks (Mathias Krause) [Orabug: 17791985]
- net: heap overflow in __audit_sockaddr() (Dan Carpenter) [Orabug: 
- l2tp: fix kernel panic when using IPv4-mapped IPv6 addresses (François 
CACHEREUL) [Orabug: 17791982]
- x86: avoid remapping data in parse_setup_data() (Linn Crosetto) 
[Orabug: 17791983]
- drm/radeon: forever loop on error in radeon_do_test_moves() (Dan 
Carpenter) [Orabug: 17791981]
- drm/i915: Only apply DPMS to the encoder if enabled (Chris Wilson) 
[Orabug: 17791980]
- compiler/gcc4: Add quirk for 'asm goto' miscompilation bug (Ingo 
Molnar) [Orabug: 17791979]
- ext4: fix memory leak in xattr (Dave Jones) [Orabug: 17791977]
- ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler() (Lv 
Zheng) [Orabug: 17791978]
- mm: avoid reinserting isolated balloon pages into LRU lists (Rafael 
Aquini) [Orabug: 17791976]
- esp_scsi: Fix tag state corruption when autosensing. (David S. Miller) 
[Orabug: 17791974]
- fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from 
Oopsing (Dan Aloni) [Orabug: 17792144]
- ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put 
(Salam Noureddine) [Orabug: 17791973]
- bridge: fix NULL pointer deref of br_port_get_rcu (Hong Zhiguo) 
[Orabug: 17791972]
- net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit (Daniel 
Borkmann) [Orabug: 17791970] {CVE-2013-4350}
- netpoll: fix NULL pointer dereference in netpoll_cleanup (Nikolay 
Aleksandrov) [Orabug: 17791971]
- net: sctp: fix smatch warning in sctp_send_asconf_del_ip (Daniel 
Borkmann) [Orabug: 17791969]
- net: fib: fib6_add: fix potential NULL pointer dereference (Daniel 
Borkmann) [Orabug: 17791967]
- cciss: fix info leak in cciss_ioctl32_passthru() (Dan Carpenter) 
[Orabug: 17791968] {CVE-2013-2147}
- cpqarray: fix info leak in ida_locked_ioctl() (Dan Carpenter) [Orabug: 
17791963] {CVE-2013-2147}
- dm snapshot: workaround for a false positive lockdep warning (Mikulas 
Patocka) [Orabug: 17791964]
- driver core : Fix use after free of dev->parent in device_shutdown 
(Benson Leung) [Orabug: 17791961]
- xhci: Fix oops happening after address device timeout (Mathias Nyman) 
[Orabug: 17791960]
- serial: pch_uart: fix tty-kref leak in dma-rx path (Johan Hovold) 
[Orabug: 17791959]
- cfq: explicitly use 64bit divide operation for 64bit arguments (Anatol 
Pomozov) [Orabug: 17791958]
- HID: logitech-dj: validate output report details (Kees Cook) [Orabug: 
17791957] {CVE-2013-2895}
- HID: zeroplus: validate output report details (Kees Cook) [Orabug: 
17791956] {CVE-2013-2889}
- HID: LG: validate HID output report details (Kees Cook) [Orabug: 
17791955] {CVE-2013-2893}
- HID: provide a helper for validating hid reports (Kees Cook) [Orabug: 
- HID: multitouch: validate indexes details (Benjamin Tissoires) 
[Orabug: 17791953] {CVE-2013-2897}
- HID: validate feature and input report details (Benjamin Tissoires) 
[Orabug: 17791952] {CVE-2013-2897}
- sched/fair: Fix small race where child->se.parent,cfs_rq might point 
to invalid ones (Daisuke Nishimura) [Orabug: 17791951]
- cifs: fix filp leak in cifs_atomic_open() (Miklos Szeredi) [Orabug: 
- fuse: readdir: check for slash in names (Miklos Szeredi) [Orabug: 
- fuse: postpone end_page_writeback() in fuse_writepage_locked() (Maxim 
Patlasov) [Orabug: 17791947]
- proc: Restrict mounting the proc filesystem (Eric W. Biederman) 
[Orabug: 17791948]
- memcg: fix multiple large threshold notifications (Greg Thelen) 
[Orabug: 17791946]
- ocfs2: fix the end cluster offset of FIEMAP (Jie Liu) [Orabug: 17791945]
- pidns: fix vfork() after unshare(CLONE_NEWPID) (Oleg Nesterov) 
[Orabug: 17791944]
- pidns: Fix hang in zap_pid_ns_processes by sending a potentially extra 
wakeup (Eric W. Biederman) [Orabug: 17791943]
- intel-iommu: Fix leaks in pagetable freeing (Alex Williamson) [Orabug: 
- Btrfs: don't allow the replace procedure on read only filesystems 
(Stefan Behrens) [Orabug: 17791942]
- HID: check for NULL field when setting values (Kees Cook) [Orabug: 
- HID: hidraw: correctly deallocate memory on device disconnect (Manoj 
Chourasia) [Orabug: 17791939]
- HID: battery: don't do DMA from stack (Jiri Kosina) [Orabug: 17791937]
- HID: picolcd: Prevent NULL pointer dereference on _remove() (Bruno 
Prémont) [Orabug: 17791935]
- HID: ntrig: validate feature report details (Kees Cook) [Orabug: 
17791932] {CVE-2013-2896}
- HID: picolcd_core: validate output report details (Kees Cook) [Orabug: 
17791930] {CVE-2013-2899}
- HID: validate HID report id size (Kees Cook) [Orabug: 17791929] 
- HID: sensor-hub: validate feature report details (Kees Cook) [Orabug: 
17791927] {CVE-2013-2898}
- HID: pantherlord: validate output report details (Kees Cook) [Orabug: 
17791928] {CVE-2013-2892}
- rculist: list_first_or_null_rcu() should use list_entry_rcu() (Tejun 
Heo) [Orabug: 17791925]
- usb: config->desc.bLength may not exceed amount of data returned by 
the device (Hans de Goede) [Orabug: 17791926]
- usb: ehci-mxc: check for pdata before dereferencing (Daniel Mack) 
[Orabug: 17791924]
- net: Check the correct namespace when spoofing pid over SCM_RIGHTS 
(Andy Lutomirski) [Orabug: 17791922]
