[El-errata] ELSA-2021-9407 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Wed Aug 11 13:40:55 PDT 2021


Oracle Linux Security Advisory ELSA-2021-9407

http://linux.oracle.com/errata/ELSA-2021-9407.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.14.35-2047.506.8.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-2047.506.8.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-2047.506.8.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-2047.506.8.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-2047.506.8.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-2047.506.8.el7uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-2047.506.8.el7uek.src.rpm

Related CVEs:

CVE-2020-14304
CVE-2020-25670
CVE-2020-25671
CVE-2020-25672
CVE-2021-33909




Description of changes:

[4.14.35-2047.506.8.el7uek]
- A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33187189]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33187192]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33187195]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33187199]
- rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33187200]

[4.14.35-2047.506.7.el7uek]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le)  [Orabug: 33167357]
- Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy)  [Orabug: 33167350]

[4.14.35-2047.506.6.el7uek]
- rds: Check for illegal flags when creating an MR (Håkon Bugge)  [Orabug: 33144339]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135633]  {CVE-2021-33909}

[4.14.35-2047.506.5.el7uek]
- xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 33131619]

[4.14.35-2047.506.4.el7uek]
- rds/ib: avoid use of trace_printk() (Alan Maguire)  [Orabug: 33120588]
- RDMA/cma: Remove unnecessary INIT->INIT transition (Håkon Bugge)  [Orabug: 33114515]
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan)  [Orabug: 33027709]

[4.14.35-2047.506.3.el7uek]
- capmem: Mark the pages as non-readonly+dirty. (David Clear)  [Orabug: 33116008]
- PCI/ERR: Retain status from error notification (Keith Busch)  [Orabug: 32747989]
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo)  [Orabug: 33106366]
- net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk)  [Orabug: 31895299]  {CVE-2020-14304}

