[El-errata] ELSA-2021-9621 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Mon Dec 20 23:51:06 UTC 2021
Oracle Linux Security Advisory ELSA-2021-9621
http://linux.oracle.com/errata/ELSA-2021-9621.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
aarch64:
kernel-uek-5.4.17-2136.302.6.1.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.302.6.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.302.6.1.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.302.6.1.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.302.6.1.el8uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.302.6.1.el8uek.src.rpm
Related CVEs:
CVE-2021-41864
Description of changes:
[5.4.17-2136.302.6.1.el8uek]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33667276]
[5.4.17-2136.302.6.el8uek]
- Revert "fs: align IOCB_* flags with RWF_* flags" (Prasad Singamsetty) [Orabug: 33627551]
[5.4.17-2136.302.5.el8uek]
- Revert "drm: Initialize struct drm_crtc_state.no_vblank from device settings" (Somasundaram Krishnasamy) [Orabug: 33611832]
- Revert "drm/atomic-helper: reset vblank on crtc reset" (Somasundaram Krishnasamy) [Orabug: 33611832]
- net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria) [Orabug: 29444833]
- net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu) [Orabug: 29444833]
- net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu) [Orabug: 29444833]
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling) [Orabug: 33538583]
- uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y for uek6/u3 (Sherry Yang) [Orabug: 33580598]
- Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds) [Orabug: 33580598]
- x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora) [Orabug: 33580824]
- x86/asm: add clzero based page clearing (Ankur Arora) [Orabug: 33580824]
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora) [Orabug: 33580824]
- uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy) [Orabug: 33596873]
[5.4.17-2136.302.4.el8uek]
- KVM: nSVM: Copy vmcb12 nRIP field to vmcb02 (Maciej S. Szmigiero) [Orabug: 33590307]
- KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint (Maciej S. Szmigiero) [Orabug: 33590307]
- KVM: nSVM: move nested vmrun tracepoint to enter_svm_guest_mode (Maxim Levitsky) [Orabug: 33590307]
[5.4.17-2136.302.3.el8uek]
- x86/platform/uv: Add uv_hub_info_s to UEK KABI (John Donnelly) [Orabug: 33397019]
- x86/platform/uv: Modify order of fields in uv_hub_info_s to avoid panic (Steve Wahl) [Orabug: 33397019]
- x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Fix copied UV5 output archtype (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby) [Orabug: 33397019]
- x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov) [Orabug: 33397019]
- x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Remove spaces from OEM IDs (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update UV5 TSC checking (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update node present counting (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Add UV5 direct references (Mike Travis) [Orabug: 33397019]
- x86/platform/uv: Update UV MMRs for UV5 (Mike Travis) [Orabug: 33397019]
- arm64/bpf: remove 128MB limit for BPF JIT programs (Russell King) [Orabug: 33518795]
- kernfs: don't create a negative dentry if inactive node exists (Ian Kent) [Orabug: 33548753]
- kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [Orabug: 33548753]
- kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [Orabug: 33548753]
- kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [Orabug: 33548753]
- kernfs: switch kernfs to use an rwsem (Ian Kent) [Orabug: 33548753]
- kernfs: use VFS negative dentry caching (Ian Kent) [Orabug: 33548753]
- kernfs: add a revision to identify directory node changes (Ian Kent) [Orabug: 33548753]
- selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [Orabug: 33577735]
- Revert "net/rds: Allocate pages on HCA NUMA nodeid" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Use the same vector for send & receive" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Get rid of tasklets" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Put more CPU cores to work" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Make workers use the designated CPU" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/mlx5: Add new verb "ib_get_vector_irqn"" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Add "preferred_cpu" option to "rds_rdma.ko"" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Follow the observed CQ CPU affinity" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Throttle check for CQ CPU affinity" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Bring tasklets back for better latency" (Gerd Rausch) [Orabug: 33590962]
- Revert "IB/mlx4: Implement backend callback for "ib_get_vector_irqn"" (Gerd Rausch) [Orabug: 33590962]
[5.4.17-2136.302.2.el8uek]
- x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield) [Orabug: 32921559]
- x86/kernel: Convert to new CPU match macros (Thomas Gleixner) [Orabug: 32921559]
- net/mlx5: Disable mr_cache for SFs (Mikhael Goikhman) [Orabug: 33523558]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster) [Orabug: 33571340]
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui) [Orabug: 33548142]
- scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry) [Orabug: 33548142]
- uek-rpm: Enable CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86_64 kernels (Dave Kleikamp) [Orabug: 33564971]
[5.4.17-2136.302.1.el8uek]
- arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga) [Orabug: 33428617]
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu) [Orabug: 33431722] {CVE-2021-41864}
- xen/netfront: stop tx queues during live migration (Dongli Zhang) [Orabug: 33536399]
- Revert "xfs: Lower CIL flush limit for large logs" (Catherine Hoang) [Orabug: 33536463]
- Revert "xfs: Throttle commits on delayed background CIL push" (Catherine Hoang) [Orabug: 33536463]
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo) [Orabug: 33536966]
- nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields) [Orabug: 33536966]
- rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Håkon Bugge) [Orabug: 33538397]
[5.4.17-2136.302.0.el8uek]
- LTS tag: v5.4.152 (Jack Vogel)
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan)
- silence nfscache allocation warnings with kvzalloc (Rik van Riel)
- perf/x86: Reset destroy callback on event init failure (Anand K Mistry)
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (Fares Mehanna)
- KVM: do not shrink halt_poll_ns below grow_start (Sergey Senozhatsky)
