[El-errata] ELSA-2021-9451 Important: Oracle Linux 7 Unbreakable Enterprise kernel-container security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2021-9451

http://linux.oracle.com/errata/ELSA-2021-9451.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-container-5.4.17-2102.205.7.2.el7.x86_64.rpm
kernel-uek-container-debug-5.4.17-2102.205.7.2.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-container-5.4.17-2102.205.7.2.el7.src.rpm

Related CVEs:

CVE-2020-36311
CVE-2021-22543
CVE-2021-3573
CVE-2021-3609
CVE-2021-3653
CVE-2021-3656




Description of changes:

[5.4.17-2102.205.7.2.el7]
- btrfs: fix race between marking inode needs to be logged and log syncing
  (Filipe Manana)  [Orabug: 33349276]

[5.4.17-2102.205.7.1.el7]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306518]

[5.4.17-2102.205.7.el7]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33253169]
- vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora)  [Orabug: 33200737] [Orabug: 33187733]

[5.4.17-2102.205.6.el7]
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 33241131]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 33241131]
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372379]

[5.4.17-2102.205.5.el7]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)  [Orabug: 33226010]  {CVE-2021-3653}
- Revert "KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl" (Liam Merwick)  [Orabug: 33226010]  {CVE-2021-3653}
- LTS tag: v5.4.140 (Jack Vogel)
- arm64: fix compat syscall return truncation (Mark Rutland)
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren)
- alpha: Send stop IPI to send to online CPUs (Prarit Bhargava)
- virt_wifi: fix error on connect (Matteo Croce)
- reiserfs: check directory items on read from disk (Shreyansh Chouhan)
- reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai)
- libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig)
- bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann)
- soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann)
- spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu)
- soc: ixp4xx: fix printing resources (Arnd Bergmann)
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon)
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson)
- KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini)
- KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini)
- md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu)
- pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma)
- timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner)
- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner)
- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko)
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki)
- serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki)
- serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao)
- serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter)
- ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)
- pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71))
- media: rtl28xxu: fix zero-length control request (Johan Hovold)
- staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin)
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang)
- tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks)
- optee: Fix memory leak when failing to register shm pages (Tyler Hicks)
- tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander)
- optee: Clear stale cache entries during initialization (Tyler Hicks)
- tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware))
- scripts/tracing: fix the bug that can't parse raw_trace_func (Hui Su)
- clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris)
- usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko)
- usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev)
- usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell)
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev)
- usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak)
- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy)
- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov)
- firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam)
- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam)
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer)
- USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau)
- USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas)
- USB: usbtmc: Fix RCU stall warning (Qiang.zhang)
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)   {CVE-2021-3573}
- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai)
- net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin)
- net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin)
- net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin)
- bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter)
- mips: Fix non-POSIX regexp (H. Nikolaus Schaller)
- net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart)
- nfp: update ethtool reporting of pauseframe control (Fei Qin)
- sctp: move the active_key update after sh_keys is added (Xin Long)
- gpio: tqmx86: really make IRQ optional (Matthias Schiffer)
- net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett)
- net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean)
- net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean)
- net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki)
- dmaengine: imx-dma: configure the generic DMA type to make it work (Juergen Borleis)
- media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil)
- scsi: sr: Return correct event when media event code is 3 (Li Manyi)
- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (Marek Vasut)
- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (Marek Vasut)
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller)
- ARM: dts: am437x-l4: fix typo in can at 0 node (Dario Binacchi)
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi)
- ALSA: usb-audio: fix incorrect clock source setting (chihhao.chen)
- arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (Pali Rohár)
- ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (Marek Vasut)
- ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (Colin Ian King)
- ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (Oleksandr Suvorov)
- ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (Maxime Chevallier)
- ARM: imx: add missing clk_disable_unprepare() (Yang Yingliang)
- ARM: imx: add missing iounmap() (Yang Yingliang)
- arm64: dts: ls1028a: fix node name for the sysclk (Vladimir Oltean)
- ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai)
- Revert "ACPICA: Fix memory leak caused by _CID repair function" (Rafael J. Wysocki)
- LTS tag: v5.4.139 (Jack Vogel)
- spi: mediatek: Fix fifo transfer (Guenter Roeck)
- bpf, selftests: Adjust few selftest outcomes wrt unreachable code (Daniel Borkmann)
- bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones (John Fastabend)
- bpf: Test_verifier, add alu32 bounds tracking tests (John Fastabend)
- bpf: Fix leakage under speculation on mispredicted branches (Daniel Borkmann)
- bpf: Do not mark insn as seen under speculative path verification (Daniel Borkmann)
- bpf: Inherit expanded/patched seen count from old aux data (Daniel Borkmann)
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman)
- firmware: arm_scmi: Add delayed response status check (Cristian Marussi)
- firmware: arm_scmi: Ensure drivers provide a probe function (Sudeep Holla)
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman)
- ACPI: fix NULL pointer dereference (Linus Torvalds)
- nvme: fix nvme_setup_command metadata trace event (Keith Busch)
- net: Fix zero-copy head len calculation. (Pravin B Shelar)
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He)
- r8152: Fix potential PM refcount imbalance (Takashi Iwai)
- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (Kyle Russell)
- spi: stm32h7: fix full duplex irq handler handling (Alain Volmat)
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin)
- btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (Filipe Manana)
- btrfs: fix race causing unnecessary inode logging during link and rename (Filipe Manana)
- btrfs: do not commit logs and transactions during link and rename operations (Filipe Manana)
- btrfs: delete duplicated words + other fixes in comments (Randy Dunlap)
- uek/ol/config-aarch64: Disable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER (Vijay Kumar)  [Orabug: 33215814]
- Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220434]
- Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220434]
- Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220434]
- Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220434]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33235071]  {CVE-2021-3656}

[5.4.17-2102.205.3.el7]
- LTS tag: v5.4.138 (Jack Vogel)
- can: j1939: j1939_session_deactivate(): clarify lifetime of session object (Oleksij Rempel)
- i40e: Add additional info to PHY type error (Lukasz Cieplicki)
- Revert "perf map: Fix dso->nsinfo refcounting" (Arnaldo Carvalho de Melo)
- powerpc/pseries: Fix regression while building external modules (Srikar Dronamraju)
- PCI: mvebu: Setup BAR0 in order to fix MSI (Shmuel Hazan)
- can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter)
- sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner)
- net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (Dima Chumak)
- net/mlx5: Fix flow table chaining (Maor Gottlieb)
- net: llc: fix skb_over_panic (Pavel Skripkin)
- mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong)
- net: Set true network header for ECN decapsulation (Gilad Naaman)
- tipc: fix sleeping in tipc accept routine (Hoang Le)
- i40e: Fix log TC creation failure when max num of queues is exceeded (Jedrzej Jagielski)
- i40e: Fix queue-to-TC mapping on Tx (Jedrzej Jagielski)
- i40e: Fix firmware LLDP agent related warning (Arkadiusz Kubalewski)
- i40e: Fix logic of disabling queues (Arkadiusz Kubalewski)
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso)
- netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal)
- cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi)
- nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski)
- NIU: fix incorrect error return, missed in previous revert (Paul Jakma)
- HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT (Jason Gerecke)
- can: esd_usb2: fix memory leak (Pavel Skripkin)
- can: ems_usb: fix memory leak (Pavel Skripkin)
- can: usb_8dev: fix memory leak (Pavel Skripkin)
- can: mcba_usb_start(): add missing urb->transfer_dma initialization (Pavel Skripkin)
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan)
- can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms (Zhang Changzhong)
- ocfs2: issue zeroout to EOF blocks (Junxiao Bi)
- ocfs2: fix zero out valid data (Junxiao Bi)
- KVM: add missing compat KVM_CLEAR_DIRTY_LOG (Paolo Bonzini)
- x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)
- Revert "ACPI: resources: Add checks for ACPI IRQ override" (Hui Wang)
- btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues)
- btrfs: fix rw device counting in __btrfs_free_extra_devids (Desmond Cheong Zhi Xi)
- x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka)
- net_sched: check error pointer in tcf_dump_walker() (Cong Wang)
- LTS tag: v5.4.137 (Jack Vogel)
- ipv6: ip6_finish_output2: set sk into newly allocated nskb (Vasily Averin)
- ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla)
- iomap: remove the length variable in iomap_seek_hole (Christoph Hellwig)
- iomap: remove the length variable in iomap_seek_data (Christoph Hellwig)
- cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Hyunchul Lee)
- firmware: arm_scmi: Fix range check for the maximum number of pending messages (Cristian Marussi)
- firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (Sudeep Holla)
- hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi)
- hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi)
- hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi)
- ipv6: allocate enough headroom in ip6_finish_output2() (Vasily Averin)
- sctp: move 198 addresses from unusable to private scope (Xin Long)
- net: annotate data race around sk_ll_usec (Eric Dumazet)
- net/802/garp: fix memleak in garp_request_join() (Yang Yingliang)
- net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang)
- cgroup1: fix leaked context root causing sporadic NULL deref in LTP (Paul Gortmaker)
- workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang)
- af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)
- KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky)
- tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include (Yonghong Song)
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman)
- LTS tag: v5.4.136 (Jack Vogel)
- xhci: add xhci_get_virt_ep() helper (Mathias Nyman)
- perf inject: Close inject.output on exit (Riccardo Mancini)
- PCI: Mark AMD Navi14 GPU ATS as broken (Evan Quan)
- btrfs: compression: don't try to compress if we don't have enough pages (David Sterba)
- iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold)
- iio: accel: bma180: Use explicit member assignment (Linus Walleij)
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger)
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz (Marek Behún)
- drm: Return -ENOTTY for non-drm ioctls (Charles Baylis)
- nds32: fix up stack guard gap (Greg Kroah-Hartman)
- rbd: always kick acquire on "acquired" and "released" notifications (Ilya Dryomov)
- rbd: don't hold lock_rwsem while running_list is being drained (Ilya Dryomov)
- hugetlbfs: fix mount mode command line processing (Mike Kravetz)
- userfaultfd: do not untag user pointers (Peter Collingbourne)
- selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne)
- ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme)
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva)
- btrfs: check for missing device in btrfs_trim_fs (Anand Jain)
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)
- tracing/histogram: Rename "cpu" to "common_cpu" (Steven Rostedt (VMware))
- firmware/efi: Tell memblock about EFI iomem reservations (Marc Zyngier)
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan)
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping)
- USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray)
- USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco)
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda)
- usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson)
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski)
- usb: hub: Fix link power management max exit latency (MEL) calculations (Mathias Nyman)
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman)
- KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (Nicholas Piggin)
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin)
- xhci: Fix lost USB 2 remote wake (Mathias Nyman)
- ALSA: hdmi: Expose all pins on MSI MS-7C94 board (Takashi Iwai)
- ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai)
- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (Alexander Tsoy)
- ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (Takashi Iwai)
- s390/boot: fix use of expolines in the DMA code (Alexander Egorenkov)
- s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik)
- Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei)
- proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri)
- drm/panel: raspberrypi-touchscreen: Prevent double-free (Maxime Ripard)
- net: sched: cls_api: Fix the the wrong parameter (Yajun Deng)
- sctp: update active_key for asoc when old key is being replaced (Xin Long)
- nvme: set the PRACT bit when using Write Zeroes with T10 PI (Christoph Hellwig)
- r8169: Avoid duplicate sysfs entry creation error (Sayanta Pattanayak)
- afs: Fix tracepoint string placement with built-in AFS (David Howells)
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin)
- nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (Zhihao Cheng)
- ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Paolo Abeni)
- net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye)
- net: hns3: fix rx VLAN offload state inconsistent issue (Jian Shen)
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet)
- net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition (Randy Dunlap)
- bnxt_en: Check abort error state in bnxt_half_open_nic() (Somnath Kotur)
- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (Michael Chan)
- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (Michael Chan)
- spi: cadence: Correct initialisation of runtime PM again (Marek Vasut)
- scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov)
- scsi: iscsi: Fix iface sysfs attr detection (Mike Christie)
- netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi)
- net: sched: fix memory leak in tcindex_partial_destroy_work (Pavel Skripkin)
- KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Nicholas Piggin)
- KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash (Nicholas Piggin)
