[El-errata] ELSA-2021-9349 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Jul 13 07:19:04 PDT 2021
Oracle Linux Security Advisory ELSA-2021-9349
http://linux.oracle.com/errata/ELSA-2021-9349.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-4.14.35-2047.505.4.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-2047.505.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-2047.505.4.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-2047.505.4.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-2047.505.4.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-2047.505.4.el7uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-2047.505.4.el7uek.src.rpm
Related CVEs:
CVE-2021-23133
CVE-2021-32399
CVE-2021-33033
CVE-2021-33034
Description of changes:
[4.14.35-2047.505.4.el7uek]
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33044345]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 32804265]
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 32863569]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 32863569]
- xfs: fix xlog_finish_defer_ops (Wengang Wang) [Orabug: 32982355]
- Revert "Allow mce to reset instead of panic on UE" (William Roche) [Orabug: 32820277]
[4.14.35-2047.505.3.el7uek]
- uek-rpm: match Pensando config-aarch-embedded2 with the T93's config (Thomas Tai) [Orabug: 32972392]
- quota: Fix memory leak when handling corrupted quota file (Jan Kara) [Orabug: 33020349]
- xen/netback: fix spurious event detection for common event case (Juergen Gross) [Orabug: 33020349]
- Input: i8042 - unbreak Pegatron C15B (Alexey Dobriyan) [Orabug: 33020349]
- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum) [Orabug: 32983664]
- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum) [Orabug: 32983664]
- rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Håkon Bugge) [Orabug: 32981187]
- scsi: smartpqi: Remove unused functions (Bart Van Assche) [Orabug: 32967877]
- scsi: smartpqi: Fix device pointer variable reference static checker issue (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Fix blocks_per_row static checker issue (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Update version to 2.1.8-045 (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add new PCI IDs (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Correct system hangs when resuming from hibernation (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update enclosure identifier in sysfs (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Add additional logging for LUN resets (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update SAS initiator_port_protocols and target_port_protocols (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Add phy ID support for the physical drives (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Convert snprintf() to scnprintf() (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Fix driver synchronization issues (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update device scan operations (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update OFA management (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update RAID bypass handling (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update suspend/resume and shutdown (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Synchronize device resets with mutex (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update soft reset management for OFA (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update event handler (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for wwid (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Remove timeouts from internal cmds (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Disable WRITE SAME for HBA NVMe disks (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add host level stream detection enable (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add stream detection (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Align code with oob driver (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for long firmware version (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for BMIC sense feature cmd and feature bits (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Add support for RAID1 writes (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add support for RAID5 and RAID6 writes (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Refactor scatterlist code (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Refactor aio submission code (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add support for new product ids (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Correct request leakage during reset operations (Murthy Bhat) [Orabug: 32967877]
- scsi: smartpqi: Update version to 1.2.16-012 (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Correct pqi_sas_smp_handler busy condition (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Correct driver removal with HBA disks (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Update copyright (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Bump version to 1.2.16-010 (Don Brace) [Orabug: 32967877]
- scsi: smartpqi: Add RAID bypass counter (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Support device deletion via sysfs (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Avoid crashing kernel for controller issues (Kevin Barnett) [Orabug: 32967877]
- scsi: smartpqi: Update logical volume size after expansion (Mahesh Rajashekhara) [Orabug: 32967877]
- scsi: smartpqi: Add id support for SmartRAID 3152-8i (Mahesh Rajashekhara) [Orabug: 32967877]
- scsi: smartpqi: Identify physical devices without issuing INQUIRY (Kevin Barnett) [Orabug: 32967877]
- remove ioremap_nocache and devm_ioremap_nocache (Christoph Hellwig) [Orabug: 32967877]
- treewide: Use sizeof_field() macro (Pankaj Bharadiya) [Orabug: 32967877]
- block-mq: fix kabi error (Junxiao Bi) [Orabug: 32957529]
- blk-mq: fix blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957529]
- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig) [Orabug: 32957529]
- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei) [Orabug: 32957529]
- blk-mq: add blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957529]
- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka) [Orabug: 32912101] {CVE-2021-33034}
- rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge) [Orabug: 32762731]
- IB/cma: Introduce rdma_set_min_rnr_timer() (Håkon Bugge) [Orabug: 32762731]
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed) [Orabug: 32134986]
[4.14.35-2047.505.2.el7uek]
- KVM: x86: Consider LAPIC TSC-Deadline timer expired if deadline too short (Liran Alon) [Orabug: 32992668]
- secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly) [Orabug: 32982947]
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki) [Orabug: 32977843]
- ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki) [Orabug: 32977843]
- uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi) [Orabug: 32965746]
- {net, IB}/mlx4: Initialize CQ buffers in the driver when possible (Daniel Jurgens) [Orabug: 32913303]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma) [Orabug: 32912035] {CVE-2021-32399}
- IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge) [Orabug: 32816367]
- RDMA/mlx4: Enable querying AH for XRC QP types (Avihai Horon) [Orabug: 32568907]
- RDMA/mlx5: Enable querying AH for XRC QP types (Avihai Horon) [Orabug: 32568907]
- uek-rpm: add missing ARM_SPE_PMU for aarch64 (Russell King) [Orabug: 27825982]
- Revert "drivers/perf: arm_spe_pmu does not build as a module" (Tom Saeger) [Orabug: 27825982]
- perf: arm_spe: Enable ACPI/Platform automatic module loading (Jeremy Linton) [Orabug: 27825982]
- arm_pmu: acpi: spe: Add initial MADT/SPE probing (Jeremy Linton) [Orabug: 27825982]
- ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens (Jeremy Linton) [Orabug: 27825982]
- ACPI/PPTT: Modify node flag detection to find last IDENTICAL (Jeremy Linton) [Orabug: 27825982]
- drivers/perf: arm_spe: Don't error on high-order pages for aux buf (Will Deacon) [Orabug: 27825982]
- ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags (Erik Schmauss) [Orabug: 27825982]
- ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC (Erik Schmauss) [Orabug: 27825982]
- perf: arm_spe: handle devm_kasprintf() failure (Nicholas Mc Guire) [Orabug: 27825982]
- perf: arm_spe: Enable automatic DT loading (Jeremy Linton) [Orabug: 27825982]
- drivers/perf: Initialise return value in armpmu_request_irqs() (Will Deacon) [Orabug: 27825982]
- ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set (Sudeep Holla) [Orabug: 27825982]
- ACPI / PPTT: fix build when CONFIG_ACPI_PPTT is not enabled (Sudeep Holla) [Orabug: 27825982]
- arm_pmu: Use disable_irq_nosync when disabling SPI in CPU teardown hook (Will Deacon) [Orabug: 27825982]
- ACPICA: Restructure ACPI table files (Erik Schmauss) [Orabug: 27825982]
- arm_pmu: acpi: request IRQs up-front (Mark Rutland) [Orabug: 27825982]
- arm_pmu: note IRQs and PMUs per-cpu (Mark Rutland) [Orabug: 27825982]
- arm_pmu: explicitly enable/disable SPIs at hotplug (Mark Rutland) [Orabug: 27825982]
- arm_pmu: acpi: check for mismatched PPIs (Mark Rutland) [Orabug: 27825982]
- arm_pmu: add armpmu_alloc_atomic() (Mark Rutland) [Orabug: 27825982]
- arm_pmu: fold platform helpers into platform code (Mark Rutland) [Orabug: 27825982]
- arm_pmu: kill arm_pmu_platdata (Mark Rutland) [Orabug: 27825982]
- arm/arm64: pmu: Distinguish percpu irq and percpu_devid irq (Julien Thierry) [Orabug: 27825982]
- irqdesc: Add function to identify percpu_devid irqs (Julien Thierry) [Orabug: 27825982]
- perf/core: Export AUX buffer helpers to modules (Will Deacon) [Orabug: 27825982]
- genirq: export irq_get_percpu_devid_partition to modules (Will Deacon) [Orabug: 27825982]
- Linux 4.14.219 (Greg Kroah-Hartman)
- tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN (Pengcheng Yang)
- team: protect features update by RCU to avoid deadlock (Ivan Vecera)
- NFC: fix possible resource leak (Pan Bian)
- NFC: fix resource leak when target index is invalid (Pan Bian)
- iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)
- iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)
- x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int $0x80" (Andy Lutomirski)
- x86/entry/64/compat: Preserve r8-r11 in int $0x80 (Andy Lutomirski)
- can: dev: prevent potential information leak in can_fill_info() (Dan Carpenter)
- mac80211: pause TX while changing interface type (Johannes Berg)
- iwlwifi: pcie: reschedule in long-running memory reads (Johannes Berg)
- iwlwifi: pcie: use jiffies for memory read spin time limit (Johannes Berg)
- RDMA/cxgb4: Fix the reported max_recv_sge value (Kamal Heib)
- xfrm: Fix oops in xfrm_replay_advance_bmp (Shmulik Ladkani)
- netfilter: nft_dynset: add timeout extension to template (Pablo Neira Ayuso)
- ARM: imx: build suspend-imx6.S with arm instruction set (Max Krummenacher)
- xen-blkfront: allow discard-* nodes to be optional (Roger Pau Monne)
- mt7601u: fix rx buffer refcounting (Lorenzo Bianconi)
- mt7601u: fix kernel crash unplugging the device (Lorenzo Bianconi)
- leds: trigger: fix potential deadlock with libata (Andrea Righi)
- xen: Fix XenStore initialisation for XS_LOCAL (David Woodhouse)
- KVM: x86: get smi pending status correctly (Jay Zhou)
- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (Like Xu)
- drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] (Claudiu Beznea)
- drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs (Sudeep Holla)
- net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family (Giacinto Cifelli)
- wext: fix NULL-ptr-dereference with cfg80211's lack of commit() (Johannes Berg)
- ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming (Koen Vandeputte)
- ACPI: sysfs: Prefer "compatible" modalias (Kai-Heng Feng)
- Linux 4.14.218 (Greg Kroah-Hartman)
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
- fs: move I_DIRTY_INODE to fs.h (Christoph Hellwig)
- x86/boot/compressed: Disable relocation relaxation (Arvind Sankar)
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)
- Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)
- futex: futex_wake_op, fix sign_extend32 sign bits (Jiri Slaby)
- net: dsa: b53: fix an off by one in checking "vlan->vid" (Dan Carpenter)
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)
- compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)
- stm class: Fix module init return on allocation failure (Wang Hui)
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)
- xen: Fix event channel callback via INTX/GSI (David Woodhouse)
- scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)
- ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)
- drm/atomic: put state on error path (Pan Bian)
- dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)
- mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)
- ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)
- ALSA: hda/via: Add minimum mute flag (Takashi Iwai)
- ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)
- i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)
- Linux 4.14.217 (Greg Kroah-Hartman)
- spi: cadence: cache reference clock rate during probe (Michael Hennerich)
- net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)
- net: skbuff: disambiguate argument and member for skb_list_walk_safe helper (Jason A. Donenfeld)
- net: introduce skb_list_walk_safe for skb segment walking (Jason A. Donenfeld)
- net: use skb_list_del_init() to remove from RX sublists (Edward Cree)
- tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)
- rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)
- net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)
- net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)
- net: stmmac: Fixed mtu channged by cache aligned (David Wu)
- net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)
- net: dcb: Validate netlink message in DCB handler (Petr Machata)
