[El-errata] ELSA-2021-9450 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2021-9450

http://linux.oracle.com/errata/ELSA-2021-9450.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2102.205.7.2.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2102.205.7.2.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2102.205.7.2.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2102.205.7.2.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2102.205.7.2.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2102.205.7.2.el8uek.src.rpm

Related CVEs:

CVE-2020-36311
CVE-2021-22543
CVE-2021-3573
CVE-2021-3609
CVE-2021-3653
CVE-2021-3656




Description of changes:

[5.4.17-2102.205.7.2.el8uek]
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33349276]

[5.4.17-2102.205.7.1.el8uek]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306518]

[5.4.17-2102.205.7.el8uek]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33253169]
- vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora)  [Orabug: 33200737] [Orabug: 33187733]

[5.4.17-2102.205.6.el8uek]
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 33241131]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 33241131]
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372379]

[5.4.17-2102.205.5.el8uek]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)  [Orabug: 33226010]  {CVE-2021-3653}
- Revert "KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl" (Liam Merwick)  [Orabug: 33226010]  {CVE-2021-3653} {CVE-2021-3653}
- LTS tag: v5.4.140 (Jack Vogel) 
- arm64: fix compat syscall return truncation (Mark Rutland) 
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren) 
- alpha: Send stop IPI to send to online CPUs (Prarit Bhargava) 
- virt_wifi: fix error on connect (Matteo Croce) 
- reiserfs: check directory items on read from disk (Shreyansh Chouhan) 
- reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai) 
- libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig) 
- bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann) 
- soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann) 
- spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu) 
- soc: ixp4xx: fix printing resources (Arnd Bergmann) 
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon) 
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson) 
- KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini) 
- KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini) 
- md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu) 
- pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma) 
- timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner) 
- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner) 
- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko) 
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki) 
- serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki) 
- serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao) 
- serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter) 
- ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o) 
- pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71)) 
- media: rtl28xxu: fix zero-length control request (Johan Hovold) 
- staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin) 
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang) 
- tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks) 
- optee: Fix memory leak when failing to register shm pages (Tyler Hicks) 
- tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander) 
- optee: Clear stale cache entries during initialization (Tyler Hicks) 
- tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware)) 
- scripts/tracing: fix the bug that can't parse raw_trace_func (Hui Su) 
- clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris) 
- usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko) 
- usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev) 
- usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell) 
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev) 
- usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak) 
- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy) 
- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov) 
- firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam) 
- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam) 
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer) 
- USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau) 
- USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas) 
- USB: usbtmc: Fix RCU stall warning (Qiang.zhang) 
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)   {CVE-2021-3573}
- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai) 
- net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin) 
- net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin) 
- net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin) 
- bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter) 
- mips: Fix non-POSIX regexp (H. Nikolaus Schaller) 
- net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart) 
- nfp: update ethtool reporting of pauseframe control (Fei Qin) 
- sctp: move the active_key update after sh_keys is added (Xin Long) 
- gpio: tqmx86: really make IRQ optional (Matthias Schiffer) 
- net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai) 
- net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett) 
- net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean) 
- net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean) 
- net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki) 
- dmaengine: imx-dma: configure the generic DMA type to make it work (Juergen Borleis) 
- media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil) 
- scsi: sr: Return correct event when media event code is 3 (Li Manyi) 
- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (Marek Vasut) 
- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (Marek Vasut) 
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller) 
- ARM: dts: am437x-l4: fix typo in can at 0 node (Dario Binacchi) 
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi) 
- ALSA: usb-audio: fix incorrect clock source setting (chihhao.chen) 
- arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (Pali Rohár) 
- ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (Marek Vasut) 
- ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (Colin Ian King) 
- ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (Oleksandr Suvorov) 
- ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (Maxime Chevallier) 
- ARM: imx: add missing clk_disable_unprepare() (Yang Yingliang) 
- ARM: imx: add missing iounmap() (Yang Yingliang) 
- arm64: dts: ls1028a: fix node name for the sysclk (Vladimir Oltean) 
- ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai) 
- Revert "ACPICA: Fix memory leak caused by _CID repair function" (Rafael J. Wysocki) 
- LTS tag: v5.4.139 (Jack Vogel) 
- spi: mediatek: Fix fifo transfer (Guenter Roeck) 
- bpf, selftests: Adjust few selftest outcomes wrt unreachable code (Daniel Borkmann) 
- bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones (John Fastabend) 
- bpf: Test_verifier, add alu32 bounds tracking tests (John Fastabend) 
- bpf: Fix leakage under speculation on mispredicted branches (Daniel Borkmann) 
- bpf: Do not mark insn as seen under speculative path verification (Daniel Borkmann) 
- bpf: Inherit expanded/patched seen count from old aux data (Daniel Borkmann) 
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman) 
- firmware: arm_scmi: Add delayed response status check (Cristian Marussi) 
- firmware: arm_scmi: Ensure drivers provide a probe function (Sudeep Holla) 
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman) 
- ACPI: fix NULL pointer dereference (Linus Torvalds) 
- nvme: fix nvme_setup_command metadata trace event (Keith Busch) 
- net: Fix zero-copy head len calculation. (Pravin B Shelar) 
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He) 
- r8152: Fix potential PM refcount imbalance (Takashi Iwai) 
- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (Kyle Russell) 
- spi: stm32h7: fix full duplex irq handler handling (Alain Volmat) 
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin) 
- btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (Filipe Manana) 
- btrfs: fix race causing unnecessary inode logging during link and rename (Filipe Manana) 
- btrfs: do not commit logs and transactions during link and rename operations (Filipe Manana) 
- btrfs: delete duplicated words + other fixes in comments (Randy Dunlap) 
- uek/ol/config-aarch64: Disable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER (Vijay Kumar)  [Orabug: 33215814]
- Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220434]
- Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220434]
- Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220434]
- Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220434]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33235071]  {CVE-2021-3656} {CVE-2021-3656}
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33235071]  {CVE-2021-3653} {CVE-2021-3653}

[5.4.17-2102.205.3.el8uek]
- LTS tag: v5.4.138 (Jack Vogel) 
- can: j1939: j1939_session_deactivate(): clarify lifetime of session object (Oleksij Rempel) 
- i40e: Add additional info to PHY type error (Lukasz Cieplicki) 
- Revert "perf map: Fix dso->nsinfo refcounting" (Arnaldo Carvalho de Melo) 
- powerpc/pseries: Fix regression while building external modules (Srikar Dronamraju) 
- PCI: mvebu: Setup BAR0 in order to fix MSI (Shmuel Hazan) 
- can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter) 
- sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai) 
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai) 
- sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner) 
- net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (Dima Chumak) 
- net/mlx5: Fix flow table chaining (Maor Gottlieb) 
- net: llc: fix skb_over_panic (Pavel Skripkin) 
- mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong) 
- net: Set true network header for ECN decapsulation (Gilad Naaman) 
- tipc: fix sleeping in tipc accept routine (Hoang Le) 
- i40e: Fix log TC creation failure when max num of queues is exceeded (Jedrzej Jagielski) 
- i40e: Fix queue-to-TC mapping on Tx (Jedrzej Jagielski) 
- i40e: Fix firmware LLDP agent related warning (Arkadiusz Kubalewski) 
- i40e: Fix logic of disabling queues (Arkadiusz Kubalewski) 
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso) 
- netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal) 
- cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi) 
- nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski) 
- NIU: fix incorrect error return, missed in previous revert (Paul Jakma) 
- HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT (Jason Gerecke) 
- can: esd_usb2: fix memory leak (Pavel Skripkin) 
- can: ems_usb: fix memory leak (Pavel Skripkin) 
- can: usb_8dev: fix memory leak (Pavel Skripkin) 
- can: mcba_usb_start(): add missing urb->transfer_dma initialization (Pavel Skripkin) 
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan) 
- can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms (Zhang Changzhong) 
- ocfs2: issue zeroout to EOF blocks (Junxiao Bi) 
- ocfs2: fix zero out valid data (Junxiao Bi) 
- KVM: add missing compat KVM_CLEAR_DIRTY_LOG (Paolo Bonzini) 
- x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross) 
- Revert "ACPI: resources: Add checks for ACPI IRQ override" (Hui Wang) 
- btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues) 
- btrfs: fix rw device counting in __btrfs_free_extra_devids (Desmond Cheong Zhi Xi) 
- x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka) 
- net_sched: check error pointer in tcf_dump_walker() (Cong Wang) 
- LTS tag: v5.4.137 (Jack Vogel) 
- ipv6: ip6_finish_output2: set sk into newly allocated nskb (Vasily Averin) 
- ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla) 
- iomap: remove the length variable in iomap_seek_hole (Christoph Hellwig) 
- iomap: remove the length variable in iomap_seek_data (Christoph Hellwig) 
- cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Hyunchul Lee) 
- firmware: arm_scmi: Fix range check for the maximum number of pending messages (Cristian Marussi) 
- firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (Sudeep Holla) 
- hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi) 
- hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi) 
- hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi) 
- ipv6: allocate enough headroom in ip6_finish_output2() (Vasily Averin) 
- sctp: move 198 addresses from unusable to private scope (Xin Long) 
- net: annotate data race around sk_ll_usec (Eric Dumazet) 
- net/802/garp: fix memleak in garp_request_join() (Yang Yingliang) 
- net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang) 
- cgroup1: fix leaked context root causing sporadic NULL deref in LTP (Paul Gortmaker) 
- workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang) 
- af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi) 
- KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky) 
- tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include (Yonghong Song) 
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman) 
- LTS tag: v5.4.136 (Jack Vogel) 
- xhci: add xhci_get_virt_ep() helper (Mathias Nyman) 
- perf inject: Close inject.output on exit (Riccardo Mancini) 
- PCI: Mark AMD Navi14 GPU ATS as broken (Evan Quan) 
- btrfs: compression: don't try to compress if we don't have enough pages (David Sterba) 
- iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold) 
- iio: accel: bma180: Use explicit member assignment (Linus Walleij) 
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger) 
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz (Marek Behún) 
- drm: Return -ENOTTY for non-drm ioctls (Charles Baylis) 
- nds32: fix up stack guard gap (Greg Kroah-Hartman) 
- rbd: always kick acquire on "acquired" and "released" notifications (Ilya Dryomov) 
- rbd: don't hold lock_rwsem while running_list is being drained (Ilya Dryomov) 
- hugetlbfs: fix mount mode command line processing (Mike Kravetz) 
- userfaultfd: do not untag user pointers (Peter Collingbourne) 
- selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne) 
- ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme) 
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva) 
- btrfs: check for missing device in btrfs_trim_fs (Anand Jain) 
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) 
- tracing/histogram: Rename "cpu" to "common_cpu" (Steven Rostedt (VMware)) 
- firmware/efi: Tell memblock about EFI iomem reservations (Marc Zyngier) 
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan) 
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping) 
- USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray) 
- USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco) 
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda) 
- usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson) 
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski) 
- usb: hub: Fix link power management max exit latency (MEL) calculations (Mathias Nyman) 
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman) 
- KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (Nicholas Piggin) 
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin) 
- xhci: Fix lost USB 2 remote wake (Mathias Nyman) 
- ALSA: hdmi: Expose all pins on MSI MS-7C94 board (Takashi Iwai) 
- ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai) 
- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (Alexander Tsoy) 
- ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (Takashi Iwai) 
- s390/boot: fix use of expolines in the DMA code (Alexander Egorenkov) 
- s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik) 
- Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei) 
- proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri) 
- drm/panel: raspberrypi-touchscreen: Prevent double-free (Maxime Ripard) 
- net: sched: cls_api: Fix the the wrong parameter (Yajun Deng) 
- sctp: update active_key for asoc when old key is being replaced (Xin Long) 
- nvme: set the PRACT bit when using Write Zeroes with T10 PI (Christoph Hellwig) 
- r8169: Avoid duplicate sysfs entry creation error (Sayanta Pattanayak) 
- afs: Fix tracepoint string placement with built-in AFS (David Howells) 
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin) 
- nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (Zhihao Cheng) 
- ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Paolo Abeni) 
- net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye) 
- net: hns3: fix rx VLAN offload state inconsistent issue (Jian Shen) 
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet) 
- net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition (Randy Dunlap) 
- bnxt_en: Check abort error state in bnxt_half_open_nic() (Somnath Kotur) 
- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (Michael Chan) 
- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (Michael Chan) 
- spi: cadence: Correct initialisation of runtime PM again (Marek Vasut) 
- scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov) 
- scsi: iscsi: Fix iface sysfs attr detection (Mike Christie) 
- netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi) 
