[El-errata] ELSA-2021-9452 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Sep 21 07:59:07 PDT 2021
Oracle Linux Security Advisory ELSA-2021-9452
http://linux.oracle.com/errata/ELSA-2021-9452.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-4.14.35-2047.507.7.4.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-2047.507.7.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-2047.507.7.4.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-2047.507.7.4.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-2047.507.7.4.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-2047.507.7.4.el7uek.noarch.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-2047.507.7.4.el7uek.src.rpm
Related CVEs:
CVE-2020-24586
CVE-2020-24587
CVE-2020-24588
CVE-2020-26147
CVE-2021-22543
CVE-2021-23134
CVE-2021-34693
CVE-2021-3609
CVE-2021-3612
CVE-2021-3653
CVE-2021-3656
Description of changes:
[4.14.35-2047.507.7.4.el7uek]
- KVM: x86: Check kvm_rebooting in kvm_spurious_fault() (Sean Christopherson) [Orabug: 33362693]
[4.14.35-2047.507.7.3.el7uek]
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp) [Orabug: 33354710]
[4.14.35-2047.507.7.2.el7uek]
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter) [Orabug: 33337449]
- ip: Manual backport of pskb_inet_may_pull() (Håkon Bugge) [Orabug: 33337449]
- Revert "Revert "net: geneve: check skb is large enough for IPv4/IPv6 header"" (Håkon Bugge) [Orabug: 33337449]
[4.14.35-2047.507.7.1.el7uek]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306519]
- Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy) [Orabug: 33323390]
[4.14.35-2047.507.7.el7uek]
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva) [Orabug: 33296813]
- Revert "mm: memcontrol: eliminate raw access to stat and event counters" (Ritika Srivastava) [Orabug: 33254727]
- Revert "mm: memcontrol: implement lruvec stat functions on top of each other" (Ritika Srivastava) [Orabug: 33254727]
- KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin) [Orabug: 33054089] {CVE-2021-22543} {CVE-2021-22543}
- ocfs2: issue zeroout to EOF blocks (Junxiao Bi) [Orabug: 32974988]
- ocfs2: fix zero out valid data (Junxiao Bi) [Orabug: 32974988]
[4.14.35-2047.507.6.el7uek]
- xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang) [Orabug: 33277336]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge) [Orabug: 33253068]
- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33246581]
- scsi: lpfc: Fix crash due to port reset racing vs adapter error handling (James Smart) [Orabug: 33213341]
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33141334]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 33141334]
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) [Orabug: 33114988] {CVE-2021-3612}
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372381]
- dsc-drivers: update for 1.15.9-C-32 (Shannon Nelson) [Orabug: 33281086]
- dts/pensando: creating reserved dma memory pool for mnet devices (Neel Patel) [Orabug: 33281086]
- pcie: rm pcie register access message (#256) (Brad Smith) [Orabug: 33281086]
- drivers: updates for 1.15.9-C-28 (Shannon Nelson) [Orabug: 33281086]
[4.14.35-2047.507.5.el7uek]
- rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire) [Orabug: 33243560]
- KVM: SVM: use vmsave/vmload for saving/restoring additional host state (Michael Roth) [Orabug: 33225761]
- KVM: SVM: Use asm goto to handle unexpected #UD on SVM instructions (Sean Christopherson) [Orabug: 33225761]
- kvm: svm/avic: Do not send AVIC doorbell to self (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm/avic: Fix invalidate logical APIC id entry (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm: Fix improper check when deactivate AVIC (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm: Fix AVIC DFR and LDR handling (Suthikulpanit, Suravee) [Orabug: 33225761]
- scsi: qla2xxx: Add heartbeat check (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (Baokun Li) [Orabug: 33116624]
- scsi: qla2xxx: Remove duplicate declarations (Shaokun Zhang) [Orabug: 33116624]
- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (Daniel Wagner) [Orabug: 33116624]
- scsi: qla2xxx: Remove redundant assignment to rval (Jiapeng Chong) [Orabug: 33116624]
- scsi: qla2xxx: Prevent PRLI in target mode (Anastasia Kovaleva) [Orabug: 33116624]
- scsi: qla2xxx: Add marginal path handling support (Bikash Hazarika) [Orabug: 33116624]
- scsi: qla2xxx: Reserve extra IRQ vectors (Roman Bolshakov) [Orabug: 33116624]
- scsi: qla2xxx: Reuse existing error handling path (Christophe JAILLET) [Orabug: 33116624]
- scsi: qla2xxx: Remove unneeded if-null-free check (Qiheng Lin) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.106-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Update default AER debug mask (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix mailbox recovery during PCIe error (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix crash in PCIe error handling (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix RISC RESET completion polling (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix stuck session (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Add H:C:T info in the log message for fc ports (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Fix IOPS drop seen in some adapters (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Check kzalloc() return value (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Simplify qla8044_minidump_process_control() (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Suppress Coverity complaints about dseg_r* (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Fix endianness annotations (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Constify struct qla_tgt_func_tmpl (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Use dma_pool_zalloc() (Wang Qing) [Orabug: 33116624]
- scsi: qla2xxx: Fix a couple of misdocumented functions (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix incorrectly named function qla8044_check_temp() (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix a couple of misnamed functions (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix some incorrect formatting/spelling issues (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Replace __qla2x00_marker()'s missing underscores (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Simplify if statement (Jiapeng Chong) [Orabug: 33116624]
- scsi: qla2xxx: Simplify the calculation of variables (Jiapeng Zhong) [Orabug: 33116624]
- scsi: qla2xxx: Fix some memory corruption (Dan Carpenter) [Orabug: 33116624]
- scsi: qla2xxx: Remove redundant NULL check (Yang Li) [Orabug: 33116624]
- scsi: qla2xxx: Remove unnecessary NULL check (Dan Carpenter) [Orabug: 33116624]
- scsi: qla2xxx: Assign boolean values to a bool variable (Jiapeng Zhong) [Orabug: 33116624]
- scsi: qla2xxx: fc_remote_port_chkready() returns a SCSI result value (Hannes Reinecke) [Orabug: 33116624]