- net: decnet: Fix sleeping inside in af_decnet (Yajun Deng)
- efi/tpm: Differentiate missing and invalid final event log table. (Michal Suchanek)
- net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan)
- bpftool: Check malloc return value in mount_bpffs_for_pin (Tobias Klauser)
- bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats (John Fastabend)
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King)
- liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King)
- ASoC: rt5631: Fix regcache sync errors on resume (Maxim Schwalm)
- spi: mediatek: fix fifo rx mode (Peter Hess)
- regulator: hi6421: Fix getting wrong drvdata (Axel Lin)
- regulator: hi6421: Use correct variable type for regmap api val argument (Axel Lin)
- spi: stm32: fixes pm_runtime calls in probe/remove (Alain Volmat)
- spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi)
- spi: imx: add a check for speed_hz before calculating the clock (Clark Wang)
- perf data: Close all files in close_dir() (Riccardo Mancini)
- perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini)
- perf lzma: Close lzma stream on exit (Riccardo Mancini)
- perf script: Fix memory 'threads' and 'cpus' leaks on exit (Riccardo Mancini)
- perf dso: Fix memory leak in dso__new_map() (Riccardo Mancini)
- perf test event_update: Fix memory leak of evlist (Riccardo Mancini)
- perf test session_topology: Delete session->evlist (Riccardo Mancini)
- perf env: Fix sibling_dies memory leak (Riccardo Mancini)
- perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini)
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove (Casey Chen)
- cxgb4: fix IRQ free race during driver unload (Shahjada Abul Husain)
- pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped (Uwe Kleine-König)
- selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect (Hangbin Liu)
- selftests: icmp_redirect: remove from checking for IPv6 route get (Hangbin Liu)
- ipv6: fix 'disable_policy' for fwd packets (Nicolas Dichtel)
- gve: Fix an error handling path in 'gve_probe()' (Christophe JAILLET)
- igb: Fix position of assignment to *ring (Jedrzej Jagielski)
- igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov)
- iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET)
- e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET)
- fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET)
- igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET)
- igc: Fix an error handling path in 'igc_probe()' (Christophe JAILLET)
- igc: Prefer to use the pci_release_mem_regions method (Sasha Neftin)
- ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET)
- igc: change default return of igc_read_phy_reg() (Tom Rix)
- igb: Fix use-after-free error during reset (Vinicius Costa Gomes)
- igc: Fix use-after-free error during reset (Vinicius Costa Gomes)
- LTS tag: v5.4.135 (Jack Vogel)
- udp: annotate data races around unix_sk(sk)->gso_size (Eric Dumazet)
- perf test bpf: Free obj_buf (Riccardo Mancini)
- bpftool: Properly close va_list 'ap' by va_end() on error (Gu Shengxian)
- ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet)
- tcp: annotate data races around tp->mtu_info (Eric Dumazet)
- dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand)
- net: fddi: fix UAF in fza_probe (Pavel Skripkin)
- net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)
- net: send SYNACK packet with accepted fwmark (Alexander Ovechkin)
- net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)
- net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin)
- net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin)
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices (Hangbin Liu)
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli)
- net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller)
- net/sched: act_ct: fix err check for nf_conntrack_confirm (wenxu)
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin)
- net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko)
- net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz (Marek Behún)
- net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz (Marek Behún)
- dm writecache: return the exact table values that were set (Mikulas Patocka)
- usb: cdns3: Enable TDL_CHK only for OUT ep (Sanket Parmar)
- f2fs: Show casefolding support only when supported (Daniel Rosenberg)
- arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file (Pali Rohár)
- firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string (Pali Rohár)
- arm64: dts: armada-3720-turris-mox: add firmware node (Marek Behún)
- cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara)
- s390: introduce proper type handling call_on_stack() macro (Heiko Carstens)
- sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal)
- scsi: qedf: Add check to synchronize abort and flush (Javed Hasan)
- scsi: libfc: Fix array index out of bound exception (Javed Hasan)
- scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu)
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King)
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich)
- thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang)
- arm64: dts: imx8mq: assign PCIe clocks (Lucas Stach)
- arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab)
- firmware: tegra: bpmp: Fix Tegra234-only builds (Thierry Reding)
- soc/tegra: fuse: Fix Tegra234-only builds (Thierry Reding)
- ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 (Alexandre Torgue)
- ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings (Alexandre Torgue)
- ARM: dts: rockchip: fix supply properties in io-domains nodes (Johan Jonker)
- arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla)
- ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings (Alexandre Torgue)
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue)
- ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards (Alexandre Torgue)
- ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko)
- ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko)
- kbuild: sink stdout from cmd for silent build (Masahiro Yamada)
- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer)
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser)
- ARM: dts: Hurricane 2: Fix NAND nodes names (Rafał Miłecki)
- ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki)
- ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki)
- ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki)
- ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki)
- reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel)
- arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang)
- arm64: dts: rockchip: Fix power-controller node names for px30 (Elaine Zhang)
- ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang)
- ARM: dts: rockchip: Fix power-controller node names for rk3188 (Elaine Zhang)
- ARM: dts: rockchip: Fix power-controller node names for rk3066a (Elaine Zhang)
- ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x (Benjamin Gaignard)
- ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia)
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker)
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker)
- ARM: dts: gemini: add device_type on pci (Corentin Labbe)
- ARM: dts: gemini: rename mdio to the right name (Corentin Labbe)
- LTS tag: v5.4.134 (Jack Vogel)
- misc: alcor_pci: fix inverted branch condition (Tong Zhang)
- scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (Dan Carpenter)
- MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz)
- mips: disable branch profiling in boot/decompress.o (Randy Dunlap)
- mips: always link byteswap helpers into decompressor (Arnd Bergmann)
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET)
- firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (Pali Rohár)
- firmware: turris-mox-rwtm: report failures better (Marek Behún)
- firmware: turris-mox-rwtm: fix reply status decoding function (Marek Behún)
- thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (Niklas Söderlund)
- ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (Christoph Niedermaier)
- ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (Christoph Niedermaier)
- ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (Christoph Niedermaier)
- ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)
- memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski)
- memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski)
- reset: bail if try_module_get() fails (Philipp Zabel)
- ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki)
- firmware: arm_scmi: Reset Rx buffer to max size during async commands (Cristian Marussi)
- firmware: tegra: Fix error return code in tegra210_bpmp_init() (Zhen Lei)
- ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven)
- arm64: dts: renesas: v3msk: Fix memory size (Valentine Barshak)
- rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter)
- memory: pl353: Fix error return code in pl353_smc_probe() (Zhen Lei)
- reset: brcmstb: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski)
- ARM: exynos: add missing of_node_put for loop iteration (Krzysztof Kozlowski)
- reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski)
- ARM: dts: gemini-rut1xx: remove duplicate ethernet node (Corentin Labbe)
- hexagon: use common DISCARDS macro (Nathan Chancellor)
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust)
- ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei)
- nvme-tcp: can't set sk_user_data without write_lock (Maurizio Lombardi)
- virtio_net: move tx vq operation under tx queue lock (Michael S. Tsirkin)
- pwm: imx1: Don't disable clocks at device remove time (Uwe Kleine-König)
- x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner)
- PCI: iproc: Support multi-MSI only on uniprocessor kernel (Sandor Bodo-Merle)
- PCI: iproc: Fix multi-MSI base vector number allocation (Sandor Bodo-Merle)
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng)
- nfs: fix acl memory leak of posix_acl_create() (Gao Xiang)
- watchdog: aspeed: fix hardware timeout calculation (Tao Ren)
- um: fix error return code in winch_tramp() (Zhen Lei)
- um: fix error return code in slip_open() (Zhen Lei)
- NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust)
- power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold)
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński)
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu)
- x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae)
- virtio_console: Assure used length from device is limited (Xie Yongji)
- virtio_net: Fix error handling in virtnet_restore() (Xie Yongji)
- virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji)
- ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede)
- ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang)
- pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König)
- pwm: img: Fix PM reference leak in img_pwm_enable() (Zou Wei)
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei)
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei)
- NFS: nfs_find_open_context() may only select open files (Trond Myklebust)
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton)
- orangefs: fix orangefs df output. (Mike Marshall)
- PCI: tegra: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- x86/fpu: Return proper error codes from user access functions (Thomas Gleixner)
- watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka)
- watchdog: imx_sc_wdt: fix pretimeout (Stefan Eichenberger)
- watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei)
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei)
- watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei)
- PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (Logan Gunthorpe)
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers)
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
- power: supply: ab8500: Avoid NULL pointers (Linus Walleij)
- pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König)
- power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov)
- i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov)
- intel_th: Wait until port is in reset before programming it (Alexander Shishkin)
- staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto)
- ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (Geoffrey D. Bennett)
- ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao)
- backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König)
- ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (Pierre-Louis Bossart)
- powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt)
- usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang)
- usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol)
- ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (Geoffrey D. Bennett)
- ALSA: usb-audio: scarlett2: Fix data_mutex lock (Geoffrey D. Bennett)
- ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (Geoffrey D. Bennett)
- ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto)
- Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (Yizhuo Zhai)
- s390/mem_detect: fix tprot() program check new psw handling (Heiko Carstens)
- s390/mem_detect: fix diag260() program check new psw handling (Heiko Carstens)
- s390/ipl_parm: fix program check new psw handling (Heiko Carstens)
- s390/processor: always inline stap() and __load_psw_mask() (Heiko Carstens)
- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei)
- gpio: pca953x: Add support for the On Semi pca9655 (Peter Robinson)
- selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev)
- ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang)
- gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli)
- iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (Xiyu Yang)
- iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (Xiyu Yang)
- powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand)
- ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai)
- selftests: timers: rtcpie: skip test if default RTC device does not exist (Po-Hsu Lin)
- s390/sclp_vt220: fix console name to match device (Valentin Vidic)
- serial: tty: uartlite: fix console setup (Daniel Mack)
- ASoC: img: Fix PM reference leak in img_i2s_in_probe() (Yufen Yu)
- mfd: cpcap: Fix cpcap dmamask not set warnings (Tony Lindgren)
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei)
- scsi: qedi: Fix null ref during abort handling (Mike Christie)
- scsi: iscsi: Fix shost->max_id use (Mike Christie)
- scsi: iscsi: Fix conn use after free during resets (Mike Christie)
- scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)
- scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (Chandrakanth Patil)
- scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai)
- scsi: megaraid_sas: Fix resource leak in case of probe failure (Chandrakanth Patil)
- fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong)
- scsi: scsi_dh_alua: Check for negative result value (Hannes Reinecke)
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET)
- ALSA: ac97: fix PM reference leak in ac97_bus_remove() (Yufen Yu)
- scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry)
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart)
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart)
- scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (Sergey Shtylyov)
- w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio)
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto)
- ALSA: usx2y: Don't call free_pages_exact() with NULL address (Takashi Iwai)
- iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (Jonathan Cameron)
- iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). (Jonathan Cameron)
- misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (Tong Zhang)
- misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong)
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun)
- srcu: Fix broken node geometry after early ssp init (Frederic Weisbecker)
- dmaengine: fsl-qdma: check dma_set_mask return value (Robin Gong)
- net: moxa: Use devm_platform_get_and_ioremap_resource() (Yang Yingliang)
- fbmem: Do not delete the mode that is still in use (Zhen Lei)
- cgroup: verify that source is a string (Christian Brauner)
- tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware))
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler)
- KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan)
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson)
- KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang)
- LTS tag: v5.4.133 (Jack Vogel)
- smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa)
- jfs: fix GPF in diFree (Pavel Skripkin)
- pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (Zou Wei)
- media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung)
- media: gspca/sunplus: fix zero-length control requests (Johan Hovold)
- media: gspca/sq905: fix control-request direction (Johan Hovold)
- media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin)
- media: dtv5100: fix control-request directions (Johan Hovold)
