[El-errata] ELSA-2020-5715 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update (aarch64)
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jun 9 14:53:15 PDT 2020
Oracle Linux Security Advisory ELSA-2020-5715
http://linux.oracle.com/errata/ELSA-2020-5715.html
The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:
aarch64:
kernel-uek-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-debug-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-debug-devel-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-devel-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-tools-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-tools-libs-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-tools-libs-devel-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
perf-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
python-perf-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
kernel-uek-headers-4.14.35-1902.303.4.1.el7uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-1902.303.4.1.el7uek.src.rpm
Description of changes:
[4.14.35-1902.303.4.1.el7uek]
- x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross) [Orabug: 31422209] {CVE-2020-0543}
- x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross) [Orabug: 31422209] {CVE-2020-0543}
- x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross) [Orabug: 31422209] {CVE-2020-0543}
- x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross) [Orabug: 31422209] {CVE-2020-0543}
[4.14.35-1902.303.4.el7uek]
- net/rds: suppress memory allocation failure reports (Manjunath Patil) [Orabug: 31422157]
- rds: Do not cancel RDMAs that have been posted to the HCA (Håkon Bugge) [Orabug: 31422151]
- rds: Introduce rds_conn_to_path helper (Håkon Bugge) [Orabug: 31422151]
- xen/manage: enable C_A_D to force reboot (Dongli Zhang) [Orabug: 31422147]
[4.14.35-1902.303.3.el7uek]
- scsi: target: fix hang when multiple threads try to destroy the same iscsi session (Maurizio Lombardi) [Orabug: 31374726]
- scsi: target: remove boilerplate code (Maurizio Lombardi) [Orabug: 31374726]
- KSPLICE: mips: clear the stack before going in the freezer. (Quentin Casasnovas) [Orabug: 31352999]
- KSPLICE: mips: signals the freezer when we're coming from the entry code. (Quentin Casasnovas) [Orabug: 31352999]
- libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang) [Orabug: 31351306] {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897}
- KVM: SVM: Fix potential memory leak in svm_cpu_init() (Miaohe Lin) [Orabug: 31350457] {CVE-2020-12768}
- Fix up usage of cfg_enable_fc4_TYPE for backport to UEK5 (Dick Kennedy) [Orabug: 31344936]
- scsi: lpfc: Fix unexpected error messages during RSCN handling (James Smart) [Orabug: 31344936]
- scsi: lpfc: Fix devices that don't return after devloss followed by rediscovery (James Smart) [Orabug: 31344936]
- scsi: lpfc: Fix port relogin failure due to GID_FT interaction (James Smart) [Orabug: 31344936]
- scsi: lpfc: Fix discovery failures when target device connectivity bounces (James Smart) [Orabug: 31344936]
- NFSv4.0: Remove transport protocol name from non-UCS client ID (Chuck Lever) [Orabug: 31357279]
- NFSv4.0: Remove cl_ipaddr from non-UCS client ID (Chuck Lever) [Orabug: 31357279]
- slcan: not call free_netdev before rtnl_unlock in slcan_open (Oliver Hartkopp) [Orabug: 31314977]
- can, slip: Protect tty->disc_data in write_wakeup and close with RCU (Richard Palethorpe) [Orabug: 31314977]
- can: slcan: Fix use-after-free Read in slcan_open (Jouni Hogander) [Orabug: 31314977]
- slcan: Fix memory leak in error path (Jouni Hogander) [Orabug: 31314977]
- uek-rpm: aarch64 make olddefconfig after inline spinlocks (Tom Saeger) [Orabug: 31314977]
- config-aarch64: enable CONFIG_MPLS_IPTUNNEL and CONFIG_BPF_JIT_ALWAYS_ON (Thomas Tai) [Orabug: 31314977]
- config-aarch64: enable ISCSI_IBFT (Thomas Tai) [Orabug: 31314977]
- iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND (Thomas Tai) [Orabug: 31314977]
- config-aarch64: change CONFIG_HZ and CONFIG_FRAME_WARN (Thomas Tai) [Orabug: 31314977]
- iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE (Will Deacon) [Orabug: 31314977]
- iommu/arm-smmu-v3: Prevent any devices access to memory without registration (Zhen Lei) [Orabug: 31314977]
- iommu/arm-smmu-v3: Disable default event queue logging (Rick Farrington) [Orabug: 31314977]
- iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel (Will Deacon) [Orabug: 31314977]
- iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel (Will Deacon) [Orabug: 31314977]
- iommu/arm-smmu-v3: Force 32 byte command queue memory reads on SMMU for 96xx and 95xx silicons (Geetha sowjanya) [Orabug: 31314977]
- iommu/arm-smmu-v3: Force 32 byte command queue memory reads on CN96XX SMMU (Linu Cherian) [Orabug: 31314977]
- iommu/arm-smmu-v3: Use burst-polling for sync completion (Robin Murphy) [Orabug: 31314977]