[4.14.35-2047.506.2.el7uek]
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins)  [Orabug: 33089240]
- mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi)  [Orabug: 33042327]
- mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi)  [Orabug: 33042327]
- mm: soft-offline: close the race against page allocation (Naoya Horiguchi)  [Orabug: 33042327]
- mm: fix race on soft-offlining free huge pages (Naoya Horiguchi)  [Orabug: 33042327]
- Revert "xen/fb: allow xenfb initialization for hvm guests" (Joe Jin)  [Orabug: 33075317]
- scsi: qla2xxx: Fix use after free in bsg (Quinn Tran)  [Orabug: 32912131]
- block: fix a race between del_gendisk and BLKRRPART (Gulam Mohamed)  [Orabug: 32285697]
- block: prevent block device lookups at the beginning of del_gendisk (Christoph Hellwig)  [Orabug: 32285697]
- block: take bd_mutex around delete_partitions in del_gendisk (Christoph Hellwig)  [Orabug: 32285697]
- Linux 4.14.231 (Greg Kroah-Hartman) 
- xen/events: fix setting irq affinity (Juergen Gross) 
- perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo) 
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) 
- net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli) 
- block: only update parent bi_status when bio fail (Yufen Yu) 
- gfs2: report "already frozen/thawed" errors (Bob Peterson) 
- drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann) 
- KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose) 
- KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose) 
- Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath." (Greg Kroah-Hartman) 
- net: ieee802154: stop dump llsec params for monitors (Alexander Aring) 
- net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring) 
- net: ieee802154: forbid monitor for set llsec params (Alexander Aring) 
- net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring) 
- net: ieee802154: fix nl802154 add llsec key (Alexander Aring) 
- net: ieee802154: fix nl802154 del llsec dev (Alexander Aring) 
- net: ieee802154: fix nl802154 del llsec key (Alexander Aring) 
- net: ieee802154: nl-mac: fix check on panid (Alexander Aring) 
- net: mac802154: Fix general protection fault (Pavel Skripkin) 
- drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin) 
- drivers: net: fix memory leak in atusb_probe (Pavel Skripkin) 
- net: tun: set tun->dev->addr_len during TUNSETLINK processing (Phillip Potter) 
- cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng) 
- usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan) 
- net/ncsi: Avoid GFP_KERNEL in response handler (Samuel Mendoza-Jonas) 
- net/ncsi: Refactor MAC, VLAN filters (Samuel Mendoza-Jonas) 
- net/ncsi: Add generic netlink family (Samuel Mendoza-Jonas) 
- net/ncsi: Don't return error on normal response (Samuel Mendoza-Jonas) 
- net/ncsi: Improve general state logging (Samuel Mendoza-Jonas) 
- net/ncsi: Make local function ncsi_get_filter() static (Wei Yongjun) 
- clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski) 
- RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja) 
- net/mlx5: Fix placement of log_max_flow_counter (Raed Salem) 
- s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev) 
- workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang) 
- clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik) 
- clk: fix invalid usage of list cursor in register (Lukasz Bartosik) 
- soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann) 
- ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann) 
- net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller) 
- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller) 
- net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong) 
- gianfar: Handle error code at MAC address change (Claudiu Manoil) 
- sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet) 
- amd-xgbe: Update DMA coherency values (Shyam Sundar S K) 
- ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang) 
- regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven) 
- i2c: turn recovery error on init to debug (Wolfram Sang) 
- usbip: synchronize event handler with sysfs code paths (Shuah Khan) 
- usbip: stub-dev synchronize sysfs code paths (Shuah Khan) 
- usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan) 
- net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov) 
- net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet) 
- batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field (Tetsuo Handa) 
- ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behún) 
- parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang) 
- parisc: parisc-agp requires SBA IOMMU driver (Helge Deller) 
- fs: direct-io: fix missing sdio->boundary (Jack Qiu) 
- ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich) 
- net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh (Muhammad Usama Anjum) 
- xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu) 
- nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni) 
- nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25672}
- nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25671}
- nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni)   {CVE-2020-25670}
- ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede) 
- ALSA: aloop: Fix initialization of controls (Jonas Holmberg) 
- Linux 4.14.230 (Greg Kroah-Hartman) 
- can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello) 
- init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada) 
- init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens) 
- cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch) 
- cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg) 
- ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich) 
- scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck) 
- x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann) 
- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas) 
- drm/msm: Ratelimit invalid-fence message (Rob Clark) 
- mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel) 
- mISDN: fix crash in fritzpci (Tong Zhang) 
- net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov) 
- ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard) 
- Linux 4.14.229 (Greg Kroah-Hartman) 
- drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng) 
- staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan) 
- staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan) 
