[El-errata] ELSA-2022-9147 Important: Oracle Linux 8 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2022-9147

http://linux.oracle.com/errata/ELSA-2022-9147.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:


aarch64:
kernel-uek-5.4.17-2136.304.4.1.el8uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.304.4.1.el8uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.304.4.1.el8uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.304.4.1.el8uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.304.4.1.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-5.4.17-2136.304.4.1.el8uek.src.rpm

Related CVEs:

CVE-2021-3640
CVE-2021-3752
CVE-2021-4155
CVE-2021-44733
CVE-2022-0185
CVE-2022-0492




Description of changes:

[5.4.17-2136.304.4.1.el8uek]
- Revert "rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info" (Rohit Nair)  [Orabug: 33832625]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33832582]  {CVE-2022-0492}

[5.4.17-2136.304.4.el8uek]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie)  [Orabug: 33794250]
- scsi: libiscsi: Drop taskqueuelock (Mike Christie)  [Orabug: 33794250]
- ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang)  [Orabug: 33495339]
- KVM: SVM: Don't intercept #GP for SEV guests (Sean Christopherson)  [Orabug: 33446920]
- Revert "KVM: SVM: avoid infinite loop on NPF from bad address" (Sean Christopherson)  [Orabug: 33446920]
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson)  [Orabug: 33446920]
- rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair)  [Orabug: 33660929]
- tee: handle lookup of shm with reference count 0 (Jens Wiklander)  [Orabug: 33739582]  {CVE-2021-44733}
- smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33802464]

[5.4.17-2136.304.3.el8uek]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel)  [Orabug: 33766454]  {CVE-2022-0185}
- LTS tag: v5.4.161 (Sherry Yang) 
- erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang) 
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu) 
- PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier) 
- PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier) 
- PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner) 
- parisc/entry: fix trace test in syscall exit path (Sven Schnelle) 
- fortify: Explicitly disable Clang support (Kees Cook) 
- scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim) 
- ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu) 
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki) 
- scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter) 
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko) 
- LTS tag: v5.4.160 (Sherry Yang)  [Orabug: 33536399]
- selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko) 
- ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann) 
- SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust) 
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohár) 
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde) 
- s390/cio: make ccw_device_dma_* more robust (Halil Pasic) 
- s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle) 
- s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan) 
- video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut) 
- mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko) 
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin) 
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao) 
- powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao) 
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao) 
- powerpc/bpf: Validate branch ranges (Naveen N. Rao) 
- powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao) 
- ovl: fix deadlock in splice write (Miklos Szeredi) 
- 9p/net: fix missing error check in p9_check_errors (Dominique Martinet) 
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann) 
- f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim) 
- irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren) 
- parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller) 
- parisc: Fix backtrace to always include init funtion names (Helge Deller) 
- ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann) 
- ARM: 9155/1: fix early early_iounmap() (Michał Mirosław) 
- selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn) 
- cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy) 
- net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li) 
- vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata) 
- net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang) 
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet) 
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend) 
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann) 
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye) 
- llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet) 
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers) 
- zram: off by one in read_block_state() (Dan Carpenter) 
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin) 
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin) 
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede) 
- net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan) 
- net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev) 
- xen-pciback: Fix return in pm_ctrl_init() (YueHaibing) 
- i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' (Christophe JAILLET) 
- NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust) 
- scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran) 
- scsi: qla2xxx: Fix gnl list corruption (Quinn Tran) 
- ar7: fix kernel builds for compiler test (Jackie Liu) 
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum) 
- m68k: set a default value for MEMORY_RESERVE (Randy Dunlap) 
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (Eric W. Biederman) 
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (Lars-Peter Clausen) 
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal) 
- soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (Robert-Ionut Alexa) 
- auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven) 
- auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven) 
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven) 
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea) 
- mtd: core: don't remove debugfs directory if device is in use (Zev Weiss) 
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov) 
- fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai) 
- NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust) 
- opp: Fix return in _opp_add_static_v2() (YueHaibing) 
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Pali Rohár) 
- PCI: aardvark: Don't spam about PIO Response Status (Marek Behún) 
- drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71)) 
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers) 
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen) 
- apparmor: fix error check (Tom Rix) 
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede) 
- mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven) 
- powerpc/44x/fsp2: add missing of_node_put (Bixuan Cui) 
- HID: u2fzero: properly handle timeouts in usb_submit_urb (Andrej Shadura) 
- HID: u2fzero: clarify error check and length calculations (Andrej Shadura) 
- serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula) 
- phy: qcom-qusb2: Fix a memory leak on probe (Vladimir Zapolskiy) 
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald) 
- ASoC: cs42l42: Correct some register default values (Richard Fitzgerald) 
- ARM: dts: stm32: fix SAI sub nodes register range (Olivier Moysan) 
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (Vegard Nossum) 
- RDMA/mlx4: Return missed an error if device doesn't support steering (Leon Romanovsky) 
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter) 
- power: supply: rt5033_battery: Change voltage values to µV (Jakob Hauser) 
- usb: gadget: hid: fix error code in do_config() (Dan Carpenter) 
- serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko) 
- video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy) 
- clk: at91: check pmc node status before registering syscore ops (Clément Léger) 
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu) 
- soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET) 
- arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade) 
- ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai) 
- JFS: fix memleak in jfs_mount (Dongliang Mu) 
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu) 
- scsi: dc395: Fix error case unwinding (Tong Zhang) 
- ARM: dts: at91: tse850: the emac<->phy interface is rmii (Peter Rosin) 
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties (Anand Moon) 
- RDMA/bnxt_re: Fix query SRQ failure (Selvin Xavier) 
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (Marijn Suijten) 
- arm64: dts: rockchip: Fix GPU register width for RK3328 (Alex Bee) 
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu) 
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (Christophe JAILLET) 
- RDMA/rxe: Fix wrong port_cap_flags (Junji Wei) 
- ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu) 
- ibmvnic: don't stop queue in xmit (Sukadev Bhattiprolu) 
- udp6: allow SO_MARK ctrl msg to affect routing (Jakub Kicinski) 
- selftests/bpf: Fix fclose/pclose mismatch in test_progs (Andrea Righi) 
- crypto: pcrypt - Delay write to padata->info (Daniel Jordan) 
- net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle)) 
- net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K) 
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (Alex Deucher) 
- wcn36xx: add proper DMA memory barriers in rx path (Benjamin Li) 
- libertas: Fix possible memory leak in probe and disconnect (Wang Hai) 
- libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai) 
- KVM: s390: Fix handle_sske page fault handling (Janis Schoetterl-Glausch) 
- samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang) 
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Jon Maxwell) 
- irq: mips: avoid nested irq_enter() (Mark Rutland) 
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand) 
- libbpf: Fix BTF data layout checks and allow empty BTF (Andrii Nakryiko) 
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa) 
- drm/msm: Fix potential NULL dereference in DPU SSPP (Jessica Zhang) 
- clocksource/drivers/timer-ti-dm: Select TIMER_OF (Kees Cook) 
- PM: hibernate: fix sparse warnings (Anders Roxell) 
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Max Gurtovoy) 
- phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner) 
- mwifiex: Send DELBA requests according to spec (Jonas Dreßler) 
- rsi: stop thread firstly in rsi_91x_init() error handling (Ziyang Xuan) 
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Lorenzo Bianconi) 
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor) 
- block: ataflop: fix breakage introduced at blk-mq refactoring (Michael Schmitz) 
- mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET) 
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski) 
- drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter) 
- ath10k: fix max antenna gain unit (Sven Eckelmann) 
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (Zev Weiss) 
- hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang) 
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Daniel Borkmann) 
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter) 
- memstick: avoid out-of-range warning (Arnd Bergmann) 
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Tony Lindgren) 
- b43: fix a lower bounds test (Dan Carpenter) 
- b43legacy: fix a lower bounds test (Dan Carpenter) 
- hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann) 
- crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu) 
- crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu) 
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (Evgeny Novikov) 
- netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso) 
- EDAC/amd64: Handle three rank interleaving mode (Yazen Ghannam) 
- ath9k: Fix potential interrupt storm on queue reset (Linus Lüssing) 
- media: em28xx: Don't use ops->suspend if it is NULL (Colin Ian King) 
- cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva) 
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (Arnd Bergmann) 
- kprobes: Do not use local variable when creating debugfs file (Punit Agrawal) 
- media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King) 
- media: tm6000: Avoid card name truncation (Kees Cook) 
- media: si470x: Avoid card name truncation (Kees Cook) 
- media: radio-wl1273: Avoid card name truncation (Kees Cook) 
- media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' (Christophe JAILLET) 
- media: TDA1997x: handle short reads of hdmi info frame. (Tom Rix) 
- media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin) 
- media: cxd2880-spi: Fix a null pointer dereference on error handling path (Colin Ian King) 
- media: em28xx: add missing em28xx_close_extension (Pavel Skripkin) 
- drm/amdgpu: fix warning for overflow check (Arnd Bergmann) 
- ath10k: Fix missing frame timestamp for beacon/probe-resp (Loic Poulain) 
- net: dsa: rtl8366rb: Fix off-by-one bug (Linus Walleij) 
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Jiasheng Jiang) 
- crypto: caam - disable pkc for non-E SoCs (Michael Walle) 
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (Dinghao Liu) 
- wilc1000: fix possible memory leak in cfg_scan_result() (Ajay Singh) 
- cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long) 
- net: net_namespace: Fix undefined member in key_remove_domain() (Yajun Deng) 
- virtio-gpu: fix possible memory allocation failure (liuyuntao) 
- drm/v3d: fix wait for TMU write combiner flush (Iago Toral Quiroga) 
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Neeraj Upadhyay) 
- Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi) 
- selftests/bpf: Fix strobemeta selftest regression (Andrii Nakryiko) 
