[El-errata] ELSA-2022-9480 Important: Oracle Linux 7 Unbreakable Enterprise kernel-container security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2022-9480

http://linux.oracle.com/errata/ELSA-2022-9480.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-container-5.4.17-2136.308.7.el7.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.308.7.el7.x86_64.rpm



SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-container-5.4.17-2136.308.7.el7.src.rpm

Related CVEs:

CVE-2021-4197
CVE-2022-1048
CVE-2022-1353
CVE-2022-23036
CVE-2022-23037
CVE-2022-23038
CVE-2022-23039
CVE-2022-23040
CVE-2022-23041
CVE-2022-23042




Description of changes:

[5.4.17-2136.308.7.el7]
- uek-rpm: Update OL7/8  Secureboot certificate and shim versions (Sherry Yang)
  [Orabug: 34248329]

[5.4.17-2136.308.6.el7]
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)
- arm: remove CONFIG_ARCH_HAS_HOLES_MEMORYMODEL (Mike Rapoport)
- x86/cpu: Load microcode during restore_processor_state() (Borislav Petkov)
- net/smc: Fix sock leak when release after smc_shutdown() (Tony Lu)
- dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (Vinod Koul)
- scsi: qla2xxx: Fix warning for missing error code (Nilesh Javali)
- media: Revert "media: em28xx: add missing em28xx_close_extension" (Pavel Skripkin)
- regulator: qcom_smd: fix for_each_child.cocci warnings (kernel test robot)
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (José Expósito)
- f2fs: fix to unlock page correctly in error path of is_alive() (Chao Yu)
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34211086]  {CVE-2022-1729}
- debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34211075]  {CVE-2022-21499}
- io_uring: always use original task when preparing req identity (Jens Axboe)  [Orabug: 34211070]  {CVE-2022-1786}
- ALSA: pcm: Fix races among concurrent prealloc proc writes (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent read/write and buffer changes (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (Takashi Iwai)  [Orabug: 34007905]  {CVE-2022-1048}
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson)  [Orabug: 34205799]  {CVE-2022-1852}

[5.4.17-2136.308.5.el7]
- vfio/type1: misalignment sanity check broken when mapping dma (Anthony Yznaga)  [Orabug: 34124949]
- uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling)  [Orabug: 34146030]
- bpf: parse BTF with linkage set for functions (Alan Maguire)  [Orabug: 34068157]
- selftests/bpf: remove BPF skeleton-based tests that got pulled in via backports (Alan Maguire)  [Orabug: 34068157]
- uek-rpm: default for COMMON_CLK_MARVELL_OTX2 should be "n" (Henry Willard)  [Orabug: 34138118]
- xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong)  [Orabug: 34085023]
- vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong)  [Orabug: 34085023]
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong)  [Orabug: 34085023]
- xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong)  [Orabug: 34085023]
- xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (Dan Carpenter)  [Orabug: 34085023]
- xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner)  [Orabug: 34085023]
- xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong)  [Orabug: 34085023]
- x86/platform/uv: Log gap hole end size (Mike Travis)  [Orabug: 34100339]
- x86/platform/uv: Update TSC sync state for UV5 (Mike Travis)  [Orabug: 34100339]
- x86/platform/uv: Update NMI Handler for UV5 (Mike Travis)  [Orabug: 34100339]
- perf/x86/intel/uncore: Fix the build on !CONFIG_PHYS_ADDR_T_64BIT (Ingo Molnar)  [Orabug: 34100339]
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Steve Wahl)  [Orabug: 34100339]
- net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch)  [Orabug: 34105318]
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 34111386]
- xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 34111386]
- staging: mmal-vchiq: Reset buffers_with_vpu on port_enable (Dave Stevenson)  [Orabug: 34125311]
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135343]  {CVE-2022-1353}
- clocksource: Avoid accidental unstable marking of clocksources (Waiman Long)  [Orabug: 34145210]
- clocksource: Reduce clocksource-skew threshold (Paul E. McKenney)  [Orabug: 34145210]
- Revert "rds/ib: recover rds connection from stuck tx path" (Nagappan Ramasamy Palaniappan)  [Orabug: 34152863]
- KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL (James Morse)
- LTS tag: v5.4.188 (Sherry Yang)  [Orabug: 33997299] [Orabug: 34012924]  {CVE-2022-1016} {CVE-2022-27666}
- llc: only change llc->dev when bind() succeeds (Eric Dumazet)
- nds32: fix access_ok() checks in get/put_user (Arnd Bergmann)
- tpm: use try_get_ops() in tpm-space.c (James Bottomley)
- mac80211: fix potential double free on mesh join (Linus Lüssing)
- rcu: Don't deboost before reporting expedited quiescent state (Paul E. McKenney)