- CIFS: Fix a memory leak when a lease break comes (Pavel Shilovsky) 
[Orabug: 17791921]
- cifs: ensure that srv_mutex is held when dealing with ssocket pointer 
(Jeff Layton) [Orabug: 17791920]
- cpuidle: coupled: fix race condition between pokes and safe state 
(Colin Cross) [Orabug: 17791919]
- cpuidle: coupled: abort idle if pokes are pending (Colin Cross) 
[Orabug: 17791918]
- xen-gnt: prevent adding duplicate gnt callbacks (Roger Pau Monne) 
[Orabug: 17791917]
- crypto: api - Fix race condition in larval lookup (Herbert Xu) 
[Orabug: 17791914]
- SCSI: sd: Fix potential out-of-bounds access (Alan Stern) [Orabug: 
- UBI: Fix PEB leak in wear_leveling_worker() (Richard Weinberger) 
[Orabug: 17791912]
- net: ipv6: tcp: fix potential use after free in tcp_v6_do_rcv (Daniel 
Borkmann) [Orabug: 17791911]
- ipv6: remove max_addresses check from ipv6_create_tempaddr (Hannes 
Frederic Sowa) [Orabug: 17791910] {CVE-2013-0343}
- fib_trie: remove potential out of bound access (Eric Dumazet) [Orabug: 
- htb: fix sign extension bug (stephen hemminger) [Orabug: 17791907]
- drivers/misc/hpilo: Correct panic when an AUX iLO is detected (Mark 
Rusk) [Orabug: 17791906]
- memcg: check that kmem_cache has memcg_params before accessing it 
(Andrey Vagin) [Orabug: 17791904]
- drivers/base/memory.c: fix show_mem_removable() to handle missing 
sections (Russ Anderson) [Orabug: 17791905]
- jfs: fix readdir cookie incompatibility with NFSv4 (Dave Kleikamp) 
[Orabug: 17791902]
- iwlwifi: dvm: fix calling ieee80211_chswitch_done() with NULL 
(Stanislaw Gruszka) [Orabug: 17792147]
- jbd2: Fix use after free after error in jbd2_journal_dirty_metadata() 
(Jan Kara) [Orabug: 17791900]
- wusbcore: fix kernel panic when disconnecting a wireless USB->serial 
device (Thomas Pugliese) [Orabug: 17792149]
- USB: keyspan: fix null-deref at disconnect and release (Johan Hovold) 
[Orabug: 17791898]
- fs/proc/task_mmu.c: fix buffer overflow in add_page_map() (yonghua 
zheng) [Orabug: 17792152]
- memcg: don't initialize kmem-cache destroying work for root caches 
(Andrey Vagin) [Orabug: 17791896]
- cifs: extend the buffer length enought for sprintf() using (Chen Gang) 
[Orabug: 17791897]
- virtio: console: clean up port data immediately at time of unplug 
(Amit Shah) [Orabug: 17791894]
- virtio: console: fix race in port_fops_open() and port unplug (Amit 
Shah) [Orabug: 17791893]
- virtio: console: fix race with port unplug and open/close (Amit Shah) 
[Orabug: 17791892]
- virtio/console: Add pipe_lock/unlock for splice_write (Yoshihiro 
YUNOMAE) [Orabug: 17791891]
- virtio/console: Quit from splice_write if pipe->nrbufs is 0 (Yoshihiro 
YUNOMAE) [Orabug: 17791890]
- LOCKD: Don't call utsname()->nodename from nlmclnt_setlockargs (Trond 
Myklebust) [Orabug: 17791889]
- ACPI / PM: Walk physical_node_list under physical_node_lock (Rafael J. 
Wysocki) [Orabug: 17791888]
- ext4: destroy ext4_es_cachep on module unload (Eric Sandeen) [Orabug: 
- net_sched: info leak in atm_tc_dump_class() (Dan Carpenter) [Orabug: 
- af_key: more info leaks in pfkey messages (Dan Carpenter) [Orabug: 
- net_sched: Fix stack info leak in cbq_dump_wrr(). (David S. Miller) 
[Orabug: 17791883]
- ipv6: take rtnl_lock and mark mrt6 table as freed on namespace cleanup 
(Hannes Frederic Sowa) [Orabug: 17791882]
- userns: unshare_userns(&cred) should not populate cred on failure 
(Oleg Nesterov) [Orabug: 17791884]
- cgroup: fix umount vs cgroup_cfts_commit() race (Li Zefan) [Orabug: 
- fanotify: info leak in copy_event_to_user() (Dan Carpenter) [Orabug: 
17791880] {CVE-2013-2148}
- zram: protect sysfs handler from invalid memory access (Jiang Liu) 
[Orabug: 17791879]
- zram: avoid access beyond the zram device (Jiang Liu) [Orabug: 17791878]
- zram: destroy all devices on error recovery path in zram_init() (Jiang 
Liu) [Orabug: 17791877]
- zram: use zram->lock to protect zram_free_page() in swap free notify 
path (Jiang Liu) [Orabug: 17791876]
- xen/evtchn: avoid a deadlock when unbinding an event channel (David 
Vrabel) [Orabug: 17791875]
- livelock avoidance in sget() (Al Viro) [Orabug: 17791873]
- mm: mempolicy: fix mbind_range() && vma_adjust() interaction (Oleg 
Nesterov) [Orabug: 17791874]
- ACPI / memhotplug: Fix a stale pointer in error path (Toshi Kani) 
[Orabug: 17791872]
- nfsd: nfsd_open: when dentry_open returns an error do not propagate as 
struct file (Harshula Jayasuriya) [Orabug: 17791871]
- crypto: caam - Fixed the memory out of bound overwrite issue (Vakul 
Garg) [Orabug: 17791870]
- md/raid10: remove use-after-free bug. (NeilBrown) [Orabug: 17791869]
- md/raid5: fix interaction of 'replace' and 'recovery'. (NeilBrown) 
[Orabug: 17791868]
- x86, suspend: Handle CPUs which fail to #GP on RDMSR (H. Peter Anvin) 
[Orabug: 17791866]
- USB: mos7840: fix memory leak in open (Johan Hovold) [Orabug: 17791867]
- xhci: Avoid NULL pointer deref when host dies. (Sarah Sharp) [Orabug: 
- xhci: fix null pointer dereference on ring_doorbell_for_active_rings 
(Oleksij Rempel) [Orabug: 17791864]
- SCSI: sd: fix crash when UA received on DIF enabled device (Ewan D. 