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Pablo Neira Ayuso) 
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle) 
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (Sven Schnelle) 
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller) 
- parisc: fix warning in flush_tlb_all (Sven Schnelle) 
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (Vitaly Kuznetsov) 
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang) 
- btrfs: do not take the uuid_mutex in btrfs_rm_device (Josef Bacik) 
- net: annotate data-race in neigh_output() (Eric Dumazet) 
- vrf: run conntrack only in context of lower/physdev for locally generated packets (Florian Westphal) 
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann) 
- gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra) 
- ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu) 
- smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa) 
- iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg) 
- selftests: kvm: fix mismatched fclose() after popen() (Shuah Khan) 
- PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin) 
- nvme: drop scan_lock and always kick requeue list when removing namespaces (Hannes Reinecke) 
- nvmet-tcp: fix use-after-free when a port is removed (Israel Rukshin) 
- nvmet: fix use-after-free when a port is removed (Israel Rukshin) 
- block: remove inaccurate requeue check (Jens Axboe) 
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma) 
- tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh) 
- workqueue: make sysfs of unbound kworker cpumask more clever (Menglong Dong) 
- lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin) 
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin) 
- memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma) 
- leaking_addresses: Always print a trailing newline (Kees Cook) 
- ACPI: battery: Accept charges over the design capacity as full (André Almeida) 
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher) 
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li) 
- tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware)) 
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) 
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam) 
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (Ricardo Ribalda) 
- media: ipu3-imgu: imgu_fmt: Handle properly try (Ricardo Ribalda) 
- ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki) 
- ipmi: Disable some operations during a panic (Corey Minyard) 
- media: rcar-csi2: Add checking to rcsi2_start_receiver() (Nadezda Lutovinova) 
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Hans de Goede) 
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap) 
- media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana) 
- media: imx: set a media_device bus_info string (Martin Kepplinger) 
- media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova) 
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li) 
- media: uvcvideo: Set unique vdev name based in type (Ricardo Ribalda) 
- media: uvcvideo: Return -EIO for control errors (Ricardo Ribalda) 
- media: uvcvideo: Set capability in s_param (Ricardo Ribalda) 
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (Dmitriy Ulitin) 
- media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma) 
- media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender) 
- ath10k: high latency fixes for beacon buffer (Alagu Sankar) 
- mwifiex: Properly initialize private structure on interface type changes (Jonas Dreßler) 
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Dreßler) 
- x86: Increase exception stack sizes (Peter Zijlstra) 
- smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta) 
- locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra) 
- MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski) 
- MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski) 
- platform/x86: wmi: do not fail if disabling fails (Barnabás Pőcze) 
- drm/panel-orientation-quirks: add Valve Steam Deck (Simon Ser) 
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai)   {CVE-2021-3640}
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (Hans de Goede) 
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (Hans de Goede) 
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (Hans de Goede) 
- dma-buf: WARN on dmabuf release with pending attachments (Charan Teja Reddy) 
- USB: chipidea: fix interrupt deadlock (Johan Hovold) 
- USB: iowarrior: fix control-message timeouts (Johan Hovold) 
- USB: serial: keyspan: fix memleak on probe errors (Wang Hai) 
- iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen) 
- pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang) 
- quota: correct error number in free_dqentry() (Zhang Yi) 
- quota: check block number when reading the block in quota file (Zhang Yi) 
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behún) 
- PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behún) 
- PCI: aardvark: Fix reporting Data Link Layer Link Active (Pali Rohár) 
- PCI: aardvark: Do not unmask unused interrupts (Pali Rohár) 
- PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohár) 
- PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohár) 
- PCI: pci-bridge-emul: Fix emulation of W1C bits (Marek Behún) 
- xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross) 
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin) 
- ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai) 
- serial: core: Fix initializing and restoring termios speed (Pali Rohár) 
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni) 
- can: j1939: j1939_can_recv(): ignore messages with invalid source address (Zhang Changzhong) 
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Zhang Changzhong) 
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Sean Christopherson) 
- power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler) 
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak) 
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman) 
- signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman) 
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad) 
- rsi: Fix module dev_oper_mode parameter description (Marek Vasut) 
- rsi: fix rate mask set leading to P2P failure (Martin Fuzzey) 
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0 (Martin Fuzzey) 
- rsi: fix occasional initialisation failure with BT coex (Martin Fuzzey) 
- wcn36xx: handle connection loss indication (Benjamin Li) 
- libata: fix checking of DMA state (Reimar Döffinger) 
- mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Dreßler) 
- wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain) 
- evm: mark evm_fixmode as __ro_after_init (Austin Kim) 
- rtl8187: fix control-message timeouts (Johan Hovold) 
- PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein) 
- ath10k: fix division by zero in send path (Johan Hovold) 
- ath10k: fix control-message timeout (Johan Hovold) 