- crypto: qat - disable registration of algorithms (Giovanni Cabiddu)
- ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)
- ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)
- ALSA: hda/realtek: Add quirk for ASUS GA402 (Jason Zheng)
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 (huangwenhui)
- ALSA: oss: Fix PCM OSS buffer allocation overflow (Takashi Iwai)
- ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call (Takashi Iwai)
- drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)
- ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)
- ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)
- llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet)
- thermal: int340x: fix memory leak in int3400_notify() (Chuansheng Liu)
- staging: fbtft: fb_st7789v: reset display before initialization (Oliver Graute)
- tpm: Fix error handling in async work (Tadeusz Struk)
- net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk)
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer)
- nfsd: Containerise filecache laundrette (Trond Myklebust)
- nfsd: cleanup nfsd_file_lru_dispose() (Trond Myklebust)
- LTS tag: v5.4.187 (Sherry Yang)
- Revert "selftests/bpf: Add test for bpf_timer overwriting crash" (Greg Kroah-Hartman)
- perf symbols: Fix symbol size calculation condition (Michael Petlan)
- Input: aiptek - properly check endpoint type (Pavel Skripkin)
- usb: usbtmc: Fix bug in pipe direction for control transfers (Alan Stern)
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern)
- usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter)
- arm64: fix clang warning about TRAMP_VALIAS (Arnd Bergmann)
- net: dsa: Add missing of_node_put() in dsa_port_parse_of (Miaoqian Lin)
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel)
- drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings (Marek Vasut)
- hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang)
- atm: eni: Add check for dma_map_single (Jiasheng Jiang)
- net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)
- net: phy: marvell: Fix invalid comparison in the resume and suspend functions (Kurt Cancemi)
- efi: fix return value of __setup handlers (Randy Dunlap)
- ocfs2: fix crash when initialize filecheck kobj fails (Joseph Qi)
- crypto: qcom-rng - ensure buffer for generate is completely filled (Brian Masney)
- LTS tag: v5.4.186 (Sherry Yang)  [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736] [Orabug: 33921736]  {CVE-2022-23960}
- fixup for "arm64 entry: Add macro for reading symbol address from the trampoline" (James Morse)
- kselftest/vm: fix tests build with old libc (Chengming Zhou)
- sfc: extend the locking on mcdi->seqno (Niels Dossche)
- tcp: make tcp_read_sock() more robust (Eric Dumazet)
- nl80211: Update bss channel on channel switch for P2P_CLIENT (Sreeramya Soratkal)
- drm/vrr: Set VRR capable prop only if it is attached to connector (Manasi Navare)
- iwlwifi: don't advertise TWT support (Golan Ben Ami)
- atm: firestream: check the return value of ioremap() in fs_init() (Jia-Ju Bai)
- can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready (Lad Prabhakar)
- ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE (Julian Braha)
- MIPS: smp: fill in sibling and core maps earlier (Alexander Lobakin)
- mac80211: refuse aggregations sessions before authorized (Johannes Berg)
- ARM: dts: rockchip: fix a typo on rk3288 crypto-controller (Corentin Labbe)
- ARM: dts: rockchip: reorder rk322x hmdi clocks (Sascha Hauer)
- arm64: dts: agilex: use the compatible "intel,socfpga-agilex-hsotg" (Dinh Nguyen)
- arm64: dts: rockchip: reorder rk3399 hdmi clocks (Sascha Hauer)
- arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity (Jakob Unterwurzacher)
- xfrm: Fix xfrm migrate issues when address family changes (Yan Yan)
- xfrm: Check if_id in xfrm_migrate (Yan Yan)
- sctp: fix the processing for INIT chunk (Xin Long)
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" (Kai Lueke)
- LTS tag: v5.4.185 (Sherry Yang)  [Orabug: 32490237] [Orabug: 32490237] [Orabug: 33921125] [Orabug: 33921125]
- ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett)
- ARM: fix Thumb2 regression with Spectre BHB (Russell King (Oracle))
- virtio: acknowledge all features before access (Michael S. Tsirkin)
- virtio: unexport virtio_finalize_features (Michael S. Tsirkin)
- arm64: dts: marvell: armada-37xx: Remap IO space to bus address 0x0 (Pali Rohár)
- riscv: Fix auipc+jalr relocation range checks (Emil Renner Berthing)
- mmc: meson: Fix usage of meson_mmc_post_req() (Rong Chen)
- net: macb: Fix lost RX packet wakeup race in NAPI receive (Robert Hancock)
- staging: gdm724x: fix use after free in gdm_lte_rx() (Dan Carpenter)
- fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)