- net: sched: fix memory leak in tcindex_partial_destroy_work (Pavel Skripkin) 
- KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Nicholas Piggin) 
- KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash (Nicholas Piggin) 
- net: decnet: Fix sleeping inside in af_decnet (Yajun Deng) 
- efi/tpm: Differentiate missing and invalid final event log table. (Michal Suchanek) 
- net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan) 
- bpftool: Check malloc return value in mount_bpffs_for_pin (Tobias Klauser) 
- bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats (John Fastabend) 
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King) 
- liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King) 
- ASoC: rt5631: Fix regcache sync errors on resume (Maxim Schwalm) 
- spi: mediatek: fix fifo rx mode (Peter Hess) 
- regulator: hi6421: Fix getting wrong drvdata (Axel Lin) 
- regulator: hi6421: Use correct variable type for regmap api val argument (Axel Lin) 
- spi: stm32: fixes pm_runtime calls in probe/remove (Alain Volmat) 
- spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi) 
- spi: imx: add a check for speed_hz before calculating the clock (Clark Wang) 
- perf data: Close all files in close_dir() (Riccardo Mancini) 
- perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini) 
- perf lzma: Close lzma stream on exit (Riccardo Mancini) 
- perf script: Fix memory 'threads' and 'cpus' leaks on exit (Riccardo Mancini) 
- perf dso: Fix memory leak in dso__new_map() (Riccardo Mancini) 
- perf test event_update: Fix memory leak of evlist (Riccardo Mancini) 
- perf test session_topology: Delete session->evlist (Riccardo Mancini) 
- perf env: Fix sibling_dies memory leak (Riccardo Mancini) 
- perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini) 
- perf map: Fix dso->nsinfo refcounting (Riccardo Mancini) 
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove (Casey Chen) 
- cxgb4: fix IRQ free race during driver unload (Shahjada Abul Husain) 
- pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped (Uwe Kleine-König) 
- selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect (Hangbin Liu) 
- selftests: icmp_redirect: remove from checking for IPv6 route get (Hangbin Liu) 
- ipv6: fix 'disable_policy' for fwd packets (Nicolas Dichtel) 
- gve: Fix an error handling path in 'gve_probe()' (Christophe JAILLET) 
- igb: Fix position of assignment to *ring (Jedrzej Jagielski) 
- igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov) 
- iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET) 
- e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET) 
- fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET) 
- igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET) 
- igc: Fix an error handling path in 'igc_probe()' (Christophe JAILLET) 
- igc: Prefer to use the pci_release_mem_regions method (Sasha Neftin) 
- ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET) 
- igc: change default return of igc_read_phy_reg() (Tom Rix) 
- igb: Fix use-after-free error during reset (Vinicius Costa Gomes) 
- igc: Fix use-after-free error during reset (Vinicius Costa Gomes) 
- LTS tag: v5.4.135 (Jack Vogel) 
- udp: annotate data races around unix_sk(sk)->gso_size (Eric Dumazet) 
- perf test bpf: Free obj_buf (Riccardo Mancini) 
- bpftool: Properly close va_list 'ap' by va_end() on error (Gu Shengxian) 
- ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet) 
- tcp: annotate data races around tp->mtu_info (Eric Dumazet) 
- dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand) 
- net: fddi: fix UAF in fza_probe (Pavel Skripkin) 
- net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo) 
- net: send SYNACK packet with accepted fwmark (Alexander Ovechkin) 
- net: ti: fix UAF in tlan_remove_one (Pavel Skripkin) 
- net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin) 
- net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin) 
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices (Hangbin Liu) 
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli) 
- net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller) 
- net/sched: act_ct: fix err check for nf_conntrack_confirm (wenxu) 
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin) 
- net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko) 
- net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz (Marek Behún) 
- net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz (Marek Behún) 
- dm writecache: return the exact table values that were set (Mikulas Patocka) 
- usb: cdns3: Enable TDL_CHK only for OUT ep (Sanket Parmar) 
- f2fs: Show casefolding support only when supported (Daniel Rosenberg) 
- arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file (Pali Rohár) 
- firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string (Pali Rohár) 
- arm64: dts: armada-3720-turris-mox: add firmware node (Marek Behún) 
- cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) 
- s390: introduce proper type handling call_on_stack() macro (Heiko Carstens) 
- sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal) 
- scsi: qedf: Add check to synchronize abort and flush (Javed Hasan) 
- scsi: libfc: Fix array index out of bound exception (Javed Hasan) 
- scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu) 
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King) 
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) 
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich) 
- thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang) 
- arm64: dts: imx8mq: assign PCIe clocks (Lucas Stach) 
- arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab) 
- firmware: tegra: bpmp: Fix Tegra234-only builds (Thierry Reding) 
- soc/tegra: fuse: Fix Tegra234-only builds (Thierry Reding) 
- ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 (Alexandre Torgue) 
- ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings (Alexandre Torgue) 
- ARM: dts: rockchip: fix supply properties in io-domains nodes (Johan Jonker) 
- arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla) 
- ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings (Alexandre Torgue) 
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue) 
- ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards (Alexandre Torgue) 
- ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) 
- ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko) 
- kbuild: sink stdout from cmd for silent build (Masahiro Yamada) 
- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer) 
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser) 
- ARM: dts: Hurricane 2: Fix NAND nodes names (Rafał Miłecki) 
- ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki) 
- ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki) 
- ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki) 
- ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki) 
- reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel) 
- arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang) 
- arm64: dts: rockchip: Fix power-controller node names for px30 (Elaine Zhang) 
- ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang) 
- ARM: dts: rockchip: Fix power-controller node names for rk3188 (Elaine Zhang) 
- ARM: dts: rockchip: Fix power-controller node names for rk3066a (Elaine Zhang) 
- ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x (Benjamin Gaignard) 
- ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia) 
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker) 
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker) 
- ARM: dts: gemini: add device_type on pci (Corentin Labbe) 
- ARM: dts: gemini: rename mdio to the right name (Corentin Labbe) 
- LTS tag: v5.4.134 (Jack Vogel) 
- misc: alcor_pci: fix inverted branch condition (Tong Zhang) 
- scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (Dan Carpenter) 
- MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz) 
- mips: disable branch profiling in boot/decompress.o (Randy Dunlap) 
- mips: always link byteswap helpers into decompressor (Arnd Bergmann) 
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET) 
- firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (Pali Rohár) 
- firmware: turris-mox-rwtm: report failures better (Marek Behún) 
- firmware: turris-mox-rwtm: fix reply status decoding function (Marek Behún) 
- thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (Niklas Söderlund) 
- ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (Christoph Niedermaier) 
- ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (Christoph Niedermaier) 
- ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (Christoph Niedermaier) 
- ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) 