- ath6kl: fix control-message timeout (Johan Hovold) 
- ath6kl: fix division by zero in send path (Johan Hovold) 
- mwifiex: fix division by zero in fw download path (Johan Hovold) 
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger) 
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski) 
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski) 
- hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss) 
- ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu) 
- btrfs: call btrfs_check_rw_degradable only if there is a missing device (Anand Jain) 
- btrfs: fix lost error handling when replaying directory deletes (Filipe Manana) 
- btrfs: clear MISSING device status bit in btrfs_close_one_device (Li Zhang) 
- net/smc: Correct spelling mistake to TCPF_SYN_RECV (Wen Gu) 
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset (Yu Xiao) 
- vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang) 
- r8169: Add device 10ec:8162 to driver r8169 (Janghyub Seo) 
- nvmet-tcp: fix header digest verification (Amit Engel) 
- drm: panel-orientation-quirks: Add quirk for GPD Win3 (Mario) 
- watchdog: Fix OMAP watchdog early handling (Walter Stoll) 
- net: multicast: calculate csum of looped-back and forwarded packets (Cyril Strejc) 
- spi: spl022: fix Microwire full duplex mode (Thomas Perrot) 
- nvmet-tcp: fix a memory leak when releasing a queue (Maurizio Lombardi) 
- bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer) 
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (Bryant Mairs) 
- mmc: winbond: don't build on M68K (Randy Dunlap) 
- reset: socfpga: add empty driver allowing consumers to probe (Paweł Anikiel) 
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode (Bastien Roucariès) 
- hyperv/vmbus: include linux/bitops.h (Arnd Bergmann) 
- sfc: Don't use netif_info before net_device setup (Erik Ekman) 
- cavium: Fix return values of the probe function (Zheyu Ma) 
- scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov) 
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (Zheyu Ma) 
- cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma) 
- x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson) 
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane) 
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Tom Lendacky) 
- fuse: fix page stealing (Miklos Szeredi) 
- ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai) 
- ALSA: timer: Fix use-after-free problem (Wang Wensheng) 
- ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim) 
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (Alexander Tsoy) 
- ALSA: line6: fix control and interrupt message timeouts (Johan Hovold) 
- ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold) 
- ALSA: ua101: fix division by zero at probe (Johan Hovold) 
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (Kai-Heng Feng) 
- ALSA: hda/realtek: Add quirk for ASUS UX550VE (Takashi Iwai) 
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (Jaroslav Kysela) 
- ALSA: hda/realtek: Add quirk for Clevo PC70HS (Tim Crawford) 
- media: v4l2-ioctl: Fix check_ext_ctrls (Ricardo Ribalda) 
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Sean Young) 
- media: ite-cir: IR receiver stop working after receive overflow (Sean Young) 
- crypto: s5p-sss - Add error handling in s5p_aes_probe() (Tang Bin) 
- firmware/psci: fix application of sizeof to pointer (jing yangyang) 
- tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter) 
- parisc: Fix ptrace check on syscall return (Helge Deller) 
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Löhle) 
- scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran) 
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (Arun Easi) 
- libata: fix read log timeout value (Damien Le Moal) 
- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai) 
- Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang) 
- Input: iforce - fix control-message timeout (Johan Hovold) 
- binder: use cred instead of task for getsecid (Todd Kjos) 
- binder: use cred instead of task for selinux checks (Todd Kjos) 
- binder: use euid from cred instead of using task (Todd Kjos) 
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Nehal Bakulchandra Shah) 
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman) 
- LTS tag: v5.4.159 (Sherry Yang) 
- rsi: fix control-message timeout (Johan Hovold) 
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (Gustavo A. R. Silva) 
- staging: rtl8192u: fix control-message timeouts (Johan Hovold) 
- staging: r8712u: fix control-message timeout (Johan Hovold) 
- comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold) 
- comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold) 
- comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold) 
- comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold) 
- comedi: dt9812: fix DMA buffers on stack (Johan Hovold) 
- isofs: Fix out of bound access for corrupted isofs image (Jan Kara) 
- printk/console: Allow to disable console output by using console="" or console=null (Petr Mladek) 
- binder: don't detect sender/target during buffer cleanup (Todd Kjos) 
- usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren) 
- usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah) 
- usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven) 
- usb: ehci: handshake CMD_RUN instead of STS_HALT (Neal Liu) 
- Revert "x86/kvm: fix vcpu-id indexed array sizes" (Juergen Gross) 
- LTS tag: v5.4.158 (Sherry Yang) 
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" (Wang Kefeng) 
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy" (Greg Kroah-Hartman) 
- sfc: Fix reading non-legacy supported link modes (Erik Ekman) 
- Revert "usb: core: hcd: Add support for deferring roothub registration" (Greg Kroah-Hartman) 
- Revert "xhci: Set HCD flag to defer primary roothub registration" (Greg Kroah-Hartman) 
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter) 
- net: ethernet: microchip: lan743x: Fix skb allocation failure (Yuiko Oshino) 
- vrf: Revert "Reset skb conntrack connection..." (Eugene Crosser) 
- scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei) 
- LTS tag: v5.4.157 (Sherry Yang) 
- perf script: Check session->header.env.arch before using it (Song Liu) 
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu (Halil Pasic) 
- KVM: s390: clear kicked_mask before sleeping again (Halil Pasic) 
- cfg80211: correct bridge/4addr mode check (Janusz Dziedzic) 
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT (Julian Wiedmann) 
- sctp: add vtag check in sctp_sf_ootb (Xin Long) 
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long) 
- sctp: add vtag check in sctp_sf_violation (Xin Long) 
- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long) 
- sctp: fix the processing for INIT_ACK chunk (Xin Long) 
- sctp: use init_tag from inithdr for ABORT chunk (Xin Long) 
- phy: phy_start_aneg: Add an unlocked version (Andrew Lunn) 
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency (Andrew Lunn) 