- media: subdev: disallow ioctl for saa6588/davinci (Arnd Bergmann)
- PCI: aardvark: Implement workaround for the readback value of VEND_ID (Pali Rohár)
- PCI: aardvark: Fix checking for PIO Non-posted Request (Pali Rohár)
- PCI: Leave Apple Thunderbolt controllers on for s2idle or standby (Konstantin Kharlamov)
- dm btree remove: assign new_root only when removal succeeds (Hou Tao)
- coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer() (Sai Prakash Ranjan)
- ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong)
- tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT (Paul Burton)
- tracing: Simplify & fix saved_tgids logic (Paul Burton)
- rq-qos: fix missed wake-ups in rq_qos_throttle try two (Jan Kara)
- seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)
- extcon: intel-mrfld: Sync hardware and software state on init (Ferry Toth)
- nvmem: core: add a missing of_node_put (Christophe JAILLET)
- power: supply: ab8500: Fix an old bug (Linus Walleij)
- ubifs: Fix races between xattr_{set|get} and listxattr operations (Zhihao Cheng)
- thermal/drivers/int340x/processor_thermal: Fix tcc setting (Srinivas Pandruvada)
- ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu)
- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor)
- ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko)
- MIPS: fix "mipsel-linux-ld: decompress.c:undefined reference to `memmove'" (Gao Xiang)
- fpga: stratix10-soc: Add missing fpga_mgr_free() call (Russ Weight)
- clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround (Samuel Holland)
- cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner)
- ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson)
- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle)
- mmc: core: clear flags before allowing to retune (Wolfram Sang)
- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper)
- drm/arm/malidp: Always list modifiers (Daniel Vetter)
- drm/msm/mdp4: Fix modifier support enabling (Daniel Vetter)
- drm/tegra: Don't set allow_fb_modifiers explicitly (Daniel Vetter)
- pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz)
- drm/amd/display: fix incorrrect valid irq check (Guchun Chen)
- drm/rockchip: dsi: remove extra component_del() call (Thomas Hebb)
- drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng)
- drm/amdgpu: Update NV SIMD-per-CU to 2 (Joseph Greathouse)
- powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor)
- powerpc/mm: Fix lockup on kernel exec fault (Christophe Leroy)
- perf bench: Fix 2 memory sanitizer warnings (Ian Rogers)
- fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers)
- MIPS: set mips32r5 for virt extensions (Nick Desaulniers)
- MIPS: loongsoon64: Reserve memory below starting pfn to prevent Oops (zhanglianjie)
- sctp: add size validation when walking chunks (Marcelo Ricardo Leitner)
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner)
- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang)
- Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng)
- Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu)
- Bluetooth: btusb: Fixed too many in-token issue for Mediatek Chip. (mark-yw.chen)
- net: ip: avoid OOM kills with large UDP sends over loopback (Jakub Kicinski)
- media, bpf: Do not copy more entries than user space requested (Sean Young)
- wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva)
- sfc: error code if SRIOV cannot be disabled (Íñigo Huguet)
- sfc: avoid double pci_remove of VFs (Íñigo Huguet)
- iwlwifi: pcie: fix context info freeing (Johannes Berg)
- iwlwifi: pcie: free IML DMA memory allocation (Johannes Berg)
- iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg)
- RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang)
- vsock: notify server to shutdown when client has pending signal (Longpeng(Mike))
- atm: nicstar: register the interrupt handler in the right place (Zheyu Ma)
- atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma)
- rtl8xxxu: Fix device info for RTL8192EU devices (Pascal Terjan)
- drm/amdkfd: Walk through list with dqm lock hold (xinhui pan)
- net: sched: fix error return code in tcf_del_walker() (Yang Yingliang)
- net: fix mistake path for netdev_features_strings (Jian Shen)
- mt76: mt7615: fix fixed-rate tx status reporting (Felix Fietkau)
- bpf: Fix up register-based shifts in interpreter to silence KUBSAN (Daniel Borkmann)
- cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei)
- wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson)
- wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren)
- xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert)
- drm/amd/display: Verify Gamma & Degamma LUT sizes in amdgpu_dm_atomic_check (Mark Yacoub)
- r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM (Heiner Kallweit)
- selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim)
- fjes: check return value after calling platform_get_resource() (Yang Yingliang)
- drm/amdkfd: use allowed domain for vmbo validation (Nirmoy Das)
- drm/amd/display: Set DISPCLK_MAX_ERRDET_CYCLES to 7 (Wesley Chalmers)
- drm/amd/display: Release MST resources on switch from MST to SST (Vladimir Stempen)
- drm/amd/display: Update scaling settings on modeset (Roman Li)
- net: micrel: check return value after calling platform_get_resource() (Yang Yingliang)
- net: mvpp2: check return value after calling platform_get_resource() (Yang Yingliang)
- net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang)
- virtio_net: Remove BUG() to avoid machine dead (Xianting Tian)
- ice: set the value of global config lock timeout longer (Liwei Song)
- pinctrl: mcp23s08: fix race condition in irq handler (Radim Pavlik)
- dm space maps: don't reset space map allocation cursor when committing (Joe Thornber)
- RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong)
- ipv6: use prandom_u32() for ID generation (Willy Tarreau)
- clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko)
- clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto)
- drm/bridge: cdns: Fix PM reference leak in cdns_dsi_transfer() (Zou Wei)
- igb: handle vlan types with checker enabled (Jesse Brandeburg)
- e100: handle eeprom as little endian (Jesse Brandeburg)
- udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)
- drm/sched: Avoid data corruptions (Andrey Grodzovsky)
- drm/virtio: Fix double free on probe failure (Xie Yongji)
- reiserfs: add check for invalid 1st journal block (Pavel Skripkin)
- drm/mediatek: Fix PM reference leak in mtk_crtc_ddp_hw_init() (Wang Li)
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior)
- atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei)
- mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)
- atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei)
- hugetlb: clear huge pte during flush function on mips platform (Bibo Mao)
- drm/amd/display: fix use_max_lb flag for 420 pixel formats (Dmytro Laktyushkin)
- net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko)
- drm/vc4: fix argument ordering in vc4_crtc_get_margins() (Dan Carpenter)
- drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang)
- drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)
- drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)
- uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 33186980]

[5.4.17-2102.205.2.el7]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150447]

[5.4.17-2102.205.1.el7]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177348]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150427]
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard)  [Orabug: 32570847]

[5.4.17-2102.205.0.el7]
- LTS tag: v5.4.132 (Jack Vogel)
- iommu/dma: Fix compile warning in 32-bit builds (Joerg Roedel)
- mmc: vub3000: fix control-request direction (Johan Hovold)
- mmc: block: Disable CMDQ on the ioctl path (Bean Huo)
- scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() (Varun Prakash)
- perf llvm: Return -ENOMEM when asprintf() fails (Arnaldo Carvalho de Melo)
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen)
- mm/z3fold: fix potential memory leak in z3fold_destroy_pool() (Miaohe Lin)
- mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin)
- vfio/pci: Handle concurrent vma faults (Alex Williamson)
- arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART (Pali Rohár)
- serial: mvebu-uart: correctly calculate minimal possible baudrate (Pali Rohár)
- serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (Pali Rohár)
- powerpc: Offline CPU in stop_this_cpu() (Nicholas Piggin)