- esp: avoid unneeded kmap_atomic call (Willem de Bruijn)
- rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)
- netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)
- nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)
- usb: ohci: Make distrust_firmware param default to false (Hamish Martin)
- netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)
- ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)
- ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)
- dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)
- net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf at avm.de)
- mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)
- RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)
- ext4: fix superblock checksum failure when setting password salt (Jan Kara)
- NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)
- pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)
- NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)
- ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)
- dump_common_audit_data(): fix racy accesses to ->d_name (Al Viro)
- ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)
- ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)
- net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)
- misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)
to fix build error on ARC (Randy Dunlap)
- ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)
- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)
- ARC: build: add boot_targets to PHONY (Masahiro Yamada)
- ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)
- ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)
- ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)
- r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)
- dm snapshot: flush merged data before committing metadata (Akilesh Kailash)
- mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)
- ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)
- MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)
- MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)
- ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)
[4.14.35-2047.505.1.el7uek]
- uek-rpm: config-aarch-embedded2 add missing networking options (Thomas Tai) [Orabug: 32961737]
- uek-rpm: config-aarch-embedded2 update for networking options (Thomas Tai) [Orabug: 32961737]
- RDS tcp loopback connection can hang (Rao Shoaib) [Orabug: 32926881]
- net/rds: Passive connections always yield (Gerd Rausch) [Orabug: 32925131]
- mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan) [Orabug: 32921246]
- net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch) [Orabug: 32908885]
- Linux 4.14.216 (Greg Kroah-Hartman)
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)
- block: fix use-after-free in disk_part_iter_next (Ming Lei)
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)
- wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)
- net/mlx5e: Fix two double free cases (Dinghao Liu)
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)
- iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)
- block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)
- wil6210: select CONFIG_CRC32 (Arnd Bergmann)
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)
- dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)
- spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)
- i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)
- ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)
- iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)
- iio: imu: st_lsm6dsx: flip irq return logic (Sean Nyekjaer)
- spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)
- ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)
- drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)
- vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)
- x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)
- net: fix pmtu check in nopmtudisc mode (Florian Westphal)
- net: ip: always refragment ip defragmented packets (Florian Westphal)
- net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)
- net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)
- powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)
- Linux 4.14.215 (Greg Kroah-Hartman)
- KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)
- x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)
- netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)
- netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)
- Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)
- ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)
- x86/mm: Fix leak of pmd ptlock (Dan Williams)
- USB: serial: keyspan_pda: remove unused variable (Johan Hovold)
- usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)
- usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)
- usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)
- USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)
- usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)
- usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)
- usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)
- USB: usblp: fix DMA to stack (Johan Hovold)
- USB: yurex: fix control-URB timeout handling (Johan Hovold)
- USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)
- USB: serial: option: add LongSung M5710 module support (Daniel Palmer)
- USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)
- usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)
- usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)
- USB: cdc-acm: blacklist another IR Droid device (Sean Young)
- usb: gadget: enable super speed plus (taehyun.cho)
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)
- net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)
- net: sched: prevent invalid Scell_log shift count (Randy Dunlap)
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)
- net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)
- CDC-NCM: remove "connected" log message (Roland Dreier)
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)
- net: hns: fix return value check in __lb_other_process() (Yunjian Wang)
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)
- net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)
- net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)
- net/ncsi: Use real net-device for response handler (John Wang)
- virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)
- qede: fix offload for IPIP tunnel packets (Manish Chopra)
- atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)
- ethernet: ucc_geth: set dev->max_mtu to 1518 (Rasmus Villemoes)
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)
- depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)
- lib/genalloc: fix the overflow when size is too big (Huang Shijie)
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() (Adrian Hunter)
- workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)