- net/tls: Fix flipped sign in async_wait.err assignment (Daniel Jordan) 
- net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner) 
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent (Yuiko Oshino) 
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails (Yuiko Oshino) 
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck) 
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string (Mark Zhang) 
- net: Prevent infinite while loop in skb_tx_hash() (Michael Chan) 
- net: batman-adv: fix error handling (Pavel Skripkin) 
- regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang) 
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node (Clément Bœsch) 
- RDMA/mlx5: Set user priority for DCT (Patrisious Haddad) 
- nvme-tcp: fix data digest pointer calculation (Varun Prakash) 
- nvmet-tcp: fix data digest pointer calculation (Varun Prakash) 
- IB/hfi1: Fix abba locking issue with sc_disable() (Mike Marciniszyn) 
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn) 
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function (Liu Jian) 
- drm/ttm: fix memleak in ttm_transfered_destroy (Christian König) 
- net: lan78xx: fix division by zero in send path (Johan Hovold) 
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (Johannes Berg) 
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen) 
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo) 
- mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung) 
- mmc: cqhci: clear HALT state after CQE enable (Wenbin Mei) 
- mmc: vub300: fix control-message timeouts (Johan Hovold) 
- net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan) 
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register" (Pavel Skripkin) 
- nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski) 
- ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma) 
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode" (Rafał Miłecki) 
- usbnet: fix error return code in usbnet_probe() (Wang Hai) 
- usbnet: sanity check for maxpacket (Oliver Neukum) 
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet) 
- ipv6: use siphash in rt6_exception_hash() (Eric Dumazet) 
- powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao) 
- ARM: 9141/1: only warn about XIP address when not compile testing (Arnd Bergmann) 
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann) 
- ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann) 
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)

[5.4.17-2136.304.2.el8uek]
- xfs: only relog deferred intent items if free space in the log gets low (Darrick J. Wong)  [Orabug: 33548995]
- xfs: expose the log push threshold (Darrick J. Wong)  [Orabug: 33548995]
- xfs: periodically relog deferred intent items (Darrick J. Wong)  [Orabug: 33548995]
- xfs: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33548995]
- xfs: change the order in which child and parent defer ops are finished (Darrick J. Wong)  [Orabug: 33548995]
- hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: add hugetlb demote page support (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: add demote bool to gigantic page routines (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: add demote hugetlb page sysfs interfaces (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: before freeing hugetlb page set dtor to appropriate value (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: drop ref count earlier after page allocation (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: simplify prep_compound_gigantic_page ref count racing code (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: address ref count racing in prep_compound_gigantic_page (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: remove prep_compound_huge_page cleanup (Mike Kravetz)  [Orabug: 33652181]
- hugetlb: add lockdep_assert_held() calls for hugetlb_lock (Mike Kravetz)  [Orabug: 33652181]
- Revert "Revert "net/mlx4_core: Add masking for a few queries on HCA caps"" (Freddy Carrillo)  [Orabug: 33666385]
- uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33730433]
- rds: ib: Incorporate the stat counter "ib_rdma_flush_mr_pool_avoided" in the structure "rds_ib_stat_names" (Praveen Kumar Kannoju)  [Orabug: 33742436]
- memcg: fix use-after-free in uncharge_batch (Michal Hocko)  [Orabug: 33752722]
- xfs: force the log offline when log intent item recovery fails (Darrick J. Wong)  [Orabug: 33757272]
- xfs: cancel intents immediately if process_intents fails (Darrick J. Wong)  [Orabug: 33757272]

[5.4.17-2136.304.1.el8uek]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33745420]  {CVE-2021-4155}
- Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo)  [Orabug: 33406414]  {CVE-2021-3752}
- x86/mce: Correct the detection of invalid notifier priorities (Zhen Lei)  [Orabug: 33427594]
- x86/mce/dev-mcelog: Do not update kflags on AMD systems (Smita Koralahalli)  [Orabug: 33427594]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam)  [Orabug: 33427594]
- RAS/CEC: Fix cec_init() prototype (Luca Stefani)  [Orabug: 33427594]
- EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam)  [Orabug: 33427594]
- x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli)  [Orabug: 33427594]
- x86/mce/dev-mcelog: Fix -Wstringop-truncation warning about strncpy() (Tony Luck)  [Orabug: 33427594]
- x86/mce: Drop bogus comment about mce.kflags (Tony Luck)  [Orabug: 33427594]
- EDAC: Drop the EDAC report status checks (Tony Luck)  [Orabug: 33427594]
- x86/mce: Add mce=print_all option (Tony Luck)  [Orabug: 33427594]
- x86/mce: Change default MCE logger to check mce->kflags (Tony Luck)  [Orabug: 33427594]
- x86/mce: Fix all mce notifiers to update the mce->kflags bitmask (Tony Luck)  [Orabug: 33427594]
- x86/mce: Add a struct mce.kflags field (Tony Luck)  [Orabug: 33427594]
- x86/mce: Convert the CEC to use the MCE notifier (Tony Luck)  [Orabug: 33427594]
- x86/mce: Rename "first" function as "early" (Tony Luck)  [Orabug: 33427594]
- x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov)  [Orabug: 33427594]
- x86/mce/dev-mcelog: Dynamically allocate space for machine check records (Tony Luck)  [Orabug: 33427594]
- EDAC/mc: Determine mci pointer from the error descriptor (Robert Richter)  [Orabug: 33427594]
- EDAC: Store error type in struct edac_raw_error_desc (Robert Richter)  [Orabug: 33427594]
- x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schönherr)  [Orabug: 33427594]
- EDAC: Unify the mc_event tracepoint call (Robert Richter)  [Orabug: 33427594]
- EDAC/ghes: Remove intermediate buffer pvt->detail_location (Robert Richter)  [Orabug: 33427594]
- xfs: fix an incore inode UAF in xfs_bui_recover (Darrick J. Wong)  [Orabug: 33541225]
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering (Darrick J. Wong)  [Orabug: 33541225]
- xfs: clean up bmap intent item recovery checking (Darrick J. Wong)  [Orabug: 33541225]
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky)  [Orabug: 33547490]