Milne) [Orabug: 17791863]
- SCSI: isci: Fix a race condition in the SSP task management path (Jeff 
Skirvin) [Orabug: 17791862]
- iscsi-target: Fix tfc_tpg_nacl_auth_cit configfs length overflow 
(Joern Engel) [Orabug: 17791859]
- hrtimers: Move SMP function call to thread context (Thomas Gleixner) 
[Orabug: 17791860]
- lockd: protect nlm_blocked access in nlmsvc_retry_blocked (David 
Jeffery) [Orabug: 17791858]
- PM / Sleep: avoid 'autosleep' in shutdown progress (Liu ShuoX) 
[Orabug: 17791855]
- SCSI: megaraid_sas: fix memory leak if SGL has zero length entries 
(Bjørn Mork) [Orabug: 17791854]
- ifb: fix oops when loading the ifb failed (dingtianhong) [Orabug: 
- dummy: fix oops when loading the dummy failed (dingtianhong) [Orabug: 
- 9p: fix off by one causing access violations and memory corruption 
(Sasha Levin) [Orabug: 17791851]
- ifb: fix rcu_sched self-detected stalls (dingtianhong) [Orabug: 17791850]
- sunvnet: vnet_port_remove must call unregister_netdev (Dave Kleikamp) 
[Orabug: 17791847]
- vti: remove duplicated code to fix a memory leak (Cong Wang) [Orabug: 
- perf: Fix perf_lock_task_context() vs RCU (Peter Zijlstra) [Orabug: 
- perf: Remove WARN_ON_ONCE() check in __perf_event_enable() for valid 
scenario (Jiri Olsa) [Orabug: 17791845]
- perf: Clone child context from parent context pmu (Jiri Olsa) [Orabug: 
- iommu/amd: Only unmap large pages from the first pte (Alex Williamson) 
[Orabug: 17791843]
- svcrpc: fix handling of too-short rpc's (J. Bruce Fields) [Orabug: 
- printk: Fix rq->lock vs logbuf_lock unlock lock inversion (Bu, Yitian) 
[Orabug: 17791841]
- mac80211: close AP_VLAN interfaces before unregistering all (Johannes 
Berg) [Orabug: 17791777]
- md/raid10: fix two bugs affecting RAID10 reshape. (NeilBrown) [Orabug: 
- timer: Fix jiffies wrap behavior of round_jiffies_common() (Bart Van 
Assche) [Orabug: 17791835]
- PCI: Fix refcount issue in pci_create_root_bus() error recovery path 
(Jiang Liu) [Orabug: 17791834]
- genirq: Fix can_request_irq() for IRQs without an action (Ben 
Hutchings) [Orabug: 17791833]
- cgroup: fix umount vs cgroup_event_remove() race (Li Zefan) [Orabug: 
- xhci: check for failed dma pool allocation (Mathias Nyman) [Orabug: 
- ext3,ext4: don't mess with dir_file->f_pos in htree_dirblock_to_tree() 
(Al Viro) [Orabug: 17791826]
- jbd2: fix theoretical race in jbd2__journal_restart (Theodore Ts'o) 
[Orabug: 17791828]
- jbd2: move superblock checksum calculation to jbd2_write_superblock() 
(Theodore Ts'o) [Orabug: 17791824]
- crypto: sanitize argument for format string (Kees Cook) [Orabug: 17791822]
- charger-manager: Ensure event is not used as format string (Kees Cook) 
[Orabug: 17791823]
- netfilter: nf_conntrack_ipv6: Plug sk_buff leak in fragment handling 
(Phil Oester) [Orabug: 17791821]
- libata-acpi: add back ACPI based hotplug functionality (Aaron Lu) 
[Orabug: 17791820]
- UBIFS: fix a horrid bug (Artem Bityutskiy) [Orabug: 17791819]
- UBIFS: prepare to fix a horrid bug (Artem Bityutskiy) [Orabug: 17791818]
- crypto: algboss - Hold ref count on larval (Herbert Xu) [Orabug: 17791817]
- dlci: validate the net device in dlci_del() (Zefan Li) [Orabug: 17791815]
- dlci: acquire rtnl_lock before calling __dev_get_by_name() (Zefan Li) 
[Orabug: 17791814]
- hw_breakpoint: Use cpu_possible_mask in {reserve,release}_bp_slot() 
(Oleg Nesterov) [Orabug: 17791816]
- hw_breakpoint: Fix cpu check in task_bp_pinned(cpu) (Oleg Nesterov) 
[Orabug: 17791812]
- Bluetooth: Fix crash in l2cap_build_cmd() with small MTU (Anderson 
Lizardo) [Orabug: 17791811]
- target/iscsi: don't corrupt bh_count in 
iscsit_stop_time2retain_timer() (Joern Engel) [Orabug: 17791809]
- l2tp: Fix PPP header erasure and memory leak (Guillaume Nault) 
[Orabug: 17791808]
- packet: packet_getname_spkt: make sure string is always 0-terminated 
(Daniel Borkmann) [Orabug: 17791807]
- vhost_net: clear msg.control for non-zerocopy case during tx (Jason 
Wang) [Orabug: 17791806]
- net: Block MSG_CMSG_COMPAT in send(m)msg and recv(m)msg (Andy 
Lutomirski) [Orabug: 17791805]
- ip_tunnel: fix kernel panic with icmp_dest_unreach (Eric Dumazet) 
[Orabug: 17791804]
- ipv6: fix possible crashes in ip6_cork_release() (Eric Dumazet) 
[Orabug: 17791801]
- mm: mmu_notifier: re-fix freed page still mapped in secondary MMU 
(Xiao Guangrong) [Orabug: 17791802]
- x86: Fix typo in kexec register clearing (Kees Cook) [Orabug: 17791798]
- md/raid1,raid10: use freeze_array in place of raise_barrier in various 
places. (NeilBrown) [Orabug: 17791797]
- md/raid1,5,10: Disable WRITE SAME until a recovery strategy is in 
place (H. Peter Anvin) [Orabug: 17791795]
- md/raid1: consider WRITE as successful only if at least one non-Faulty 
and non-rebuilding drive completed it. (Alex Lyakas) [Orabug: 17791794]
- swap: avoid read_swap_cache_async() race to deadlock while waiting on 
discard I/O completion (Rafael Aquini) [Orabug: 17791792]
- cciss: fix broken mutex usage in ioctl (Stephen M. Cameron) [Orabug: 
- rbd: don't destroy ceph_opts in rbd_add() (Alex Elder) [Orabug: 17791793]
- libceph: must hold mutex for reset_changed_osds() (Alex Elder) 
[Orabug: 17791790]
- audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE (Oleg 
Nesterov) [Orabug: 17791788]
- drm: fix a use-after-free when GPU acceleration disabled (Huacai Chen) 
[Orabug: 17791787]
- eCryptfs: Check return of filemap_write_and_wait during fsync (Tyler 
Hicks) [Orabug: 17791789]
- ecryptfs: fixed msync to flush data (Paul Taysom) [Orabug: 17791785]
- cifs: fix off-by-one bug in build_unc_path_to_root (Jeff Layton) 
[Orabug: 17791786]
- acpi-cpufreq: set current frequency based on target P-State (Ross 
Lagerwall) [Orabug: 17792155]
- x86/PCI: Map PCI setup data with ioremap() so it can be in highmem 
(Matt Fleming) [Orabug: 17791783]
- xhci: fix list access before init (Vladimir Murzin) [Orabug: 17791782]
- xhci-mem: init list heads at the beginning of init (Sergio Aguirre) 
[Orabug: 17791780]
- cfg80211: check wdev->netdev in connection work (Johannes Berg) 
[Orabug: 17791779]
- jfs: fix a couple races (Dave Kleikamp) [Orabug: 17791776]
- iscsi-target: fix heap buffer overflow on error (Kees Cook) [Orabug: 
17791775] {CVE-2013-2850}
- cgroup: initialize xattr before calling d_instantiate() (Li Zefan) 
[Orabug: 17791774]
- cifs: fix potential buffer overrun when composing a new options string 
(Jeff Layton) [Orabug: 17791773]
- module: don't unlink the module until we've removed all exposure. 