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju) 
- memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski) 
- memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski) 
- reset: bail if try_module_get() fails (Philipp Zabel) 
- ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki) 
- firmware: arm_scmi: Reset Rx buffer to max size during async commands (Cristian Marussi) 
- firmware: tegra: Fix error return code in tegra210_bpmp_init() (Zhen Lei) 
- ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven) 
- arm64: dts: renesas: v3msk: Fix memory size (Valentine Barshak) 
- rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter) 
- memory: pl353: Fix error return code in pl353_smc_probe() (Zhen Lei) 
- reset: brcmstb: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (Krzysztof Kozlowski) 
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski) 
- ARM: exynos: add missing of_node_put for loop iteration (Krzysztof Kozlowski) 
- reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski) 
- ARM: dts: gemini-rut1xx: remove duplicate ethernet node (Corentin Labbe) 
- hexagon: use common DISCARDS macro (Nathan Chancellor) 
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust) 
- ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei) 
- nvme-tcp: can't set sk_user_data without write_lock (Maurizio Lombardi) 
- virtio_net: move tx vq operation under tx queue lock (Michael S. Tsirkin) 
- pwm: imx1: Don't disable clocks at device remove time (Uwe Kleine-König) 
- x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner) 
- PCI: iproc: Support multi-MSI only on uniprocessor kernel (Sandor Bodo-Merle) 
- PCI: iproc: Fix multi-MSI base vector number allocation (Sandor Bodo-Merle) 
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng) 
- nfs: fix acl memory leak of posix_acl_create() (Gao Xiang) 
- watchdog: aspeed: fix hardware timeout calculation (Tao Ren) 
- um: fix error return code in winch_tramp() (Zhen Lei) 
- um: fix error return code in slip_open() (Zhen Lei) 
- NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust) 
- power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold) 
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński) 
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu) 
- x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae) 
- virtio_console: Assure used length from device is limited (Xie Yongji) 
- virtio_net: Fix error handling in virtnet_restore() (Xie Yongji) 
- virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji) 
- ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede) 
- ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang) 
- pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König) 
- pwm: img: Fix PM reference leak in img_pwm_enable() (Zou Wei) 
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei) 
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei) 
- NFS: nfs_find_open_context() may only select open files (Trond Myklebust) 
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton) 
- orangefs: fix orangefs df output. (Mike Marshall) 
- PCI: tegra: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- x86/fpu: Return proper error codes from user access functions (Thomas Gleixner) 
- watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka) 
- watchdog: imx_sc_wdt: fix pretimeout (Stefan Eichenberger) 
- watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei) 
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei) 
- watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei) 
- PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (Logan Gunthorpe) 
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers) 
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski) 
- power: supply: ab8500: Avoid NULL pointers (Linus Walleij) 
- pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König) 
- power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov) 
- i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov) 
- intel_th: Wait until port is in reset before programming it (Alexander Shishkin) 
- staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto) 
- ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (Geoffrey D. Bennett) 
- ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao) 
- backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König) 
- ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (Pierre-Louis Bossart) 
- powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt) 
- usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang) 
- usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol) 
- ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (Geoffrey D. Bennett) 
- ALSA: usb-audio: scarlett2: Fix data_mutex lock (Geoffrey D. Bennett) 
- ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (Geoffrey D. Bennett) 
- ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto) 
- Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (Yizhuo Zhai) 
- s390/mem_detect: fix tprot() program check new psw handling (Heiko Carstens) 
- s390/mem_detect: fix diag260() program check new psw handling (Heiko Carstens) 
- s390/ipl_parm: fix program check new psw handling (Heiko Carstens) 
- s390/processor: always inline stap() and __load_psw_mask() (Heiko Carstens) 
- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei) 
- gpio: pca953x: Add support for the On Semi pca9655 (Peter Robinson) 
- selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev) 
- ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang) 
- gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli) 
- iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (Xiyu Yang) 
- iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (Xiyu Yang) 
- powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand) 
- ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai) 
- selftests: timers: rtcpie: skip test if default RTC device does not exist (Po-Hsu Lin) 
- s390/sclp_vt220: fix console name to match device (Valentin Vidic) 
- serial: tty: uartlite: fix console setup (Daniel Mack) 
- ASoC: img: Fix PM reference leak in img_i2s_in_probe() (Yufen Yu) 
- mfd: cpcap: Fix cpcap dmamask not set warnings (Tony Lindgren) 
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei) 
- scsi: qedi: Fix null ref during abort handling (Mike Christie) 
- scsi: iscsi: Fix shost->max_id use (Mike Christie) 
- scsi: iscsi: Fix conn use after free during resets (Mike Christie) 
- scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie) 
- scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (Chandrakanth Patil) 
- scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) 
- scsi: megaraid_sas: Fix resource leak in case of probe failure (Chandrakanth Patil) 
- fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong) 
- scsi: scsi_dh_alua: Check for negative result value (Hannes Reinecke) 
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET) 
- ALSA: ac97: fix PM reference leak in ac97_bus_remove() (Yufen Yu) 
- scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry) 
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart) 
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart) 
- scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (Sergey Shtylyov) 
- w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio) 
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto) 
- ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai) 
- iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (Jonathan Cameron) 
- iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). (Jonathan Cameron) 
- misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (Tong Zhang) 
- misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong) 
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun) 
- srcu: Fix broken node geometry after early ssp init (Frederic Weisbecker) 
- dmaengine: fsl-qdma: check dma_set_mask return value (Robin Gong) 
- net: moxa: Use devm_platform_get_and_ioremap_resource() (Yang Yingliang) 
- fbmem: Do not delete the mode that is still in use (Zhen Lei) 
- cgroup: verify that source is a string (Christian Brauner) 
- tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware)) 
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler) 
- KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan) 
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson) 
- KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang) 
- LTS tag: v5.4.133 (Jack Vogel) 
- smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa) 
- jfs: fix GPF in diFree (Pavel Skripkin) 
- pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (Zou Wei) 
- media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung) 