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (Enzo Matsumiya) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.105-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Enable NVMe CONF (BIT_7) when enabling SLER (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix mailbox Ch erroneous error (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Wait for ABTS response on I/O timeouts for NVMe (Bikash Hazarika) [Orabug: 33116624]
- scsi: qla2xxx: Move some messages from debug to normal log level (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Add error counters to debugfs node (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Implementation to get and manage host, target stats and initiator port (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.104-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix FW initialization error on big endian machines (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Fix compilation issue in PPC systems (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Don't check for fw_started while posting NVMe command (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Tear down session if FW say it is down (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Change post del message from debug level to log level (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Remove trailing semicolon in macro definition (Tom Rix) [Orabug: 33116624]
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (Ahmed S. Darwish) [Orabug: 33116624]
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (Ahmed S. Darwish) [Orabug: 33116624]
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (Ahmed S. Darwish) [Orabug: 33116624]
- scsi: Remove unneeded break statements (Tom Rix) [Orabug: 33116624]
- scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (Muneendra Kumar) [Orabug: 33116624]
- scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (Muneendra Kumar) [Orabug: 33116624]
- scsi: core: No retries on abort success (Muneendra Kumar) [Orabug: 33116624]
- scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (Muneendra Kumar) [Orabug: 33116624]
[4.14.35-2047.507.4.el7uek]
- drivers: updated for 1.15.9.26 (Shannon Nelson) [Orabug: 33235357]
- XFS: code enhancement to help debug (Wengang Wang) [Orabug: 33186644]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33234941] {CVE-2021-3656} {CVE-2021-3656}
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky) [Orabug: 33234967] {CVE-2021-3653} {CVE-2021-3653}
[4.14.35-2047.507.3.el7uek]
- drivers: updates for 1.15.9.21 (Shannon Nelson) [Orabug: 33220300]
- Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil) [Orabug: 33220435]
- Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil) [Orabug: 33220435]
- Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil) [Orabug: 33220435]
- Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil) [Orabug: 33220435]
- NFS: Don't call generic_error_remove_page() while holding locks (Trond Myklebust) [Orabug: 33213898]
- ip6_gre: proper dev_{hold|put} in ndo_[un]init methods (aloktiw) [Orabug: 33179252]
- ifb: fix packets checksum (Jon Maxwell) [Orabug: 33145562]
- Linux 4.14.239 (Greg Kroah-Hartman)
- xen/events: reset active flag for lateeoi events later (Juergen Gross)
- kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)
- kthread_worker: split code for canceling the delayed work timer (Petr Mladek)
- kfifo: DECLARE_KIFO_PTR(fifo, u64) does not work on arm 32 bit (Sean Young)
- drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König)
- scsi: sr: Return appropriate error code when disk is ejected (ManYi Li)
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins)
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins)
- mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins)
- mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins)
- mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins)
- mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins)
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins)
- mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins)
- mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins)
- mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins)
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi)
- mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang)
- mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins)
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins)
- mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin)
- mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin)
- mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi)
- include/linux/mmdebug.h: make VM_WARN* non-rvals (Michal Hocko)
[4.14.35-2047.507.2.el7uek]
- uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan) [Orabug: 33186981]
- rds: Congestion tracepoints should be enabled by default (Greg Jumper) [Orabug: 33145670]
- Linux 4.14.238 (Sasha Levin)
- i2c: robotfuzz-osif: fix control-request directions (Johan Hovold)
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin)
- pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne)
- net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal)
- net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook)
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- net/packet: annotate accesses to po->ifindex (Eric Dumazet)
- net/packet: annotate accesses to po->bind (Eric Dumazet)
- net: caif: fix memory leak in ldisc_open (Pavel Skripkin)
- inet: annotate date races around sk->sk_txhash (Eric Dumazet)
- ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun)
- mac80211: drop multicast fragments (Johannes Berg)
- cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng)
- mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)
- Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki)
- arm64: perf: Disable PMU while processing counter overflows (Suzuki K Poulose)
- MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor)
- Makefile: Move -Wno-unused-but-set-variable out of GCC only block (Nathan Chancellor)
- ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann)
- drm/radeon: wait for moving fence after pinning (Christian König)
- drm/nouveau: wait for moving fence after pinning v2 (Christian König)
- x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)
- unfuck sysfs_mount() (Al Viro)
- kernfs: deal with kernfs_fill_super() failures (Al Viro)
- usb: dwc3: core: fix kernel panic when do reboot (Peter Chen)
- inet: use bigger hash table for IP ID generation (Eric Dumazet)
- can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)
- net: fec_ptp: add clock rate zero check (Fugang Duan)
- mm/slub.c: include swab.h (Andrew Morton)
- net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)
- net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)
- ARCv2: save ABI registers across signal handling (Vineet Gupta)
- PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)
- PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)
- PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)
- PCI: Mark TI C667X to avoid bus reset (Antti Järvinen)
- tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))
- tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))
- tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))
- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)
- can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)
- hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)
- radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)
- net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)
- icmp: don't send out ICMP messages with a source address of 0.0.0.0 (Toke Høiland-Jørgensen)
- net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)
- net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)
- be2net: Fix an error handling path in 'be_probe()' (Christophe JAILLET)
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)
- net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)
- net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)
- net: cdc_ncm: switch to eth%d interface naming (Maciej Żenczykowski)
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()' (Christophe JAILLET)
- qlcnic: Fix an error handling path in 'qlcnic_probe()' (Christophe JAILLET)
- net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)
- alx: Fix an error handling path in 'alx_probe()' (Christophe JAILLET)
- netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)
- rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)
- udp: fix race between close() and udp_abort() (Paolo Abeni)
- net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)
- batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)
- mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)
- dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)
- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)
- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)
- fib: Return the correct errno code (Zheng Yongjun)
- net: Return the correct errno code (Zheng Yongjun)
- net/x25: Return the correct errno code (Zheng Yongjun)
- rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)
- net: ipconfig: Don't override command-line hostnames or domains (Josh Triplett)
- nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)
- nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)
- nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)
- ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)
- scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)
- HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)
- HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)
- HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)
- HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)
- net: ieee802154: fix null deref in parse dev addr (Dan Robertson)
- Linux 4.14.237 (Greg Kroah-Hartman)
- proc: only require mm_struct for writing (Linus Torvalds)
- tracing: Correct the length check which causes memory corruption (Liangyan)
- ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)
- scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)
- NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)
- kvm: fix previous commit for 32-bit builds (Paolo Bonzini)
- perf session: Correct buffer copying when peeking events (Leo Yan)
- NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)
- perf: Fix data race between pin_count increment/decrement (Marco Elver)
- regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)
- regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)
- usb: fix various gadget panics on 10gbps cabling (Maciej Żenczykowski)
- usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej Żenczykowski)
- usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)
- USB: serial: quatech2: fix control-request directions (Johan Hovold)
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)
- usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)
- USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej Żenczykowski)
- cgroup1: don't allow '
' in renaming (Alexander Kuznetsov)
- btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)
- staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)
- kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)
- drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)
- drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)
- i2c: mpc: implement erratum A-004447 workaround (Chris Packham)
- i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)
- bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)
- MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)
- net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)
- net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)
- scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)
- wq: handle VM suspension in stall detection (Sergey Senozhatsky)
- cgroup: disable controllers at parse time (Shakeel Butt)
- net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)
- netlink: disable IRQs for netlink_lock_table() (Johannes Berg)
- bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)
- isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)
- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)
- net/nfc/rawsock.c: fix a permission check bug (Jeimon)
- proc: Track /proc/$pid/attr/ opener mm_struct (Kees Cook)
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150437]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150414]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177350]
- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo) [Orabug: 33114648] {CVE-2021-3609}
[4.14.35-2047.507.1.el7uek]
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek) [Orabug: 33030700] {CVE-2021-34693}
- Linux 4.14.236 (Greg Kroah-Hartman)
- xen-pciback: redo VF placement in the virtual topology (Jan Beulich)
- sched/fair: Optimize select_idle_cpu (Cheng Jian)
- KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode (Sean Christopherson)
- bnxt_en: Remove the setting of dev_port. (Michael Chan)
- bpf: No need to simulate speculative domain for immediates (Daniel Borkmann)
- bpf: Fix mask direction swap upon off reg sign change (Daniel Borkmann)
- bpf: Wrap aux data inside bpf_sanitize_info container (Daniel Borkmann)
- bpf: Fix leakage of uninitialized bpf stack under speculation (Daniel Borkmann)
- selftests/bpf: make 'dubious pointer arithmetic' test useful (Alexei Starovoitov)
- selftests/bpf: fix test_align (Alexei Starovoitov)
- bpf/verifier: disallow pointer subtraction (Alexei Starovoitov)
- bpf: Update selftests to reflect new error states (Daniel Borkmann)
- bpf: Tighten speculative pointer arithmetic mask (Daniel Borkmann)
- bpf: Move sanitize_val_alu out of op switch (Daniel Borkmann)
- bpf: Refactor and streamline bounds check into helper (Daniel Borkmann)
- bpf: Improve verifier error messages for users (Daniel Borkmann)
- bpf: Rework ptr_limit into alu_limit and add common error path (Daniel Borkmann)
- bpf: Ensure off_reg has no mixed signed bounds for all types (Daniel Borkmann)
- bpf: Move off_reg into sanitize_ptr_alu (Daniel Borkmann)
- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY (Mina Almasry)
- btrfs: fixup error handling in fixup_inode_link_counts (Josef Bacik)
- btrfs: fix error handling in btrfs_del_csums (Josef Bacik)
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski)
- ocfs2: fix data corruption by fallocate (Junxiao Bi)
- pid: take a reference when initializing `cad_pid` (Mark Rutland)
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)
- ALSA: timer: Fix master timer notification (Takashi Iwai)
- net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin)
- net: caif: fix memory leak in caif_device_notify (Pavel Skripkin)
- net: caif: add proper error handling (Pavel Skripkin)
- net: caif: added cfserl_release function (Pavel Skripkin)
- ieee802154: fix error return code in ieee802154_llsec_getparams() (Wei Yongjun)
- ieee802154: fix error return code in ieee802154_add_iface() (Zhen Lei)
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (Pablo Neira Ayuso)
- HID: i2c-hid: fix format string mismatch (Arnd Bergmann)
- HID: pidff: fix error return code in hid_pidff_init() (Zhen Lei)
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service (Julian Anastasov)
- vfio/platform: fix module_put call in error flow (Max Gurtovoy)
- vfio/pci: zap_vma_ptes() needs MMU (Randy Dunlap)
- vfio/pci: Fix error return code in vfio_ecap_init() (Zhen Lei)
- efi: cper: fix snprintf() use in cper_dimm_err_location() (Rasmus Villemoes)
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (Heiner Kallweit)
- net: usb: cdc_ncm: don't spew notifications (Grant Grundler)
- Linux 4.14.235 (Greg Kroah-Hartman)
- usb: core: reduce power-on-good delay time of root hub (Chunfeng Yun)
- drivers/net/ethernet: clean up unused assignments (Jesse Brandeburg)
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup (Mike Kravetz)
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c (Randy Dunlap)
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file (Randy Dunlap)
- sch_dsmark: fix a NULL deref in qdisc_reset() (Taehee Yoo)
- ipv6: record frag_max_size in atomic fragments in input path (Francesco Ruggeri)
- scsi: libsas: Use _safe() loop in sas_resume_port() (Dan Carpenter)
- ixgbe: fix large MTU request from VF (Jesse Brandeburg)
- bpf: Set mac_len in bpf_skb_change_head (Jussi Maki)
- ASoC: cs35l33: fix an error code in probe() (Dan Carpenter)
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (Dan Carpenter)
- mld: fix panic in mld_newpack() (Taehee Yoo)
- net: bnx2: Fix error return code in bnx2_init_board() (Zhen Lei)
- net: mdio: octeon: Fix some double free issues (Christophe JAILLET)
- net: mdio: thunder: Fix a double free issue in the .remove function (Christophe JAILLET)
- net: netcp: Fix an error message (Christophe JAILLET)
- drm/amdgpu: Fix a use-after-free (xinhui pan)
- SMB3: incorrect file id in requests compounded with open (Steve French)
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (Andy Shevchenko)
- platform/x86: hp-wireless: add AMD's hardware id to the supported list (Shyam Sundar S K)
- btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik)
- openrisc: Define memory barrier mb (Peter Zijlstra)
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic (Matt Wang)
- media: gspca: properly check for errors in po1030_probe() (Greg Kroah-Hartman)
- media: dvb: Add check on sp8870_readreg return (Alaa Emad)
- libertas: register sysfs groups properly (Greg Kroah-Hartman)
- dmaengine: qcom_hidma: comment platform_driver_register call (Phillip Potter)
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (Phillip Potter)
- char: hpet: add checks after calling ioremap (Tom Seewald)
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit (Du Cheng)
- net: fujitsu: fix potential null-ptr-deref (Anirudh Rayabharam)
- serial: max310x: unregister uart driver in case of failure and abort (Atul Gopinathan)
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume (Kai-Heng Feng)
- perf jevents: Fix getting maximum number of fds (Felix Fietkau)
- i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare)
- i2c: s3c2410: fix possible NULL pointer deref on read message after write (Krzysztof Kozlowski)
- tipc: skb_linearize the head skb when reassembling msgs (Xin Long)
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" (Hoang Le)
- drm/meson: fix shutdown crash when component not probed (Neil Armstrong)
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (Zhang Xiaoxu)
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)
- NFS: fix an incorrect limit in filelayout_decode_layout() (Dan Carpenter)
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)
- net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() (Yoshihiro Shimoda)
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC (Zolton Jheng)
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products (Dominik Andreas Schorpp)
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (Daniele Palmas)
- USB: serial: ti_usb_3410_5052: add startech.com device id (Sean MacLennan)
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (Zheyu Ma)
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (Geert Uytterhoeven)
- USB: trancevibrator: fix control-request direction (Johan Hovold)
- iio: adc: ad7793: Add missing error code in ad7793_setup() (YueHaibing)
- staging: iio: cdc: ad7746: avoid overwrite of num_channels (Lucas Stankus)
- mei: request autosuspend after sending rx flow control (Alexander Usyskin)
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (Mathias Nyman)
- misc/uss720: fix memory leak in uss720_probe (Dongliang Mu)
- kgdb: fix gcc-11 warnings harder (Greg Kroah-Hartman)
- dm snapshot: properly fix a crash when an origin has no snapshots (Mikulas Patocka)
- ath10k: Validate first subframe of A-MSDU before processing the list (Sriram R)
- mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong) {CVE-2020-24586} {CVE-2020-24587}
- mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)
- mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)
- mac80211: check defrag PN against current frame (Johannes Berg)
- mac80211: add fragment cache to sta_info (Johannes Berg)
- mac80211: drop A-MSDUs on old ciphers (Johannes Berg) {CVE-2020-24588}
- cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef) {CVE-2020-24588}
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)
- mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef) {CVE-2020-24587} {CVE-2020-24586}
- mac80211: assure all fragments are encrypted (Mathy Vanhoef) {CVE-2020-26147}
- net: hso: fix control-request directions (Johan Hovold)
- proc: Check /proc/$pid/attr/ writes against file opener (Kees Cook)
- perf intel-pt: Fix transaction abort handling (Adrian Hunter)
- perf intel-pt: Fix sample instruction bytes (Adrian Hunter)
- iommu/vt-d: Fix sysfs leak in alloc_iommu() (Rolf Eike Beer)
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Anna Schumaker)
- NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu)
- usb: dwc3: gadget: Enable suspend events (Jack Pham)