- efi/mokvar: Reserve the table only if it is in boot services data (Borislav Petkov)  [Orabug: 33547490]
- efi: mokvar: add missing include of asm/early_ioremap.h (Ard Biesheuvel)  [Orabug: 33547490]
- efi: mokvar-table: fix some issues in new code (Ard Biesheuvel)  [Orabug: 33547490]
- efi: Support for MOK variable config table (Lenny Szubowicz)  [Orabug: 33547490]
- efi: Rename arm-init to efi-init common for all arch (Atish Patra)  [Orabug: 33547490]
- uek-rpm: Update ol7 locklist with fnic symbols (John Donnelly)  [Orabug: 33590906]
- uek-rpm: Update ol8 locklist with fnic symbols (John Donnelly)  [Orabug: 33590906]
- rds_rdma: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33616020]
- net/mlx4: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33616020]
- net/mlx5: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33616020]
- IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Håkon Bugge)  [Orabug: 33616020]
- Revert "net/mlx{4,5}: Fix signed formal parameter" (Håkon Bugge)  [Orabug: 33616020]
- Revert "net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero" (Håkon Bugge)  [Orabug: 33616020]
- Revert "rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV" (Håkon Bugge)  [Orabug: 33616020]
- mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan)  [Orabug: 33646165]
- mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan)  [Orabug: 33646165]
- Revert "io_uring: reinforce cancel on flush during exit" (Lee Jones)  [Orabug: 33687075]
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy)  [Orabug: 33731040]
- ocfs2: fix data corruption on truncate (Jan Kara)  [Orabug: 33740343]

[5.4.17-2136.303.3.el8uek]
- xfs: xfs_defer_capture should absorb remaining transaction reservation (Darrick J. Wong)  [Orabug: 33520061]
- xfs: xfs_defer_capture should absorb remaining block reservations (Darrick J. Wong)  [Orabug: 33520061]
- xfs: proper replay of deferred ops queued during log recovery (Darrick J. Wong)  [Orabug: 33520061]
- xfs: attach inode to dquot in xfs_bui_item_recover (Darrick J. Wong)  [Orabug: 33520061]
- xfs: log new intent items created as part of finishing recovered intent items (Darrick J. Wong)  [Orabug: 33520061]
- xfs: spell out the parameter name for ->cancel_item (Christoph Hellwig)  [Orabug: 33520061]
- xfs: use a xfs_btree_cur for the ->finish_cleanup state (Christoph Hellwig)  [Orabug: 33520061]
- xfs: turn dfp_done into a xfs_log_item (Christoph Hellwig)  [Orabug: 33520061]
- xfs: refactor xfs_defer_finish_noroll (Christoph Hellwig)  [Orabug: 33520061]
- xfs: turn dfp_intent into a xfs_log_item (Christoph Hellwig)  [Orabug: 33520061]
- xfs: merge the ->diff_items defer op into ->create_intent (Christoph Hellwig)  [Orabug: 33520061]
- xfs: merge the ->log_item defer op into ->create_intent (Christoph Hellwig)  [Orabug: 33520061]
- xfs: factor out a xfs_defer_create_intent helper (Christoph Hellwig)  [Orabug: 33520061]
- sched: Fix Core-wide rq->lock for uninitialized CPUs (Peter Zijlstra)  [Orabug: 33568834]
- admin-guide/hw-vuln: Rephrase a section of core-scheduling.rst (Fabio M. De Francesco)  [Orabug: 33568834]
- Documentation: Add usecases, design and interface for core scheduling (Joel Fernandes (Google))  [Orabug: 33568834]
- kselftest: Add test for core sched prctl interface (Chris Hyser)  [Orabug: 33568834]
- sched: prctl() core-scheduling interface (Chris Hyser)  [Orabug: 33568834]
- sched: Inherit task cookie on fork() (Peter Zijlstra)  [Orabug: 33568834]
- sched: Trivial core scheduling cookie management (Peter Zijlstra)  [Orabug: 33568834]
- sched: Migration changes for core scheduling (Aubrey Li)  [Orabug: 33568834]
- sched: Trivial forced-newidle balancer (Peter Zijlstra)  [Orabug: 33568834]
- sched/fair: Snapshot the min_vruntime of CPUs on force idle (Joel Fernandes (Google))  [Orabug: 33568834]
- sched: Fix priority inversion of cookied task with sibling (Joel Fernandes (Google))  [Orabug: 33568834]
- sched/fair: Fix forced idle sibling starvation corner case (Vineeth Pillai)  [Orabug: 33568834]
- sched: Add core wide task selection and scheduling (Peter Zijlstra)  [Orabug: 33568834]
- sched: Basic tracking of matching tasks (Peter Zijlstra)  [Orabug: 33568834]
- sched: Introduce sched_class::pick_task() (Peter Zijlstra)  [Orabug: 33568834]
- sched: Allow sched_core_put() from atomic context (Peter Zijlstra)  [Orabug: 33568834]
- sched: Optimize rq_lockp() usage (Peter Zijlstra)  [Orabug: 33568834]
- sched: Core-wide rq->lock (Peter Zijlstra)  [Orabug: 33568834]
- sched: Prepare for Core-wide rq->lock (Peter Zijlstra)  [Orabug: 33568834]
- sched: Wrap rq::lock access (Peter Zijlstra)  [Orabug: 33568834]
- sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra)  [Orabug: 33568834]
- sched/fair: Add a few assertions (Peter Zijlstra)  [Orabug: 33568834]
- sched: Extract the task putting code from pick_next_task() (Chen Yu)  [Orabug: 33568834]
- rss_stat: add support to detect RSS updates of external mm (Joel Fernandes (Google))  [Orabug: 33568834]
- Revert "sched: Wrap rq::lock access" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Introduce sched_class::pick_task()" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Core-wide rq->lock" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched/fair: Add a few assertions" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Basic tracking of matching tasks" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Update core scheduler queue when taking cpu online/offline" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Add core wide task selection and scheduling." (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched/fair: wrapper for cfs_rq->min_vruntime" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched/fair: core wide vruntime comparison" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Trivial forced-newidle balancer" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: migration changes for core scheduling" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: cgroup tagging interface for core scheduling" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Cleanup kABI" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched: Enable disabling via CONFIG_SCHED_CORE" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched/core: remove undesired trace_printk from core scheduling backport" (Kamalesh Babulal)  [Orabug: 33568834]
- Revert "sched/core: cleanup kABI for struct rq" (Kamalesh Babulal)  [Orabug: 33568834]
- RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib)  [Orabug: 33615342]
- xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong)  [Orabug: 33676190]
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679803]  {CVE-2021-0920}

[5.4.17-2136.303.2.el8uek]
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen)  [Orabug: 33594983]  {CVE-2021-43975}
- RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry)  [Orabug: 33620311]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33652503]