- tools/vm/page-types: remove dependency on opt_file for idle page tracking (Changbin Du)
- scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong)
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (Shuah Khan)
- selftests: be sure to make khdr before other targets (Li Zhijian)
- usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang)
- usb: testusb: Fix for showing the connection speed (Faizel K B)
- scsi: sd: Free scsi_disk device via put_device() (Ming Lei)
- ext2: fix sleeping in atomic bugs on error (Dan Carpenter)
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds)
- xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich)
- net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean)
- LTS tag: v5.4.151 (Jack Vogel)
- HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam)
- netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik)
- HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman)
- usb: hso: remove the bailout parameter (Dongliang Mu)
- libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind (sumiyawang)
- PCI: Fix pci_host_bridge struct device release/free handling (Rob Herring)
- net: stmmac: don't attach interface until resume finishes (Leon Yu)
- net: udp: annotate data race around udp_sk(sk)->corkflag (Eric Dumazet)
- HID: u2fzero: ignore incomplete packets without data (Andrej Shadura)
- ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun)
- ext4: fix reserved space counter leakage (Jeffle Xu)
- ext4: fix loff_t overflow in ext4_max_bitmap_size() (Ritesh Harjani)
- ipack: ipoctal: fix module reference leak (Johan Hovold)
- ipack: ipoctal: fix missing allocation-failure check (Johan Hovold)
- ipack: ipoctal: fix tty-registration error handling (Johan Hovold)
- ipack: ipoctal: fix tty registration race (Johan Hovold)
- ipack: ipoctal: fix stack information leak (Johan Hovold)
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error (Nirmoy Das)
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings (Chen Jingwen)
- perf/x86/intel: Update event constraints for ICX (Kan Liang)
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet)
- net: sched: flower: protect fl_walk() with rcu (Vlad Buslov)
- net: hns3: do not allow call hns3_nic_net_open repeatedly (Jian Shen)
- scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy)
- Revert "block, bfq: honor already-setup queue merges" (Jens Axboe)
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (Jiri Benc)
- e100: fix buffer overrun in e100_get_regs (Jacob Keller)
- e100: fix length calculation in e100_get_regs_len (Jacob Keller)
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present (Xiao Liang)
- hwmon: (tmp421) fix rounding for negative values (Paul Fertser)
- hwmon: (tmp421) report /PVLD condition as fault (Paul Fertser)
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long)
- mac80211-hwsim: fix late beacon hrtimer handling (Johannes Berg)
- mac80211: mesh: fix potentially unaligned access (Johannes Berg)
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi)
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang)
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Vadim Pasternak)
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi)
- drm/amd/display: Pass PCI deviceid into DC (Charlene Liu)
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (Zelin Deng)
- mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg)
- scsi: ufs: Fix illegal offset in UPIU event trace (Jonathan Hsu)
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
- fs-verity: fix signed integer overflow with i_size near S64_MAX (Eric Biggers)
- usb: cdns3: fix race condition before setting doorbell (Pawel Laszczak)
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse)
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao)
- tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente)
- LTS tag: v5.4.150 (Jack Vogel)
- qnx4: work around gcc false positive warning bug (Linus Torvalds)
- xen/balloon: fix balloon kthread freezing (Juergen Gross)
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohár)
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume (Antoine Tenart)
- EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri)
- spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds)
- net: 6pack: Fix tx timeout and slot time (Guenter Roeck)
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck)
- arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li)
- parisc: Use absolute_pointer() to define PAGE0 (Helge Deller)
- qnx4: avoid stringop-overread errors (Linus Torvalds)
- sparc: avoid stringop-overread errors (Linus Torvalds)
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck)
- compiler.h: Introduce absolute_pointer macro (Guenter Roeck)
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin)
- sparc32: page align size in arch_dma_alloc (Andreas Larsson)
- nvme-multipath: fix ANA state updates when a namespace is not present (Anton Eidelman)
- xen/balloon: use a kernel thread instead a workqueue (Juergen Gross)
- bpf: Add oversize check before call kvcalloc() (Bixuan Cui)
- ipv6: delay fib6_sernum increase in fib6_add (zhang kai)
- m68k: Double cast io functions to unsigned long (Guenter Roeck)
- net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson)
- net: macb: fix use after free on rmmod (Tong Zhang)
- blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng)
- md: fix a lock order reversal in md_alloc (Christoph Hellwig)
- irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (Randy Dunlap)
- scsi: lpfc: Use correct scnprintf() limit (Dan Carpenter)
- scsi: qla2xxx: Restore initiator in dual mode (Dmitry Bogdanov)
- cifs: fix a sign extension bug (Dan Carpenter)
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter)
- fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (Jiapeng Chong)
- fpga: machxo2-spi: Return an error on failure (Tom Rix)
- tty: synclink_gt: rename a conflicting function name (Randy Dunlap)
- tty: synclink_gt, drop unneeded forward declarations (Jiri Slaby)
- scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li)
- net/mlx4_en: Don't allow aRFS for encapsulated packets (Aya Levin)
- qed: rdma - don't wait for resources under hw error recovery flow (Shai Malin)
- gpio: uniphier: Fix void functions to remove return value (Kunihiko Hayashi)
- net/smc: add missing error check in smc_clc_prfx_set() (Karsten Graul)
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan)
- enetc: Fix illegal access when reading affinity_hint (Claudiu Manoil)
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (Andy Shevchenko)
- afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (David Howells)