- iommu/arm-smmu-v3: Consolidate identical timeouts (Will Deacon) [Orabug: 31314977]
- iommu/arm-smmu-v3: Split arm_smmu_cmdq_issue_sync in half (Will Deacon) [Orabug: 31314977]
- iommu/arm-smmu-v3: Use CMD_SYNC completion MSI (Robin Murphy) [Orabug: 31314977]
- iommu/arm-smmu-v3: Forget about cmdq-sync interrupt (Robin Murphy) [Orabug: 31314977]
- iommu/arm-smmu-v3: Specialise CMD_SYNC handling (Robin Murphy) [Orabug: 31314977]
- iommu/arm-smmu-v3: Correct COHACC override message (Robin Murphy) [Orabug: 31314977]
- iommu/arm-smmu-v3: Avoid ILLEGAL setting of STE.S1STALLD and CD.S (Yisheng Xie) [Orabug: 31314977]
- iommu/arm-smmu-v3: Ensure we sync STE when only changing config field (Will Deacon) [Orabug: 31314977]
- iommu/arm-smmu: Remove ACPICA workarounds (Robin Murphy) [Orabug: 31314977]
- Revert "iommu/arm-smmu-v3: Force 32 byte command queue memory reads on CN96XX SMMU" (Eric Snowberg) [Orabug: 31314977]
- Revert "iommu/arm-smmu-v3: Force 32 byte command queue memory reads on SMMU for 96xx and 95xx silicons" (Eric Snowberg) [Orabug: 31314977]
- Revert "iommu/arm-smmu-v3: Abort all transactions if SMMU is enabled in kdump kernel" (Eric Snowberg) [Orabug: 31314977]
- Revert "iommu/arm-smmu-v3: Don't disable SMMU in kdump kernel" (Eric Snowberg) [Orabug: 31314977]
- Revert "iommu/arm-smmu-v3: Disable default event queue logging" (Eric Snowberg) [Orabug: 31314977]
- Revert "iommu/arm-smmu-v3: Prevent any devices access to memory without registration" (Eric Snowberg) [Orabug: 31314977]
- lib/list_sort: optimize number of calls to comparison function (George Spelvin) [Orabug: 31314977]
- lib/list_sort: simplify and remove MAX_LIST_LENGTH_BITS (George Spelvin) [Orabug: 31314977]
- lib/sort: avoid indirect calls to built-in swap (George Spelvin) [Orabug: 31314977]
- lib/sort: use more efficient bottom-up heapsort variant (George Spelvin) [Orabug: 31314977]
- lib/sort: make swap functions more generic (George Spelvin) [Orabug: 31314977]
- KVM: arm/arm64: Only skip MMIO insn once (Andrew Jones) [Orabug: 31314977]
- arm64: topology: divorce MC scheduling domain from core_siblings (Jeremy Linton) [Orabug: 31314977]
- ACPI: Add PPTT to injectable table list (Jeremy Linton) [Orabug: 31314977]
- arm64: topology: enable ACPI/PPTT based CPU topology (Jeremy Linton) [Orabug: 31314977]
- arm64: topology: rename cluster_id (Jeremy Linton) [Orabug: 31314977]
- drivers: base cacheinfo: Add support for ACPI based firmware tables (Jeremy Linton) [Orabug: 31314977]
- ACPI: Enable PPTT support on ARM64 (Jeremy Linton) [Orabug: 31314977]
- ACPI/PPTT: Add Processor Properties Topology Table parsing (Jeremy Linton) [Orabug: 31314977]
- arm64/acpi: Create arch specific cpu to acpi id helper (Jeremy Linton) [Orabug: 31314977]
- cacheinfo: rename of_node to fw_token (Jeremy Linton) [Orabug: 31314977]
- drivers: base: cacheinfo: setup DT cache properties early (Jeremy Linton) [Orabug: 31314977]
- drivers: base: cacheinfo: move cache_setup_of_node() (Jeremy Linton) [Orabug: 31314977]
- ata: Disable AHCI ALPM feature for Ampere Computing eMAG SATA (Suman Tripathi) [Orabug: 31314977]
- arm64: locking: Replace ticket lock implementation with qspinlock (Will Deacon) [Orabug: 31314977]
- arm64: kconfig: Ensure spinlock fastpaths are inlined if !PREEMPT (Will Deacon) [Orabug: 31314977]
- arm64: barrier: Implement smp_cond_load_relaxed (Will Deacon) [Orabug: 31314977]
- PM / core: fix deferred probe breaking suspend resume order (Feng Kan) [Orabug: 31314977]
- netdev, octeon3-ethernet: increase num_packet_buffers to 4096 (Dave Kleikamp) [Orabug: 31351445]
- RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna) [Orabug: 31127373]
- uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy) [Orabug: 31358100]
[4.14.35-1902.303.2.el7uek]
- KVM: x86: degrade WARN to pr_warn_ratelimited (Paolo Bonzini) [Orabug: 31333678]
- kvm: x86/vmx: Use kzalloc for cached_vmcs12 (Tom Roeder) [Orabug: 31333678]
- KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall (Liran Alon) [Orabug: 31333678]
- net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (Navid Emamdoost) [Orabug: 31301340] {CVE-2019-19045}
- mdio_bus: Fix use-after-free on device_register fails (YueHaibing) [Orabug: 31222291] {CVE-2019-12819}
- scsi: qla2xxx: Fix fabric scan hang (Quinn Tran) [Orabug: 31331073]
- scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (Himanshu Madhani) [Orabug: 31331073]
- nvme: Fix device removal of qla2xxx.ko causing sysfs_warn_dup() warning. (John Donnelly) [Orabug: 31322530]
- USB: core: Fix races in character device registration and deregistraion (Alan Stern) [Orabug: 31317666] {CVE-2019-19537}
- rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge) [Orabug: 31302707]
- ocfs2: fix panic due to ocfs2_wq is null (Yi Li) [Orabug: 31117439]
- mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified (Yang Shi) [Orabug: 30969300]
- NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (Robert Milkowski) [Orabug: 30594625]
- NFSv4: try lease recovery on NFS4ERR_EXPIRED (Robert Milkowski) [Orabug: 30594625]
- KVM: x86: clear SMM flags before loading state while leaving SMM (Sean Christopherson) [Orabug: 31317296]
- KVM: x86: Open code kvm_set_hflags (Sean Christopherson) [Orabug: 31317296]
- KVM: x86: Load SMRAM in a single shot when leaving SMM (Sean Christopherson) [Orabug: 31317296]
- scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Michael Hernandez) [Orabug: 30846292]
- scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (Michael Hernandez) [Orabug: 30846292]
- scsi: qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: unregister ports after GPN_FT failure (Martin Wilck) [Orabug: 30846292]
- scsi: qla2xxx: don't use zero for FC4_PRIORITY_NVME (Martin Wilck) [Orabug: 30846292]
- scsi: qla2xxx: initialize fc4_type_priority (Martin Wilck) [Orabug: 30846292]
- scsi: qla2xxx: Fix a dma_pool_free() call (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove an include directive (Bart Van Assche) [Orabug: 30846292]
- qla2xxx: Update driver version to 10.01.00.21.76.2-k (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Fix device connect issues in P2P configuration (Arun Easi) [Orabug: 30846292]
- scsi: qla2xxx: Fix double scsi_done for abort path (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix SRB leak on switch command timeout (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Do command completion on abort timeout (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Improve logging for scan thread (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Capture FW dump on MPI heartbeat stop event (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Check for MB timeout while capturing ISP27/28xx FW dump (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Set remove flag for all VP (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Add error handling for PLOGI ELS passthrough (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Dual FCP-NVMe target port support (Michael Hernandez) [Orabug: 30846292]
- scsi: qla2xxx: remove redundant assignment to pointer host (Colin Ian King) [Orabug: 30846292]
- scsi: qla2xxx: fix NPIV tear down process (Martin Wilck) [Orabug: 30846292]
- scsi: qla2xxx: Fix partial flash write of MBI (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Daniel Wagner) [Orabug: 30846292]
- scsi: qla2xxx: Fix Nport ID display value (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix N2N link up fail (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix N2N link reset (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Optimize NPIV tear down process (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix stale mem access on driver unload (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Silence fwdump template message (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Fix stale session (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix stuck login session (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix driver reload for ISP82xx (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Fix flash read for Qlogic ISPs (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: fix spelling mistake "initializatin" -> "initialization" (Colin Ian King) [Orabug: 30846292]
- scsi: qla2xxx: Fix a recently introduced kernel warning (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: cleanup trace buffer initialization (Martin Wilck) [Orabug: 30846292]
- scsi: qla2xxx: qla2x00_alloc_fw_dump: set ha->eft (Martin Wilck) [Orabug: 30846292]
- scsi: qla2xxx: Fix a NULL pointer dereference (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Simplify qla24xx_async_abort_cmd() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove two superfluous if-tests (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Introduce qla2x00_els_dcmd2_free() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Inline the qla2x00_fcport_event_handler() function (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Report invalid mailbox status codes (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove superfluous sts_entry_* casts (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Let the compiler check the type of the SCSI command context pointer (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain if sp->done() is not called from the completion path (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make sure that aborted commands are freed (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Introduce qla2xxx_get_next_handle() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make qlt_handle_abts_completion() more robust (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Enable type checking for the SRB free and done callback functions (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Fix NVME cmd and LS cmd timeout race condition (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix a race condition between aborting and completing a SCSI command (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Introduce the function qla2xxx_init_sp() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Rework key encoding in qlt_find_host_by_d_id() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Set the responder mode if appropriate for ELS pass-through IOCBs (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make it explicit that ELS pass-through IOCBs use little endian (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Check secondary image if reading the primary image fails (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Change the return type of qla24xx_read_flash_data() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Introduce the be_id_t and le_id_t data types for FC src/dst IDs (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain if a soft reset fails (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use memcpy() and strlcpy() instead of strcpy() and strncpy() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Check the PCI info string output buffer size (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain if waiting for pending commands times out (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Declare fourth qla2x00_set_model_info() argument const (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Suppress multiple Coverity complaint about out-of-bounds accesses (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Suppress a Coveritiy complaint about integer overflow (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove unreachable code from qla83xx_idc_lock() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Simplify a debug statement (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove dead code (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain if parsing the version string fails (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain if a mailbox command times out (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use strlcpy() instead of strncpy() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Do not corrupt vha->plogi_ack_list (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Report the firmware status code if a mailbox command fails (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Simplify qla24xx_abort_sp_done() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove two superfluous tests (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove a superfluous pointer check (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Simplify qlt_lport_dump() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Reduce the number of casts in GID list code (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Verify locking assumptions at runtime (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Change data_dsd into an array (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Declare qla_tgt_cmd.cdb const (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Change the return type of qla2x00_update_ms_fdmi_iocb() into void (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Declare the fourth ql_dump_buffer() argument const (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove a superfluous forward declaration (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove an include directive from qla_mr.c (Bart Van Assche) [Orabug: 30846292]
header file from qla_dsd.h (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use tabs instead of spaces for indentation (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Improve Linux kernel coding style conformance (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Really fix qla2xxx_eh_abort() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make qla2x00_abort_srb() again decrease the sp reference count (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Allow NVMe IO to resume with short cable pull (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix hang in fcport delete path (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Use common update-firmware-options routine for ISP27xx+ (Andrew Vasquez) [Orabug: 30846292]
- scsi: qla2xxx: Fix NVMe port discovery after a short device port loss (Arun Easi) [Orabug: 30846292]
- scsi: qla2xxx: Correct error handling during initialization failures (Andrew Vasquez) [Orabug: 30846292]