- ARM: Spectre-BHB: provide empty stub for non-config (Randy Dunlap)
- selftests/memfd: clean up mapping in mfd_fail_write (Mike Kravetz)
- selftest/vm: fix map_fixed_noreplace test failure (Aneesh Kumar K.V)
- tracing: Ensure trace buffer is at least 4096 bytes large (Sven Schnelle)
- ipv6: prevent a possible race condition with lifetimes (Niels Dossche)
- Revert "xen-netback: Check for hotplug-status existence before watching" (Marek Marczykowski-Górecki)
- Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" (Marek Marczykowski-Górecki)
- net-sysfs: add check for netdevice being present to speed_show (suresh kumar)
- net: bcmgenet: Don't claim WOL when its not available (Jeremy Linton)
- sctp: fix kernel-infoleak for SCTP sockets (Eric Dumazet)
- net: phy: DP83822: clear MISR2 register to disable interrupts (Clément Léger)
- gianfar: ethtool: Fix refcount leak in gfar_get_ts_info (Miaoqian Lin)
- gpio: ts4900: Do not set DAT and OE together (Mark Featherston)
- selftests: pmtu.sh: Kill tcpdump processes launched by subshell. (Guillaume Nault)
- NFC: port100: fix use-after-free in port100_send_complete (Pavel Skripkin)
- net/mlx5: Fix a race on command flush flow (Moshe Shemesh)
- net/mlx5: Fix size field in bufferx_reg struct (Mohammad Kabat)
- ax25: Fix NULL pointer dereference in ax25_kill_by_device (Duoming Zhou)
- net: ethernet: lpc_eth: Handle error for clk_enable (Jiasheng Jiang)
- net: ethernet: ti: cpts: Handle error for clk_enable (Jiasheng Jiang)
- ethernet: Fix error handling in xemaclite_of_probe (Miaoqian Lin)
- ARM: dts: aspeed: Fix AST2600 quad spi group (Joel Stanley)
- drm/sun4i: mixer: Fix P010 and P210 format numbers (Jernej Skrabec)
- qed: return status of qed_iov_get_link (Tom Rix)
- net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (Jia-Ju Bai)
- virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero (Xie Yongji)
- arm64: dts: armada-3720-turris-mox: Add missing ethernet0 alias (Pali Rohár)
- clk: qcom: gdsc: Add support to update GDSC transition delay (Taniya Das)
- LTS tag: v5.4.184 (Sherry Yang)  [Orabug: 33941936] [Orabug: 33917127] [Orabug: 33941936] [Orabug: 33941936] [Orabug: 33941936] [Orabug: 33941936] [Orabug: 33941936] [Orabug: 33941936]  {CVE-2021-26401}
- Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" (Greg Kroah-Hartman)
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (Juergen Gross)   {CVE-2022-23042}
- xen/gnttab: fix gnttab_end_foreign_access() without page specified (Juergen Gross)   {CVE-2022-23041}
- xen/pvcalls: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041}
- xen/9p: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041}
- xen: remove gnttab_query_foreign_access() (Juergen Gross)
- xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross)   {CVE-2022-23039}
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23038}
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23037}
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23036}
- xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross)   {CVE-2022-23036} {CVE-2022-23038}
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross)   {CVE-2022-23040}
- ARM: fix build warning in proc-v7-bugs.c (Russell King (Oracle))
- ARM: Do not use NOCROSSREFS directive with ld.lld (Nathan Chancellor)
- ARM: fix co-processor register typo (Russell King (Oracle))
- ARM: fix build error when BPF_SYSCALL is disabled (Emmanuel Gil Peyrot)
- ARM: include unprivileged BPF status in Spectre V2 reporting (Russell King (Oracle))
- ARM: Spectre-BHB workaround (Russell King (Oracle))
- ARM: use LOADADDR() to get load address of sections (Russell King (Oracle))
- ARM: early traps initialisation (Russell King (Oracle))
- ARM: report Spectre v2 status through sysfs (Russell King (Oracle))
- arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() (Mark Rutland)
- arm/arm64: Provide a wrapper for SMCCC 1.1 calls (Steven Price)
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Josh Poimboeuf)
- x86/speculation: Warn about Spectre v2 LFENCE mitigation (Josh Poimboeuf)
- LTS tag: v5.4.183 (Sherry Yang)
- hamradio: fix macro redefine warning (Huang Pei)
- net: dcb: disable softirqs in dcbnl_flush_dev() (Vladimir Oltean)
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" (Jiri Bohac)
- btrfs: add missing run of delayed items after unlink during log replay (Filipe Manana)
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup (Sidong Yang)
- btrfs: fix lost prealloc extents beyond eof after full fsync (Filipe Manana)
- tracing: Fix return value of __setup handlers (Randy Dunlap)
- tracing/histogram: Fix sorting on old "cpu" value (Steven Rostedt (Google))
- HID: add mapping for KEY_ALL_APPLICATIONS (William Mahon)
- HID: add mapping for KEY_DICTATE (William Mahon)
- Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (Hans de Goede)
- Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (Hans de Goede)
- nl80211: Handle nla_memdup failures in handle_nan_filter (Jiasheng Jiang)
- net: chelsio: cxgb3: check the return value of pci_find_capability() (Jia-Ju Bai)
- soc: fsl: qe: Check of ioremap return value (Jiasheng Jiang)
- memfd: fix F_SEAL_WRITE after shmem huge page allocated (Hugh Dickins)
- ibmvnic: free reset-work-item when flushing (Sukadev Bhattiprolu)
- igc: igc_write_phy_reg_gpy: drop premature return (Sasha Neftin)
- ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (Randy Dunlap)
- ARM: Fix kgdb breakpoint for Thumb2 (Russell King (Oracle))
- igc: igc_read_phy_reg_gpy: drop premature return (Corinna Vinschen)
- arm64: dts: rockchip: Switch RK3399-Gru DP to SPDIF output (Brian Norris)
- can: gs_usb: change active_channels's type from atomic_t to u8 (Vincent Mailhol)
- ASoC: cs4265: Fix the duplicated control name (Fabio Estevam)
- firmware: arm_scmi: Remove space in MODULE_ALIAS name (Alyssa Ross)
- efivars: Respect "block" flag in efivar_entry_set_safe() (Jann Horn)
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() (Maciej Fijalkowski)
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (Zheyu Ma)
- net: sxgbe: fix return value of __setup handler (Randy Dunlap)
- iavf: Fix missing check for running netdev (Slawomir Laba)
- net: stmmac: fix return value of __setup handler (Randy Dunlap)
- mac80211: fix forwarded mesh frames AC & queue selection (Nicolas Escande)
- ia64: ensure proper NUMA distance and possible map initialization (Valentin Schneider)
- sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa() (Dietmar Eggemann)
- sched/topology: Make sched_init_numa() use a set for the deduplicating sort (Valentin Schneider)
- xen/netfront: destroy queues before real_num_tx_queues is zeroed (Marek Marczykowski-Górecki)
- block: Fix fsync always failed if once failed (Ye Bin)
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (D. Wythe)
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (D. Wythe)
- net: dcb: flush lingering app table entries for unregistered devices (Vladimir Oltean)
- batman-adv: Don't expect inter-netns unique iflink indices (Sven Eckelmann)
- batman-adv: Request iflink once in batadv_get_real_netdevice (Sven Eckelmann)
- batman-adv: Request iflink once in batadv-on-batadv check (Sven Eckelmann)
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal)
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal)
- xfrm: enforce validity of offload input flags (Leon Romanovsky)
- xfrm: fix the if_id check in changelink (Antony Antony)
- netfilter: fix use-after-free in __nf_register_net_hook() (Eric Dumazet)
- xfrm: fix MTU regression (Jiri Bohac)
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Marek Vasut)
- ALSA: intel_hdmi: Fix reference to PCM buffer address (Zhen Ni)
- ata: pata_hpt37x: fix PCI clock detection (Sergey Shtylyov)
- usb: gadget: clear related members when goto fail (Hangyu Hua)
- usb: gadget: don't release an existing dev->buf (Hangyu Hua)
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (Daniele Palmas)
- i2c: qup: allow COMPILE_TEST (Wolfram Sang)
- i2c: cadence: allow COMPILE_TEST (Wolfram Sang)
- dmaengine: shdma: Fix runtime PM imbalance on error (Yongzhi Liu)
- cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg)
- Input: clear BTN_RIGHT/MIDDLE on buttonpads (José Expósito)
- ASoC: rt5682: do not block workqueue if card is unbound (Kai Vehmanen)
- ASoC: rt5668: do not block workqueue if card is unbound (Kai Vehmanen)
- i2c: bcm2835: Avoid clock stretching timeouts (Eric Anholt)
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (JaeMan Park)
- mac80211_hwsim: report NOACK frames in tx_status (Benjamin Beichler)
- LTS tag: v5.4.182 (Sherry Yang)  [Orabug: 33962705] [Orabug: 33900416]  {CVE-2022-25636} {CVE-2022-26966}
- fget: clarify and improve __fget_files() implementation (Linus Torvalds)
- memblock: use kfree() to release kmalloced memblock regions (Miaohe Lin)
- Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR" (Karol Herbst)
- gpio: tegra186: Fix chip_data type confusion (Marc Zyngier)
- tty: n_gsm: fix NULL pointer access due to DLCI release (daniel.starke at siemens.com)
- tty: n_gsm: fix proper link termination after failed open (daniel.starke at siemens.com)
- tty: n_gsm: fix encoding of control signal octet bit DV (daniel.starke at siemens.com)
- xhci: Prevent futile URB re-submissions due to incorrect return value. (Hongyu Xie)
- xhci: re-initialize the HC during resume if HCE was set (Puma Hsu)
- usb: dwc3: gadget: Let the interrupt handler disable bottom halves. (Sebastian Andrzej Siewior)
- usb: dwc3: pci: Fix Bay Trail phy GPIO mappings (Hans de Goede)
- USB: serial: option: add Telit LE910R1 compositions (Daniele Palmas)
- USB: serial: option: add support for DW5829e (Slark Xiao)