(Rusty Russell) [Orabug: 17791772]
- x86, range: fix missing merge during add range (Yinghai Lu) [Orabug: 
- mm/pagewalk.c: walk_page_range should avoid VM_PFNMAP areas (Cliff 
Wickman) [Orabug: 17791770]
- drivers/block/brd.c: fix brd_lookup_page() race (Brian Behlendorf) 
[Orabug: 17791768]
- klist: del waiter from klist_remove_waiters before wakeup waitting 
process (wang, biao) [Orabug: 17791766]
- fat: fix possible overflow for fat_clusters (OGAWA Hirofumi) [Orabug: 
- random: fix accounting race condition with lockless irq entropy_count 
update (Jiri Kosina) [Orabug: 17791764]
- drivers/char/random.c: fix priming of last_data (Jarod Wilson) 
[Orabug: 17791763]
- cifs: only set ops for inodes in I_NEW state (Jeff Layton) [Orabug: 
- virtio_console: fix uapi header (Michael S. Tsirkin) [Orabug: 17791761]
- usermodehelper: check subprocess_info->path != NULL (Oleg Nesterov) 
[Orabug: 17791759]
- drm/radeon: check incoming cliprects pointer (Kees Cook) [Orabug: 
- drivers/char/ipmi: memcpy, need additional 2 bytes to avoid memory 
overflow (Chen Gang) [Orabug: 17791758]
- target: close target_put_sess_cmd() vs. core_tmr_abort_task() race 
(Joern Engel) [Orabug: 17791757]
- drbd: fix memory leak (Lars Ellenberg) [Orabug: 17791756]
- watchdog: Fix race condition in registration code (Guenter Roeck) 
[Orabug: 17791755]
- pch_dma: Use GFP_ATOMIC because called from interrupt context (Tomoya 
MORINAGA) [Orabug: 17791752]
- ipv6,gre: do not leak info to user-space (Amerigo Wang) [Orabug: 17791751]
- ipv6: do not clear pinet6 field (Eric Dumazet) [Orabug: 17791750]
- macvlan: fix passthru mode race between dev removal and rx path (Jiri 
Pirko) [Orabug: 17791753]
- virtio: don't expose u16 in userspace api (stephen hemminger) [Orabug: 
- packet: tpacket_v3: do not trigger bug() on wrong header status 
(Daniel Borkmann) [Orabug: 17792159]
- bridge: fix race with topology change timer (stephen hemminger) 
[Orabug: 17791740]
- drm/mm: fix dump table BUG (Daniel Vetter) [Orabug: 17791739]
- ext4: limit group search loop for non-extent files (Lachlan McIlroy) 
[Orabug: 17791737]
- tracing: Fix leaks of filter preds (Steven Rostedt (Red Hat)) [Orabug: 
- tick: Cleanup NOHZ per cpu data on cpu down (Thomas Gleixner) [Orabug: 
- timer: Don't reinitialize the cpu base lock during CPU_UP_PREPARE 
(Tirupathi Reddy) [Orabug: 17791733]
- shm: fix null pointer deref when userspace specifies invalid hugepage 
size (Li Zefan) [Orabug: 17791731]
- nfsd: fix oops when legacy_recdir_name_error is passed a -ENOENT error 
(Jeff Layton) [Orabug: 17791730]
- ALSA: HDA: Fix Oops caused by dereference NULL pointer (Wang YanQing) 
[Orabug: 17791729]
- ACPICA: Fix possible buffer overflow during a field unit read 
operation (Bob Moore) [Orabug: 17792164]
- Btrfs: release path before starting transaction in can_nocow_extent 
(Josef Bacik) [Orabug: 17790692]
- Btrfs: use right root when checking for hash collision (Josef Bacik) 
[Orabug: 17790692]
- Btrfs: fix transid verify errors when recovering log tree (Josef 
Bacik) [Orabug: 17790692]
- Btrfs: add the missing mutex unlock in write_all_supers() (Stefan 
Behrens) [Orabug: 17790692]
- Revert "Btrfs: rework the overcommit logic to be based on the total 
size" (Josef Bacik) [Orabug: 17790692]
- Btrfs: replay dir_index items before other items (Josef Bacik) 
[Orabug: 17790692]
- Btrfs: actually log directory we are fsync()'ing (Josef Bacik) 
[Orabug: 17790692]
- Btrfs: do not add replace target to the alloc_list (Ilya Dryomov) 
[Orabug: 17790692]
- Btrfs: stop refusing the relocation of chunk 0 (Ilya Dryomov) [Orabug: 
- Btrfs: change how we queue blocks for backref checking (Josef Bacik) 
[Orabug: 17790692]
- Btrfs: set lockdep class before locking new extent buffer (Josef 
Bacik) [Orabug: 17790692]
- Btrfs: release both paths before logging dir/changed extents (Josef 
Bacik) [Orabug: 17790692]
- Btrfs: make sure the backref walker catches all refs to our extent 
(Josef Bacik) [Orabug: 17790692]
- Btrfs: fix backref walking when we hit a compressed extent (Josef 
Bacik) [Orabug: 17790692]
- Btrfs: do not offset physical if we're compressed (Josef Bacik) 
[Orabug: 17790692]
- Btrfs: fix extent buffer leak after backref walking (Liu Bo) [Orabug: 
- Btrfs: fix wrong write offset when replacing a device (Stefan Behrens) 
[Orabug: 17790692]
- drivers/char/random.c: fix priming of last_data (Jarod Wilson) 
[Orabug: 17776875]
- RDMA CM: Add reason code for IB_CM_REJ_CONSUMER_DEFINED (Bang Nguyen) 
[Orabug: 17484686]
- net: Update the sysctl permissions handler to test effective uid/gid 
(Eric W. Biederman) [Orabug: 17433948]
- be2net: pass if_id for v1 and V2 versions of TX_CREATE cmd (asundhara 
Volam) [Orabug: 17583192]
- dtrace: remove functionality of dtrace_os_exit() as deprecated (Kris 
Van Hees) [Orabug: 17717401]
- dtrace: fix mutex_owned() implementation (Kris Van Hees) [Orabug: 
- dtrace: new cyclic implementation (Kris Van Hees) [Orabug: 17553446]
- xen-netfront: convert to GRO API (Wei Liu) [Orabug: 17759432]
- xen-netfront: pull on receive skb may need to happen earlier (Jan 
Beulich) [Orabug: 17759399]
- xen-netback: enable IPv6 TCP GSO to the guest (Paul Durrant)