- leds: ktd2692: Fix an error handling path (Christophe JAILLET)
- leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei)
- configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng)
- ASoC: atmel-i2s: Fix usage of capture and playback at the same time (Codrin Ciubotariu)
- extcon: max8997: Add missing modalias string (Marek Szyprowski)
- extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold)
- phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET)
- phy: uniphier-pcie: Fix updating phy parameters (Kunihiko Hayashi)
- soundwire: stream: Fix test for DP prepare complete (Richard Fitzgerald)
- scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei)
- mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (Yang Yingliang)
- of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven)
- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald)
- iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (Maciej W. Rozycki)
- staging: mt7621-dts: fix pci address for PCI memory range (Sergio Paracuellos)
- staging: rtl8712: fix memory leak in rtl871x_load_fw_cb (Pavel Skripkin)
- staging: rtl8712: remove redundant check in r871xu_drv_init (Pavel Skripkin)
- staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter)
- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter)
- iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (Alexandru Ardelean)
- eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (Andy Shevchenko)
- eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko)
- usb: dwc2: Don't reset the core after setting turnaround time (Clément Lassieur)
- usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov)
- ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 'mtk_btcvsd_snd_probe()' (Christophe JAILLET)
- iommu/dma: Fix IOVA reserve dma ranges (Srinath Mannam)
- s390: appldata depends on PROC_SYSCTL (Randy Dunlap)
- visorbus: fix error return code in visorchipset_init() (Zhen Lei)
- fsi/sbefifo: Fix reset timeout (Joachim Fenkes)
- fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE (Joachim Fenkes)
- fsi: occ: Don't accept response from un-initialized OCC (Eddie James)
- fsi: scom: Reset the FSI2PIB engine for any error (Eddie James)
- fsi: core: Fix return of error values on failures (Colin Ian King)
- scsi: FlashPoint: Rename si_flags field (Randy Dunlap)
- leds: lm3692x: Put fwnode in any case during ->probe() (Andy Shevchenko)
- leds: lm36274: cosmetic: rename lm36274_data to chip (Marek Behún)
- leds: lm3532: select regmap I2C API (Andy Shevchenko)
- tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET)
- firmware: stratix10-svc: Fix a resource leak in an error handling path (Christophe JAILLET)
- char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai)
- mtd: partitions: redboot: seek fis-index-block in the right node (Corentin Labbe)
- Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei)
- ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (Kuninori Morimoto)
- backlight: lm3630a_bl: Put fwnode in error case during ->probe() (Andy Shevchenko)
- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang)
- ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (Yang Yingliang)
- iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: mxc4005: Fix overread of data and alignment issue. (Jonathan Cameron)
- iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (Jonathan Cameron)
- iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adis16400: do not return ints in irq handlers (Nuno Sa)
- iio: adis_buffer: do not return ints in irq handlers (Nuno Sa)
- mwifiex: re-fix for unaligned accesses (Arnd Bergmann)
- tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET)
- rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() (Paul E. McKenney)
- staging: fbtft: Rectify GPIO handling (Andy Shevchenko)
- MIPS: Fix PKMAP with 32-bit MIPS huge page support (Wei Li)
- RDMA/mlx5: Don't access NULL-cleared mpi pointer (Leon Romanovsky)
- net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin)
- net: lwtunnel: handle MTU calculation in forwading (Vadim Fedorenko)
- writeback: fix obtain a reference to a freeing memcg css (Muchun Song)
- clk: si5341: Update initialization magic (Robert Hancock)
- clk: si5341: Avoid divide errors due to bogus register contents (Robert Hancock)
- clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (Cristian Ciocaltea)
- clk: actions: Fix SD clocks factor table on Owl S500 SoC (Cristian Ciocaltea)
- clk: actions: Fix UART clock dividers on Owl S500 SoC (Cristian Ciocaltea)
- Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (Luiz Augusto von Dentz)
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros)
- gve: Fix swapped vars when fetching max queues (Bailey Forrest)
- bpfilter: Specify the log level for the kmsg message (Gary Lin)
- e1000e: Check the PCIm state (Sasha Neftin)
- ipv6: fix out-of-bound access in ip6_parse_tlv() (Eric Dumazet)
- ibmvnic: free tx_pool if tso_pool alloc fails (Sukadev Bhattiprolu)
- Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden)
- i40e: Fix autoneg disabling for non-10GBaseT links (Mateusz Palczewski)
- i40e: Fix error handling in i40e_vsi_open (Dinghao Liu)
- bpf: Do not change gso_size during bpf_skb_change_proto() (Maciej Żenczykowski)
- ipv6: exthdrs: do not blindly use init_net (Eric Dumazet)
- net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan)
- mac80211: remove iwlwifi specific workaround NDPs of null_response (Ping-Ke Shih)
- ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (Eric Dumazet)
- ieee802154: hwsim: Fix memory leak in hwsim_add_one (Dongliang Mu)
- tc-testing: fix list handling (Marcelo Ricardo Leitner)
- net/ipv4: swap flow ports when validating source (Miao Wang)
- vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet)
- pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet)
- tls: prevent oversized sendfile() hangs by ignoring MSG_MORE (Jakub Kicinski)
- net: sched: add barrier to ensure correct ordering for lockless qdisc (Yunsheng Lin)
- vrf: do not push non-ND strict packets with a source LLA through packet taps again (Antoine Tenart)
- net: ethernet: ezchip: fix error handling (Pavel Skripkin)
- net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin)
- net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin)
- samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai)
- RDMA/rxe: Fix qp reference counting for atomic ops (Bob Pearson)
- netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols (Pablo Neira Ayuso)
- netfilter: nft_osf: check for TCP packet before further processing (Pablo Neira Ayuso)
- netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso)
- RDMA/mlx5: Don't add slave port to unaffiliated list (Leon Romanovsky)
- netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin)
- ath10k: Fix an error code in ath10k_add_interface() (Yang Li)
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET)
- brcmfmac: correctly report average RSSI in station info (Alvin Šipraga)
- brcmfmac: fix setting of station info chains bitmask (Alvin Šipraga)
- ssb: Fix error return code in ssb_bus_scan() (Zhen Lei)
- wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (Bryan O'Donoghue)
- ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (Dongliang Mu)
- wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap)
- ath10k: add missing error return code in ath10k_pci_probe() (Yang Yingliang)
- ath10k: go to path err_unsupported when chip id is not supported (Yang Yingliang)
- tools/bpftool: Fix error return code in do_batch() (Zhihao Cheng)
- drm: qxl: ensure surf.data is ininitialized (Colin Ian King)
- RDMA/rxe: Fix failure during driver load (Kamal Heib)
- RDMA/core: Sanitize WQ state received from the userspace (Leon Romanovsky)
- net/sched: act_vlan: Fix modify to allow 0 (Boris Sukholitko)
- ehea: fix error return code in ehea_restart_qps() (Zhen Lei)
- drm/rockchip: dsi: move all lane config except LCDC mux to bind() (Thomas Hebb)
- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang)
- net: ftgmac100: add missing error return code in ftgmac100_probe() (Yang Yingliang)
- clk: meson: g12a: fix gp0 and hifi ranges (Jerome Brunet)
- pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities (Geert Uytterhoeven)
- pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin (Geert Uytterhoeven)
- net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko)
- net: mvpp2: Put fwnode in error case during ->probe() (Andy Shevchenko)
- video: fbdev: imxfb: Fix an error message (Christophe JAILLET)
- xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (Sabrina Dubroca)
- dax: fix ENOMEM handling in grab_mapping_entry() (Jan Kara)
- ocfs2: fix snprintf() checking (Dan Carpenter)
- cpufreq: Make cpufreq_online() call driver->offline() on errors (Rafael J. Wysocki)
- ACPI: bgrt: Fix CFI violation (Nathan Chancellor)
- ACPI: Use DEVICE_ATTR_<RW|RO|WO> macros (Dwaipayan Ray)
- blk-wbt: make sure throttle is enabled properly (Zhang Yi)
- blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (Zhang Yi)
- extcon: extcon-max8997: Fix IRQ freeing at error path (Matti Vaittinen)
- ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński)
- crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu)
- spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt)
- sched/uclamp: Fix uclamp_tg_restrict() (Qais Yousef)
- sched/rt: Fix Deadline utilization tracking during policy change (Vincent Donnefort)
- sched/rt: Fix RT utilization tracking during policy change (Vincent Donnefort)
- btrfs: clear log tree recovering status if starting transaction fails (David Sterba)
- regulator: hi655x: Fix pass wrong pointer to config.driver_data (Axel Lin)
- KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (Sean Christopherson)
- hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck)
- hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck)
- media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min)
- arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan (Anshuman Khandual)
- arm64: consistently use reserved_pg_dir (Mark Rutland)
- mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei)
- crypto: omap-sham - Fix PM reference leak in omap sham ops (Zhang Qilong)
- crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (Tong Tiangen)
- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva)
- m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning (Randy Dunlap)
- media: gspca/gl860: fix zero-length control requests (Johan Hovold)
- media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei)
- media: au0828: fix a NULL vs IS_ERR() check (Dan Carpenter)
- media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong)
- pata_ep93xx: fix deferred probing (Sergey Shtylyov)
- media: rc: i2c: Fix an error message (Christophe JAILLET)
- crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET)
- evm: fix writing <securityfs>/evm overflow (Mimi Zohar)
- pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov)
- kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_<obj> := n' (Josh Poimboeuf)
- kbuild: run the checker after the compiler (Luc Van Oostenryck)
- sched/uclamp: Fix locking around cpu_util_update_eff() (Qais Yousef)
- sched/uclamp: Fix wrong implementation of cpu.uclamp.min (Qais Yousef)
- media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap)
- pata_rb532_cf: fix deferred probing (Sergey Shtylyov)
- sata_highbank: fix deferred probing (Sergey Shtylyov)
- crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei)
- crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe)
- media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab)
- writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin)
- ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann)
- kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)
- block: fix discard request merge (Ming Lei)
- cifs: fix missing spinlock around update to ses->status (Steve French)
- HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke)
- ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald)
- clocksource: Retry clock read if long delays detected (Paul E. McKenney)
- PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (Haiyang Zhang)
- EDAC/Intel: Do not load EDAC driver when running as a guest (Tony Luck)
- nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() (Hannes Reinecke)
- platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong)
- block: fix race between adding/removing rq qos and normal IO (Ming Lei)
- ACPI: resources: Add checks for ACPI IRQ override (Hui Wang)
- ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo)
- ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda)
- fs: dlm: fix memory leak when fenced (Alexander Aring)
- random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald)
- fs: dlm: cancel work sync othercon (Alexander Aring)
- block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F))
- ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu)
- lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald)
- hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing)
- ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello)
- EDAC/ti: Add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov)
- media: Fix Media Controller API config checks (Shuah Khan)
- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin)
- regulator: mt6358: Fix vdram2 .vsel_mask (Hsin-Hsiung Wang)
- KVM: s390: get rid of register asm usage (Heiko Carstens)
- lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() (Boqun Feng)
- locking/lockdep: Fix the dep path printing for backwards BFS (Boqun Feng)
- btrfs: disable build on platforms having page size 256K (Christophe Leroy)
- btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik)
- btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik)
- KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors (Suraj Jitindar Singh)
- drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() (Jing Xiangfeng)
- hwmon: (max31790) Fix pwmX_enable attributes (Guenter Roeck)
- hwmon: (max31790) Report correct current pwm duty cycles (Guenter Roeck)
- media: imx-csi: Skip first few frames from a BT.656 source (Steve Longerbeam)
- media: siano: fix device register error path (Mauro Carvalho Chehab)
- media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab)
- crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel)
- mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma)
- mmc: sdhci-sprd: use sdhci_sprd_writew (Krzysztof Kozlowski)
- memstick: rtsx_usb_ms: fix UAF (Tong Zhang)
- media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu)
- Makefile: fix GDB warning with CONFIG_RELR (Nick Desaulniers)
- media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov)
- media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma)
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong)
- media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente)
- sched/fair: Fix ascii art by relpacing tabs (Odin Ugedal)
- crypto: qat - remove unused macro in FW loader (Jack Xu)
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu)
- media: imx: imx7_mipi_csis: Fix logging of only error event counters (Laurent Pinchart)
- media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam)
- media: cobalt: fix race condition in setting HPD (Hans Verkuil)
- media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin)
- media: sti: fix obj-$(config) targets (Mauro Carvalho Chehab)
- crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- hwrng: exynos - Fix runtime PM imbalance on error (Łukasz Stelmach)
- regulator: uniphier: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- spi: omap-100k: Fix the length judgment problem (Tian Tao)
- spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang)
- spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang)
- media: exynos-gsc: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
- media: sti/bdisp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
- media: s5p-jpeg: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
- media: mtk-vcodec: fix PM runtime get logic (Mauro Carvalho Chehab)
- media: sh_vou: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
- media: s5p: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
- media: mdk-mdp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
- spi: Make of_register_spi_device also set the fwnode (Charles Keepax)
- fuse: reject internal errno (Miklos Szeredi)
- fuse: check connected before queueing on fpq->io (Miklos Szeredi)
- fuse: ignore PG_workingset after stealing (Miklos Szeredi)
- evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded (Roberto Sassu)
- evm: Execute evm_inode_init_security() only when an HMAC key is loaded (Roberto Sassu)
- powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi() (Michael Ellerman)
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou)
- tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (Steven Rostedt (VMware))
- tracing/histograms: Fix parsing of "sym-offset" modifier (Steven Rostedt (VMware))