- tracefs: Set the group ownership in apply_options() not parse_options() (Steven Rostedt (Google))
- USB: gadget: validate endpoint index for xilinx udc (Szymon Heidrich)
- usb: gadget: rndis: add spinlock for rndis response list (Daehwan Jung)
- Revert "USB: serial: ch341: add new Product ID for CH341A" (Dmytro Bagrii)
- ata: pata_hpt37x: disable primary channel on HPT371 (Sergey Shtylyov)
- iio: Fix error handling for PM (Miaoqian Lin)
- iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits (Cosmin Tanislav)
- iio: adc: men_z188_adc: Fix a resource leak in an error handling path (Christophe JAILLET)
- tracing: Have traceon and traceoff trigger honor the instance (Steven Rostedt (Google))
- RDMA/ib_srp: Fix a deadlock (Bart Van Assche)
- configfs: fix a race in configfs_{,un}register_subsystem() (ChenXiaoSong)
- spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (Zhou Qingyang)
- net/mlx5: Fix wrong limitation of metadata match on ecpf (Ariel Levkovich)
- net/mlx5: Fix possible deadlock on rule deletion (Maor Gottlieb)
- netfilter: nf_tables: fix memory leak during stateful obj update (Florian Westphal)
- nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() (Christophe JAILLET)
- net: Force inlining of checksum functions in net/checksum.h (Christophe Leroy)
- net: ll_temac: check the return value of devm_kmalloc() (Xiaoke Wang)
- net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (Gal Pressman)
- drm/edid: Always set RGB444 (Maxime Ripard)
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Paul Blakey)
- gso: do not skip outer ip header in case of ipip and net_failover (Tao Liu)
- tipc: Fix end of loop tests for list_for_each_entry() (Dan Carpenter)
- net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends (Eric Dumazet)
- bpf: Do not try bpf_msg_push_data with len 0 (Felix Maurer)
- perf data: Fix double free in perf_session__delete() (Alexey Bayduraev)
- ping: remove pr_err from ping_lookup (Xin Long)
- lan743x: fix deadlock in lan743x_phy_link_status_change() (Heiner Kallweit)
- optee: use driver internal tee_context for some rpc (Jens Wiklander)
- tee: export teedev_open() and teedev_close_context() (Jens Wiklander)
- x86/fpu: Correct pkru/xstate inconsistency (Brian Geffon)
- USB: zaurus: support another broken Zaurus (Oliver Neukum)
- drm/amdgpu: disable MMHUB PG for Picasso (Evan Quan)
- parisc/unaligned: Fix ldw() and stw() unalignment handlers (Helge Deller)
- parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (Helge Deller)
- vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (Stefano Garzarella)
- clk: jz4725b: fix mmc0 clock gating (Siarhei Volkau)
- cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Zhang Qiao)
- LTS tag: v5.4.181 (Sherry Yang)  [Orabug: 33910799]
- kconfig: fix failing to generate auto.conf (Jing Leng)
- net: macb: Align the dma and coherent dma masks (Marc St-Amand)
- net: usb: qmi_wwan: Add support for Dell DW5829e (Slark Xiao)
- tracing: Fix tp_printk option related with tp_printk_stop_on_boot (JaeSang Yoo)
- drm/rockchip: dw_hdmi: Do not leave clock enabled in error case (Sascha Hauer)
- ata: libata-core: Disable TRIM on M88V29 (Zoltán Böszörményi)
- kconfig: let 'shell' return enough output for deep path names (Brenda Streiff)
- arm64: dts: meson-g12: drop BL32 region from SEI510/SEI610 (Christian Hewitt)
- arm64: dts: meson-g12: add ATF BL32 reserved-memory region (Christian Hewitt)
- arm64: dts: meson-gx: add ATF BL32 reserved-memory region (Christian Hewitt)
- netfilter: conntrack: don't refresh sctp entries in closed state (Florian Westphal)
- irqchip/sifive-plic: Add missing thead,c900-plic match string (Guo Ren)
- ARM: OMAP2+: adjust the location of put_device() call in omapdss_init_of (Ye Guojin)
- ARM: OMAP2+: hwmod: Add of_node_put() before break (Wan Jiabing)
- KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW (Jim Mattson)
- Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj (Miaoqian Lin)
- i2c: brcmstb: fix support for DSL and CM variants (Rafał Miłecki)
- copy_process(): Move fd_install() out of sighand->siglock critical section (Waiman Long)
- dmaengine: sh: rcar-dmac: Check for error num after setting mask (Jiasheng Jiang)
- net: sched: limit TC_ACT_REPEAT loops (Eric Dumazet)
- EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (Eliav Farber)
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (James Smart)
- mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (david regan)
- mtd: rawnand: qcom: Fix clock sequencing in qcom_nandc_probe() (Bryan O'Donoghue)
- NFS: Do not report writeback errors in nfs_getattr() (Trond Myklebust)
- NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)
- block/wbt: fix negative inflight counter when remove scsi device (Laibin Qiu)
- mtd: rawnand: gpmi: don't leak PM reference in error path (Christian Eggers)