- media: gspca/sunplus: fix zero-length control requests (Johan Hovold) 
- media: gspca/sq905: fix control-request direction (Johan Hovold) 
- media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin) 
- media: dtv5100: fix control-request directions (Johan Hovold) 
- media: subdev: disallow ioctl for saa6588/davinci (Arnd Bergmann) 
- PCI: aardvark: Implement workaround for the readback value of VEND_ID (Pali Rohár) 
- PCI: aardvark: Fix checking for PIO Non-posted Request (Pali Rohár) 
- PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (Konstantin Kharlamov) 
- dm btree remove: assign new_root only when removal succeeds (Hou Tao) 
- coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() (Sai Prakash Ranjan) 
- ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong) 
- tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT (Paul Burton) 
- tracing: Simplify & fix saved_tgids logic (Paul Burton) 
- rq-qos: fix missed wake-ups in rq_qos_throttle try two (Jan Kara) 
- seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) 
- extcon: intel-mrfld: Sync hardware and software state on init (Ferry Toth) 
- nvmem: core: add a missing of_node_put (Christophe JAILLET) 
- power: supply: ab8500: Fix an old bug (Linus Walleij) 
- ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng) 
- thermal/drivers/int340x/processor_thermal: Fix tcc setting (Srinivas Pandruvada) 
- ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu) 
- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor) 
- ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko) 
- MIPS: fix "mipsel-linux-ld: decompress.c:undefined reference to `memmove'" (Gao Xiang) 
- fpga: stratix10-soc: Add missing fpga_mgr_free() call (Russ Weight) 
- clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround (Samuel Holland) 
- cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner) 
- ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson) 
- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle) 
- mmc: core: clear flags before allowing to retune (Wolfram Sang) 
- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper) 
- drm/arm/malidp: Always list modifiers (Daniel Vetter) 
- drm/msm/mdp4: Fix modifier support enabling (Daniel Vetter) 
- drm/tegra: Don't set allow_fb_modifiers explicitly (Daniel Vetter) 
- drm/amd/display: Reject non-zero src_y and src_x for video planes (Harry Wentland) 
- pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz) 
- drm/amd/display: fix incorrrect valid irq check (Guchun Chen) 
- drm/rockchip: dsi: remove extra component_del() call (Thomas Hebb) 
- drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng) 
- drm/amdgpu: Update NV SIMD-per-CU to 2 (Joseph Greathouse) 
- powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor) 
- powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy) 
- perf bench: Fix 2 memory sanitizer warnings (Ian Rogers) 
- fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers) 
- MIPS: set mips32r5 for virt extensions (Nick Desaulniers) 
- MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops (zhanglianjie) 
- sctp: add size validation when walking chunks (Marcelo Ricardo Leitner) 
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner) 
- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang) 
- Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng) 
- Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu) 
- Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip. (mark-yw.chen) 
- net: ip: avoid OOM kills with large UDP sends over loopback (Jakub Kicinski) 
- media, bpf: Do not copy more entries than user space requested (Sean Young) 
- wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva) 
- sfc: error code if SRIOV cannot be disabled (Íñigo Huguet) 
- sfc: avoid double pci_remove of VFs (Íñigo Huguet) 
- iwlwifi: pcie: fix context info freeing (Johannes Berg) 
- iwlwifi: pcie: free IML DMA memory allocation (Johannes Berg) 
- iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg) 
- RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang) 
- vsock: notify server to shutdown when client has pending signal (Longpeng(Mike)) 
- atm: nicstar: register the interrupt handler in the right place (Zheyu Ma) 
- atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma) 
- MIPS: add PMD table accounting into MIPS'pmd_alloc_one (Huang Pei) 
- rtl8xxxu: Fix device info for RTL8192EU devices (Pascal Terjan) 
- drm/amdkfd: Walk through list with dqm lock hold (xinhui pan) 
- net: sched: fix error return code in tcf_del_walker() (Yang Yingliang) 
- net: fix mistake path for netdev_features_strings (Jian Shen) 
- mt76: mt7615: fix fixed-rate tx status reporting (Felix Fietkau) 
- bpf: Fix up register-based shifts in interpreter to silence KUBSAN (Daniel Borkmann) 
- cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei) 
- wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson) 
- wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren) 
- xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert) 
- drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check (Mark Yacoub) 
- r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM (Heiner Kallweit) 
- selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim) 
- fjes: check return value after calling platform_get_resource() (Yang Yingliang) 
- drm/amdkfd: use allowed domain for vmbo validation (Nirmoy Das) 
- drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7 (Wesley Chalmers) 
- drm/amd/display: Release MST resources on switch from MST to SST (Vladimir Stempen) 
- drm/amd/display: Update scaling settings on modeset (Roman Li) 
- net: micrel: check return value after calling platform_get_resource() (Yang Yingliang) 
- net: mvpp2: check return value after calling platform_get_resource() (Yang Yingliang) 
- net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang) 
- virtio_net: Remove BUG() to avoid machine dead (Xianting Tian) 
- ice: set the value of global config lock timeout longer (Liwei Song) 
- pinctrl: mcp23s08: fix race condition in irq handler (Radim Pavlik) 
- dm space maps: don't reset space map allocation cursor when committing (Joe Thornber) 
- RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong) 
- ipv6: use prandom_u32() for ID generation (Willy Tarreau) 
- clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko) 
- clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto) 
- drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer() (Zou Wei) 
- igb: handle vlan types with checker enabled (Jesse Brandeburg) 
- e100: handle eeprom as little endian (Jesse Brandeburg) 
- udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti) 
- drm/sched: Avoid data corruptions (Andrey Grodzovsky) 
- drm/virtio: Fix double free on probe failure (Xie Yongji) 
- reiserfs: add check for invalid 1st journal block (Pavel Skripkin) 
- drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init() (Wang Li) 
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior) 
- atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei) 
- mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei) 
- atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei) 
- hugetlb: clear huge pte during flush function on mips platform (Bibo Mao) 
- drm/amd/display: fix use_max_lb flag for 420 pixel formats (Dmytro Laktyushkin) 
- net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko) 
- drm/vc4: fix argument ordering in vc4_crtc_get_margins() (Dan Carpenter) 
- drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang) 
- drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann) 
- drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann) 
- uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 33186980]

[5.4.17-2102.205.2.el8uek]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447]

[5.4.17-2102.205.1.el8uek]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427]
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard)  [Orabug: 32570847]

[5.4.17-2102.205.0.el8uek]
- LTS tag: v5.4.132 (Jack Vogel) 
- iommu/dma: Fix compile warning in 32-bit builds (Joerg Roedel) 
- mmc: vub3000: fix control-request direction (Johan Hovold) 
- mmc: block: Disable CMDQ on the ioctl path (Bean Huo) 
- scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() (Varun Prakash) 
- perf llvm: Return -ENOMEM when asprintf() fails (Arnaldo Carvalho de Melo) 
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen) 
- mm/z3fold: fix potential memory leak in z3fold_destroy_pool() (Miaohe Lin) 
- mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin) 
- vfio/pci: Handle concurrent vma faults (Alex Williamson) 
- arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART (Pali Rohár) 