- xen-netback: handle IPv6 TCP GSO packets from the guest (Paul Durrant)
- xen-netback: Unconditionally set NETIF_F_RXCSUM (Paul Durrant)
- xen-netback: add support for IPv6 checksum offload from guest (Paul 
- xen-netback: add support for IPv6 checksum offload to guest (Paul Durrant)
- xen-netback: transition to CLOSED when removing a VIF (David Vrabel)
- xen-netback: Handle backend state transitions in a more robust way 
(Paul Durrant)
- xen-netback: Don't destroy the netdev until the vif is shut down (Paul 
- xen-netback: count number required slots for an skb more carefully 
(David Vrabel)
- xen-netback: fix possible format string flaw (Kees Cook)
- xen-netback: rename functions (Wei Liu)
- xen-netback: switch to NAPI + kthread 1:1 model (Wei Liu)
- xen-netback: remove page tracking facility (Wei Liu)
- core/xen: Use _PAGE_IOMAP when mmaping PCI BARs. (Konrad Rzeszutek 
Wilk) [Orabug: 17753790]
- xen/p2m: Export set_phys_to_machine. (Konrad Rzeszutek Wilk)
- Update lpfc version for driver release (Gairy Grannum) 
[Orabug: 17746696]
- scsi: rename random32() to prandom_u32() (Akinobu Mita) [Orabug: 17746696]
- lseek(fd, n, SEEK_END) does *not* go to eof - n (Al Viro) [Orabug: 
- [SCSI] lpfc: remove unnecessary read of PCI_CAP_ID_EXP (Jon Mason) 
[Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed not processing task management IOCB response 
status (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed spinlock hang. (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed invalid fcp_rsp length fir FCP_ICMND (James 
Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed invalid Total_Data_Placed value received for 
els and ct command responses (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed invalid fcp_rsp length fir FCP_ICMND (James 
Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed invalid mailbox timeouts (James Smart) 
[Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fixed spinlock inversion problem. (James Smart) 
[Orabug: 17746696]
- [SCSI] lpfc 8.3.43: Fix crash after xri limit is reached. (James 
Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed issue of task management commands having a 
fixed timeout (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed inconsistent spin lock usage. (James Smart) 
[Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fix driver's abort loop functionality to skip IOs 
already getting aborted (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed failure to allocate SCSI buffer on PPC64 
platform for SLI4 devices (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fix WARN_ON when driver unloads (James Smart) 
[Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fix crash on driver load due to cpu affinity logic 
(James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Avoided making pci bar ioremap call during 
dual-chute WQ/RQ pci bar selection (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed driver iocbq structure's iocb_flag field 
running out of space (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fix crash on driver load due to cpu affinity logic 
(James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed logging format of setting driver sysfs 
attributes hard to interpret (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed back to back RSCNs discovery failure. (James 
Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed race condition between BSG I/O dispatch and 
timeout handling (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed function mode field defined too small for 
not recognizing dual-chute mode (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Back out data count,(residual fcfi_parm) fix for 
bad target. (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed mailbox memory leak. (James Smart) [Orabug: 
- [SCSI] lpfc 8.3.42: Fix random errors using first burst (James Smart) 
[Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed not able to log informational messages at 
early stage of driver init time (James Smart) [Orabug: 17746696]
- [SCSI] lpfc 8.3.42: Fixed using unsafe linked list macro for walking 
and deleting linked list (James Smart) [Orabug: 17746696]
- ext4: no need to remove extent if len is 0 in ext4_es_remove_extent() 
(Eryu Guan) [Orabug: 17721117]
- config: add OVN (xsigo) config options (Ajaykumar Hotchandani) 
[Orabug: 17705097]
- OVN: Kconfig and Makefile updates (Ajaykumar Hotchandani) [Orabug: 
- OVN: Merge OVN release 7565 in UEK3 (Ankit Darsi) [Orabug: 17705097]
- xfs: manually calculate ndquots if mp->m_quotainfo is not initialized 
(Guangyu Sun) [Orabug: 17544192]
- PCI: Update NumVFs register when disabling SR-IOV (Yijing Wang) 
[Orabug: 17633548]
- mlx4_en: fix tear down warning on Ubuntu 12.04 (Noa Osherovich) 
[Orabug: 17713165]
- RDS: Port of UEK2 changes between 400.107.0 and 400.124.1 (Venkat 
Venkatsubra) [Orabug: 17713165]
- iser: panic on iser login/logout (Shamir Rabinovitch) [Orabug: 16313854]
- rdma_cm: add ability to control the QP timeout value (Saeed Mahameed) 
[Orabug: 17713165]
- rdma_cm: adding the RDMA_CM_EVENT_ALT_PATH_LOADED event (Dotan Barak) 
[Orabug: 17713165]
- rdma_cm: rdma_create_qp not setting up client context correctly (Saeed 