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang) 
- USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold) 
- USB: cdc-acm: downgrade message to debug (Oliver Neukum) 
- USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum) 
- cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum) 
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun) 
- usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren) 
- USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin) 
- usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan) 
- firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma) 
- extcon: Fix error handling in extcon_dev_register (Dinghao Liu) 
- extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski) 
- pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan) 
- reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa) 
- drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao) 
- drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das) 
- mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy) 
- tracing: Fix stack trace event size (Steven Rostedt (VMware)) 
- ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang) 
- ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang) 
- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang) 
- bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer) 
- net: wan/lmc: unregister device when no matching device is found (Tong Zhang) 
- appletalk: Fix skb allocation size in loopback case (Doug Brown) 
- net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi) 
- brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce) 
- ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F)) 
- ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar) 
- staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang) 
- staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang) 
- scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan) 
- scsi: st: Fix a use after free in st_open() (Lv Yunlong) 
- vhost: Fix vhost_vq_reset() (Laurent Vivier) 
- powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy) 
- ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure) 
- ASoC: cs42l42: Fix mixer volume control (Lucas Tanure) 
- ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede) 
- ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood) 
- ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede) 
- ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede) 
- rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields) 
- ext4: fix bh ref count on error paths (Zhaolong Zhang) 
- ipv6: weaken the v4mapped source check (Jakub Kicinski) 
- selinux: vsock: Set SID for socket returned by accept() (David Brazdil) 
- Linux 4.14.228 (Greg Kroah-Hartman) 
- can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" (Marc Kleine-Budde) 
- ext4: add reclaim checks to xattr code (Jan Kara) 
- mac80211: fix double free in ibss_leave (Markus Theil) 
- net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet) 
- net: sched: validate stab values (Eric Dumazet) 
- can: dev: Move device back to init netns on owning netns delete (Martin Willi) 
- locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner) 
- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai) 
- scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai) 
- perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter) 
- ACPI: scan: Use unique number for instance_no (Andy Shevchenko) 
- ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki) 
- RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja) 
- net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin) 
- arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin) 
- drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov) 
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe) 
- net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold) 
- mac80211: fix rate mask reset (Johannes Berg) 
- can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun) 
- can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang) 
- can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang) 
- can: peak_usb: add forgotten supported devices (Stephane Grosjean) 
- ftgmac100: Restart MAC HW once (Dylan Hung) 
- net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong) 
- e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu) 
- e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits) 
- net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port (Florian Fainelli) 
- macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet) 
- libbpf: Fix INSTALL flag order (Georgi Valkov) 
- bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko) 
- ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea) 
- arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geantă) 
- arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geantă) 
- arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geantă) 
- squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher) 
- squashfs: fix inode lookup sanity checks (Sean Nyekjaer) 
- ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich) 
- ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich) 
- nfs: we don't support removing system.nfs4_acl (J. Bruce Fields) 
- drm/radeon: fix AGP dependency (Christian König) 
- u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra) 
- sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner) 
- atm: idt77252: fix null-ptr-dereference (Tong Zhang) 
- atm: uPD98402: fix incorrect allocation (Tong Zhang) 
- net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai) 
- net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai) 
- NFS: Correct size calculation for create reply length (Frank Sorenson) 
- nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler) 
- gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li) 
- sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov) 
- net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai) 
- ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu) 
- Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" (Hayes Wang) 
- atm: lanai: dont run lanai_dev_close if not open (Tong Zhang) 
- atm: eni: dont release is never initialized (Tong Zhang) 
- powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman) 
- net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)