- scsi: qla2xxx: Retry fabric Scan on IOCB queue full (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix premature timer expiration (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix Relogin to prevent modifying scan_state flag (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Reject EH_{abort|device_reset|target_request} (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Skip FW dump on LOOP initialization error (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Use Correct index for Q-Pair array (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix abort timeout race condition. (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Replace vmalloc + memset with vzalloc (Chuhong Yuan) [Orabug: 30846292]
- scsi: qla2xxx: Remove unnecessary null check (YueHaibing) [Orabug: 30846292]
- qla2xxx: remove SGI SN2 support (Christoph Hellwig) [Orabug: 30846292]
- scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure (Bill Kuzeja) [Orabug: 30846292]
- scsi: qla2xxx: move IO flush to the front of NVME rport unregistration (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: on session delete, return nvme cmd (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: remove double assignment in qla2x00_update_fcport (Enzo Matsumiya) [Orabug: 30846292]
- scsi: qla2xxx: Fix hardlockup in abort command during driver remove (Arun Easi) [Orabug: 30846292]
- scsi: qla2xxx: Fix kernel crash after disconnecting NVMe devices (Arun Easi) [Orabug: 30846292]
- scsi: qla2xxx: Fix NPIV handling for FC-NVMe (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Add cleanup for PCI EEH recovery (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix hardirq-unsafe locking (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain loudly about reference count underflow (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use __le64 instead of uint32_t[2] for sending DMA addresses to firmware (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Introduce the dsd32 and dsd64 data structures (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Check the size of firmware data structures at compile time (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Pass little-endian values to the firmware (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Fix race conditions in the code for aborting SCSI commands (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Split the __qla2x00_abort_all_cmds() function (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove a comment that refers to the SCSI host lock (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Change abort wait_loop from msleep to wait_event_timeout (Giridhar Malavali) [Orabug: 30846292]
- qla2xxx: Fix DMA Buffer free for DIF Bundling (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Use an on-stack completion in qla24xx_control_vp() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make qla24xx_async_abort_cmd() static (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove unnecessary locking from the target code (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove qla_tgt_cmd.released (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Complain if a command is released that is owned by the firmware (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: target: Fix offline port handling and host reset handling (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Simplify qlt_send_term_imm_notif() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Avoid that qla2x00_mem_free() crashes if called twice (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make qla2x00_mem_free() easier to verify (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Increase the size of the mailbox arrays from 4 to 8 (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Log the status code if a firmware command fails (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Avoid that Coverity complains about dereferencing a NULL rport pointer (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove the fcport test from qla_nvme_abort_work() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Uninline qla2x00_init_timer() (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Move qla2x00_is_reserved_id() from qla_inline.h into qla_init.c (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Move qla2x00_clear_loop_id() from qla_inline.h into qla_init.c (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove a set-but-not-used variable (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Declare qla2x00_find_new_loop_id() static (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Move qla2x00_set_reserved_loop_ids() definition (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Update two source code comments (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Silence Successful ELS IOCB message (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Fix device staying in blocked state (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix read offset in qla24xx_load_risc_flash() (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Move qla2x00_set_fcport_state() from a .h into a .c file (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove two superfluous casts (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Remove qla_tgt_cmd.data_work and qla_tgt_cmd.data_work_free (Bart Van Assche) [Orabug: 30846292]