Mahameed) [Orabug: 17713165]
- mlx4_en: Align timestamping support with upstream kernel (Saeed 
Mahameed) [Orabug: 17713165]
- IB: Introduce Shared PD support (Saeed Mahameed) [Orabug: 17713165]
- ib_core: IB providers/ULPs Relaxed (User) FMR set to NULL (Saeed 
Mahameed) [Orabug: 17713165]
- ib_core: Enable usermode FMR (Saeed Mahameed) [Orabug: 17713165]
- rmda_cm: add APM support to rdma_cm. (rdma_enable_apm) (Saeed 
Mahameed) [Orabug: 17713165]
- mlx4_en: update driver version to 2.1.8 (Eugenia Emantayev) [Orabug: 
- mlx4_en: update driver version to 2.1.7 (Eugenia Emantayev) [Orabug: 
- mlx4_en: Fix LLS after rx path overhaul (Amir Vadai) [Orabug: 17713165]
- mlx4_en: Update busy poll (LLS) to new API (Amir Vadai) [Orabug: 17713165]
- mlx5: ensure proper synchronization accessing memory (Eli Cohen) 
[Orabug: 17713165]
- ib/ipoib: add lock to ipoib_neigh_dtor function (Tal Alon) [Orabug: 
- IB/iser: Fix redundant pointer check in dealloc flow (Roi Dayan) 
[Orabug: 17713165]
- IB/iser: Fix possible memory leak in iser_create_frwr_pool (Roi Dayan) 
[Orabug: 17713165]
- mlx5_ib: Change log_max_qp in profile 2 (Moshe Lazer) [Orabug: 17713165]
- ib/ipoib: 1.add error mesage when qp creation failed 	  2.add error 
number to print when destroy qp (Tal Alon) [Orabug: 17713165]
- net/mlx4: do not use DEV_ID to find max supported VLs (Moni Shoua) 
[Orabug: 17713165]
- mlx5: Fix alignment of reg umr gather buffers (Eli Cohen) [Orabug: 
- Add support for using mlx4_multicast_attach on RAW QP with unicast 
(Shani Michaelli) [Orabug: 17713165]
- mlx4_en: fix typo in ETS capability (Eugenia Emantayev) [Orabug: 17713165]
- ib/ipoib: force skb clean after timeout in ipoib_cm_tx_destroy (Erez 
Shitrit) [Orabug: 17713165]
- mlx4: avoid hard lockup in resize CQ (Eli Cohen) [Orabug: 17713165]
- mlx5_core: support PRM changes in MANAGE_PAGES and QUERY_PAGES 
commands (Moshe Lazer) [Orabug: 17713165]
- mlx4_core: fix no valid MAC entry warning (Eugenia Emantayev) [Orabug: 
- eth_ipoib: fix compilation warnning. (Erez Shitrit) [Orabug: 17713165]
- mlx5: handle failure in async create mkey (Eli Cohen) [Orabug: 17713165]
- eth_ipoib:decrease print messages. (Erez Shitrit) [Orabug: 17713165]
- mlx4_en: replace ETH_SCHED capability flag by ETS_CFG (Eugenia 
Emantayev) [Orabug: 17713165]
- mlx4_core: add a label to allow addition of a new steering entry (Noa 
Osherovich) [Orabug: 17713165]
- mlx4_ib: Add RAW ETH support which was abandoned (Shani Michaelli) 
[Orabug: 17713165]
- mlx4_en: don't alloc coalescing change if port is down (Eugenia 
Emantayev) [Orabug: 17713165]
- mlx4_core: fix, lost comm channel events (Saeed Mahameed) [Orabug: 
- mlx5: fix cleanup flow when DMA mapping fails (Eli Cohen) [Orabug: 
- mlx5_ib: Improve description for prof_sel module param (Moshe Lazer) 
[Orabug: 17713165]
- mlx5_ib: fix srq free in destroy qp (Moshe Lazer) [Orabug: 17713165]
- mlx5: fix broken enforcement on send queue size (Eli Cohen) [Orabug: 
- mlx5: Fix error code translation from firmware to driver (Eli Cohen) 
[Orabug: 17713165]
- mlx5: fix opt param mask according to PRM definitions (Eli Cohen) 
[Orabug: 17713165]
- mlx5: fix opt param mask for sqerr to rts transition (Eli Cohen) 
[Orabug: 17713165]
- mlx4: add DMFS to dump device capabilities (Eugenia Emantayev) 
[Orabug: 17713165]
- ib/ipoib: synchronaize neigh deletion while uninitializing device (Tal 
Alon) [Orabug: 17713165]
- mlx4_en: Handle unassigned VF MAC address correctly (Eugenia 
Emantayev) [Orabug: 17713165]
- mlx4_core: Don't give VFs MAC addresses which are derived from the PF 
MAC (Eugenia Emantayev) [Orabug: 17713165]
- net/mlx4: start with 8 VLs for ConnectX3-Pro (Moni Shoua) [Orabug: 
- Revert "mlx5: add git version to mlx5_ib" (Vladimir Sokolovsky) 
[Orabug: 17713165]
- IB/mlx5: fix eq names to display nicely in /proc/interrupts (Sagi 
Grimberg) [Orabug: 17713165]
- mlx5_ib: On destroy qp remove pending cqe only by their qpn (Moshe 
Lazer) [Orabug: 17713165]
- mlx5: add git version to mlx5_ib (Eli Cohen) [Orabug: 17713165]
- mlx5: simplify mlx5_ib_destroy_srq (Eli Cohen) [Orabug: 17713165]
- mlx5: disable atomic operations (Eli Cohen) [Orabug: 17713165]
- ib/ipoib: update bc object ufter pkey value was changed in index 0 
(Erez Shitrit) [Orabug: 17713165]
- mlx4_core: Slaves must ignore module param enable_64b_cqe_eqe (Jack 
Morgenstein) [Orabug: 17713165]
- eth_ipoib: netdev_rx_handler_unregister should be called out of 
locking (Erez Shitrit) [Orabug: 17713165]
- eth_ipoib: prepare the right space for sscanf (Erez Shitrit) [Orabug: 
- mlx4_en: enable DCB and ETS only when FW supports (Eugenia Emantayev) 
[Orabug: 17713165]
- ib_core: XRC reference counting handling (Yishai Hadas) [Orabug: 17713165]
- mlx4_core: changes to gain compatibility with upstream mlx4 drivers 
(Jack Morgenstein) [Orabug: 17713165]
- eth_ipoib: Add support for broadcast packet. (Erez Shitrit) [Orabug: 
- mlx5: return -EFAULT instead of -EPERM (Dan Carpenter) [Orabug: 17713165]
- mlx5: qp: variable may be used uninitialized (Eli Cohen) [Orabug: 
- IB/iser: Fix error flow in alloc_frwr_pool (Sagi Grimberg) [Orabug: 
- mlx4_en: disable global flow control when PFC enabled (Eugenia 