- powerpc/lib/sstep: fix 'ptesync' build error (Anders Roxell)
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (Mark Brown)
- ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (Mark Brown)
- ALSA: hda: Fix missing codec probe on Shenker Dock 15 (Takashi Iwai)
- ALSA: hda: Fix regression on forced probe mask option (Takashi Iwai)
- libsubcmd: Fix use-after-free for realloc(..., 0) (Kees Cook)
- bonding: fix data-races around agg_select_timer (Eric Dumazet)
- drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit (Eric Dumazet)
- bonding: force carrier update when releasing slave (Zhang Changzhong)
- ping: fix the dif and sdif check in ping_lookup (Xin Long)
- net: ieee802154: ca8210: Fix lifs/sifs periods (Miquel Raynal)
- net: dsa: lan9303: fix reset on probe (Mans Rullgard)
- netfilter: nft_synproxy: unregister hooks on init error path (Pablo Neira Ayuso)
- iwlwifi: pcie: gen2: fix locking when "HW not ready" (Johannes Berg)
- iwlwifi: pcie: fix locking when "HW not ready" (Johannes Berg)
- mmc: block: fix read single on recovery logic (Christian Löhle)
- vsock: remove vsock from connected table when connect is interrupted by a signal (Seth Forshee)
- dmaengine: at_xdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus)
- taskstats: Cleanup the use of task->exit_code (Eric W. Biederman)
- ext4: prevent partial update of the extent blocks (Zhang Yi)
- ext4: check for inconsistent extents between index and leaf block (Zhang Yi)
- ext4: check for out-of-order index extents in ext4_valid_extent_entries() (Zhang Yi)
- drm/radeon: Fix backlight control on iMac 12,1 (Nicholas Bishop)
- iwlwifi: fix use-after-free (Johannes Berg)
- arm64: module/ftrace: intialize PLT at load time (Mark Rutland)
- arm64: module: rework special section handling (Mark Rutland)
- module/ftrace: handle patchable-function-entry (Mark Rutland)
- ftrace: add ftrace_init_nop() (Mark Rutland)
- Revert "module, async: async_synchronize_full() on module init iff async is used" (Igor Pylypiv)
- drm/amdgpu: fix logic inversion in check (Christian König)
- nvme-rdma: fix possible use-after-free in transport error_recovery work (Sagi Grimberg)
- nvme-tcp: fix possible use-after-free in transport error_recovery work (Sagi Grimberg)
- nvme: fix a possible use-after-free in controller reset during load (Sagi Grimberg)
- quota: make dquot_quota_sync return errors from ->sync_fs (Darrick J. Wong)
- vfs: make freeze_super abort when sync_filesystem returns error (Darrick J. Wong)
- ax25: improve the incomplete fix to avoid UAF and NPD bugs (Duoming Zhou)
- selftests/zram: Adapt the situation that /dev/zram0 is being used (Yang Xu)
- selftests/zram01.sh: Fix compression ratio calculation (Yang Xu)
- selftests/zram: Skip max_comp_streams interface on newer kernel (Yang Xu)
- net: ieee802154: at86rf230: Stop leaking skb's (Miquel Raynal)
- selftests: rtc: Increase test timeout so that all tests run (Nícolas F. R. A. Prado)
- platform/x86: ISST: Fix possible circular locking dependency detected (Srinivas Pandruvada)
- btrfs: send: in case of IO error log it (Dāvis Mosāns)
- parisc: Fix sglist access in ccio-dma.c (John David Anglin)
- parisc: Fix data TLB miss in sba_unmap_sg (John David Anglin)
- parisc: Drop __init from map_pages declaration (John David Anglin)
- serial: parisc: GSC: fix build when IOSAPIC is not set (Randy Dunlap)
- Revert "svm: Add warning message for AVIC IPI invalid target" (Sean Christopherson)
- HID:Add support for UGTABLET WP5540 (Sergio Costas)
- Makefile.extrawarn: Move -Wunaligned-access to W=1 (Nathan Chancellor)
- LTS tag: v5.4.180 (Sherry Yang)  [Orabug: 30663537] [Orabug: 33734681]
- perf: Fix list corruption in perf_cgroup_switch() (Song Liu)
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled (James Smart)
- hwmon: (dell-smm) Speed up setting of fan speed (Armin Wolf)
- seccomp: Invalidate seccomp mode to catch death failures (Kees Cook)
- USB: serial: cp210x: add CPI Bulk Coin Recycler id (Johan Hovold)
- USB: serial: cp210x: add NCR Retail IO box id (Johan Hovold)
- USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (Stephan Brunner)
- USB: serial: option: add ZTE MF286D modem (Pawel Dembicki)
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (Cameron Williams)
- usb: gadget: f_uac2: Define specific wTerminalType (Pavel Hofman)
- usb: gadget: rndis: check size of RNDIS_MSG_SET command (Greg Kroah-Hartman)
- USB: gadget: validate interface OS descriptor requests (Szymon Heidrich)
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE transition (Adam Ford)
- usb: dwc3: gadget: Prevent core from processing stale TRBs (Udipto Goswami)
- usb: ulpi: Call of_node_put correctly (Sean Anderson)
- usb: ulpi: Move of_node_put to ulpi_dev_release (Sean Anderson)
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX (Jonas Malaco)