include directive (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Declare qla24xx_build_scsi_crc_2_iocbs() static (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Move the port_state_str[] definition from a .h to a .c file (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Insert spaces where required (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Fix formatting of pointer types (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Leave a blank line after declarations (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use tabs to indent code (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Fix FC-AL connection target discovery (Quinn Tran) [Orabug: 30846292]
- scsi: scsi_transport_fc: nvme: display FC-NVMe port roles (Hannes Reinecke) [Orabug: 30846292]
- scsi: tcm_qla2xxx: Minimize #include directives (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Unregister resources in the opposite order of the registration order (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use get/put_unaligned where appropriate (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Make qla2x00_process_response_queue() easier to read (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Reduce the number of forward declarations (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Declare local symbols static (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: Use ARRAY_SIZE() in the definition of QLA_LAST_SPEED (Bart Van Assche) [Orabug: 30846292]
- scsi: qla2xxx: fix spelling mistake "alredy" -> "already" (Colin Ian King) [Orabug: 30846292]
- scsi: qla2xxx: Remove useless set memory to zero use memset() (YueHaibing) [Orabug: 30846292]
- scsi: qla2xxx: Set remote port devloss timeout to 0 (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Fix driver unload when FC-NVMe LUNs are connected (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Cleanup redundant qla2x00_abort_all_cmds during unload (Anil Gurumurthy) [Orabug: 30846292]
- scsi: qla2xxx: Cleanup fcport memory to prevent leak (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Use mutex protection during qla2x00_sysfs_read_fw_dump() (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Fix fw dump corruption (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Further limit FLASH region write access from SysFS (Andrew Vasquez) [Orabug: 30846292]
- scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Increase the max_sgl_segments to 1024 (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Set the qpair in SRB to NULL when SRB is released (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Set the SCSI command result before calling the command done (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Simplify conditional check again (Nathan Chancellor) [Orabug: 30846292]
- scsi: qla2xxx: Fix a small typo in qla_bsg.c (Milan P. Gandhi) [Orabug: 30846292]
- scsi: qla2xxx: Fix comment alignment in qla_bsg.c (Milan P. Gandhi) [Orabug: 30846292]
- qla2xxx: Add 64GBIT Portspeed for Gen7 adapter (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Secure flash update support for ISP28XX (Michael Hernandez) [Orabug: 30846292]
- scsi: qla2xxx: Add 28xx flash primary/secondary status/image mechanism (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Simplification of register address used in qla_tmpl.c (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Correction and improvement to fwdt processing (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Update flash read/write routine (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Add support for multiple fwdump templates/segments (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Cleanups for NVRAM/Flash read/write path (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Correctly report max/min supported speeds (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Add Serdes support for ISP28XX (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Add Device ID for ISP28XX (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Fix routine qla27xx_dump_{mpi|ram}() (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Remove FW default template (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Add fw_attr and port_no SysFS node (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: check for kstrtol() failure (Dan Carpenter) [Orabug: 30846292]
- scsi: qla2xxx: avoid printf format warning (Arnd Bergmann) [Orabug: 30846292]
- scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Bill Kuzeja) [Orabug: 30846292]
- scsi: qla2xxx: Avoid PCI IRQ affinity mapping when multiqueue is not supported (Giridhar Malavali) [Orabug: 30846292]
- scsi: qla2xxx: Add new FW dump template entry types (Joe Carnuccio) [Orabug: 30846292]