Emantayev) [Orabug: 17713165]
- ib_core: XRC sync event on target QP (Yishai Hadas) [Orabug: 17713165]
- mlx4_vnic: remove mlx4_vnic_helper module (Saeed Mahameed) [Orabug: 
- mlx5: fix layout of struct mlx5_init_seg (Eli Cohen) [Orabug: 17713165]
- mlx5: Fix overflow check in IB_WR_FAST_REG_MR (Eli Cohen) [Orabug: 
- SRIOV: fix XRC recognition (Yishai Hadas) [Orabug: 17713165]
- mlx5: add protection against ghost command completions (Eli Cohen) 
[Orabug: 17713165]
- ib/ipoib: reorder devices which call to dev_uninit, dev_stop and 
dev_uninit must keep the same order of devices call (Tal Alon) [Orabug: 
- mlx4_core: do not allow WoL command on slave (Eugenia Emantayev) 
[Orabug: 17713165]
- mlx5: remove histogram profiling code on create mkey (Eli Cohen) 
[Orabug: 17713165]
- mlx5: modify spinlock types in cmdif flow (Eli Cohen) [Orabug: 17713165]
- mlx5_ib: fix mr_perf array overflow (Moshe Lazer) [Orabug: 17713165]
- mlx5: fix spin lock usage in mr callback (Moshe Lazer) [Orabug: 17713165]
- Revert "mlx5: fix 2 issues in mr callback usage" (Moshe Lazer) 
[Orabug: 17713165]
- mlx4_en: update driver version to 2.1.6 (Eugenia Emantayev) [Orabug: 
- IB/iser: fix rdma reg resources cleanup (Sagi Grimberg) [Orabug: 17713165]
- IB/iser: rename goto tag with proper name (Sagi Grimberg) [Orabug: 
- IB/iser: don't use iser_err for info messages (Sagi Grimberg) [Orabug: 
- IB/iser: dump bounce buffer only if debug level > 0 (Sagi Grimberg) 
[Orabug: 17713165]
- IB/iser: remove redundant check if fmr pool is not NULL (Sagi 
Grimberg) [Orabug: 17713165]
- IB/iser: Fix memory registration model selection (Sagi Grimberg) 
[Orabug: 17713165]
- mlx5: fix 2 issues in mr callback usage (Moshe Lazer) [Orabug: 17713165]
- Revert "ib/ipoib: separate receive queue size module parameter for CM 
and UD modes set CM default queue size to 64" (Tal Alon) [Orabug: 17713165]
- mlx4/core - add imidiate activate for VGT->VST->VGT (Rony Efraim) 
[Orabug: 17713165]
- mlx4_en: remove 2QPs feature since it causes TX timeout (Eugenia 
Emantayev) [Orabug: 17713165]
- mlx4_core: fix kernel panic when getting operation request from FW 
before MCG table is initialized (Eugenia Emantayev) [Orabug: 17713165]
- mlx5_ib: replace find_last_bit with local implementation (Moshe Lazer) 
[Orabug: 17713165]
- mlx5: multithreaded create mr with statistics (Eli Cohen) [Orabug: 
- IB/mlx4: fix compilaiton warning (Matan Barak) [Orabug: 17713165]
- ib/ipoib: separate receive queue size module parameter for CM and UD 
modes set CM default queue size to 64 (Tal Alon) [Orabug: 17713165]
- ib/ipoib: enable msb bit in pkey-change-event handler (Erez Shitrit) 
[Orabug: 17713165]
- eth_ipoib: live migration sync before zero the slave mac (Erez 
Shitrit) [Orabug: 17713165]
- IB/iser: Introduce fast memory registration model (Sagi Grimberg) 
[Orabug: 17713165]
- IB/iser: make fmr pool and page_vec to union in ib_conn (Sagi 
Grimberg) [Orabug: 17713165]
- IB/iser: export bounce buffer code to a routine and generalize 
iser_sg_to_page_vec (Sagi Grimberg) [Orabug: 17713165]
- IB/iser: make rdma routines function handles per device (Sagi 
Grimberg) [Orabug: 17713165]
- mlx4_ib(rocee): Fix gid table population when using bonding over vlan 
(Matan Barak) [Orabug: 17713165]
- IB/iser: Accept session->cmds_max from user space (Shlomo Pongratz) 
[Orabug: 17713165]
- IB/iser: Restructure allocation/deallocation of connection resources 
(Shlomo Pongratz) [Orabug: 17713165]
- IB/iser: Use proper debug level value for info prints (Or Gerlitz) 
[Orabug: 17713165]
- ib_ipoib: fix Oops in ipoib_ib_dev_open error flow (Jack Morgenstein) 
[Orabug: 17713165]
- IB/mlx4: Allow IB flow steering only when capability bit is set (Matan 
Barak) [Orabug: 17713165]
- eth_ipoib: ignore error message when ip 0 tried to be added. (Erez 
Shitrit) [Orabug: 17713165]
- mlx5: keep polling to reclaim pages while any returned (Eli Cohen) 
[Orabug: 17713165]
- mlx4_core: Fix GEN_EQE accessing uninitialixed mutex (Jack 
Morgenstein) [Orabug: 17713165]
- mlx4_en: alloc RX buffers always with GFP_ATOMIC (Eugenia Emantayev) 
[Orabug: 17713165]
- mlx5: avoid async events on invalid port number (Eli Cohen) [Orabug: 
- mlx5: decrease memory consumption of mr caches (Eli Cohen) [Orabug: 
- ib/ipoib: remove trace over debug kernel when false alarm over 
read_lock (Erez Shitrit) [Orabug: 17713165]
- mlx5_core: resolve race condition in mlx5_cmd_comp_handler (Moshe 
Lazer) [Orabug: 17713165]
- ib/ipoib: unlock dev_start_xmit() on ipoib_cm_rep_handler() (Tal Alon) 
[Orabug: 17713165]
- ib/ipoib: on start xmit at cm mode when a cm neigh oper is down the 
skb doesn't send so it must free (Tal Alon) [Orabug: 17713165]
- ulp/ipoib: IB_QP_CREATE_NETIF_QP flag should be set for IPoIB qp only 
if FS is supoprted (Matan Barak) [Orabug: 17713165]
- mlx4/net: couldn't add flow steering rules for all vlans (Matan Barak) 
[Orabug: 17713165]
- eth_ipoib: after dev_queue_xmit the skb should not be freed. (Erez 
Shitrit) [Orabug: 17713165]
- eth_ipoib: decrease debug level for few messages (Erez Shitrit) 
[Orabug: 17713165]
- mlx4_ib: Use default pkey when creating tunnel QPs (Jack Morgenstein) 