- scripts: switch explicitly to Python 3 (Andy Shevchenko)
- tweewide: Fix most Shebang lines (Finn Behrens)
- A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33161269]
- capmem: Mark the pages as non-readonly+dirty. (David Clear) [Orabug: 33155665]
- Revert "capmem: Mark the pages as non-readonly+dirty." (Dave Kleikamp) [Orabug: 33155665]
- ionic: clean interrupt before enabling queue to avoid credit race (Shannon Nelson) [Orabug: 33155665]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le) [Orabug: 33165871]
- Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy) [Orabug: 33156450]
[4.14.35-2047.507.0.el7uek]
- rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge) [Orabug: 33104574]
- Linux 4.14.234 (Greg Kroah-Hartman)
- Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)
- video: hgafb: correctly handle card detect failure during probe (Anirudh Rayabharam)
- tty: vt: always invoke vc->vc_sw->con_resize callback (Tetsuo Handa)
- vt: Fix character height handling with VT_RESIZEX (Maciej W. Rozycki)
- vgacon: Record video mode changes with VT_RESIZEX (Maciej W. Rozycki)
- video: hgafb: fix potential NULL pointer dereference (Igor Matheus Andrade Torrente)
- qlcnic: Add null check after calling netdev_alloc_skb (Tom Seewald)
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code (Phillip Potter)
- net: rtlwifi: properly check for alloc_workqueue() failure (Greg Kroah-Hartman)
- net: stmicro: handle clk_prepare() failure during init (Anirudh Rayabharam)
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (Du Cheng)
- Revert "niu: fix missing checks of niu_pci_eeprom_read" (Greg Kroah-Hartman)
- Revert "qlcnic: Avoid potential NULL pointer dereference" (Greg Kroah-Hartman)
- Revert "rtlwifi: fix a potential NULL pointer dereference" (Greg Kroah-Hartman)
- Revert "media: rcar_drif: fix a memory disclosure" (Greg Kroah-Hartman)
- cdrom: gdrom: initialize global variable at init time (Greg Kroah-Hartman)
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom (Atul Gopinathan)
- Revert "gdrom: fix a memory leak bug" (Greg Kroah-Hartman)
- Revert "ecryptfs: replace BUG_ON with error handling code" (Greg Kroah-Hartman)
- Revert "video: imsttfb: fix potential NULL pointer dereferences" (Greg Kroah-Hartman)
- Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" (Greg Kroah-Hartman)
- Revert "leds: lp5523: fix a missing check of return value of lp55xx_read" (Greg Kroah-Hartman)
- Revert "net: stmicro: fix a missing check of clk_prepare" (Greg Kroah-Hartman)
- Revert "video: hgafb: fix potential NULL pointer dereference" (Greg Kroah-Hartman)
- dm snapshot: fix crash with transient storage and zero chunk size (Mikulas Patocka)
- xen-pciback: reconfigure also from backend watch handler (Jan Beulich)
- rapidio: handle create_workqueue() failure (Anirudh Rayabharam)
- Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails" (Greg Kroah-Hartman)
- ALSA: hda/realtek: reset eapd coeff to default value for alc287 (Hui Wang)
- Revert "ALSA: sb8: add a check for request_region" (Greg Kroah-Hartman)
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto)
- ALSA: usb-audio: Validate MS endpoint descriptors (Takashi Iwai)
- ALSA: line6: Fix racy initialization of LINE6 MIDI (Takashi Iwai)
- cifs: fix memory leak in smb2_copychunk_range (Ronnie Sahlberg)
- ptrace: make ptrace() fail if the tracee changed its pid unexpectedly (Oleg Nesterov)
- scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (Zhen Lei)
- RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky)
- openrisc: Fix a memory leak (Christophe JAILLET)
- Linux 4.14.233 (Greg Kroah-Hartman)
- ipv6: remove extra dev_hold() for fallback tunnels (Eric Dumazet)
- xhci: Do not use GFP_KERNEL in (potentially) atomic context (Christophe JAILLET)
- ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- sit: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- serial: 8250: fix potential deadlock in rs485-mode (Tomas Melin)
- lib: stackdepot: turn depot_lock spinlock to raw_spinlock (Zqiang)
- block: reexpand iov_iter after read/write (yangerkun)
- ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP (Hui Wang)
- gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 (Hans de Goede)
- ceph: fix fscache invalidation (Jeff Layton)
- um: Mark all kernel symbols as local (Johannes Berg)
- Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state (Hans de Goede)
- Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices (Hans de Goede)
- ACPI / hotplug / PCI: Fix reference count leak in enable_slot() (Feilong Lin)
- ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() (louis.wang)
- PCI: thunder: Fix compile testing (Arnd Bergmann)
- isdn: capi: fix mismatched prototypes (Arnd Bergmann)
- cxgb4: Fix the -Wmisleading-indentation warning (Kaixu Xia)
- usb: sl811-hcd: improve misleading indentation (Arnd Bergmann)
- kgdb: fix gcc-11 warning on indentation (Arnd Bergmann)
- x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes (Arnd Bergmann)
- clk: exynos7: Mark aclk_fsys1_200 as critical (Paweł Chmiel)
- netfilter: conntrack: Make global sysctls readonly in non-init netns (Jonathon Reinhart)
- kobject_uevent: remove warning in init_uevent_argv() (Greg Kroah-Hartman)
- thermal/core/fair share: Lock the thermal zone while looping over instances (Lukasz Luba)
- MIPS: Avoid handcoded DIVU in `__div64_32' altogether (Maciej W. Rozycki)
- MIPS: Avoid DIVU in `__div64_32' is result would be zero (Maciej W. Rozycki)
- MIPS: Reinstate platform `__div64_32' handler (Maciej W. Rozycki)
- FDDI: defxx: Make MMIO the configuration default except for EISA (Maciej W. Rozycki)
- KVM: x86: Cancel pvclock_gtod_work on module removal (Thomas Gleixner)
- iio: tsl2583: Fix division by a zero lux_val (Colin Ian King)
- iio: gyro: mpu3050: Fix reported temperature value (Dmitry Osipenko)
- usb: core: hub: fix race condition about TRSMRCY of resume (Chunfeng Yun)
- usb: dwc2: Fix gadget DMA unmap direction (Phil Elwell)
- usb: xhci: Increase timeout for HC halt (Maximilian Luz)
- usb: dwc3: omap: improve extcon initialization (Marcel Hamer)
- blk-mq: Swap two calls in blk_mq_exit_queue() (Bart Van Assche)
- ACPI: scan: Fix a memory leak in an error handling path (Christophe JAILLET)
- usb: fotg210-hcd: Fix an error message (Christophe JAILLET)
- iio: proximity: pulsedlight: Fix rumtime PM imbalance on error (Dinghao Liu)
- drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected (Kai-Heng Feng)
- userfaultfd: release page in error path to avoid BUG_ON (Axel Rasmussen)
- squashfs: fix divide error in calculate_skip() (Phillip Lougher)
- powerpc/64s: Fix crashes when toggling entry flush barrier (Michael Ellerman)
- powerpc/64s: Fix crashes when toggling stf barrier (Michael Ellerman)
- ARC: entry: fix off-by-one error in syscall number validation (Vineet Gupta)
- netfilter: nftables: avoid overflows in nft_hash_buckets() (Eric Dumazet)
- kernel: kexec_file: fix error return code of kexec_calculate_store_digests() (Jia-Ju Bai)
- net: fix nla_strcmp to handle more then one trailing null character (Maciej Żenczykowski)