- sched: Mitigate increased latencies for sysctl_sched_wakeup_granularity. (chris hyser)  [Orabug: 33107207]
- net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33585475]
- proc: allow pid_revalidate() during LOOKUP_RCU (Stephen Brennan)  [Orabug: 33647511]
- selinux: slow_avc_audit has become non-blocking (Al Viro)  [Orabug: 33647511]
- make dump_common_audit_data() safe to be called from RCU pathwalk (Al Viro)  [Orabug: 33647511]
- new helper: d_find_alias_rcu() (Al Viro)  [Orabug: 33647511]

[5.4.17-2136.303.1.el8uek]
- Revert "fs: align IOCB_* flags with RWF_* flags" (Prasad Singamsetty)  [Orabug: 33642850]
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33501676]
- net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33520710]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33542895]
- uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly)  [Orabug: 33557973]
- EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo)  [Orabug: 33585319]
- EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo)  [Orabug: 33585319]
- EDAC, skx_common: Refactor so that we initialize "dev" in result of adxl decode. (Tony Luck)  [Orabug: 33585319]
- net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33589566]
- rds: ib: Ack seq not always received in monotonic increasing order (Håkon Bugge)  [Orabug: 33599862]
- rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33619953]

[5.4.17-2136.303.0.el8uek]
- LTS tag: v5.4.156 (Jack Vogel) 
- pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (Fabien Dessenne) 
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (Nick Desaulniers) 
- tracing: Have all levels of checks prevent recursion (Steven Rostedt (VMware)) 
- net: mdiobus: Fix memory leak in __mdiobus_register (Yanfei Xu) 
- Input: snvs_pwrkey - add clk handling (Uwe Kleine-König) 
- ALSA: hda: avoid write to STATESTS if controller is in reset (Kai Vehmanen) 
- platform/x86: intel_scu_ipc: Update timeout value in comment (Prashant Malani) 
- isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma) 
- ARM: dts: spear3xx: Fix gmac node (Herve Codina) 
- net: stmmac: add support for dwmac 3.40a (Herve Codina) 
- btrfs: deal with errors when checking if a dir entry exists during log replay (Filipe Manana) 
- gcc-plugins/structleak: add makefile var for disabling structleak (Brendan Higgins) 
- selftests: netfilter: remove stray bash debug line (Florian Westphal) 
- netfilter: Kconfig: use 'default y' instead of 'm' for bool config option (Vegard Nossum) 
- isdn: cpai: check ctr->cnr to avoid array index out of bound (Xiaolong Huang) 
- nfc: nci: fix the UAF of rf_conn_info object (Lin Ma) 
- mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin) 
- mm, slub: fix mismatch between reconstructed freelist depth and cnt (Miaohe Lin) 
- powerpc/idle: Don't corrupt back chain when going idle (Michael Ellerman) 
- KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (Michael Ellerman) 
- KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (Michael Ellerman) 
- powerpc64/idle: Fix SP offsets when saving GPRs (Christopher M. Riedl) 
- audit: fix possible null-pointer dereference in audit_filter_rules (Gaosheng Cui) 
- ASoC: DAPM: Fix missing kctl change notifications (Takashi Iwai) 
- ALSA: hda/realtek: Add quirk for Clevo PC50HS (Steven Clarkson) 
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (Brendan Grieve) 
- vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle)) 
- elfcore: correct reference to CONFIG_UML (Lukas Bulwahn) 
- ocfs2: mount fails with buffer overflow in strlen (Valentin Vidic) 
- ocfs2: fix data corruption after conversion from inline format (Jan Kara) 
- ceph: fix handling of "meta" errors (Jeff Layton) 
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Zhang Changzhong) 
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Zhang Changzhong) 
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan) 
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Ziyang Xuan) 
- can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma) 
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (Stephane Grosjean) 
- can: rcar_can: fix suspend/resume (Yoshihiro Shimoda) 
- net: enetc: fix ethtool counter name for PM0_TERR (Vladimir Oltean) 
- net: stmmac: Fix E2E delay mechanism (Kurt Kanzenbach) 
- net: hns3: disable sriov before unload hclge layer (Peng Li) 
- net: hns3: add limit ets dwrr bandwidth cannot be 0 (Guangbin Huang) 
- net: hns3: reset DWRR of unused tc to zero (Guangbin Huang) 
- NIOS2: irqflags: rename a redefined register name (Randy Dunlap) 
- net: dsa: lantiq_gswip: fix register definition (Aleksander Jan Bajkowski) 
- lan78xx: select CRC32 (Vegard Nossum) 
- netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart) 
- ASoC: wm8960: Fix clock configuration on slave mode (Shengjiu Wang) 
- dma-debug: fix sg checks in debug_dma_map_sg() (Gerald Schaefer) 
- NFSD: Keep existing listeners on portlist error (Benjamin Coddington) 
- xtensa: xtfpga: Try software restart before simulating CPU reset (Guenter Roeck) 
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (Max Filippov) 
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (Eugen Hristev) 
- tee: optee: Fix missing devices unregister during optee_remove (Sumit Garg) 
- net: switchdev: do not propagate bridge updates across bridges (Russell King) 
- parisc: math-emu: Fix fall-through warnings (Helge Deller) 
- LTS tag: v5.4.155 (Jack Vogel) 
- ionic: don't remove netdev->dev_addr when syncing uc list (Shannon Nelson) 
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum) 
- qed: Fix missing error code in qed_slowpath_start() (chongjiapeng) 
- mqprio: Correct stats in mqprio_dump_class_stats(). (Sebastian Andrzej Siewior) 
- acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu) 
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter) 
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (Dan Carpenter) 
- drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King) 
- drm/panel: olimex-lcd-olinuxino: select CRC32 (Vegard Nossum) 
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (Vadim Pasternak) 
- mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel) 
- ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (Wang Hai) 
- pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter) 
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan) 
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan) 
- nfc: fix error handling of nfc_proto_register() (Ziyang Xuan) 
- ethernet: s2io: fix setting mac address during resume (Arnd Bergmann) 
- net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun) 
- net: stmmac: fix get_hw_feature() on old hardware (Herve Codina) 
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (Aya Levin) 
- net: korina: select CRC32 (Vegard Nossum) 
- net: arc: select CRC32 (Vegard Nossum) 
- gpio: pca953x: Improve bias setting (Andy Shevchenko) 
- iio: dac: ti-dac5571: fix an error code in probe() (Dan Carpenter) 
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter) 