[Orabug: 17713165]
- ib_core: create QP1 using the pkey index which contains the default 
pkey (Jack Morgenstein) [Orabug: 17713165]
- eth_ipoib: update parent hw address only when was zero. (Erez Shitrit) 
[Orabug: 17713165]
- mlx4_ib: clear comp mask bit of deleted GUID entries after deletion 
(Saeed Mahameed) [Orabug: 17713165]
- ib/ipoib: fix illegal locking on ipoib_cm_rep_handler (Tal Alon) 
[Orabug: 17713165]
- eth_ipoib: When releasing slave no trafic should be on the air (Erez 
Shitrit) [Orabug: 17713165]
- eth_ipoib: Use RCU api in slave's list (Erez Shitrit) [Orabug: 17713165]
- mlx4_core: use mcg mutex after initialization only (Eugenia Emantayev) 
[Orabug: 17713165]
- mlx5_core: remove command signature (Moshe Lazer) [Orabug: 17713165]
- mlx4_en: Fix CORE_CLOCK_MASK definition (Gideon Naim) [Orabug: 17713165]
- mlx4_en: Fix the return value when setting an invalid MTU size (Gideon 
Naim) [Orabug: 17713165]
- mlx4_en: use GFP_KERNEL allocations in initialization path (Eugenia 
Emantayev) [Orabug: 17713165]
- eth_ipoib: pv interface should not track over ip 0 (Erez Shitrit) 
[Orabug: 17713165]
- mlx4_en: prevent SKB from being freed twice during loopback test 
(Gideon Naim) [Orabug: 17713165]
- IB/[core,mlx4]: Eliminate flow_context void pointer from struct 
ib_flow (Matan Barak) [Orabug: 17713165]
- IB/uverbs: Eliminated struct ib_kern_flow which isn't used, needs f 
(Matan Barak) [Orabug: 17713165]
- mlx5_ib: fix memory leak in mlx5_ib_create_srq (Moshe Lazer) [Orabug: 
- mlx5_ib: flush cache workqueue before destroying it (Moshe Lazer) 
[Orabug: 17713165]
- IB/core,mlx4: Remove cpu_to_be conversion in DMFS user verbs flow 
(Matan Barak) [Orabug: 17713165]
- mlx4_ib: vlan removal issues (Yishai Hadas) [Orabug: 17713165]
- mlx4_en: update driver version to 2.1.5 (Eugenia Emantayev) [Orabug: 
- ib/ipoib: reduce warn message when not needed (Erez Shitrit) [Orabug: 
- eth_ipoib: sync access to emac_ip_info data structure. (Erez Shitrit) 
[Orabug: 17713165]
- mlx4_en: Copy new mac addr to field dev_addr under mutex_lock (Shani 
Michaelli) [Orabug: 17713165]
- mlx4_en: Copy new mac addr to field prev_mac also when port is down 
(Shani Michaelli) [Orabug: 17713165]
- ib/ipoib: ipoib_cm_rep_handler lock skb queue while dequeue before 
xmit (Tal Alon) [Orabug: 17713165]
- ib/ipoib: limit the max number of TX queues to 16 (Tal Alon) [Orabug: 
- mlx4_en: don't allow cq moderation when port is down (Eugenia 
Emantayev) [Orabug: 17713165]
- Revert "rmda_cm: add APM support to rdma_cm. (rdma_enable_apm)" 
(Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "rdma_cm: rdma_create_qp not setting up client context 
correctly" (Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "rdma_cm: add ability to control the QP timeout value" 
(Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "RDS: Port of UEK2 changes between 400.107.0 and 400.124.1" 
(Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "iser: panic on iser login/logout" (Ajaykumar Hotchandani) 
[Orabug: 17713165]
- Revert "rdma_cm: adding the RDMA_CM_EVENT_ALT_PATH_LOADED event" 
(Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "ib_core: Enable usermode FMR" (Ajaykumar Hotchandani) [Orabug: 
- Revert "ib_core: IB providers/ULPs Relaxed (User) FMR set to NULL" 
(Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "IB: Introduce Shared PD support" (Ajaykumar Hotchandani) 
[Orabug: 17713165]
- Revert "mlx4_ib: clear comp mask bit of deleted GUID entries after 
deletion" (Ajaykumar Hotchandani) [Orabug: 17713165]
- Revert "mlx4_en: Align timestamping support with upstream kernel" 
(Ajaykumar Hotchandani) [Orabug: 17713165]

- sparc: tsb must be flushed before tlb (Dave Kleikamp) [Orabug: 17724439]
- config: update config for sparc (Allen Pais) [Orabug: 17715697]
- dm mpath: disable WRITE SAME if it fails (Mike Snitzer) [Orabug: 17617256]
- Btrfs: dir_inode_operations should use btrfs_update_time also (Guangyu 
Sun) [Orabug: 17437471]
- xfs: fix sgid inheritance for subdirectories inheriting default acls 
[V3] (Carlos Maiolino) [Orabug: 17354234]
- crypto: xor - Check for osxsave as well as avx in crypto/xor (John 
Haxby) [Orabug: 17066724]
- fs: protect write with sb_start/end_write in generic_file_write_iter 
(Guangyu Sun) [Orabug: 17487738]
- bonding: If IP route look-up to send an ARP fails, mark in bonding 
structure as no ARP sent. (Rama Nichanamatlu) [Orabug: 17557056]
- dm snapshot: fix data corruption (Mikulas Patocka) [Orabug: 17617582] 
- Audit: do not print error when LSMs disabled (Eric Paris) [Orabug: 
- oracleasm: Compat changes for 3.5 (Dwight Engen)
- megaraid_sas: addded support for big endian architecture (Martin K. 
- ext4: introduce reserved space (Lukas Czerner)

- dtrace: Use tasklet_hrtimer_*() instead of hrtimer_*() for cyclics 
(Kris Van Hees) [Orabug: 17553446]

- Obsolete the old provider headers package. [Orabug: 18061595]

- Change name of provider headers package, to avoid conflicts on yum update.
   [Orabug: 18061595]

- Fix 'vtimestamp' implementation.
   [Orabug: 17741477]
- Support SDT probes points in kernel modules.
   [Orabug: 17851716]

More information about the El-errata mailing list