- kbuild: don't hardcode depmod path (Dominique Martinet)
- Linux 4.14.214 (Greg Kroah-Hartman)
- iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)
- iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)
- kdev_t: always inline major/minor helper functions (Josh Poimboeuf)
- dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)
- ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)
- module: delay kobject uevent until after module init call (Jessica Yu)
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)
- quota: Don't overflow quota file offsets (Jan Kara)
- module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)
- ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)
- media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)
- reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)
- of: fix linker-section match-table corruption (Johan Hovold)
(Petr Vorel)
- powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)
- USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)
- s390/dasd: fix hanging device offline processing (Stefan Haberland)
- vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)
- mm: memcontrol: implement lruvec stat functions on top of each other (Johannes Weiner)
- mm: memcontrol: eliminate raw access to stat and event counters (Johannes Weiner)
- ALSA: usb-audio: fix sync-ep altsetting sanity check (Johan Hovold)
- ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk (Alberto Aguirre)
- ALSA: hda/ca0132 - Fix work handling in delayed HP detection (Takashi Iwai)
- md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor)
- x86/entry/64: Add instruction suffix (Jan Beulich)
[4.14.35-2047.505.0.el7uek]
- cipso,calipso: resolve a number of problems with the DOI refcounts (Paul Moore) [Orabug: 32912072] {CVE-2021-33033}
- sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907969] {CVE-2021-23133} {CVE-2021-23133}
- scsi: core: add scsi_host_busy_iter() (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Validate io_req before others (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Set scsi_set_resid() only for underflow (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Fix memleak in vnic_dev_init_devcmd2 (Dinghao Liu) [Orabug: 32621218]
- scsi: fnic: Avoid looping in TRANS ETH on unload (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Change shost_printk() to FNIC_FCS_DBG() (Karan Tilak Kumar) [Orabug: 32621218]
- scsi: fnic: Simplify the return expression of vnic_wq_copy_alloc() (Liu Shixin) [Orabug: 32621218]
- scsi: fnic: Fix inconsistent format argument type in fnic_debugfs.c (Ye Bin) [Orabug: 32621218]
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands (Hannes Reinecke) [Orabug: 32621218]
- scsi: fnic: Remove unneeded semicolon (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Remove set but not used variable in is_fnic_fip_flogi_reject() (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Remove set but not used 'old_vlan' (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Use eth_broadcast_addr() to assign broadcast address (Miaohe Lin) [Orabug: 32621218]
- scsi: fnic: Use true, false for fnic->internal_reset_inprogress (Jason Yan) [Orabug: 32621218]
- scsi: fnic: make vnic_wq_get_ctrl and vnic_wq_alloc_ring static (Jason Yan) [Orabug: 32621218]
- scsi: fnic: make fnic_list and fnic_list_lock static (Jason Yan) [Orabug: 32621218]
- scsi: fnic: make some symbols static (Jason Yan) [Orabug: 32621218]
- scsi: fnic: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 32621218]
- scsi: fnic: make array dev_cmd_err static const, makes object smaller (Colin Ian King) [Orabug: 32621218]
- scsi: fnic: print port speed only at driver init or speed change (John Pittman) [Orabug: 32621218]
- scsi: fnic: remove redundant assignment of variable rc (Colin Ian King) [Orabug: 32621218]
- scsi: fnic: Remove set but not used variable 'vdev' (YueHaibing) [Orabug: 32621218]
- scsi: fnic: no need to check return value of debugfs_create functions (Greg Kroah-Hartman) [Orabug: 32621218]
- scsi: fnic: Update fnic driver version to 1.6.0.47 (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Enable fnic devcmd2 interface (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Adding devcmd2 init and posting interfaces (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Add devcmd2 initialization helpers (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: fnic devcmd2 controller definitions (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: fnic devcmd2 interface definitions (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Impose upper limit on max. # of CQs processed per intr (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: RQ enable and then post descriptors (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: delaying vnic dev enable till after req intr (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Warn when calling done for IO not issued to fw (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: fnic stats for max CQs processed and ISR time (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Add port speed stat to fnic debug stats (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: use fnic_lock to guard fnic->state_flags (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: vnic_rq_clean change BUG_ON to WARN_ON (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: change fnic queue depth to 256 (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: support to display 20G port speed (Satish Kharat) [Orabug: 32621218]
- scsi: fnic: Use vzalloc (Sabyasachi Gupta) [Orabug: 32621218]
- fnic: fix fnic_scsi_host_{start,end}_tag (Christoph Hellwig) [Orabug: 32621218]
- scsi: fnic: replace gross legacy tag hack with blk-mq hack (Jens Axboe) [Orabug: 32621218]
- scsi: fnic: switch to generic DMA API (Christoph Hellwig) [Orabug: 32621218]
- scsi: fnic: fix spelling mistake in fnic stats "Abord" -> "Abort" (Colin Ian King) [Orabug: 32621218]
- scsi: fnic: use 64-bit timestamps (Arnd Bergmann) [Orabug: 32621218]
- scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes) [Orabug: 32621218]
- scsi: fnic: add a space after %p in printf format (Nicolas Iooss) [Orabug: 32621218]
- scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych) [Orabug: 32621218]
- scsi: iscsi: Fix iSCSI cls conn state (Gulam Mohamed) [Orabug: 31669275]
- iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [Orabug: 31669275]
- Linux 4.14.213 (Greg Kroah-Hartman)
- PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)
- libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)
- clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)
- md/cluster: fix deadlock when node is doing resync job (Zhao Heming)
- iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)
- iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)
- iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)
- iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)
- iio: buffer: Fix demux update (Nuno Sá)
- mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)
- soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)
- spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)
- spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)
- spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)
- spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)
- spi: davinci: Fix use-after-free on unbind (Lukas Wunner)
- spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)
- drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)
- jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)
- jffs2: Fix GC exit abnormally (Zhe Li)
- ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)
- ima: Don't modify file descriptor mode on the fly (Roberto Sassu)
- powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)
- powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)
- ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)
- KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)
- ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)
- ext4: fix a memory leak of ext4_free_data (Chunguang Xu)
- USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)
- USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)
- USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)
- USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)
- USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)
- USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)
- USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)
- EDAC/amd64: Fix PCI component registration (Borislav Petkov)
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)
- powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)
- staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)
- s390/dasd: fix list corruption of lcu list (Stefan Haberland)
- s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)
- s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)
- s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)
- ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)
- ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)
- ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)
- ACPI: PNP: compare the string length in the matching_id() (Hui Wang)
- Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)
- PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)
- Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)
- media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)
- media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)
- media: gspca: Fix memory leak in probe (Alan Stern)
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)
- Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)
- fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)
- cfg80211: initialize rekey_data (Sara Sharon)
- clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)
- clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)
- qlcnic: Fix error code in probe (Dan Carpenter)
- perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)
- pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)
- pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)
- clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)
- watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)
- watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)
- net: korina: fix return value (Vincent Stehlé)
- net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)
- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)
- checkpatch: fix unescaped left brace (Dwaipayan Ray)
- powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)
- nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)
- um: chan_xterm: Fix fd leak (Anton Ivanov)
- watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)
- irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)
- ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)
- extcon: max77693: Fix modalias string (Marek Szyprowski)
- clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)
- x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)
- nfs_common: need lock during iterate through the list (Cheng Lin)
- nfsd: Fix message level for normal termination (kazuo ito)
- speakup: fix uninitialized flush_lock (Yang Yingliang)
- usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)
- usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)
- powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)
- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)
- scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)
- scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)
- scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)
- cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)
- cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)
- cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)
- cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)
- cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)
- clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)
- dm ioctl: fix error return code in target_message (Qinglang Miao)
- ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)
- net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)
- memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)
- arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)
- pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)
- ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)
- clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)
- media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)
- vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)
- NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)
- SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)
- NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)
- ath10k: Release some resources in an error handling path (Christophe JAILLET)
- ath10k: Fix an error handling path (Christophe JAILLET)
- ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)
- PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)
- genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)
- power: supply: bq24190_charger: fix reference leak (Zhang Qilong)
- ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)
- HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)
- media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)
- mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)
- samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)
- media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)
- cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)
- orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)
- ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)
- ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)
- memstick: fix a double-free bug in memstick_check (Qinglang Miao)
- RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)
- Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)
- drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)
- soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)
- soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)
- crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)
- powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)
- Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)
- Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)
- Input: ads7846 - fix race that causes missing releases (David Jander)
- drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)
- media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)
- scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)
- media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)
- staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)
- MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)
- RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)
- ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)
- ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)
- mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)
- spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)
- spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)
- spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)
- spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)
- Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)
- arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)
- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)
- ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)
- spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)
- crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)
- sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)
- sched/deadline: Fix sched_dl_global_validate() (Peng Liu)
- ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)
- x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)
- RDMA/rxe: Compute PSN windows correctly (Bob Pearson)
- selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)
- RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)
- soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)
- soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)
- drm/gma500: fix double free of gma_connector (Tom Rix)
- Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)
- md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)
- crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)
- media: msi2500: assign SPI bus number dynamically (Antti Palosaari)
- quota: Sanity-check quota file headers on load (Jan Kara)
- serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)
- HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)
- ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)
- ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)
- ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)
- usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)
- USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)
- USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)
- soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)
- dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)
- scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)
- vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)
- vxlan: Add needed_headroom for lower device (Sven Eckelmann)
- drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)
- kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)
- RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)
- can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)
- scsi: bnx2i: Requires MMU (Randy Dunlap)
- gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)
- ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)
- pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)
- pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)
- drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)
- PCI: qcom: Add missing reset for ipq806x (Ansuel Smith)
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)
- scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)
- spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe (Nathan Chancellor)
- spi: bcm2835aux: Fix use-after-free on unbind (Lukas Wunner)
- Linux 4.14.212 (Greg Kroah-Hartman)
- x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)
- Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)
- i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)
- gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)
- tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))
- spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)
- spi: bcm2835: Fix use-after-free on unbind (Lukas Wunner)
- spi: bcm-qspi: Fix use-after-free on unbind (Lukas Wunner)
- spi: Introduce device-managed SPI controller allocation (Lukas Wunner)
- speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)
- i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)
- i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)
- mm/swapfile: do not sleep with a spin lock held (Qian Cai)
- cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)
- ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)
- ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)
- ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)
- USB: serial: option: fix Quectel BG96 matching (Bjørn Mork)
- USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)
- USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)
- USB: serial: ch341: sort device-id entries (Johan Hovold)
- USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)
- USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)
- usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)
- vlan: consolidate VLAN parsing code and limit max parsing depth (Toke Høiland-Jørgensen)
- pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)
- pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)
- Linux 4.14.211 (Greg Kroah-Hartman)
- RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)
- Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)
- Input: xpad - support Ardwiino Controllers (Sanjay Govind)
- ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)
- dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)
- net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)
- net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)
- cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)
- net/x25: prevent a couple of overflows (Dan Carpenter)
- ibmvnic: Fix TX completion error handling (Thomas Falcon)
- ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)
- ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)
- netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)
- bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)
- usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)
- tun: honor IOCB_NOWAIT flag (Jens Axboe)
- tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)
- sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)
- rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)
- net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)
More information about the El-errata
mailing list