- ksm: fix potential missing rmap_item for stable_node (Miaohe Lin)
- mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() (Miaohe Lin)
- khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() (Miaohe Lin)
- drm/radeon: Fix off-by-one power_state index heap overwrite (Kees Cook)
- sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b (Xin Long)
- rtc: ds1307: Fix wday settings for rx8130 (Nobuhiro Iwamatsu)
- NFSv4.2 fix handling of sr_eof in SEEK's reply (Olga Kornievskaia)
- pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (Nikola Livic)
- NFS: Deal correctly with attribute generation counter overflow (Trond Myklebust)
- NFSv4.2: Always flush out writes in nfs42_proc_fallocate() (Trond Myklebust)
- rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() (Jia-Ju Bai)
- ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook (Zhen Lei)
- PCI: Release OF node in pci_scan_device()'s error path (Dmitry Baryshkov)
- f2fs: fix a redundant call to f2fs_balance_fs if an error occurs (Colin Ian King)
- ASoC: rt286: Make RT286_SET_GPIO_* readable and writable (David Ward)
- net: ethernet: mtk_eth_soc: fix RX VLAN offload (Felix Fietkau)
- powerpc/iommu: Annotate nested lock for lockdep (Alexey Kardashevskiy)
- wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join (Gustavo A. R. Silva)
- wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt (Gustavo A. R. Silva)
- powerpc/pseries: Stop calling printk in rtas_stop_self() (Michael Ellerman)
- samples/bpf: Fix broken tracex1 due to kprobe argument change (Yaqi Chen)
- ASoC: rt286: Generalize support for ALC3263 codec (David Ward)
- powerpc/smp: Set numa node before updating mask (Srikar Dronamraju)
- sctp: Fix out-of-bounds warning in sctp_process_asconf_param() (Gustavo A. R. Silva)
- kconfig: nconf: stop endless search loops (Mihai Moldovan)
- selftests: Set CC to clang in lib.mk if LLVM is set (Yonghong Song)
- cuse: prevent clone (Miklos Szeredi)
- pinctrl: samsung: use 'int' for register masks in Exynos (Krzysztof Kozlowski)
- mac80211: clear the beacon's CRC after channel switch (Emmanuel Grumbach)
- ip6_vti: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- Bluetooth: check for zapped sk before connecting (Archie Pusaka)
- Bluetooth: initialize skb_queue_head at l2cap_chan_create() (Tetsuo Handa)
- Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default (Archie Pusaka)
- ALSA: rme9652: don't disable if not enabled (Tong Zhang)
- ALSA: hdspm: don't disable if not enabled (Tong Zhang)
- ALSA: hdsp: don't disable if not enabled (Tong Zhang)
- net: stmmac: Set FIFO sizes for ipq806x (Jonathan McDowell)
- tipc: convert dest node's address to network order (Hoang Le)
- fs: dlm: fix debugfs dump (Alexander Aring)
- tpm: fix error return code in tpm2_get_cc_attrs_tbl() (Zhen Lei)
- Revert "fdt: Properly handle "no-map" field in the memory region" (Quentin Perret)
- Revert "of/fdt: Make sure no-map does not remove already reserved regions" (Quentin Perret)
- smp: Fix smp_call_function_single_async prototype (Arnd Bergmann)
- kfifo: fix ternary sign extension bugs (Dan Carpenter)
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (Lv Yunlong)
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Lv Yunlong)
- powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (Christophe Leroy)
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (Toke Høiland-Jørgensen)
- net: davinci_emac: Fix incorrect masking of tx and rx error channel (Colin Ian King)
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (Sindhu Devale)
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella)
- mwl8k: Fix a double Free in mwl8k_probe_hw (Lv Yunlong)
- i2c: sh7760: fix IRQ error path (Sergey Shtylyov)
- rtlwifi: 8821ae: upgrade PHY and RF parameters (Ping-Ke Shih)
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (Tyrel Datwyler)
- MIPS: pci-legacy: stop using of_pci_range_to_resource (Ilya Lipnitskiy)
- i2c: sh7760: add IRQ check (Sergey Shtylyov)
- i2c: jz4780: add IRQ check (Sergey Shtylyov)
- i2c: emev2: add IRQ check (Sergey Shtylyov)
- i2c: cadence: add IRQ check (Sergey Shtylyov)
- net: thunderx: Fix unintentional sign extension issue (Colin Ian King)
- IB/hfi1: Fix error return code in parse_platform_config() (Wang Wensheng)
- mt7601u: fix always true expression (Colin Ian King)
- mac80211: bail out if cipher schemes are invalid (Johannes Berg)
- powerpc: iommu: fix build when neither PCI or IBMVIO is set (Randy Dunlap)
- powerpc/perf: Fix PMU constraint check for EBB events (Athira Rajeev)
- liquidio: Fix unintented sign extension of a left shift of a u16 (Colin Ian King)
- ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (Takashi Iwai)
- nfc: pn533: prevent potential memory corruption (Dan Carpenter)
- bug: Remove redundant condition check in report_bug (Andrew Scull)
- ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (Jia Zhou)
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (Chen Huang)
- powerpc/prom: Mark identical_pvr_fixup as __init (Nathan Chancellor)
- net: lapbether: Prevent racing when checking whether the netif is running (Xie He)
- perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (Arnaldo Carvalho de Melo)
- HID: plantronics: Workaround for double volume key presses (Maxim Mikityanskiy)
- x86/events/amd/iommu: Fix sysfs type mismatch (Nathan Chancellor)
- HSI: core: fix resource leaks in hsi_add_client_from_dt() (Dan Carpenter)
- mfd: stm32-timers: Avoid clearing auto reload register (Fabrice Gasnier)
- scsi: sni_53c710: Add IRQ check (Sergey Shtylyov)
- scsi: sun3x_esp: Add IRQ check (Sergey Shtylyov)
- scsi: jazz_esp: Add IRQ check (Sergey Shtylyov)
- clk: uniphier: Fix potential infinite loop (Colin Ian King)
- vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (Jason Gunthorpe)
- ata: libahci_platform: fix IRQ check (Sergey Shtylyov)
- sata_mv: add IRQ checks (Sergey Shtylyov)
- pata_ipx4xx_cf: fix IRQ check (Sergey Shtylyov)
- pata_arasan_cf: fix IRQ check (Sergey Shtylyov)
- x86/kprobes: Fix to check non boostable prefixes correctly (Masami Hiramatsu)
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays (Colin Ian King)
- media: omap4iss: return error code when omap4iss_get() failed (Yang Yingliang)
- media: vivid: fix assignment of dev->fbuf_out_flags (Colin Ian King)
- ttyprintk: Add TTY hangup callback. (Tetsuo Handa)
- x86/platform/uv: Fix !KEXEC build failure (Ingo Molnar)
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (Steffen Dirkwinkel)
- firmware: qcom-scm: Fix QCOM_SCM configuration (He Ying)
- tty: fix return value for unsupported ioctls (Johan Hovold)
- tty: actually undefine superseded ASYNC flags (Johan Hovold)
- USB: cdc-acm: fix unprivileged TIOCCSERIAL (Johan Hovold)
- usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (Colin Ian King)
- crypto: qat - Fix a double free in adf_create_ring (Lv Yunlong)
- ACPI: CPPC: Replace cppc_attr with kobj_attribute (Nathan Chancellor)
- soc: qcom: mdt_loader: Detect truncated read of segments (Bjorn Andersson)