- scsi: qla2xxx: Fix code indentation for qla27xx_fwdt_entry (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Move marker request behind QPair (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Prevent SysFS access when chip is down (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Add support for setting port speed (Anil Gurumurthy) [Orabug: 30846292]
- scsi: qla2xxx: Prevent multiple ADISC commands per session (Quinn Tran) [Orabug: 30846292]
- scsi: qla2xxx: Check for FW started flag before aborting (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Fix unload when NVMe devices are configured (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: Add First Burst support for FC-NVMe devices (Darren Trapp) [Orabug: 30846292]
- scsi: qla2xxx: Fix LUN discovery if loop id is not assigned yet by firmware (Himanshu Madhani) [Orabug: 30846292]
- scsi: qla2xxx: remove redundant null check on pointer sess (Colin Ian King) [Orabug: 30846292]
- scsi: qla2xxx: Move debug messages before sending srb preventing panic (Bill Kuzeja) [Orabug: 30846292]
- scsi: qla2xxx: Add mode control for each physical port (Quinn Tran) [Orabug: 30846292]
[4.14.35-1902.303.1.el7uek]
- uek-rpm/ol7/config-mips64: Enable EDAC configs (Vijay Kumar) [Orabug: 31255403]
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (Navid Emamdoost) [Orabug: 31263146] {CVE-2019-19057}
- loop: set PF_MEMALLOC_NOIO for the worker thread (Mikulas Patocka) [Orabug: 31292386]
- mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (Navid Emamdoost) [Orabug: 31246301] {CVE-2019-19056}
- MIPS: Add configs for audit (Vijay Kumar) [Orabug: 31245225]
- MIPS: Add syscall auditing support (Ralf Baechle) [Orabug: 31245225]
- media: technisat-usb2: break out of loop at end of buffer (Sean Young) [Orabug: 31224553] {CVE-2019-15505}
- Input: ff-memless - kill timer in destroy() (Oliver Neukum) [Orabug: 31213690] {CVE-2019-19524}
- Input: add safety guards to input_set_keycode() (Dmitry Torokhov) [Orabug: 31200557] {CVE-2019-20636}
- fm10k: update driver version to match out-of-tree (Jacob Keller) [Orabug: 31268827]
- fm10k: add support for ndo_get_vf_stats operation (Jacob Keller) [Orabug: 31268827]
- fm10k: add missing field initializers to TLV attributes) (Jacob Keller) [Orabug: 31268827]
- fm10k: use a local variable for the frag pointer (Jacob Keller) [Orabug: 31268827]
- fm10k: no need to check return value of debugfs_create functions (Greg Kroah-Hartman) [Orabug: 31268827]
- fm10k: fix fm10k_get_fault_pf to read correct address (Jacob Keller) [Orabug: 31268827]
- fm10k: convert NON_Q_VECTORS(hw) into NON_Q_VECTORS (Jacob Keller) [Orabug: 31268827]
- fm10k: mark unused parameters with __always_unused (Jacob Keller) [Orabug: 31268827]
- fm10k: cast page_addr to u8 * when incrementing it (Jacob Keller) [Orabug: 31268827]
- fm10k: explicitly return 0 on success path in function (Jacob Keller) [Orabug: 31268827]
- fm10k: remove needless initialization of size local variable (Jacob Keller) [Orabug: 31268827]
- fm10k: remove needless assignment of err local variable (Jacob Keller) [Orabug: 31268827]
- fm10k: remove unnecessary variable initializer (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce scope of the ring variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of the result local variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of the local msg variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of the local i variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of the err variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of the tx_buffer variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of the q_idx local variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of local err variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce the scope of qv local variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce scope of *p local variable (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce scope of the err variable (Jacob Keller) [Orabug: 31268827]
- fm10k: Use dev_get_drvdata (Chuhong Yuan) [Orabug: 31268827]
- fm10k: use struct_size() in kzalloc() (Gustavo A. R. Silva) [Orabug: 31268827]
- fm10k: TRIVIAL cleanup of extra spacing in function comment (Jacob Keller) [Orabug: 31268827]
- fm10k: bump driver version to match out-of-tree release (Jacob Keller) [Orabug: 31268827]
- fm10k: add missing device IDs to the upstream driver (Jacob Keller) [Orabug: 31268827]
- fm10k: fix SM mailbox full condition (Ngai-Mint Kwan) [Orabug: 31268827]
- Documentation: fm10k: Add kernel documentation (Jeff Kirsher) [Orabug: 31268827]
- fm10k: remove ndo_poll_controller (Eric Dumazet) [Orabug: 31268827]
- fm10k: don't protect fm10k_queue_mac_request by fm10k_host_mbx_ready (Jacob Keller) [Orabug: 31268827]
- fm10k: warn if the stat size is unknown (Jacob Keller) [Orabug: 31268827]