[4.14.35-2047.506.1.el7uek]
- drivers/uio: Fix incorrect calls to pm_runtime_enable/disable. (David Clear)  [Orabug: 33070176]
- dts/pensando: Add board config partitions. (David Clear)  [Orabug: 33070176]
- drivers: updates driver version string to 1.15.9.7 (Thomas Tai)  [Orabug: 33065280]
- drivers: updates for 1.15.9.7 (Shannon Nelson)  [Orabug: 33065280]
- arm64: Stop printing the virtual memory layout (Laura Abbott)  [Orabug: 33059865]
- uek-rpm: Fix Pensando's network application error (Thomas Tai)  [Orabug: 33050671]
- RDMA/cma: Fix rdma_resolve_route memory leak (Gerd Rausch)  [Orabug: 33048382]
- uek-rpm: enable selinux for Pensando (Thomas Tai)  [Orabug: 33032940]
- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 32989009]
- xfs: fix lockup issue (Junxiao Bi)  [Orabug: 32880215]
- Build Pensando drivers for uek5 kernel (Vijay Kumar)  [Orabug: 32569849]
- net/ethernet/pensando: Fix Pensando driver build (Vijay Kumar)  [Orabug: 32569849]
- Added mdev, mnet_uio_pdrv and ionic_mnic driver src to UEK5 (Vijay Kumar)  [Orabug: 32569849]
- Linux 4.14.227 (Greg Kroah-Hartman) 
- genirq: Disable interrupts for force threaded handlers (Thomas Gleixner) 
- ext4: fix potential error in ext4_do_update_inode (Shijie Luo) 
- ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F)) 
- ext4: find old entry again if failed to rename whiteout (zhangyi (F)) 
- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov) 
- x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov) 
- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov) 
- x86/ioapic: Ignore IRQ2 again (Thomas Gleixner) 
- PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler) 
- iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang) 
- iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang) 
- iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang) 
- iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu) 
- iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter) 
- iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux) 
- iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron) 
- usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin) 
- USB: replace hardcode maximum usb string length by definition (Macpaul Lin) 
- usb-storage: Add quirk to defeat Kindle's automatic unload (Alan Stern) 
- nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg) 
- scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter) 
- net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin) 
- sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras) 
- svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler) 
- NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty) 
- nvmet: don't check iosqes,iocqes for discovery controllers (Sagi Grimberg) 
- tools build feature: Check if pthread_barrier_t is available (Arnaldo Carvalho de Melo) 
- perf: Make perf able to build with latest libbfd (Changbin Du) 
- tools build: Check if gettid() is available before providing helper (Arnaldo Carvalho de Melo) 
- tools build feature: Check if eventfd() is available (Arnaldo Carvalho de Melo) 
- tools build feature: Check if get_current_dir_name() is available (Arnaldo Carvalho de Melo) 
- perf tools: Use - Revert "PM: runtime: Update device status before letting suppliers suspend" (Rafael J. Wysocki) 
- net: dsa: b53: Support setting learning on port (Florian Fainelli) 
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk) 
- ext4: check journal inode extents more carefully (Jan Kara) 
- ext4: don't allow overlapping system zones (Jan Kara) 
- Linux 4.14.226 (Greg Kroah-Hartman) 
- xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross) 
- xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross) 
- xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross) 
- iio: imu: adis16400: release allocated memory on failure (Navid Emamdoost) 
- KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier) 
- hwmon: (lm90) Fix max6658 sporadic wrong temperature reading (Boyang Yu) 
- binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak) 
- powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao) 
- include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle)) 
- stop_machine: mark helpers __always_inline (Arnd Bergmann) 
- configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang) 
- block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai) 
- NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek) 
- sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov) 
- staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott) 
- staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott) 
- staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott) 
- staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson) 
- staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson) 
- staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter) 
- staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter) 
- staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter) 
- staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() (Dan Carpenter) 
- staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() (Dan Carpenter) 
- usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan) 
- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan) 
- usbip: fix vudc to check for stream socket (Shuah Khan) 
- usbip: fix vhci_hcd to check for stream socket (Shuah Khan) 
- usbip: fix stub_dev to check for stream socket (Shuah Khan) 
- USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel) 
- USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal) 
- USB: serial: ch341: add new Product ID (Niv Sardi) 
- USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin) 
- usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman) 
- xhci: Improve detection of device initiated wake signal. (Mathias Nyman) 
- usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda) 
- usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol) 
- usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol) 
- USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter) 
- Goodix Fingerprint device is not a modem (Yorick de Wid) 
- mmc: core: Fix partition switch time for eMMC (Adrian Hunter) 