- serial: mvebu-uart: correctly calculate minimal possible baudrate (Pali Rohár) 
- serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (Pali Rohár) 
- powerpc: Offline CPU in stop_this_cpu() (Nicholas Piggin) 
- leds: ktd2692: Fix an error handling path (Christophe JAILLET) 
- leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei) 
- configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng) 
- ASoC: atmel-i2s: Fix usage of capture and playback at the same time (Codrin Ciubotariu) 
- extcon: max8997: Add missing modalias string (Marek Szyprowski) 
- extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold) 
- phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET) 
- phy: uniphier-pcie: Fix updating phy parameters (Kunihiko Hayashi) 
- soundwire: stream: Fix test for DP prepare complete (Richard Fitzgerald) 
- scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei) 
- mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (Yang Yingliang) 
- of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven) 
- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald) 
- iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (Maciej W. Rozycki) 
- staging: mt7621-dts: fix pci address for PCI memory range (Sergio Paracuellos) 
- staging: rtl8712: fix memory leak in rtl871x_load_fw_cb (Pavel Skripkin) 
- staging: rtl8712: remove redundant check in r871xu_drv_init (Pavel Skripkin) 
- staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter) 
- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter) 
- iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (Alexandru Ardelean) 
- eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (Andy Shevchenko) 
- eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko) 
- usb: dwc2: Don't reset the core after setting turnaround time (Clément Lassieur) 
- usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov) 
- ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()' (Christophe JAILLET) 
- iommu/dma: Fix IOVA reserve dma ranges (Srinath Mannam) 
- s390: appldata depends on PROC_SYSCTL (Randy Dunlap) 
- visorbus: fix error return code in visorchipset_init() (Zhen Lei) 
- fsi/sbefifo: Fix reset timeout (Joachim Fenkes) 
- fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE (Joachim Fenkes) 
- fsi: occ: Don't accept response from un-initialized OCC (Eddie James) 
- fsi: scom: Reset the FSI2PIB engine for any error (Eddie James) 
- fsi: core: Fix return of error values on failures (Colin Ian King) 
- scsi: FlashPoint: Rename si_flags field (Randy Dunlap) 
- leds: lm3692x: Put fwnode in any case during ->probe() (Andy Shevchenko) 
- leds: lm36274: cosmetic: rename lm36274_data to chip (Marek Behún) 
- leds: lm3532: select regmap I2C API (Andy Shevchenko) 
- tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET) 
- firmware: stratix10-svc: Fix a resource leak in an error handling path (Christophe JAILLET) 
- char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai) 
- mtd: partitions: redboot: seek fis-index-block in the right node (Corentin Labbe) 
- Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei) 
- ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (Kuninori Morimoto) 
- backlight: lm3630a_bl: Put fwnode in error case during ->probe() (Andy Shevchenko) 
- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang) 
- ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (Yang Yingliang) 
- iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: mxc4005: Fix overread of data and alignment issue. (Jonathan Cameron) 
- iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (Jonathan Cameron) 
- iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron) 
- iio: adis16400: do not return ints in irq handlers (Nuno Sa) 
- iio: adis_buffer: do not return ints in irq handlers (Nuno Sa) 
- mwifiex: re-fix for unaligned accesses (Arnd Bergmann) 
- tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET) 
- rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() (Paul E. McKenney) 
- staging: fbtft: Rectify GPIO handling (Andy Shevchenko) 
- MIPS: Fix PKMAP with 32-bit MIPS huge page support (Wei Li) 
- RDMA/mlx5: Don't access NULL-cleared mpi pointer (Leon Romanovsky) 
- net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin) 
- net: lwtunnel: handle MTU calculation in forwading (Vadim Fedorenko) 
- writeback: fix obtain a reference to a freeing memcg css (Muchun Song) 
- clk: si5341: Update initialization magic (Robert Hancock) 
- clk: si5341: Avoid divide errors due to bogus register contents (Robert Hancock) 
- clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (Cristian Ciocaltea) 
- clk: actions: Fix SD clocks factor table on Owl S500 SoC (Cristian Ciocaltea) 
- clk: actions: Fix UART clock dividers on Owl S500 SoC (Cristian Ciocaltea) 
- Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (Luiz Augusto von Dentz) 
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz) 
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) 
- gve: Fix swapped vars when fetching max queues (Bailey Forrest) 
- bpfilter: Specify the log level for the kmsg message (Gary Lin) 
- e1000e: Check the PCIm state (Sasha Neftin) 
- ipv6: fix out-of-bound access in ip6_parse_tlv() (Eric Dumazet) 
- ibmvnic: free tx_pool if tso_pool alloc fails (Sukadev Bhattiprolu) 
- Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden) 
- i40e: Fix autoneg disabling for non-10GBaseT links (Mateusz Palczewski) 
- i40e: Fix error handling in i40e_vsi_open (Dinghao Liu) 
- bpf: Do not change gso_size during bpf_skb_change_proto() (Maciej Żenczykowski) 
- ipv6: exthdrs: do not blindly use init_net (Eric Dumazet) 
- net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan) 
- mac80211: remove iwlwifi specific workaround NDPs of null_response (Ping-Ke Shih) 
- ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (Eric Dumazet) 
- ieee802154: hwsim: Fix memory leak in hwsim_add_one (Dongliang Mu) 
- tc-testing: fix list handling (Marcelo Ricardo Leitner) 
- net/ipv4: swap flow ports when validating source (Miao Wang) 
- vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet) 
- pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet) 
- tls: prevent oversized sendfile() hangs by ignoring MSG_MORE (Jakub Kicinski) 
- net: sched: add barrier to ensure correct ordering for lockless qdisc (Yunsheng Lin) 
- vrf: do not push non-ND strict packets with a source LLA through packet taps again (Antoine Tenart) 
- net: ethernet: ezchip: fix error handling (Pavel Skripkin) 
- net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin) 
- net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin) 
- samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai) 
- RDMA/rxe: Fix qp reference counting for atomic ops (Bob Pearson) 
- netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols (Pablo Neira Ayuso) 
- netfilter: nft_osf: check for TCP packet before further processing (Pablo Neira Ayuso) 
- netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso) 
- RDMA/mlx5: Don't add slave port to unaffiliated list (Leon Romanovsky) 
- netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin) 
- ath10k: Fix an error code in ath10k_add_interface() (Yang Li) 
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET) 
- brcmfmac: correctly report average RSSI in station info (Alvin Šipraga) 
- brcmfmac: fix setting of station info chains bitmask (Alvin Šipraga) 
- ssb: Fix error return code in ssb_bus_scan() (Zhen Lei) 
- wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (Bryan O'Donoghue) 
- ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (Dongliang Mu) 
- wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap) 
- ath10k: add missing error return code in ath10k_pci_probe() (Yang Yingliang) 
- ath10k: go to path err_unsupported when chip id is not supported (Yang Yingliang) 
- tools/bpftool: Fix error return code in do_batch() (Zhihao Cheng) 
- drm: qxl: ensure surf.data is ininitialized (Colin Ian King) 
- RDMA/rxe: Fix failure during driver load (Kamal Heib) 
- RDMA/core: Sanitize WQ state received from the userspace (Leon Romanovsky) 
- net/sched: act_vlan: Fix modify to allow 0 (Boris Sukholitko) 
- ehea: fix error return code in ehea_restart_qps() (Zhen Lei) 
- drm/rockchip: dsi: move all lane config except LCDC mux to bind() (Thomas Hebb) 
- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang) 
- net: ftgmac100: add missing error return code in ftgmac100_probe() (Yang Yingliang) 
- clk: meson: g12a: fix gp0 and hifi ranges (Jerome Brunet) 
- pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities (Geert Uytterhoeven) 
- pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin (Geert Uytterhoeven) 
- net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko) 