- fm10k: use macro to avoid passing the array and size separately (Jacob Keller) [Orabug: 31268827]
- fm10k: use variadic arguments to fm10k_add_stat_strings (Jacob Keller) [Orabug: 31268827]
- fm10k: reduce duplicate fm10k_stat macro code (Jacob Keller) [Orabug: 31268827]
- fm10k: setup VLANs for l2 accelerated macvlan interfaces (Jacob Keller) [Orabug: 31268827]
- fm10k: Report PCIe link properties with pcie_print_link_status() (Bjorn Helgaas) [Orabug: 31268827]
- fm10k: bump version number (Jacob Keller) [Orabug: 31268827]
- fm10k: fix incorrect warning for function prototype (Jacob Keller) [Orabug: 31268827]
- fm10k: fix function doxygen comments (Jacob Keller) [Orabug: 31268827]
- fm10k: clarify action when updating the VLAN table (Ngai-Mint Kwan) [Orabug: 31268827]
- fm10k: correct typo in fm10k_pf.c (Ngai-Mint Kwan) [Orabug: 31268827]
- fm10k: don't assume VLAN 1 is enabled (Jacob Keller) [Orabug: 31268827]
- fm10k: stop adding VLAN 0 to the VLAN table (Jacob Keller) [Orabug: 31268827]
- fm10k: cleanup unnecessary parenthesis in fm10k_iov.c (Jacob Keller) [Orabug: 31268827]
- fm10k: Fix configuration for macvlan offload (Alexander Duyck) [Orabug: 31268827]
- fm10k: mark PM functions as __maybe_unused (Arnd Bergmann) [Orabug: 31268827]
- fm10k: prefer %s and __func__ for diagnostic prints (Jacob Keller) [Orabug: 31268827]
- fm10k: Fix misuse of net_ratelimit() (Joe Perches) [Orabug: 31268827]
- fm10k: bump version number (Jacob Keller) [Orabug: 31268827]
- fm10k: use the MAC/VLAN queue for VF<->PF MAC/VLAN requests (Jacob Keller) [Orabug: 31268827]
- fm10k: introduce a message queue for MAC/VLAN messages (Jacob Keller) [Orabug: 31268827]
- fm10k: use generic PM hooks instead of legacy PCIe power hooks (Jacob Keller) [Orabug: 31268827]
- fm10k: use spinlock to implement mailbox lock (Jacob Keller) [Orabug: 31268827]
- fm10k: prepare_for_reset() when we lose PCIe Link (Jacob Keller) [Orabug: 31268827]
- fm10k: prevent race condition of __FM10K_SERVICE_SCHED (Jacob Keller) [Orabug: 31268827]
- fm10k: move fm10k_prepare_for_reset and fm10k_handle_reset (Jacob Keller) [Orabug: 31268827]
- fm10k: avoid divide by zero in rare cases when device is resetting (Jacob Keller) [Orabug: 31268827]
- fm10k: don't loop while resetting VFs due to VFLR event (Jacob Keller) [Orabug: 31268827]
- fm10k: simplify reading PFVFLRE register (Jacob Keller) [Orabug: 31268827]
- fm10k: avoid needless delay when loading driver (Jacob Keller) [Orabug: 31268827]
- fm10k: add missing fall through comment (Jacob Keller) [Orabug: 31268827]
- fm10k: avoid possible truncation of q_vector->name (Jacob Keller) [Orabug: 31268827]
- fm10k: fix typos on fall through comments (Jacob Keller) [Orabug: 31268827]
- fm10k: stop spurious link down messages when Tx FIFO is full (Jacob Keller) [Orabug: 31268827]
- fm10k: Use seq_putc() in fm10k_dbg_desc_break() (Markus Elfring) [Orabug: 31268827]
- fm10k: reschedule service event if we stall the PF<->SM mailbox (Jacob Keller) [Orabug: 31268827]
- jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi) [Orabug: 31264701]
[4.14.35-1902.303.0.el7uek]
- uek-rpm/ol7/config-mips64-embedded: Firewalld reports error and warnings for missing config (Vijay Kumar) [Orabug: 31239302]
- brcmfmac: add subtype check for event handling in data path (Arend van Spriel) [Orabug: 31234675] {CVE-2019-9503}
- mips64: drivers/watchdog: Add IRQF_NOBALANCING when requesting irq (Thomas Tai) [Orabug: 31233810]
- iwlwifi: dbg_ini: fix memory leak in alloc_sgtable (Navid Emamdoost) [Orabug: 31233656] {CVE-2019-19058}
- SUNRPC: Allow soft RPC calls to time out when waiting for the XPRT_LOCK (Trond Myklebust) [Orabug: 31226553]
- SUNRPC: Turn off throttling of RPC slots for TCP sockets (Trond Myklebust) [Orabug: 31226553]
- NFSv4.1: Avoid false retries when RPC calls are interrupted (Trond Myklebust) [Orabug: 31226553]
- coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping (Andrea Arcangeli) [Orabug: 31222107] {CVE-2019-11599}
- ext4: add more paranoia checking in ext4_expand_extra_isize handling (Theodore Ts'o) [Orabug: 31218807] {CVE-2019-19767}
- ext4: fix use-after-free race with debug_want_extra_isize (Barret Rhoden) [Orabug: 31218807] {CVE-2019-19767}
- media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold) [Orabug: 31213766] {CVE-2020-11668}
- media: ov519: add missing endpoint sanity checks (Johan Hovold) [Orabug: 31213757] {CVE-2020-11608}
- media: stv06xx: add missing descriptor sanity checks (Johan Hovold) [Orabug: 31200578] {CVE-2020-11609}
- net/flow_dissector: switch to siphash (Eric Dumazet) [Orabug: 30872863] {CVE-2019-18282}
- brcmfmac: assure SSID length from firmware is limited (Arend van Spriel) [Orabug: 30872843] {CVE-2019-9500}
- xfs: move inode flush to the sync workqueue (Darrick J. Wong) [Orabug: 31056429]
More information about the El-errata
mailing list