- s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland) 
- s390/dasd: fix hanging DASD driver unbind (Stefan Haberland) 
- Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") (Eric W. Biederman) 
- ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar (Takashi Iwai) 
- ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai) 
- ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai) 
- ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai) 
- scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie) 
- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens) 
- PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczyński) 
- PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser) 
- powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev) 
- powerpc: improve handling of unrecoverable system reset (Nicholas Piggin) 
- mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing) 
- mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()' (Christophe JAILLET) 
- udf: fix silent AED tagLocation corruption (Steven J. Magnani) 
- net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang) 
- media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy) 
- s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman) 
- drm: meson_drv add shutdown function (Artem Lapkin) 
- drm/compat: Clear bounce structures (Daniel Vetter) 
- s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing) 
- perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers) 
- net: stmmac: stop each tx channel independently (Joakim Zhang) 
- net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil) 
- net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil) 
- net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He) 
- net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas) 
- net: sched: avoid duplicates in classes dump (Maximilian Heyne) 
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong) 
- net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang) 
- sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov) 
- Revert "mm, slub: consider rest of partial list if acquire_slab() fails" (Linus Torvalds) 
- cifs: return proper error code in statfs(2) (Paulo Alcantara) 
- netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin) 
- can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang) 
- can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang) 
- can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel) 
- net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth) 
- net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann) 
- ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau) 
- ethernet: alx: fix order of calls on resume (Jakub Kicinski) 
- uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin) 
- Linux 4.14.225 (Greg Kroah-Hartman) 
- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno) 
- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju) 
- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas) 
- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede) 
- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede) 
- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede) 
- platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede) 
- platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede) 
- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede) 
- mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto) 
- iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin) 
- dm table: fix iterate_devices based device capability checks (Jeffle Xu) 
- rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter) 
- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King) 
- usbip: tools: fix build error for multiple definition (Antonio Borneo) 
- PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki) 
- btrfs: fix raid6 qstripe kmap (Ira Weiny) 
- btrfs: raid56: simplify tracking of Q stripe presence (David Sterba) 
- Linux 4.14.224 (Greg Kroah-Hartman) 
- media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus) 
- swap: fix swapfile read/write offset (Jens Axboe) 
- zsmalloc: account the number of compacted pages correctly (Rokudo Yan) 
- xen-netback: respect gnttab_map_refs()'s return value (Jan Beulich) 
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich) 
- parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin) 
- f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim) 
- media: uvcvideo: Allow entities with no pads (Ricardo Ribalda) 
- staging: most: sound: add sanity check for function argument (Christian Gromm) 
- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari) 
- x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song) 
- ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan) 
- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu) 
- wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren) 
- vt/consolemap: do font sum unsigned (Jiri Slaby) 
- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit) 
- staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu) 
- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven) 
- net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean) 
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai) 
- net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver) 
- smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov) 
- xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang) 
- media: mceusb: sanity check for prescaler value (Sean Young) 
- JFS: more checks for invalid superblock (Randy Dunlap) 
- arm64: Use correct ll/sc atomic constraints (Andrew Murray) 
- arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint (Will Deacon) 
- arm64: Avoid redundant type conversions in xchg() and cmpxchg() (Will Deacon) 
- arm64 module: set plt* section addresses to 0x0 (Shaoying Xu) 
- virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck) 
- drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky) 
- hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz) 
- scripts: set proper OpenSSL include dir also for sign-file (Rolf Eike Beer) 
- scripts: use pkg-config to locate libcrypto (Rolf Eike Beer) 
- net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)