- net: hso: fix muxed tty registration (Johan Hovold)
- serial: mvebu-uart: fix driver's tx_empty callback (Pali Rohár)
- xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I)
- btrfs: prevent __btrfs_dump_space_info() to underflow its free space (Qu Wenruo)
- erofs: fix up erofs_lookup tracepoint (Gao Xiang)
- mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter)
- USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao)
- USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski)
- USB: serial: option: add Telit LN920 compositions (Carlo Lobrano)
- USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski)
- usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I)
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski)
- staging: greybus: uart: fix tty use after free (Johan Hovold)
- binder: make sure fd closes complete (Todd Kjos)
- USB: cdc-acm: fix minor-number release (Johan Hovold)
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt)
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary)
- xen/x86: fix PV trap handling on secondary processors (Jan Beulich)
- cifs: fix incorrect check for null pointer in header_assemble (Steve French)
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter)
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (Minas Harutyunyan)
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (Minas Harutyunyan)
- usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter)
- LTS tag: v5.4.149 (Jack Vogel)
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck)
- rtc: rx8010: select REGMAP_I2C (Yu-Tung Chang)
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin)
- pwm: stm32-lp: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- pwm: rockchip: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- pwm: img: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun)
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun)
- btrfs: fix lockdep warning while mounting sprout fs (Anand Jain)
- ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton)
- ceph: request Fw caps before updating the mtime in ceph_write_iter (Jeff Layton)
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey)
- dmaengine: ioat: depends on !UML (Johannes Berg)
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck)
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (Thomas Gleixner)
- thermal/core: Fix thermal_cooling_device_register() prototype (Arnd Bergmann)
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn)
- net: stmmac: reset Tx desc base address before restarting Tx (Jongsung Kim)
- phy: avoid unnecessary link-up delay in polling mode (Petr Oros)
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-König)
- profiling: fix shift-out-of-bounds bugs (Pavel Skripkin)
- nilfs2: use refcount_dec_and_lock() to fix potential UAF (Zhen Lei)
- prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov)
- 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji)
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter)
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko)
- um: virtio_uml: fix memory leak on init failures (Johannes Berg)
- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (Nathan Chancellor)
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner)
- sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner)
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin)
- ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin)
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin)
- ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin)
- apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko)
- ARM: Qualify enabling of swiotlb_init() (Florian Fainelli)
- s390/pci_mmio: fully validate the VMA before calling follow_pte() (David Hildenbrand)
- console: consume APC, DM, DCS (nick black)
- PCI/ACPI: Add Ampere Altra SOC MCFG quirk (Tuan Phan)
- PCI: aardvark: Fix reporting CRS value (Pali Rohár)
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (Pali Rohár)
- PCI: aardvark: Indicate error in 'val' when config read fails (Pali Rohár)
- PCI: pci-bridge-emul: Fix big-endian support (Grzegorz Jaszczyk)
- LTS tag: v5.4.148 (Jack Vogel)
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich)
- s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich)
- net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda)
- ip_gre: validate csum_start only on pull (Willem de Bruijn)
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu)
- fq_codel: reject silly quantum parameters (Eric Dumazet)
- netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans)
- net: dsa: b53: Fix calculating number of switch ports (Rafał Miłecki)
- perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (Li Huafei)
- ARC: export clear_user_page() for modules (Randy Dunlap)
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' (Christophe JAILLET)
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko)
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state (Oliver Upton)
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (Matthias Schiffer)
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug (Dan Carpenter)
- mfd: axp20x: Update AXP288 volatile ranges (Hans de Goede)
- NTB: perf: Fix an error code in perf_setup_inbuf() (Yang Li)
- NTB: Fix an error code in ntb_msit_probe() (Yang Li)
- ethtool: Fix an error code in cxgb2.c (Yang Li)
- PCI: ibmphp: Fix double unmap of io_mem (Vishal Aslot)
- block, bfq: honor already-setup queue merges (Paolo Valente)
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas)
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Ryoga Saito)
- PCI: Add ACS quirks for Cavium multi-function devices (George Cherian)
- tracing/probes: Reject events which have the same name of existing one (Masami Hiramatsu)
- mfd: Don't use irq_create_mapping() to resolve a mapping (Marc Zyngier)
- fuse: fix use after free in fuse_read_interrupt() (Miklos Szeredi)
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (Wasim Khan)
- mfd: db8500-prcmu: Adjust map to reality (Linus Walleij)
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal)
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() (David Hildenbrand)
- net: hns3: fix the timing issue of VF clearing interrupt sources (Jiaran Zhang)
- net: hns3: disable mac in flr process (Yufeng Mo)
- net: hns3: change affinity_mask to numa node range (Yufeng Mo)
- net: hns3: pad the short tunnel frame before sending to hardware (Yufeng Mo)
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (Nicholas Piggin)
- ibmvnic: check failover_pending in login response (Sukadev Bhattiprolu)
- dt-bindings: arm: Fix Toradex compatible typo (David Heidelberg)