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (Bjorn Andersson)
- spi: Fix use-after-free with devm_spi_alloc_* (William A. Kennington III)
- staging: greybus: uart: fix unprivileged TIOCCSERIAL (Johan Hovold)
- staging: rtl8192u: Fix potential infinite loop (Colin Ian King)
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (Lv Yunlong)
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (Yang Yingliang)
- crypto: qat - fix error path in adf_isr_resource_alloc() (Giovanni Cabiddu)
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (Geert Uytterhoeven)
- bus: qcom: Put child node before return (Pan Bian)
- mtd: require write permissions for locking and badblock ioctls (Michael Walle)
- fotg210-udc: Complete OUT requests on short packets (Fabian Vogt)
- fotg210-udc: Don't DMA more than the buffer can take (Fabian Vogt)
- fotg210-udc: Mask GRP2 interrupts we don't handle (Fabian Vogt)
- fotg210-udc: Remove a dubious condition leading to fotg210_done (Fabian Vogt)
- fotg210-udc: Fix EP0 IN requests bigger than two packets (Fabian Vogt)
- fotg210-udc: Fix DMA on EP0 for length > max packet size (Fabian Vogt)
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Tong Zhang)
- crypto: qat - don't release uninitialized resources (Tong Zhang)
- usb: gadget: pch_udc: Check for DMA mapping error (Andy Shevchenko)
- usb: gadget: pch_udc: Check if driver is present before calling ->setup() (Andy Shevchenko)
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (Andy Shevchenko)
- x86/microcode: Check for offline CPUs before requesting new microcode (Otavio Pontes)
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (Badhri Jagan Sridharan)
- serial: stm32: fix tx_empty condition (Erwan Le Ray)
- serial: stm32: fix incorrect characters on console (Erwan Le Ray)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (Krzysztof Kozlowski)
- memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (Colin Ian King)
- usb: gadget: pch_udc: Revert d3cb25a12138 completely (Andy Shevchenko)
- KVM: s390: split kvm_s390_real_to_abs (Claudio Imbrenda)
- KVM: s390: fix guarded storage control register handling (Heiko Carstens)
- KVM: s390: split kvm_s390_logical_to_effective (Claudio Imbrenda)
- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported (Sean Christopherson)
- ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (Takashi Iwai)
- drm/radeon: fix copy of uninitialized variable back to userspace (Colin Ian King)
- cfg80211: scan: drop entry from hidden_list on overflow (Johannes Berg)
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (Dan Carpenter)
- md: md_open returns -EBUSY when entering racing area (Zhao Heming)
- md: factor out a mddev_find_locked helper from mddev_find (Christoph Hellwig)
- md: split mddev_find (Christoph Hellwig)
- md-cluster: fix use-after-free issue when removing rdev (Heming Zhao)
- tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware))
- misc: vmw_vmci: explicitly initialize vmci_datagram payload (Tetsuo Handa)
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (Tetsuo Handa)
- misc: lis3lv02d: Fix false-positive WARN on various HP models (Hans de Goede)
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (Maciej W. Rozycki)
- MIPS: pci-rt2880: fix slot 0 configuration (Ilya Lipnitskiy)
- net/nfc: fix use-after-free llcp_sock_bind/connect (Or Cohen) {CVE-2021-23134}
- modules: inherit TAINT_PROPRIETARY_MODULE (Christoph Hellwig)
- modules: return licensing information from find_symbol (Christoph Hellwig)
- modules: rename the licence field in struct symsearch to license (Christoph Hellwig)
- modules: unexport __module_address (Christoph Hellwig)
- modules: unexport __module_text_address (Christoph Hellwig)
- modules: mark each_symbol_section static (Christoph Hellwig)
- modules: mark find_symbol static (Christoph Hellwig)
- modules: mark ref_module static (Christoph Hellwig)
- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Benjamin Block)
- dm space map common: fix division bug in sm_ll_find_free_block() (Joe Thornber)
- dm persistent data: packed struct should have an aligned() attribute too (Joe Thornber)
- tracing: Map all PIDs to command lines (Steven Rostedt (VMware))
- usb: dwc3: gadget: Fix START_TRANSFER link state check (Thinh Nguyen)
- usb: gadget/function/f_fs string table fix for multiple languages (Dean Anderson)
- usb: gadget: Fix double free of device descriptor pointers (Hemant Kumar)
- usb: gadget: dummy_hcd: fix gpf in gadget_setup (Anirudh Rayabharam)
- media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye)
- ext4: fix error code in ext4_commit_super (Fengnan Chang)
- ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi)
- ftrace: Handle commands when closing set_ftrace_filter file (Steven Rostedt (VMware))
- posix-timers: Preserve return value in clock_adjtime32() (Chen Jun)
- Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") (Thomas Gleixner)
- jffs2: check the validity of dstlen in jffs2_zlib_compress() (Yang Yang)
- Fix misc new gcc warnings (Linus Torvalds)
- security: commoncap: fix -Wstringop-overread warning (Arnd Bergmann)
- intel_th: pci: Add Alder Lake-M support (Alexander Shishkin)
- powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h (Tony Ambardar)
- powerpc/eeh: Fix EEH handling for hugepages in ioremap space. (Mahesh Salgaonkar)
- jffs2: Fix kasan slab-out-of-bounds problem (lizhe)
- NFSv4: Don't discard segments marked for return in _pnfs_return_layout() (Trond Myklebust)
- ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Marc Zyngier)
- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti)
- arm64/vdso: Discard .note.gnu.property sections in vDSO (Bill Wendling)
- btrfs: fix race when picking most recent mod log operation for an old root (Filipe Manana)
- ALSA: sb: Fix two use after free in snd_sb_qsound_build (Lv Yunlong)
- ALSA: hda/conexant: Re-order CX5066 quirk table entries (Takashi Iwai)
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer (Lv Yunlong)
- scsi: libfc: Fix a format specifier (Bart Van Assche)
- scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic (James Smart)
- scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response (James Smart)
- drm/amdgpu: fix NULL pointer dereference (Guchun Chen)
- drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal (Marijn Suijten)
- media: gscpa/stv06xx: fix memory leak (Hans Verkuil)
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init (Pavel Skripkin)
- media: i2c: adv7842: fix possible use-after-free in adv7842_remove() (Yang Yingliang)
- media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() (Yang Yingliang)
- media: adv7604: fix possible use-after-free in adv76xx_remove() (Yang Yingliang)
- power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() (Yang Yingliang)
- power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() (Yang Yingliang)
- clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return (Colin Ian King)
- media: vivid: update EDID (Hans Verkuil)