- net: mvpp2: Put fwnode in error case during ->probe() (Andy Shevchenko) 
- video: fbdev: imxfb: Fix an error message (Christophe JAILLET) 
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (Sabrina Dubroca) 
- dax: fix ENOMEM handling in grab_mapping_entry() (Jan Kara) 
- ocfs2: fix snprintf() checking (Dan Carpenter) 
- cpufreq: Make cpufreq_online() call driver->offline() on errors (Rafael J. Wysocki) 
- ACPI: bgrt: Fix CFI violation (Nathan Chancellor) 
macros (Dwaipayan Ray) 
- blk-wbt: make sure throttle is enabled properly (Zhang Yi) 
- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (Zhang Yi) 
- extcon: extcon-max8997: Fix IRQ freeing at error path (Matti Vaittinen) 
- ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński) 
- crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu) 
- spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt) 
- sched/uclamp: Fix uclamp_tg_restrict() (Qais Yousef) 
- sched/rt: Fix Deadline utilization tracking during policy change (Vincent Donnefort) 
- sched/rt: Fix RT utilization tracking during policy change (Vincent Donnefort) 
- btrfs: clear log tree recovering status if starting transaction fails (David Sterba) 
- regulator: hi655x: Fix pass wrong pointer to config.driver_data (Axel Lin) 
- KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (Sean Christopherson) 
- hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck) 
- hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck) 
- media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min) 
- arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan (Anshuman Khandual) 
- arm64: consistently use reserved_pg_dir (Mark Rutland) 
- mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei) 
- crypto: omap-sham - Fix PM reference leak in omap sham ops (Zhang Qilong) 
- crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (Tong Tiangen) 
- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva) 
- m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning (Randy Dunlap) 
- media: gspca/gl860: fix zero-length control requests (Johan Hovold) 
- media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei) 
- media: au0828: fix a NULL vs IS_ERR() check (Dan Carpenter) 
- media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong) 
- pata_ep93xx: fix deferred probing (Sergey Shtylyov) 
- media: rc: i2c: Fix an error message (Christophe JAILLET) 
- crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET) 
- evm: fix writing <securityfs>/evm overflow (Mimi Zohar) 
- pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov) 
:= n' (Josh Poimboeuf) 
- kbuild: run the checker after the compiler (Luc Van Oostenryck) 
- sched/uclamp: Fix locking around cpu_util_update_eff() (Qais Yousef) 
- sched/uclamp: Fix wrong implementation of cpu.uclamp.min (Qais Yousef) 
- media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap) 
- pata_rb532_cf: fix deferred probing (Sergey Shtylyov) 
- sata_highbank: fix deferred probing (Sergey Shtylyov) 
- crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei) 
- crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe) 
- media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab) 
- writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin) 
- ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann) 
- kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) 
- block: fix discard request merge (Ming Lei) 
- cifs: fix missing spinlock around update to ses->status (Steve French) 
- HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke) 
- ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald) 
- clocksource: Retry clock read if long delays detected (Paul E. McKenney) 
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (Haiyang Zhang) 
- EDAC/Intel: Do not load EDAC driver when running as a guest (Tony Luck) 
- nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() (Hannes Reinecke) 
- platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong) 
- block: fix race between adding/removing rq qos and normal IO (Ming Lei) 
- ACPI: resources: Add checks for ACPI IRQ override (Hui Wang) 
- ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo) 
- ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda) 
- fs: dlm: fix memory leak when fenced (Alexander Aring) 
- random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald) 
- fs: dlm: cancel work sync othercon (Alexander Aring) 
- block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F)) 
- ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu) 
- lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald) 
- hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing) 
- ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello) 
- EDAC/ti: Add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov) 
- media: Fix Media Controller API config checks (Shuah Khan) 
- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin) 
- regulator: mt6358: Fix vdram2 .vsel_mask (Hsin-Hsiung Wang) 
- KVM: s390: get rid of register asm usage (Heiko Carstens) 
- lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() (Boqun Feng) 
- locking/lockdep: Fix the dep path printing for backwards BFS (Boqun Feng) 
- btrfs: disable build on platforms having page size 256K (Christophe Leroy) 
- btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik) 
- btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik) 
- KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors (Suraj Jitindar Singh) 
- drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() (Jing Xiangfeng) 
- hwmon: (max31790) Fix pwmX_enable attributes (Guenter Roeck) 
- hwmon: (max31790) Report correct current pwm duty cycles (Guenter Roeck) 
- media: imx-csi: Skip first few frames from a BT.656 source (Steve Longerbeam) 
- media: siano: fix device register error path (Mauro Carvalho Chehab) 
- media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab) 
- crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel) 
- mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma) 
- mmc: sdhci-sprd: use sdhci_sprd_writew (Krzysztof Kozlowski) 
- memstick: rtsx_usb_ms: fix UAF (Tong Zhang) 
- media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu) 
- Makefile: fix GDB warning with CONFIG_RELR (Nick Desaulniers) 
- media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov) 
- media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma) 
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong) 
- media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente) 
- sched/fair: Fix ascii art by relpacing tabs (Odin Ugedal) 
- crypto: qat - remove unused macro in FW loader (Jack Xu) 
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu) 
- media: imx: imx7_mipi_csis: Fix logging of only error event counters (Laurent Pinchart) 
- media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam) 
- media: cobalt: fix race condition in setting HPD (Hans Verkuil) 
- media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin) 
- media: sti: fix obj-$(config) targets (Mauro Carvalho Chehab) 
- crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui) 
- hwrng: exynos - Fix runtime PM imbalance on error (Łukasz Stelmach) 
- regulator: uniphier: Add missing MODULE_DEVICE_TABLE (Zou Wei) 
- spi: omap-100k: Fix the length judgment problem (Tian Tao) 
- spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang) 
- spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang) 
- media: exynos-gsc: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: sti/bdisp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: s5p-jpeg: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: mtk-vcodec: fix PM runtime get logic (Mauro Carvalho Chehab) 
- media: sh_vou: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: s5p: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- media: mdk-mdp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) 
- spi: Make of_register_spi_device also set the fwnode (Charles Keepax) 
- fuse: reject internal errno (Miklos Szeredi) 
- fuse: check connected before queueing on fpq->io (Miklos Szeredi) 
- fuse: ignore PG_workingset after stealing (Miklos Szeredi) 
- evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded (Roberto Sassu) 
- evm: Execute evm_inode_init_security() only when an HMAC key is loaded (Roberto Sassu) 
- powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi() (Michael Ellerman) 
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou) 
- tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (Steven Rostedt (VMware)) 
- tracing/histograms: Fix parsing of "sym-offset" modifier (Steven Rostedt (VMware)) 
- rsi: fix AP mode with WPA failure due to encrypted EAPOL (Martin Fuzzey) 
- rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut) 
- ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch) 
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár) 
- serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary) 
- serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary) 
- serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda) 
- serial: mvebu-uart: fix calculation of clock divisor (Pali Rohár) 
- iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang) 
- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang) 
- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde) 
- iio: light: tcs3472: do not free unallocated IRQ (frank zago) 
- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey) 
- s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan) 
- KVM: PPC: Book3S HV: Workaround high stack usage with clang (Nathan Chancellor) 
- perf/smmuv3: Don't trample existing events with global filter (Robin Murphy) 
- SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu) 
- SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu) 
- mac80211: remove iwlwifi specific workaround that broke sta NDP tx (Felix Fietkau) 
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean) 
- can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel) 
- can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp) 
- ext4: fix avefreec in find_group_orlov (Pan Dong) 
- ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi) 
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi) 
- ext4: return error code when ext4_fill_flex_info() fails (Yang Yingliang) 
- ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam) 
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi) 
- btrfs: clear defrag status of a root if starting transaction fails (David Sterba) 
- btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana) 
- ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches) 
- arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode (Yang Jihong) 
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) 
- iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro) 
- copy_page_to_iter(): fix ITER_DISCARD case (Al Viro) 
- ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi) 
- xhci: solve a double free problem while doing s4 (Zhangjiantao (Kirin, nanjing)) 
- usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (Jing Xiangfeng) 
- usb: dwc3: Fix debugfs creation flow (Minas Harutyunyan) 
- USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen) 
- usb: gadget: eem: fix echo command packet response issue (Linyu Yuan) 
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin) 
- Input: usbtouchscreen - fix control-request directions (Johan Hovold) 
- media: dvb-usb: fix wrong definition (Pavel Skripkin) 
- ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (Takashi Iwai) 
- ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (Takashi Iwai) 
- ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (Elia Devito) 
- ALSA: hda/realtek: Add another ALC236 variant support (Takashi Iwai) 
- ALSA: intel8x0: Fix breakage at ac97 clock measurement (Takashi Iwai) 
- ALSA: usb-audio: scarlett2: Fix wrong resume call (Takashi Iwai) 
- ALSA: usb-audio: Fix OOB access at proc output (Takashi Iwai) 
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung) 
- LTS tag: v5.4.131 (Jack Vogel) 
- xen/events: reset active flag for lateeoi events later (Juergen Gross) 
- KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun) 
- s390/stack: fix possible register corruption with stack switch helper (Heiko Carstens) 
- KVM: SVM: Periodically schedule when unregistering regions on destroy (David Rientjes)   {CVE-2020-36311}
- LTS tag: v5.4.130 (Jack Vogel) 
- RDMA/mlx5: Block FDB rules when not in switchdev mode (Mark Bloch) 
- gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (Johannes Berg) 
- drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König) 
- scsi: sr: Return appropriate error code when disk is ejected (ManYi Li) 
- LTS tag v5.4.129 (Jack Vogel) 
- x86/efi: move common keyring handler functions to new file (Nayna Jain) 
- certs: Add wrapper function to check blacklisted binary hash (Nayna Jain) 
- mm, futex: fix shared futex pgoff on shmem huge page (Hugh Dickins) 
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins) 
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins) 
- mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins) 
- mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins) 
- mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins) 
- mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins) 
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins) 
- mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins) 
- mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins) 
- mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins) 
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi) 
- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (Hugh Dickins) 
- mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang) 
- mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins) 
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins) 
- mm/thp: make is_huge_zero_pmd() safe and quicker (Hugh Dickins) 
- mm/thp: fix __split_huge_pmd_locked() on shmem migration entry (Hugh Dickins) 
- mm, thp: use head page in __migration_entry_wait() (Xu Yu) 
- mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin) 
- mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin) 
- mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi) 
- kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek) 
- kthread_worker: split code for canceling the delayed work timer (Petr Mladek) 
- i2c: robotfuzz-osif: fix control-request directions (Johan Hovold) 
- KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin)   {CVE-2021-22543}
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin) 
- pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne) 
- net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal) 
- net: ll_temac: Add memory-barriers for TX BD access (Esben Haabendal) 
- PCI: Add AMD RS690 quirk to enable 64-bit DMA (Mikel Rychliski) 
- recordmcount: Correct st_shndx handling (Peter Zijlstra) 
- net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook) 
- KVM: selftests: Fix kvm_check_cap() assertion (Fuad Tabba) 
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) 
- sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) 
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook) 
- net/packet: annotate accesses to po->ifindex (Eric Dumazet) 
- net/packet: annotate accesses to po->bind (Eric Dumazet) 
- net: caif: fix memory leak in ldisc_open (Pavel Skripkin) 
- net: phy: dp83867: perform soft reset and retain established link (Praneeth Bajjuri) 
- inet: annotate date races around sk->sk_txhash (Eric Dumazet) 
- ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun) 
- net: ethtool: clear heap allocations for ethtool function (Austin Kim) 
- mac80211: drop multicast fragments (Johannes Berg) 
- net: ipv4: Remove unneed BUG() function (Zheng Yongjun) 
- dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (Guillaume Ranquet) 
- dmaengine: mediatek: do not issue a new desc if one is still current (Guillaume Ranquet) 
- dmaengine: mediatek: free the proper desc in desc_free handler (Guillaume Ranquet) 
- dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (Zou Wei) 
- cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng) 
- mac80211_hwsim: drop pending frames on stop (Johannes Berg) 
- dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (Yu Kuai) 
- Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki) 
- spi: spi-nxp-fspi: move the register operation after the clock enable (Haibo Chen) 
- MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor) 
- arm64: link with -z norelro for LLD or aarch64-elf (Nick Desaulniers) 
- kbuild: add CONFIG_LD_IS_LLD (Sami Tolvanen) 
- mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (Neil Armstrong) 
- ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann) 
- drm/radeon: wait for moving fence after pinning (Christian König) 
- drm/nouveau: wait for moving fence after pinning v2 (Christian König) 
- Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell." (Yifan Zhang) 
- Revert "drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue." (Yifan Zhang) 
- module: limit enabling module.sig_enforce (Mimi Zohar) 
- mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)  [Orabug: 33171088]
- platform/x86: ISST: Account for increased timeout in some cases (Srinivas Pandruvada)  [Orabug: 33126078]
- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114646]  {CVE-2021-3609}