- qed: Handle management FW error (Shai Malin)
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (zhenggy)
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (Vladimir Oltean)
- net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet)
- vhost_net: fix OoB on sendmsg() failure. (Paolo Abeni)
- events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers)
- net/mlx5: Fix potential sleeping in atomic context (Maor Gottlieb)
- net/mlx5: FWTrace, cancel work on alloc pd error flow (Saeed Mahameed)
- perf machine: Initialize srcline string member in add_location struct (Michael Petlan)
- tipc: increase timeout in tipc_sk_enqueue() (Hoang Le)
- r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli)
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang)
- ptp: dp83640: don't define PAGE0 (Randy Dunlap)
- net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet)
- tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long)
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport)
- s390/sclp: fix Secure-IPL facility detection (Alexander Egorenkov)
- drm/etnaviv: add missing MMU context put when reaping MMU mapping (Lucas Stach)
- drm/etnaviv: reference MMU context when setting up hardware state (Lucas Stach)
- drm/etnaviv: fix MMU context leak on GPU reset (Lucas Stach)
- drm/etnaviv: exec and MMU state is lost when resetting the GPU (Lucas Stach)
- drm/etnaviv: keep MMU context across runtime suspend/resume (Lucas Stach)
- drm/etnaviv: stop abusing mmu_context as FE running marker (Lucas Stach)
- drm/etnaviv: put submit prev MMU context when it exists (Lucas Stach)
- drm/etnaviv: return context from etnaviv_iommu_context_get (Lucas Stach)
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (Ernst Sjöstrand)
- PCI: Add AMD GPU multi-function power dependencies (Evan Quan)
- PM: base: power: don't try to use non-existing RTC for storing data (Juergen Gross)
- arm64/sve: Use correct size when reinitialising SVE state (Mark Brown)
- xen: reset legacy rtc flag for PV domU (Juergen Gross)
- btrfs: fix upper limit for max_inline for page size 64K (Anand Jain)
- drm/panfrost: Clamp lock region to Bifrost minimum (Alyssa Rosenzweig)
- drm/panfrost: Use u64 for size in lock_region (Alyssa Rosenzweig)
- drm/panfrost: Simplify lock_region calculation (Alyssa Rosenzweig)
- drm/amdgpu: Fix BUG_ON assert (Andrey Grodzovsky)
- drm/msi/mdp4: populate priv->kms in mdp4_kms_init (David Heidelberg)
- net: dsa: lantiq_gswip: fix maximum frame length (Jan Hoffmann)
- lib/test_stackinit: Fix static initializer test (Kees Cook)
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda)
- memcg: enable accounting for pids in nested pid namespaces (Vasily Averin)
- mm,vmscan: fix divide by zero in get_scan_count (Rik van Riel)
- mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian)
- s390/pv: fix the forcing of the swiotlb (Halil Pasic)
- cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat)
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap)
- scsi: qla2xxx: Changes to support kdump kernel (Saurav Kashyap)
- scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki)
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() (chenying)
- parisc: fix crash with signals and alloca (Mikulas Patocka)
- net: w5100: check return value after calling platform_get_resource() (Yang Yingliang)
- fix array-index-out-of-bounds in taprio_change (Haimin Zhang)
- net: fix NULL pointer reference in cipso_v4_doi_free (王贇)
- ath9k: fix sleeping in atomic context (Miaoqing Pan)
- ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen)
- parport: remove non-zero check on count (Colin Ian King)
- net/mlx5: DR, Enable QP retransmission (Yevgeny Kliteynik)
- iwlwifi: mvm: fix access to BSS elements (Johannes Berg)
- iwlwifi: mvm: avoid static queue number aliasing (Johannes Berg)
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed (Zhang Qilong)
- drm/amdkfd: Account for SH/SE count when setting up cu masks. (Sean Keely)
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo)
- ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang)
- usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan)
- usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam)
- usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova)
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" (Mathias Nyman)
- cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui)
- mmc: core: Return correct emmc response in case of ioctl error (Nishad Kamdar)
- selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian)
- mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb)
- mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani)
- of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS (Marc Zyngier)
- ASoC: Intel: Skylake: Fix passing loadable flag for module (Gustaw Lewandowski)
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (Cezary Rojewski)
- btrfs: tree-log: check btrfs_lookup_data_extent return value (Marcos Paulo de Souza)
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch (Arnd Bergmann)
- drm/exynos: Always initialize mapping in exynos_drm_register_dma() (Nathan Chancellor)
- lockd: lockd server-side shouldn't set fl_ops (J. Bruce Fields)
- usb: chipidea: host: fix port index underflow and UBSAN complains (Li Jun)
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson)
- staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook)
- rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields)
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD (Luke Hsiao)
- serial: sh-sci: fix break handling for sysrq (Ulrich Hecht)
- opp: Don't print an error if required-opps is missing (Rajendra Nayak)
- Bluetooth: Fix handling of LE Enhanced Connection Complete (Luiz Augusto von Dentz)
- nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data (Sagi Grimberg)
- arm64: dts: ls1046a: fix eeprom entries (Raag Jadav)
- arm64: tegra: Fix compatible string for Tegra132 CPUs (Thierry Reding)
- ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner)
- mac80211: Fix monitor MTU limit so that A-MSDUs get through (Johan Almbladh)
- drm/display: fix possible null-pointer dereference in dcn10_set_clock() (Tuo Li)
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li)
- net/mlx5: Fix variable type to match 64bit (Eran Ben Elisha)
- Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi)
- Bluetooth: schedule SCO timeouts with delayed_work (Desmond Cheong Zhi Xi)
- selftests/bpf: Fix xdp_tx.c prog section name (Jussi Maki)
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (David Heidelberg)
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor)
- arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul)
- ARM: dts: imx53-ppd: Fix ACHC entry (Sebastian Reichel)
- media: tegra-cec: Handle errors of clk_prepare_enable() (Evgeny Novikov)
- media: TDA1997x: fix tda1997x_query_dv_timings() return value (Krzysztof Hałasa)
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil)
- media: imx258: Limit the max analogue gain to 480 (Umang Jain)
- media: imx258: Rectify mismatch of VTS value (Laurent Pinchart)
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output (Hans de Goede)
- arm64: tegra: Fix Tegra194 PCIe EP compatible string (Vidya Sagar)
- bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Yufeng Mo)
- workqueue: Fix possible memory leaks in wq_numa_init() (Zhen Lei)
- Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi)
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko)
- samples: bpf: Fix tracex7 error raised on the missing argument (Juhee Kang)
- staging: ks7010: Fix the initialization of the 'sleep_status' structure (Christophe JAILLET)
- serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman)
- hvsi: don't panic on tty_register_driver failure (Jiri Slaby)
- xtensa: ISS: don't panic in rs_init (Jiri Slaby)
- serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki)
- s390: make PCI mio support a machine flag (Niklas Schnelle)
- s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens)
- flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva)
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva)
- video: fbdev: riva: Error out if 'pixclock' equals zero (Zheyu Ma)
- video: fbdev: kyro: Error out if 'pixclock' equals zero (Zheyu Ma)
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero (Zheyu Ma)
- bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh)
- bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh)
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex (Anson Jacob)
- drm/amd/display: Fix timer_per_pixel unit error (Oliver Logush)
- tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma)
- staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven)
- usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham)
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() (Evgeny Novikov)
- usb: gadget: u_ether: fix a potential null pointer dereference (Maciej Żenczykowski)
- usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv)
- usb: host: fotg210: fix the endpoint's transactional opportunities calculation (Kelly Devilliv)
- igc: Check if num of q_vectors is smaller than max before array access (Sasha Neftin)
- drm: avoid blocking in drm_clients_info's rcu section (Desmond Cheong Zhi Xi)
- Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang)
- netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng)
- video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma)
- ARM: dts: qcom: apq8064: correct clock names (David Heidelberg)
- iavf: fix locking of critical sections (Stefan Assmann)
- iavf: do not override the adapter state in the watchdog task (Stefan Assmann)
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron)
- tipc: keep the skb in rcv queue until the whole data is read (Xin Long)
- PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki)
- crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson)
- media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab)
- ASoC: atmel: ATMEL drivers don't need HAS_DMA (Randy Dunlap)
- drm/amdgpu: Fix amdgpu_ras_eeprom_init() (Luben Tuikov)
- userfaultfd: prevent concurrent API initialization (Nadav Amit)
- kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y (Masahiro Yamada)
- MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel)
- f2fs: fix to unmap pages from userspace process in punch_hole() (Chao Yu)
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() (Chao Yu)
- f2fs: fix to account missing .skipped_gc_rwsem (Chao Yu)
- KVM: PPC: Fix clearing never mapped TCEs in realmode (Alexey Kardashevskiy)
- clk: at91: clk-generated: Limit the requested rate to our range (Codrin Ciubotariu)
- clk: at91: clk-generated: pass the id of changeable parent at registration (Claudiu Beznea)
- clk: at91: sam9x60: Don't use audio PLL (Codrin Ciubotariu)
- fscache: Fix cookie key hashing (David Howells)
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (Hans de Goede)
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (Nicholas Piggin)
- HID: i2c-hid: Fix Elan touchpad regression (Jim Broadus)
- scsi: target: avoid per-loop XCOPY buffer allocations (David Disseldorp)
- powerpc/config: Renable MTD_PHYSMAP_OF (Joel Stanley)
- scsi: qedf: Fix error codes in qedf_alloc_global_queues() (Dan Carpenter)
- scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter)
- scsi: smartpqi: Fix an error code in pqi_get_raid_map() (Dan Carpenter)
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei)
- scsi: fdomain: Fix error return code in fdomain_probe() (Wei Li)
- SUNRPC: Fix potential memory corruption (Trond Myklebust)
- dma-debug: fix debugfs initialization order (Anthony Iliopoulos)
- openrisc: don't printk() unconditionally (Randy Dunlap)
- f2fs: reduce the scope of setting fsck tag when de->name_len is zero (Yangtao Li)
- f2fs: show f2fs instance in printk_ratelimited (Chao Yu)
- RDMA/efa: Remove double QP type assignment (Leon Romanovsky)
- powerpc/stacktrace: Include linux/delay.h (Michal Suchanek)
- vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe)
- pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi)
- docs: Fix infiniband uverbs minor number (Leon Romanovsky)
- RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky)
- IB/hfi1: Adjust pkey entry in index 0 (Mike Marciniszyn)
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND (Christoph Hellwig)
- f2fs: quota: fix potential deadlock (Chao Yu)
- HID: input: do not report stylus battery state as "full" (Dmitry Torokhov)
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohár)
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohár)
- PCI: aardvark: Fix checking for PIO status (Evan Wang)
- PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon)
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczyński)
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behún)
- PCI/portdrv: Enable Bandwidth Notification only if port supports it (Stuart Hayes)
- ARM: 9105/1: atags_to_fdt: don't warn about stack size (David Heidelberg)
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede)
- dmaengine: imx-sdma: remove duplicated sdma_load_context (Robin Gong)
- Revert "dmaengine: imx-sdma: refine to load context only once" (Robin Gong)
- media: rc-loopback: return number of emitters rather than error (Sean Young)