- media: em28xx: fix memory leak (Muhammad Usama Anjum)
- scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() (Ewan D. Milne)
- scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() (Bart Van Assche)
- drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f (shaoyunl)
- power: supply: Use IRQF_ONESHOT (dongjian)
- media: gspca/sq905.c: fix uninitialized variable (Hans Verkuil)
- media: media/saa7164: fix saa7164_encoder_register() memory leak bugs (Daniel Niv)
- extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged (Hans de Goede)
- power: supply: bq27xxx: fix power_avg for newer ICs (Matthias Schiffer)
- media: ite-cir: check for receive overflow (Sean Young)
- scsi: target: pscsi: Fix warning in pscsi_complete_cmd() (Chaitanya Kulkarni)
- scsi: lpfc: Fix pt2pt connection does not recover after LOGO (James Smart)
- scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe (James Smart)
- btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s (Josef Bacik)
- phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() (Yang Yingliang)
- intel_th: Consistency and off-by-one fix (Pavel Machek)
- spi: omap-100k: Fix reference leak to master (Wei Yongjun)
- spi: dln2: Fix reference leak to master (Wei Yongjun)
- perf/arm_pmu_platform: Fix error handling (Robin Murphy)
- tee: optee: do not check memref size on return from Secure World (Jerome Forissier)
- x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS) (John Millikin)
- PCI: PM: Do not read power state in pci_enable_device_flags() (Rafael J. Wysocki)
- usb: xhci: Fix port minor revision (Thinh Nguyen)
- usb: dwc3: gadget: Ignore EP queue requests during bus reset (Wesley Cheng)
- usb: gadget: f_uac1: validate input parameters (Ruslan Bilovol)
- usb: gadget: uvc: add bInterval checking for HS mode (Pawel Laszczak)
- crypto: api - check for ERR pointers in crypto_destroy_tfm() (Ard Biesheuvel)
- staging: wimax/i2400m: fix byte-order issue (karthik alapati)
- fbdev: zero-fill colormap in fbcmap.c (Phillip Potter)
- intel_th: pci: Add Rocket Lake CPU support (Alexander Shishkin)
- btrfs: fix metadata extent leak after failure to create subvolume (Filipe Manana)
- cifs: Return correct error code from smb2_get_enc_key (Paul Aurich)
- mmc: core: Set read only for SD cards with permanent write protect bit (Seunghui Lee)
- mmc: core: Do a power cycle when the CMD11 fails (DooHyun Hwang)
- mmc: block: Update ext_csd.cache_ctrl if it was written (Avri Altman)
- spi: spi-ti-qspi: Free DMA resources (Tudor Ambarus)
- ecryptfs: fix kernel panic with null dev_name (Jeffrey Mitchell)
- arm64: dts: mt8173: fix property typo of 'phys' in dsi node (Chunfeng Yun)
- ACPI: custom_method: fix a possible memory leak (Mark Langsdorf)
- ACPI: custom_method: fix potential use-after-free issue (Mark Langsdorf)
- s390/disassembler: increase ebpf disasm buffer size (Vasily Gorbik)
- platform/x86: thinkpad_acpi: Correct thermal sensor allocation (Mark Pearson)
- USB: Add reset-resume quirk for WD19's Realtek Hub (Chris Chiu)
- USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet (Kai-Heng Feng)
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX (Takashi Iwai)
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() (Jiri Kosina)
- bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann)
- mips: Do not include hi and lo in clobber list for R6 (Romain Naour)
- MIPS: cpu-features.h: Replace __mips_isa_rev with MIPS_ISA_REV (Matt Redfearn)
- MIPS: Introduce isa-rev.h to define MIPS_ISA_REV (Matt Redfearn)
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() (Jiri Kosina)
- net: usb: ax88179_178a: initialize local variables before use (Phillip Potter)
- bpf: fix up selftests after backports were fixed (Frank van der Linden)
- bpf: Fix backport of "bpf: restrict unknown scalars of mixed signed bounds for unprivileged" (Samuel Mendoza-Jonas)
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)
- ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)
- usbip: vudc synchronize sysfs code paths (Shuah Khan)
- Linux 4.14.232 (Greg Kroah-Hartman)
- USB: CDC-ACM: fix poison/unpoison imbalance (Oliver Neukum)
- net: hso: fix NULL-deref on disconnect regression (Johan Hovold)
- x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access (Mike Galbraith)
- ia64: tools: remove duplicate definition of ia64_mf() on ia64 (John Paul Adrian Glaubitz)
- ia64: fix discontig.c section mismatches (Randy Dunlap)
- cavium/liquidio: Fix duplicate argument (Wan Jiabing)
- xen-netback: Check for hotplug-status existence before watching (Michael Brown)
- s390/entry: save the caller of psw_idle (Vasily Gorbik)
- net: geneve: check skb is large enough for IPv4/IPv6 header (Phillip Potter)
- ARM: dts: Fix swapped mmc order for omap3 (Tony Lindgren)
- HID: wacom: Assign boolean values to a bool variable (Jiapeng Zhong)
- HID: alps: fix error return code in alps_input_configured() (Jia-Ju Bai)
- pinctrl: lewisburg: Update number of pins in community (Yuanyuan Zhong)
- ext4: correct error label in ext4_rename() (Zhang Yi)
- net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam)
- gup: document and work around "COW can break either way" issue (Linus Torvalds)
- ARM: 9071/1: uprobes: Don't hook on thumb instructions (Fredrik Strupe)
- ARM: footbridge: fix PCI interrupt mapping (Russell King)
- ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)
- ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)
- ibmvnic: avoid calling napi_disable() twice (Lijun Pan)
- i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)
- net: sit: Unregister catch-all devices (Hristo Venev)
- net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)
- netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)
- netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)
- arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)
- readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)
- Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)
- mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)
- usbip: Fix incorrect double assignment to udc->ud.tcp_rx (Colin Ian King)
- pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)
- net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)
- net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)
- net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)
- net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)
- net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)
- scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state (Martin Wilck)
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)
- ARM: keystone: fix integer overflow warning (Arnd Bergmann)
- neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)
- arc: kernel: Return -EFAULT if copy_to_user() fails (Wang Qing)
- ARM: dts: Fix moving mmc devices with aliases for omap4 & 5 (Tony Lindgren)
- dmaengine: dw: Make it dependent to HAS_IOMEM (Andy Shevchenko)
- Input: nspire-keypad - enable interrupts only when opened (Fabian Vogt)
More information about the El-errata
mailing list