- n_tty: wake up poll(POLLRDNORM) on receiving data (TATSUKAWA KOSUKE (立川 江介))
- vt_ioctl: add array_index_nospec to VT_ACTIVATE (Jakob Koschel)
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)
- net: amd-xgbe: disable interrupts during pci removal (Raju Rangoju)
- tipc: rate limit warning for received illegal binding update (Jon Maloy)
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE (Joel Stanley)
- veth: fix races around rq->rx_notify_masked (Eric Dumazet)
- net: fix a memleak when uncloning an skb dst and its metadata (Antoine Tenart)
- net: do not keep the dst cache when uncloning an skb dst and its metadata (Antoine Tenart)
- nfp: flower: fix ida_idx not being released (Louis Peens)
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Eric Dumazet)
- bonding: pair enable_port with slave_arr_updates (Mahesh Bandewar)
- ixgbevf: Require large buffers for build_skb on 82599VF (Samuel Mendoza-Jonas)
- misc: fastrpc: avoid double fput() on failed usercopy (Mathias Krause)
- usb: f_fs: Fix use-after-free for epfile (Udipto Goswami)
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect (Fabio Estevam)
- staging: fbtft: Fix error path in fbtft_driver_module_init() (Uwe Kleine-König)
- ARM: dts: meson: Fix the UART compatible strings (Martin Blumenstingl)
- perf probe: Fix ppc64 'perf probe add events failed' case (Zechuan Chen)
- net: bridge: fix stale eth hdr pointer in br_dev_xmit (Nikolay Aleksandrov)
- PM: s2idle: ACPI: Fix wakeup interrupts handling (Rafael J. Wysocki)
- ACPI/IORT: Check node revision for PMCG resources (Robin Murphy)
- nvme-tcp: fix bogus request completion when failing to send AER (Sagi Grimberg)
- ARM: socfpga: fix missing RESET_CONTROLLER (Krzysztof Kozlowski)
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group (Fabio Estevam)
- riscv: fix build with binutils 2.38 (Aurelien Jarno)
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (Vitaly Kuznetsov)
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() (Jisheng Zhang)
- usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend (Amelie Delaunay)
- PM: hibernate: Remove register_nosave_region_late() (Amadeusz Sławiński)
- scsi: myrs: Fix crash in error case (Tong Zhang)
- scsi: qedf: Fix refcount issue when LOGO is received during TMF (Saurav Kashyap)
- scsi: target: iscsi: Make sure the np under each tpg is unique (ZouMingzhe)
- net: sched: Clarify error message when qdisc kind is unknown (Victor Nogueira)
- drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer (Raymond Jay Golo)
- NFSv4 expose nfs_parse_server_name function (Olga Kornievskaia)
- NFSv4 remove zero number of fs_locations entries error check (Olga Kornievskaia)
- NFSv4.1: Fix uninitialised variable in devicenotify (Trond Myklebust)
- nfs: nfs4clinet: check the return value of kstrdup() (Xiaoke Wang)
- NFSv4 only print the label when its queried (Olga Kornievskaia)
- NFSD: Fix offset type in I/O trace points (Chuck Lever)
- NFSD: Clamp WRITE offsets (Chuck Lever)
- NFS: Fix initialisation of nfs_client cl_flags field (Trond Myklebust)
- net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs (Pavel Parkhomenko)
- net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs (Pavel Parkhomenko)
- mmc: sdhci-of-esdhc: Check for error num after setting mask (Jiasheng Jiang)
- ima: Do not print policy rule with inactive LSM labels (Stefan Berger)
- ima: Allow template selection with ima_template[_fmt]= after ima_hash= (Roberto Sassu)
- ima: Remove ima_policy file before directory (Stefan Berger)
- integrity: check the return value of audit_log_start() (Xiaoke Wang)
- LTS tag: v5.4.179 (Sherry Yang)  [Orabug: 33850801]  {CVE-2022-0435}
- moxart: fix potential use-after-free on remove path (Greg Kroah-Hartman)
- LTS tag: v5.4.178 (Sherry Yang)
- cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning (Waiman Long)
- ext4: fix error handling in ext4_restore_inline_data() (Ritesh Harjani)
- EDAC/xgene: Fix deferred probing (Sergey Shtylyov)
- EDAC/altera: Fix deferred probing (Sergey Shtylyov)
- rtc: cmos: Evaluate century appropriate (Riwen Lu)
- selftests: futex: Use variable MAKE instead of make (Muhammad Usama Anjum)
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. (Dai Ngo)
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (John Meneghini)
- pinctrl: bcm2835: Fix a few error paths (Florian Fainelli)
- ASoC: max9759: fix underflow in speaker_gain_control_put() (Dan Carpenter)
- ASoC: cpcap: Check for NULL pointer after calling of_get_child_by_name (Jiasheng Jiang)
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple of period bytes (Robert Hancock)
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe (Miaoqian Lin)
- drm/i915/overlay: Prevent divide by zero bugs in scaling (Dan Carpenter)
- net: stmmac: ensure PTP time register reads are consistent (Yannick Vignon)