- media: uvc: don't do DMA on stack (Mauro Carvalho Chehab)
- VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai)
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel)
- power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski)
- block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal)
- crypto: public_key: fix overflow during implicit conversion (zhenwei pi)
- arm64: head: avoid over-mapping in map_memory (Mark Rutland)
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (Iwona Winiarska)
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska)
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs (Manivannan Sadhasivam)
- pinctrl: ingenic: Fix incorrect pull up/down info (Paul Cercueil)
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast (Marc Zyngier)
- tools/thermal/tmon: Add cross compiling support (Rolf Eike Beer)
- 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha)
- xen: fix setting of max_pfn in shared_info (Juergen Gross)
- powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain)
- PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Górecki)
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel)
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel)
- btrfs: reset replace target device to allocation state on close (Desmond Cheong Zhi Xi)
- btrfs: wake up async_delalloc_pages waiters after submit (Josef Bacik)
- rtc: tps65910: Correct driver module alias (Dmitry Osipenko)
- LTS tag: v5.4.147 (Jack Vogel)
- Revert "time: Handle negative seconds correctly in timespec64_to_ns()" (Greg Kroah-Hartman)
- Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" (Greg Kroah-Hartman)
- Revert "block: nbd: add sanity check for first_minor" (Greg Kroah-Hartman)
- Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue" (Sasha Levin)
- LTS tag: v5.4.146 (Jack Vogel)
- clk: kirkwood: Fix a clocking boot regression (Linus Walleij)
- backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson)
- fbmem: don't allow too huge resolutions (Tetsuo Handa)
- IMA: remove the dependency on CRYPTO_MD5 (THOBY Simon)
- IMA: remove -Wmissing-prototypes warning (Austin Kim)
- fuse: flush extending writes (Miklos Szeredi)
- fuse: truncate pagecache on atomic_o_trunc (Miklos Szeredi)
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (Sean Christopherson)
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng)
- KVM: s390: index kvm->arch.idle_mask by vcpu_idx (Halil Pasic)
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger)
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op (Kim Phillips)
- tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi)
- time: Handle negative seconds correctly in timespec64_to_ns() (Lukas Hannen)
- bpf: Fix pointer arithmetic mask tightening under state pruning (Daniel Borkmann)
- bpf: verifier: Allocate idmap scratch in verifier env (Lorenz Bauer)
- bpf: Fix leakage due to insufficient speculative store bypass mitigation (Daniel Borkmann)
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4 (Daniel Borkmann)
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb() (Eric Dumazet)
- octeontx2-af: Fix loop in free and unmap counter (Subbaraya Sundeep)
- net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren)
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang)
- ipv4: make exception cache less predictible (Eric Dumazet)
- ipv6: make exception cache less predictible (Eric Dumazet)
- brcmfmac: pcie: fix oops on failure to resume and reprobe (Ahmad Fatoum)
- bcma: Fix memory leak for internally-handled cores (Zenghui Yu)
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter)
- ASoC: wcd9335: Disable irq on slave ports in the remove function (Christophe JAILLET)
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (Christophe JAILLET)
- ASoC: wcd9335: Fix a double irq free in the remove function (Christophe JAILLET)
- tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan)
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (Christophe JAILLET)
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov)
- i2c: mt65xx: fix IRQ check (Sergey Shtylyov)
- CIFS: Fix a potencially linear read overflow (Len Baker)
- bpf: Fix possible out of bound write in narrow load handling (Andrey Ignatov)
- mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- ASoC: Intel: Skylake: Fix module resource and format selection (Cezary Rojewski)
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (Cezary Rojewski)
- rsi: fix an error code in rsi_probe() (Dan Carpenter)
- rsi: fix error code in rsi_load_9116_firmware() (Dan Carpenter)
- i2c: s3c2410: fix IRQ check (Sergey Shtylyov)
- i2c: iop3xx: fix deferred probing (Sergey Shtylyov)
- Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin)
- mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu)
- usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova)
- nfsd4: Fix forced-expiry locking (J. Bruce Fields)
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington)
- mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang)
- usb: phy: tahvo: add IRQ check (Sergey Shtylyov)
- usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov)
- Bluetooth: Move shutdown callback before flushing tx and rx queue (Kai-Heng Feng)
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (Geert Uytterhoeven)
- usb: phy: twl6030: add IRQ checks (Sergey Shtylyov)
- usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov)
- usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov)
- drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET)
- Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi)
- counter: 104-quad-8: Return error when invalid mode during ceiling_write (William Breathitt Gray)
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)
- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs (Dmitry Baryshkov)
- PM: EM: Increase energy calculation precision (Lukasz Luba)
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (Colin Ian King)
- debugfs: Return error during {full/open}_proxy_open() on rmmod (Sven Eckelmann)
- soc: qcom: smsm: Fix missed interrupts if state changes while masked (Stephan Gerhold)
- PCI: PM: Enable PME if it can be signaled from D3cold (Rafael J. Wysocki)
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (Rafael J. Wysocki)
- media: venus: venc: Fix potential null pointer dereference on pointer fmt (Colin Ian King)
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (Dongliang Mu)
- leds: trigger: audio: Add an activate callback to ensure the initial brightness is set (Hans de Goede)
- leds: lt3593: Put fwnode in any case during ->probe() (Andy Shevchenko)