- rsi: fix AP mode with WPA failure due to encrypted EAPOL (Martin Fuzzey)
- rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut)
- ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch)
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár)
- serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary)
- serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary)
- serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda)
- serial: mvebu-uart: fix calculation of clock divisor (Pali Rohár)
- iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang)
- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang)
- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde)
- iio: light: tcs3472: do not free unallocated IRQ (frank zago)
- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey)
- s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan)
- KVM: PPC: Book3S HV: Workaround high stack usage with clang (Nathan Chancellor)
- perf/smmuv3: Don't trample existing events with global filter (Robin Murphy)
- SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu)
- SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu)
- mac80211: remove iwlwifi specific workaround that broke sta NDP tx (Felix Fietkau)
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean)
- can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel)
- can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp)
- ext4: fix avefreec in find_group_orlov (Pan Dong)
- ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi)
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi)
- ext4: return error code when ext4_fill_flex_info() fails (Yang Yingliang)
- ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi)
- btrfs: clear defrag status of a root if starting transaction fails (David Sterba)
- btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana)
- ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches)
- arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode (Yang Jihong)
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)
- iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro)
- copy_page_to_iter(): fix ITER_DISCARD case (Al Viro)
- ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi)
- xhci: solve a double free problem while doing s4 (Zhangjiantao (Kirin, nanjing))
- usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (Jing Xiangfeng)
- usb: dwc3: Fix debugfs creation flow (Minas Harutyunyan)
- USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen)
- usb: gadget: eem: fix echo command packet response issue (Linyu Yuan)
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin)
- Input: usbtouchscreen - fix control-request directions (Johan Hovold)
- media: dvb-usb: fix wrong definition (Pavel Skripkin)
- ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (Takashi Iwai)
- ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (Takashi Iwai)
- ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (Elia Devito)
- ALSA: hda/realtek: Add another ALC236 variant support (Takashi Iwai)
- ALSA: intel8x0: Fix breakage at ac97 clock measurement (Takashi Iwai)
- ALSA: usb-audio: scarlett2: Fix wrong resume call (Takashi Iwai)
- ALSA: usb-audio: Fix OOB access at proc output (Takashi Iwai)
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung)
- LTS tag: v5.4.131 (Jack Vogel)
- xen/events: reset active flag for lateeoi events later (Juergen Gross)
- KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun)
- s390/stack: fix possible register corruption with stack switch helper (Heiko Carstens)
- KVM: SVM: Periodically schedule when unregistering regions on destroy (David Rientjes)   {CVE-2020-36311}
- LTS tag: v5.4.130 (Jack Vogel)
- RDMA/mlx5: Block FDB rules when not in switchdev mode (Mark Bloch)
- gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (Johannes Berg)
- drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König)
- scsi: sr: Return appropriate error code when disk is ejected (ManYi Li)
- LTS tag v5.4.129 (Jack Vogel)
- x86/efi: move common keyring handler functions to new file (Nayna Jain)
- certs: Add wrapper function to check blacklisted binary hash (Nayna Jain)
- mm, futex: fix shared futex pgoff on shmem huge page (Hugh Dickins)
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins)
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins)
- mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins)
- mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins)
- mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins)
- mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins)
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins)
- mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins)
- mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins)
- mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins)
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi)
- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (Hugh Dickins)
- mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang)
- mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins)
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins)
- mm/thp: make is_huge_zero_pmd() safe and quicker (Hugh Dickins)
- mm/thp: fix __split_huge_pmd_locked() on shmem migration entry (Hugh Dickins)
- mm, thp: use head page in __migration_entry_wait() (Xu Yu)
- mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin)
- mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin)
- mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi)
- kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)
- kthread_worker: split code for canceling the delayed work timer (Petr Mladek)
- i2c: robotfuzz-osif: fix control-request directions (Johan Hovold)
- KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin)   {CVE-2021-22543}
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin)
- pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne)
- net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal)
- net: ll_temac: Add memory-barriers for TX BD access (Esben Haabendal)
- PCI: Add AMD RS690 quirk to enable 64-bit DMA (Mikel Rychliski)
- recordmcount: Correct st_shndx handling (Peter Zijlstra)
- net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook)
- KVM: selftests: Fix kvm_check_cap() assertion (Fuad Tabba)
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- net/packet: annotate accesses to po->ifindex (Eric Dumazet)
- net/packet: annotate accesses to po->bind (Eric Dumazet)
- net: caif: fix memory leak in ldisc_open (Pavel Skripkin)
- net: phy: dp83867: perform soft reset and retain established link (Praneeth Bajjuri)
- inet: annotate date races around sk->sk_txhash (Eric Dumazet)
- ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun)
- net: ethtool: clear heap allocations for ethtool function (Austin Kim)
- mac80211: drop multicast fragments (Johannes Berg)
- net: ipv4: Remove unneed BUG() function (Zheng Yongjun)
- dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (Guillaume Ranquet)
- dmaengine: mediatek: do not issue a new desc if one is still current (Guillaume Ranquet)
- dmaengine: mediatek: free the proper desc in desc_free handler (Guillaume Ranquet)
- dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (Zou Wei)
- cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng)
- mac80211_hwsim: drop pending frames on stop (Johannes Berg)
- dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (Yu Kuai)
- Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki)
- spi: spi-nxp-fspi: move the register operation after the clock enable (Haibo Chen)
- MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor)
- arm64: link with -z norelro for LLD or aarch64-elf (Nick Desaulniers)
- kbuild: add CONFIG_LD_IS_LLD (Sami Tolvanen)
- mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (Neil Armstrong)
- ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann)
- drm/radeon: wait for moving fence after pinning (Christian König)
- drm/nouveau: wait for moving fence after pinning v2 (Christian König)
- Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell." (Yifan Zhang)
- Revert "drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue." (Yifan Zhang)
- module: limit enabling module.sig_enforce (Mimi Zohar)
- mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)  [Orabug: 33171088]
- platform/x86: ISST: Account for increased timeout in some cases (Srinivas Pandruvada)  [Orabug: 33126078]
- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114646]  {CVE-2021-3609}