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter) 
- iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N) 
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (Hui Liu) 
- iio: adc128s052: Fix the error handling path of 'adc128_probe()' (Christophe JAILLET) 
- iio: adc: aspeed: set driver data when adc probe. (Billy Tsai) 
- powerpc/xive: Discard disabled interrupts in get_irqchip_state() (Cédric Le Goater) 
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov) 
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd) 
- EDAC/armada-xp: Fix output of uncorrectable error counter (Hans Potsch) 
- virtio: write back F_VERSION_1 before validate (Halil Pasic) 
- USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc) 
- USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas) 
- USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang) 
- USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado) 
- Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen) 
- usb: musb: dsps: Fix the probe error path (Miquel Raynal) 
- efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua) 
- efi/cper: use stack buffer for error record decoding (Ard Biesheuvel) 
- cb710: avoid NULL pointer subtraction (Arnd Bergmann) 
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov) 
- xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti) 
- xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell) 
- mei: me: add Ice Lake-N device id. (Andy Shevchenko) 
- x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (James Morse) 
- watchdog: orion: use 0 for unset heartbeat (Chris Packham) 
- btrfs: check for error when looking up inode during dir entry replay (Filipe Manana) 
- btrfs: deal with errors when adding inode reference during log replay (Filipe Manana) 
- btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana) 
- btrfs: unlock newly allocated extent buffer after error (Qu Wenruo) 
- csky: Fixup regs.sr broken in ptrace (Guo Ren) 
- csky: don't let sigreturn play with priveleged bits of status register (Al Viro) 
- s390: fix strrchr() implementation (Roberto Sassu) 
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^' (Steven Rostedt) 
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang) 
- ALSA: hda/realtek - ALC236 headset MIC recording issue (Kailang Yang) 
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (Werner Sembach) 
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity (Werner Sembach) 
- ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai) 
- ALSA: usb-audio: Add quirk for VF0770 (Jonas Hahnfeld) 
- ovl: simplify file splice (Miklos Szeredi) 
- LTS tag: v5.4.154 (Jack Vogel) 
- sched: Always inline is_percpu_thread() (Peter Zijlstra) 
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King) 
- scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong) 
- drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi) 
- net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap) 
- mac80211: check return value of rhashtable_init (MichelleJin) 
- net: prevent user from passing illegal stab size (王贇) 
- m68k: Handle arrivals of multiple signals correctly (Al Viro) 
- mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing) 
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue (Florian Westphal) 
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (Florian Westphal) 
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (Joshua-Dickens) 
- netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden) 
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori) 
- ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi) 
- net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli) 
- LTS tag: v5.4.153 (Jack Vogel) 
- x86/Kconfig: Correct reference to MWINCHIP3D (Lukas Bulwahn) 
- x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner) 
- x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (Lukas Bulwahn) 
- RISC-V: Include clone3() on rv32 (Palmer Dabbelt) 
- bpf, s390: Fix potential memory leak about jit_data (Tiezhu Yang) 
- i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles) 
- net: prefer socket bound to interface when not in VRF (Mike Manning) 
- i40e: Fix freeing of uninitialized misc IRQ vector (Sylwester Dziedziuch) 
- i40e: fix endless loop under rtnl (Jiri Benc) 
- gve: fix gve_get_stats() (Eric Dumazet) 
- rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet) 
- gve: Correct available tx qpl check (Catherine Sullivan) 
- drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang) 
- video: fbdev: gbefb: Only instantiate device when built for IP32 (Mark Brown) 
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (Tony Lindgren) 
- netlink: annotate data races around nlk->bound (Eric Dumazet) 
- net: sfp: Fix typo in state machine debug string (Sean Anderson) 
- net/sched: sch_taprio: properly cancel timer from taprio_destroy() (Eric Dumazet) 
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet) 
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel) 
- arm64: dts: ls1028a: add missing CAN nodes (Michael Walle) 
- arm64: dts: freescale: Fix SP805 clock-names (Andre Przywara) 
- ptp_pch: Load module automatically if ID matches (Andy Shevchenko) 
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohár) 
- net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet) 
- phy: mdio: fix memory leak (Pavel Skripkin) 
- bpf, arm: Fix register clobbering in div/mod implementation (Johan Almbladh) 
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov) 
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (Randy Dunlap) 
- xtensa: move XCHAL_KIO_* definitions to kmem_layout.h (Max Filippov) 
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (Dmitry Baryshkov) 
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (Marek Vasut) 
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (Marek Vasut) 
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (Shawn Guo) 
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (Marijn Suijten) 
- soc: qcom: socinfo: Fixed argument passed to platform_set_data() (Antonio Martorana) 
- bpf, mips: Validate conditional branch offsets (Piotr Krysiuk) 
- MIPS: BPF: Restore MIPS32 cBPF JIT (Paul Burton) 
- ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg) 
- ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros) 
- xen/balloon: fix cancelled balloon action (Juergen Gross) 
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (Trond Myklebust) 
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (Patrick Ho) 
- ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang) 
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (Neil Armstrong) 
- xen/privcmd: fix error handling in mmap-resource processing (Jan Beulich) 
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes (Xu Yang) 
- USB: cdc-acm: fix break reporting (Johan Hovold) 
- USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold) 
- Partially revert "usb: Kconfig: using select for USB_COMMON dependency" (Ben Hutchings)