- i2c: highlander: add IRQ check (Sergey Shtylyov)
- net: cipso: fix warnings in netlbl_cipsov4_add_std (Pavel Skripkin)
- cgroup/cpuset: Fix a partition bug with hotplug (Waiman Long)
- net/mlx5e: Prohibit inner indir TIRs in IPoIB (Maxim Mikityanskiy)
- ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties (Anand Moon)
- ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties (Anand Moon)
- ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties (Anand Moon)
- ARM: dts: meson8: Use a higher default GPU clock frequency (Martin Blumenstingl)
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos (Martin KaFai Lau)
- drm/amdgpu/acp: Make PM domain really work (Kai-Heng Feng)
- netns: protect netns ID lookups with RCU (Guillaume Nault)
- 6lowpan: iphc: Fix an off-by-one check of array index (Colin Ian King)
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (Dan Carpenter)
- media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats (Philipp Zabel)
- media: go7007: remove redundant initialization (Pavel Skripkin)
- media: dvb-usb: Fix error handling in dvb_usb_i2c_init (Dongliang Mu)
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (Dongliang Mu)
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (Dongliang Mu)
- soc: qcom: rpmhpd: Use corner in power_off (Bjorn Andersson)
- arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties (Geert Uytterhoeven)
- ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi (Dylan Hung)
- bpf: Fix potential memleak and UAF in the verifier. (He Fengqing)
- bpf: Fix a typo of reuseport map in bpf.h. (Kuniyuki Iwashima)
- media: cxd2880-spi: Fix an error handling path (Christophe JAILLET)
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally (Geert Uytterhoeven)
- media: TDA1997x: enable EDID support (Krzysztof Hałasa)
- drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() (Wei Yongjun)
- EDAC/i10nm: Fix NVDIMM detection (Qiuxu Zhuo)
- spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible (Quanyang Wang)
- spi: sprd: Fix the wrong WDG_LOAD_VAL (Chunyan Zhang)
- regulator: vctrl: Avoid lockdep warning in enable/disable ops (Chen-Yu Tsai)
- regulator: vctrl: Use locked regulator_get_voltage in probe path (Chen-Yu Tsai)
- certs: Trigger creation of RSA module signing key if it's not an RSA key (Stefan Berger)
- crypto: qat - use proper type for vf_mask (Giovanni Cabiddu)
- block: nbd: add sanity check for first_minor (Pavel Skripkin)
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel (Phong Hoang)
- lib/mpi: use kcalloc in mpi_resize (Hongbo Li)
- genirq/timings: Fix error return code in irq_timings_test_irqs() (Zhen Lei)
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- sched: Fix UCLAMP_FLAG_IDLE setting (Quentin Perret)
- m68k: emu: Fix invalid free in nfeth_cleanup() (Pavel Skripkin)
- s390/debug: fix debug area life cycle (Peter Oberparleiter)
- s390/kasan: fix large PMD pages address alignment check (Alexander Gordeev)
- udf_get_extendedattr() had no boundary checks. (Stian Skjelstad)
- fcntl: fix potential deadlock for &fasync_struct.fa_lock (Desmond Cheong Zhi Xi)
- crypto: qat - do not export adf_iov_putmsg() (Giovanni Cabiddu)
- crypto: qat - fix naming for init/shutdown VF to PF notifications (Marco Chiappero)
- crypto: qat - fix reuse of completion variable (Marco Chiappero)
- crypto: qat - handle both source of interrupt in VF ISR (Giovanni Cabiddu)
- crypto: qat - do not ignore errors from enable_vf2pf_comms() (Giovanni Cabiddu)
- libata: fix ata_host_start() (Damien Le Moal)
- s390/cio: add dev_busid sysfs entry for each subchannel (Vineeth Vijayan)
- power: supply: max17042_battery: fix typo in MAx17042_TOFF (Sebastian Krzyszkowiak)
- nvmet: pass back cntlid on successful completion (Amit Engel)
- nvme-rdma: don't update queue count when failing to set io queues (Ruozhu Li)
- nvme-tcp: don't update queue count when failing to set io queues (Ruozhu Li)
- bcache: add proper error unwinding in bcache_device_init (Christoph Hellwig)
- isofs: joliet: Fix iocharset=utf8 mount option (Pali Rohár)
- udf: Fix iocharset=utf8 mount option (Pali Rohár)
- udf: Check LVID earlier (Jan Kara)
- hrtimer: Ensure timerfd notification for HIGHRES=n (Thomas Gleixner)
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() (Thomas Gleixner)
- posix-cpu-timers: Force next expiration recalc after itimer reset (Frederic Weisbecker)
- rcu/tree: Handle VM stoppage in stall detection (Sergey Senozhatsky)
- sched/deadline: Fix missing clock update in migrate_task_rq_dl() (Dietmar Eggemann)
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() (Tony Lindgren)
- power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors (Hans de Goede)
- sched/deadline: Fix reset_on_fork reporting of DL tasks (Quentin Perret)
- crypto: mxs-dcp - Check for DMA mapping errors (Sean Anderson)
- regmap: fix the offset of register error log (Jeongtae Park)
- locking/mutex: Fix HANDOFF condition (Peter Zijlstra)
- LTS tag: v5.4.145 (Jack Vogel)
- PCI: Call Max Payload Size-related fixup quirks early (Marek Behún)
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions (Paul Gortmaker)
- xhci: fix unsafe memory usage in xhci tracing (Mathias Nyman)
- usb: mtu3: fix the wrong HS mult value (Chunfeng Yun)
- usb: mtu3: use @mult for HS isoc or intr (Chunfeng Yun)
- usb: host: xhci-rcar: Don't reload firmware after the completion (Yoshihiro Shimoda)
- ALSA: usb-audio: Add registration quirk for JBL Quantum 800 (Alexander Tsoy)
- Revert "btrfs: compression: don't try to compress if we don't have enough pages" (Qu Wenruo)
- x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC power-gating (Suravee Suthikulpanit)
- Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" (Hayes Wang)
- mm/page_alloc: speed up the iteration of max_order (Muchun Song)
- net: ll_temac: Remove left-over debug message (Esben Haabendal)
- powerpc/boot: Delete unneeded .globl _zimage_start (Fangrui Song)
- ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) (Mathieu Desnoyers)
- USB: serial: mos7720: improve OOM-handling in read_mos_reg() (Tom Rix)
- igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian)
- media: stkwebcam: fix memory leak in stk_camera_probe (Pavel Skripkin)
- ARC: wireup clone3 syscall (Vineet Gupta)
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (Zubin Mithra)
- ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 (Takashi Iwai)
- ARM: 8918/2: only build return_address() if needed (Ben Dooks)
- cryptoloop: add a deprecation warning (Christoph Hellwig)
- perf/x86/amd/power: Assign pmu.module (Kim Phillips)
- perf/x86/amd/ibs: Work around erratum #1197 (Kim Phillips)