- net: stmmac: dump gmac4 DMA registers correctly (Camel Guo)
- net: macsec: Verify that send_sci is on when setting Tx sci explicitly (Lior Nahmanson)
- net: ieee802154: Return meaningful error codes from the netlink helpers (Miquel Raynal)
- net: ieee802154: ca8210: Stop leaking skb's (Miquel Raynal)
- net: ieee802154: mcr20a: Fix lifs/sifs periods (Miquel Raynal)
- net: ieee802154: hwsim: Ensure proper channel selection at probe time (Miquel Raynal)
- spi: meson-spicc: add IRQ check in meson_spicc_probe (Miaoqian Lin)
- spi: mediatek: Avoid NULL pointer crash in interrupt (Benjamin Gaignard)
- spi: bcm-qspi: check for valid cs before applying chip select (Kamal Dasu)
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() (Joerg Roedel)
- iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (Guoqing Jiang)
- RDMA/mlx4: Don't continue event handler after memory allocation failure (Leon Romanovsky)
- RDMA/siw: Fix broken RDMA Read Fence/Resume logic. (Bernard Metzler)
- IB/rdmavt: Validate remote_addr during loopback atomic tests (Mike Marciniszyn)
- memcg: charge fs_context and legacy_fs_context (Yutian Yang)
- Revert "ASoC: mediatek: Check for error clk pointer" (Guenter Roeck)
- block: bio-integrity: Advance seed correctly for larger interval sizes (Martin K. Petersen)
- mm/kmemleak: avoid scanning potential huge holes (Lang Yu)
- drm/nouveau: fix off by one in BIOS boundary checking (Nick Lopez)
- btrfs: fix deadlock between quota disable and qgroup rescan worker (Shin'ichiro Kawasaki)
- ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows (Christian Lachner)
- ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) (Christian Lachner)
- ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks (Christian Lachner)
- ALSA: hda/realtek: Add quirk for ASUS GU603 (Albert Geantă)
- ALSA: usb-audio: Simplify quirk entries with a macro (Takashi Iwai)
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (Mark Brown)
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (Mark Brown)
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (Mark Brown)
- audit: improve audit queue handling when "audit=1" on cmdline (Paul Moore)
- LTS tag: v5.4.177 (Sherry Yang)  [Orabug: 33825687]  {CVE-2022-0492}
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt (Eric Dumazet)
- cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() (Tianchen Ding)
- rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (Eric Dumazet)
- net: amd-xgbe: Fix skb data length underflow (Shyam Sundar S K)
- net: amd-xgbe: ensure to reset the tx_timer_active flag (Raju Rangoju)
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (Georgi Valkov)
- psi: Fix uaf issue when psi trigger is destroyed while being polled (Suren Baghdasaryan)
- PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (Lukas Wunner)
- LTS tag: v5.4.176 (Sherry Yang)  [Orabug: 33870266] [Orabug: 33870266] [Orabug: 33917056] [Orabug: 33917056]  {CVE-2020-36516} {CVE-2022-0617}
- mtd: rawnand: mpc5121: Remove unused variable in ads5121_select_chip() (Geert Uytterhoeven)
- block: Fix wrong offset in bio_truncate() (OGAWA Hirofumi)
- fsnotify: invalidate dcache before IN_DELETE event (Amir Goldstein)
- dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config (Marc Kleine-Budde)
- ipv4: remove sparse error in ip_neigh_gw4() (Eric Dumazet)
- ipv4: raw: lock the socket in raw_bind() (Eric Dumazet)
- net: hns3: handle empty unknown interrupt for VF (Yufeng Mo)
- yam: fix a memory leak in yam_siocdevprivate() (Hangyu Hua)
- drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy (Miaoqian Lin)
- ibmvnic: don't spin in tasklet (Sukadev Bhattiprolu)
- ibmvnic: init ->running_cap_crqs early (Sukadev Bhattiprolu)
- hwmon: (lm90) Mark alert as broken for MAX6654 (Guenter Roeck)
- rxrpc: Adjust retransmission backoff (David Howells)
- phylib: fix potential use-after-free (Marek Behún)
- net: phy: broadcom: hook up soft_reset for BCM54616S (Robert Hancock)
- netfilter: conntrack: don't increment invalid counter on NF_REPEAT (Florian Westphal)
- NFS: Ensure the server has an up to date ctime before renaming (Trond Myklebust)
- NFS: Ensure the server has an up to date ctime before hardlinking (Trond Myklebust)
- ipv6: annotate accesses to fn->fn_sernum (Eric Dumazet)
- drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (José Expósito)
- drm/msm/dsi: Fix missing put_device() call in dsi_get_phy (Miaoqian Lin)
- drm/msm: Fix wrong size calculation (Xianting Tian)
- net-procfs: show net devices bound packet types (Jianguo Wu)
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file (Trond Myklebust)
- hwmon: (lm90) Reduce maximum conversion rate for G781 (Guenter Roeck)
- ping: fix the sk_bound_dev_if match in ping_lookup (Xin Long)
- hwmon: (lm90) Mark alert as broken for MAX6680 (Guenter Roeck)