[4.14.35-2047.506.0.el7uek]
- Linux 4.14.223 (Greg Kroah-Hartman) 
- dm era: Update in-core bitset after committing the metadata (Nikos Tsironis) 
- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld) 
- ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky) 
- ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet) 
- sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld) 
- gtp: use icmp_ndo_send helper (Jason A. Donenfeld) 
- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld) 
- icmp: introduce helper for nat'd source address in network device context (Jason A. Donenfeld) 
- dm era: only resize metadata in preresume (Nikos Tsironis) 
- dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis) 
- dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis) 
- dm era: Fix bitset memory leaks (Nikos Tsironis) 
- dm era: Verify the data block size hasn't changed (Nikos Tsironis) 
- dm era: Recover committed writeset after crash (Nikos Tsironis) 
- gfs2: Don't skip dlm unlock if glock has an lvb (Bob Peterson) 
- sparc32: fix a user-triggerable oops in clear_user() (Al Viro) 
- f2fs: fix out-of-repair __setattr_copy() (Chao Yu) 
- printk: fix deadlock when kernel panic (Muchun Song) 
- gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev) 
- mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li) 
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song) 
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (Dan Williams) 
- usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (Yoshihiro Shimoda) 
- mm: hugetlb: fix a race between freeing and dissolving the page (Muchun Song) 
- hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz) 
- fs/affs: release old buffer head on error path (Pan Bian) 
- mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian) 
- watchdog: mei_wdt: request stop on unregister (Alexander Usyskin) 
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe) 
- floppy: reintroduce O_NDELAY fix (Jiri Kosina) 
- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson) 
- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser) 
- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov) 
- seccomp: Add missing return in non-void function (Paul Cercueil) 
- crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe) 
- crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe) 
- btrfs: fix extent buffer leak on failure to copy root (Filipe Manana) 
- btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik) 
- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik) 
- KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen) 
- tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley) 
- ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou) 
- usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt (Thinh Nguyen) 
- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen) 
- USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter) 
- USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter) 
- usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil) 
- USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak) 
- Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza) 
- Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter) 
- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crête) 
- Input: raydium_ts_i2c - do not send zero length (jeffrey.lin) 
- HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke) 
- ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao) 
- ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki) 
- blk-settings: align max_sectors on "logical_block_size" boundary (Mikulas Patocka) 
- scsi: bnx2fc: Fix Kconfig warning & CNIC build errors (Randy Dunlap) 
- mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin) 
- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard) 
- arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier) 
- mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin) 
- mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin) 
- ocfs2: fix a use after free on error (Dan Carpenter) 
- net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan) 
- i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski) 
- i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba) 
- ext4: fix potential htree index checksum corruption (Theodore Ts'o) 
- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio) 
- PCI: Align checking of syscall user config accessors (Heiner Kallweit) 
- VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen) 
- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South) 
- misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju) 
- misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju) 
- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap) 
- Input: elo - fix an error code in elo_connect() (Dan Carpenter) 
- perf test: Fix unaligned access in sample parsing test (Namhyung Kim) 
- perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter) 
- spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko) 
- powerpc/8xx: Fix software emulation interrupt (Christophe Leroy) 
- powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch) 
- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter) 
- spi: stm32: properly handle 0 byte transfer (Alain Volmat) 
- RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson) 
- perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo) 
- tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware)) 
- amba: Fix resource leak for drivers without .remove (Uwe Kleine-König) 
- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (Vladimir Murzin) 
- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET) 
- powerpc/47x: Disable 256k page size (Christophe Leroy) 
- IB/umad: Return EIO in case of when device disassociated (Shay Drory) 
- auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven) 
- isofs: release buffer head before return (Pan Bian) 
- spi: atmel: Put allocated master before return (Pan Bian) 
- certs: Fix blacklist flag type confusion (David Howells) 
- regulator: axp20x: Fix reference cout leak (Pan Bian) 
- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix) 
- rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski) 
- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea) 
- of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat) 
- fdt: Properly handle "no-map" field in the memory region (KarimAllah Ahmed) 
- mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda) 
- dmaengine: hsu: disable spurious interrupt (Ferry Toth) 
- dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET) 
- dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET) 
- HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap) 
- spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav) 
- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl) 
- capabilities: Don't allow writing ambiguous v3 file capabilities (Eric W. Biederman) 
- jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix) 
- fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King) 
- ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian) 
- ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian) 
- crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() (Daniele Alessandrelli) 
- hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock) 
- btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng) 
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft)) 
- ata: ahci_brcm: Add back regulators management (Florian Fainelli) 
- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart) 
- media: pxa_camera: declare variable when DEBUG is defined (Tom Rix) 
- media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET) 
- media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng) 
- media: lmedm04: Fix misuse of comma (Joe Perches) 
- crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa) 
- ASoC: cs42l56: fix up error handling in probe (Dan Carpenter) 
- media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu) 
- media: media/pci: Fix memleak in empress_init (Dinghao Liu) 
- media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET) 
- media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi) 
- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor) 
- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor) 
- crypto: sun4i-ss - fix kmap usage (Corentin Labbe) 
- gma500: clean up error handling in init (Dan Carpenter) 
- drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang) 
- fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap) 
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier) 
- net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K) 
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K) 
- ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan) 
- b43: N-PHY: Fix the update of coef for the PHY revision >= 3case (Colin Ian King) 
- mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King) 
- bnxt_en: reverse order of TX disable and carrier off (Edwin Peer) 
- ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lüssing) 
- bpf_lru_list: Read double-checked variable once without lock (Marco Elver) 
- ARM: s3c: fix fiq for clang IAS (Arnd Bergmann) 
- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht) 
- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai) 
- usb: dwc2: Make "trimming xfer length" a debug message (Guenter Roeck) 
- usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck) 
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck) 
- ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren) 
- Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian) 
- Bluetooth: drop HCI device reference before return (Pan Bian) 
- usb: gadget: u_audio: Free requests only after callback (Jack Pham) 
- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (Christophe JAILLET) 
- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski) 
- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski) 
- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski) 
- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski) 
- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski) 
- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski) 
- Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill) 
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET) 
- random: fix the RNDRESEEDCRNG ioctl (Eric Biggers) 
- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin) 
- kdb: Make memory allocations more robust (Sumit Garg) 
- vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers) 
- scripts/recordmcount.pl: support big endian for ARCH sh (Rong Chen) 
- cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. (Shyam Prasad N) 
- NET: usb: qmi_wwan: Adding support for Cinterion MV31 (Christoph Schemmel) 
- arm64: tegra: Add power-domain for Tegra210 HDA (Sameer Pujar) 
- ntfs: check for valid standard information attribute (Rustam Kovhaev) 
- usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable (Stefan Ursella) 
- HID: make arrays usage and value to be the same (Will McVicker) 
- Linux 4.14.222 (Greg Kroah-Hartman) 
- kvm: check tlbs_dirty directly (Lai Jiangshan) 
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani) 
- USB: Gadget Ethernet: Re-enable Jumbo frames. (John Greb) 
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi) 
- xen/arm: don't ignore return errors from set_phys_to_machine (Stefano Stabellini) 
- tracing: Avoid calling cc-option -mrecord-mcount for every Makefile (Vasily Gorbik) 
- tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-mcount (Greg Thelen) 
- trace: Use -mcount-record for dynamic ftrace (Andi Kleen) 
- x86/build: Disable CET instrumentation in the kernel for 32-bit too (Borislav Petkov) 
- h8300: fix PREEMPTION build, TI_PRE_COUNT undefined (Randy Dunlap) 
- i2c: stm32f7: fix configuration of the digital filter (Alain Volmat) 
- vsock: fix locking in vsock_shutdown() (Stefano Garzarella) 
- vsock/virtio: update credit only if socket is not closed (Stefano Garzarella) 
- net: watchdog: hold device global xmit lock during tx disable (Edwin Peer) 
- net/vmw_vsock: improve locking in vsock_connect_timeout() (Norbert Slusarek) 
- usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (Serge Semin) 
- usb: dwc3: ulpi: fix checkpatch warning (Felipe Balbi) 
- netfilter: conntrack: skip identical origin tuple in same zone only (Florian Westphal) 
- netfilter: xt_recent: Fix attempt to update deleted entry (Jozsef Kadlecsik) 
- bpf: Check for integer overflow when using roundup_pow_of_two() (Bui Quang Minh) 
- memblock: do not start bottom-up allocations with kernel_end (Roman Gushchin) 
- ARM: ensure the signal page contains defined contents (Russell King) 
- ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL (Alexandre Belloni) 
- ovl: skip getxattr of security labels (Amir Goldstein) 
- cap: fix conversions on getxattr (Miklos Szeredi) 
- ovl: perform vfs_getxattr() with mounter creds (Miklos Szeredi) 
- platform/x86: hp-wmi: Disable tablet-mode reporting by default (Hans de Goede) 
- arm64: dts: rockchip: Fix PCIe DT properties on rk3399 (Marc Zyngier) 
- MIPS: BMIPS: Fix section mismatch warning (Jaedon Shin) 
- arm/xen: Don't probe xenbus as part of an early initcall (Julien Grall) 
- tracing: Check length before giving out the filter buffer (Steven Rostedt (VMware)) 
- tracing: Do not count ftrace events in top level enable output (Steven Rostedt (VMware)) 
- squashfs: add more sanity checks in xattr id lookup (Phillip Lougher) 
- squashfs: add more sanity checks in inode lookup (Phillip Lougher) 
- squashfs: add more sanity checks in id lookup (Phillip Lougher) 
- memcg: fix a crash in wb_workfn when a device disappears (Theodore Ts'o) 
- include/trace/events/writeback.h: fix -Wstringop-truncation warnings (Qian Cai) 
- lib/string: Add strscpy_pad() function (Tobin C. Harding) 
- SUNRPC: Handle 0 length opaque XDR object data properly (Dave Wysochanski) 
- SUNRPC: Move simple_get_bytes and simple_get_netobj into private header (Dave Wysochanski) 
- iwlwifi: mvm: guard against device removal in reprobe (Johannes Berg) 
- iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (Emmanuel Grumbach) 
- iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (Johannes Berg) 
- pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() (Trond Myklebust) 
- af_key: relax availability checks for skb size calculation (Cong Wang) 
- remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar) 
- remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar) 
- fgraph: Initialize tracing_graph_pause at task creation (Steven Rostedt (VMware)) 
- Linux 4.14.221 (Greg Kroah-Hartman) 
- net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add (DENG Qingfang) 
- iommu/vt-d: Do not use flush-queue when caching-mode is on (Nadav Amit) 
- Input: xpad - sync supported devices with fork on GitHub (Benjamin Valentin) 
- x86/apic: Add extra serialization for non-serializing MSRs (Dave Hansen) 
- x86/build: Disable CET instrumentation in the kernel (Josh Poimboeuf) 
- mm: thp: fix MADV_REMOVE deadlock on shmem THP (Hugh Dickins) 
- mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active (Muchun Song) 
- mm: hugetlb: fix a race between isolating and freeing page (Muchun Song) 
- mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page (Muchun Song) 
- ARM: footbridge: fix dc21285 PCI configuration accessors (Russell King) 
- nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs (Thorsten Leemhuis) 
- mmc: core: Limit retries when analyse of SDIO tuples fails (Fengnan Chang) 
- smb3: Fix out-of-bounds bug in SMB2_negotiate() (Gustavo A. R. Silva) 
- cifs: report error instead of invalid when revalidating a dentry fails (Aurelien Aptel) 
- xhci: fix bounce buffer usage for non-sg list case (Mathias Nyman) 
- kretprobe: Avoid re-registration of the same kretprobe earlier (Wang ShaoBo) 
- mac80211: fix station rate table updates on assoc (Felix Fietkau) 
- ovl: fix dentry leak in ovl_get_redirect (Liangyan) 
- usb: dwc2: Fix endpoint direction check in ep_from_windex (Heiko Stuebner) 
- USB: usblp: don't call usb_set_interface if there's a single alt (Jeremy Figgins) 
- USB: gadget: legacy: fix an error code in eth_bind() (Dan Carpenter) 
- ipv4: fix race condition between route lookup and invalidation (Wei Wang) 
- elfcore: fix building with clang (Arnd Bergmann) 
- objtool: Support Clang non-section symbols in ORC generation (Josh Poimboeuf) 
- net: lapb: Copy the skb before sending a packet (Xie He) 
- arm64: dts: ls1046a: fix dcfg address range (Zyta Szpak) 
- USB: serial: option: Adding support for Cinterion MV31 (Christoph Schemmel) 
- USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 (Chenxin Jin) 
- USB: serial: cp210x: add pid/vid for WSDA-200-USB (Pho Tran) 
- Linux 4.14.220 (Greg Kroah-Hartman) 
- kthread: Extract KTHREAD_IS_PER_CPU (Peter Zijlstra) 
- objtool: Don't fail on missing symbol table (Josh Poimboeuf) 
- scsi: ibmvfc: Set default timeout to avoid crash during migration (Brian King) 
- mac80211: fix fast-rx encryption check (Felix Fietkau) 
- scsi: libfc: Avoid invoking response handler twice if ep is already completed (Javed Hasan) 
- scsi: scsi_transport_srp: Don't block target in failfast state (Martin Wilck) 
- x86: __always_inline __{rd,wr}msr() (Peter Zijlstra) 
- phy: cpcap-usb: Fix warning for missing regulator_disable (Tony Lindgren) 
- driver core: Extend device_is_dependent() (Rafael J. Wysocki) 
- base: core: Remove WARN_ON from link dependencies check (Benjamin Gaignard) 
- net_sched: gen_estimator: support large ewma log (Eric Dumazet) 
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet) 
- ACPI: thermal: Do not call acpi_thermal_check() directly (Rafael J. Wysocki) 
- ibmvnic: Ensure that CRQ entry read are correctly ordered (Lijun Pan) 
- net: dsa: bcm_sf2: put device node before return (Pan Bian) 
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044345]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32804265]
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863569]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863569]
- xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982355]
- Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820277]




More information about the El-errata mailing list