- perf/x86/intel/pt: Fix mask of num_address_ranges (Xiaoyao Li)
- qede: Fix memset corruption (Shai Malin)
- net: macb: Add a NULL check on desc_ptp (Harini Katakam)
- qed: Fix the VF msix vectors flow (Shai Malin)
- reset: reset-zynqmp: Fixed the argument data type (Sai Krishna Potthuri)
- gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats (Krzysztof Hałasa)
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG (Randy Dunlap)
- kthread: Fix PF_KTHREAD vs to_kthread() race (Peter Zijlstra)
- ubifs: report correct st_size for encrypted symlinks (Eric Biggers)
- f2fs: report correct st_size for encrypted symlinks (Eric Biggers)
- ext4: report correct st_size for encrypted symlinks (Eric Biggers)
- fscrypt: add fscrypt_symlink_getattr() for computing st_size (Eric Biggers)
- LTS tag: v5.4.144 (Jack Vogel)
- audit: move put_tree() to avoid trim_trees refcount underflow and UAF (Richard Guy Briggs)
- net: don't unconditionally copy_from_user a struct ifreq for socket ioctls (Peter Collingbourne)
- Revert "parisc: Add assembly implementations for memset, strlen, strcpy, strncpy and strcat" (Helge Deller)
- Revert "floppy: reintroduce O_NDELAY fix" (Denis Efremov)
- arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88 (Petr Vorel)
- KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs (Sean Christopherson)
- net: dsa: mt7530: fix VLAN traffic leaks again (DENG Qingfang)
- bpf: Fix cast to pointer from integer of different size warning (Andrii Nakryiko)
- bpf: Track contents of read-only maps as scalars (Andrii Nakryiko)
- vt_kdsetmode: extend console locking (Linus Torvalds)
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs)
- drm: Copy drm_wait_vblank to user before returning (Mark Yacoub)
- qed: Fix null-pointer dereference in qed_rdma_create_qp() (Shai Malin)
- qed: qed ll2 race condition fixes (Shai Malin)
- vringh: Use wiov->used to check for read/write desc order (Neeraj Upadhyay)
- virtio_pci: Support surprise removal of virtio pci device (Parav Pandit)
- virtio: Improve vq->broken access to avoid any compiler optimization (Parav Pandit)
- opp: remove WARN when no valid OPPs remain (Michał Mirosław)
- perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32 (Colin Ian King)
- usb: gadget: u_audio: fix race condition on endpoint stop (Jerome Brunet)
- drm/i915: Fix syncmap memory leak (Matthew Brost)
- net: hns3: fix get wrong pfc_en when query PFC configuration (Guangbin Huang)
- net: hns3: fix duplicate node in VLAN list (Guojia Liao)
- net: hns3: clear hardware resource when loading driver (Yufeng Mo)
- rtnetlink: Return correct error on changing device netns (Andrey Ignatov)
- net: marvell: fix MVNETA_TX_IN_PRGRS bit number (Maxim Kiselev)
- xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' (Christophe JAILLET)
- ip_gre: add validation for csum_start (Shreyansh Chouhan)
- RDMA/efa: Free IRQ vectors on error flow (Gal Pressman)
- e1000e: Fix the max snoop/no-snoop latency for 10M (Sasha Neftin)
- IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() (Tuo Li)
- RDMA/bnxt_re: Add missing spin lock initialization (Naresh Kumar PBS)
- scsi: core: Fix hang of freezing queue between blocking and running device (Li Jinlin)
- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (Wesley Cheng)
- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (Thinh Nguyen)
- USB: serial: option: add new VID/PID to support Fibocom FG150 (Zhengjun Zhang)
- Revert "USB: serial: ch341: fix character loss at high transfer rates" (Johan Hovold)
- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (Stefan Mätje)
- mm, oom: make the calculation of oom badness more accurate (Yafang Shao)
- mmc: sdhci-msm: Update the software timeout value for sdhc (Shaik Sajida Bhanu)
- ovl: fix uninitialized pointer read in ovl_lookup_real_one() (Miklos Szeredi)
- once: Fix panic when module unload (Kefeng Wang)
- netfilter: conntrack: collect all entries in one cycle (Florian Westphal)
- ARC: Fix CONFIG_STACKDEPOT (Guenter Roeck)
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [Orabug: 33524419]
- netfilter: conntrack: improve RST handling when tuple is re-used (Ali Abdallah) [Orabug: 33524419]
- net: openvswitch: Be liberal in tcp conntrack. (Numan Siddique) [Orabug: 33524419]
- RDS: Remove obsolete flag (Hans Westgaard Ry) [Orabug: 33516781]
- RDMA/mlx5: Avoid taking MRs from larger MR cache pools when a pool is empty (Aharon Landau) [Orabug: 33514376]
- IB/mlx4: Implement backend callback for "ib_get_vector_irqn" (Gerd Rausch) [Orabug: 33509436]
- rds: Fix leak in rds_init (Håkon Bugge) [Orabug: 33488609]
- rds: Include pid in the rds_sock structs. (Rohit Nair) [Orabug: 33481151]
- fs/dcache: add trace points for negative dentry pruning (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: remove global pool for negative dentry percpu counters (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: enforce a hard limit on the negative dentry count (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: Estimate the number of negative dentries to prune per filesystem (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: change name and granularity of negative dentry sysctl parameter (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: schedule only one instance of negative dentry shrinker (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: correct the usage of static_key for negative dentry (Gautham Ananthakrishna) [Orabug: 33468830]
- fs/dcache: Spread negative dentry pruning across multiple CPUs (Waiman Long) [Orabug: 33468830]
- fs/dcache: Enable automatic pruning of negative dentries (Waiman Long) [Orabug: 33468830]
- fs/dcache: Add sysctl parameter neg-dentry-pc as a soft limit on negative dentries (Waiman Long) [Orabug: 33468830]
- net/rds: Re-factor rds_user_conn_paths_drop (Freddy Carrillo) [Orabug: 33441254]
- RDS-IB: Add garbage-collection to cache (Hans Westgaard Ry) [Orabug: 33426206]
- RDS-IB: Fix cachehit statistics (Hans Westgaard Ry) [Orabug: 33426206]
- RDS-IB: Fix cache-allocation statistics (Hans Westgaard Ry) [Orabug: 33426206]
- xfs: show the proper user quota options (Allison Henderson) [Orabug: 33313307]
- xfs: also remove cached ACLs when removing the underlying attr (Christoph Hellwig) [Orabug: 32029884]
- net: mana: Prefer struct_size over open coded arithmetic (Len Baker) [Orabug: 33485604]
- net: mana: Add WARN_ON_ONCE in case of CQE read overflow (Haiyang Zhang) [Orabug: 33485604]
- net: mana: Add support for EQ sharing (Haiyang Zhang) [Orabug: 33485604]
- net: mana: Move NAPI from EQ to CQ (Haiyang Zhang) [Orabug: 33485604]
More information about the El-errata
mailing list