An unbreakable Enterprise kernel bug fix update (aarch64) has been released for Oracle Linux 7.

El-errata: ELBA-2020-5835 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update (aarch64)

Oracle Linux Bug Fix Advisory ELBA-2020-5835

  http://linux.oracle.com/errata/ELBA-2020-5835.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

aarch64:
kernel-uek-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-debug-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-debug-devel-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-devel-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-headers-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-tools-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-tools-libs-4.14.35-2025.400.8.el7uek.aarch64.rpm
kernel-uek-tools-libs-devel-4.14.35-2025.400.8.el7uek.aarch64.rpm
perf-4.14.35-2025.400.8.el7uek.aarch64.rpm
python-perf-4.14.35-2025.400.8.el7uek.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-2025.400.8.el7uek.src.rpm


Description of changes:

[4.14.35-2025.400.8.el7uek]
- rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry) [Orabug: 31737041]
- net/rds: rds_ib_remove_one() needs to wait (Ka-Cheong Poon) [Orabug: 31777364]
- RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky) [Orabug: 31784658]
- RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb) [Orabug: 31784891]
- tcp: add sanity tests in tcp_add_backlog() (Eric Dumazet) [Orabug: 31780103]

[4.14.35-2025.400.7.el7uek]
- Revert "bnxt_en: Remove the setting of dev_port." (Somasundaram Krishnasamy) [Orabug: 31703319]
- genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng) [Orabug: 31723448]
- x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi) [Orabug: 31710910]
- Revert "net/mlx4_core: Add masking for a few queries on HCA caps" (Sharath Srinivasan) [Orabug: 31620920]
- rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge) [Orabug: 31648140]
- rds: Clear reconnect pending bit (Håkon Bugge) [Orabug: 31648140]
- delayacct: fix crash in delayacct_blkio_end() after delayacct init failure (Tejun Heo) [Orabug: 31516715]
- x86/speculation: Fix missing enumeration value warnings (Patrick Colp) [Orabug: 30833548]
- bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu) [Orabug: 31350644] {CVE-2020-12771}
- ath9k: release allocated buffer if timed out (Navid Emamdoost) [Orabug: 31351557] {CVE-2019-19074}
- ath9k_htc: release allocated buffer if timed out (Navid Emamdoost) [Orabug: 31351570] {CVE-2019-19073}
- KVM: nVMX: include conditional controls in /dev/kvm KVM_GET_MSRS (Paolo Bonzini) [Orabug: 31699255]
- net/rds: Incorrect WARN_ON() (Ka-Cheong Poon) [Orabug: 31703346]
- net/rds: rds_ib_remove_one() should not call rds_ib_dev_free_dev() (Ka-Cheong Poon) [Orabug: 31703346]

[4.14.35-2025.400.6.el7uek]
- kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder) [Orabug: 31694368]
- iommu/amd: Fix incorrect PASID decoding from event log (Suthikulpanit, Suravee) [Orabug: 31693603]
- misc: pvpanic: add crash loaded event (zhenwei pi) [Orabug: 31677098]
- bnxt_en: fix NULL dereference in case SR-IOV configuration fails (Davide Caratti) [Orabug: 31600665]
- bnxt_en: allow firmware to disable VLAN offloads (Michael Chan) [Orabug: 31600665]
- bnxt_en: clean up VLAN feature bit handling (Michael Chan) [Orabug: 31600665]
- bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Add logical RSS indirection table structure. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan) [Orabug: 31600665]
- bnxt_en: Set up the chip specific RSS table size. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Store the running firmware version code. (Michael Chan) [Orabug: 31600665]
- bnxt_en: fix firmware message length endianness (Michael Chan) [Orabug: 31600665]
- net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan) [Orabug: 31600665]
- bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi) [Orabug: 31600665]
- bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Refactor the software ring counters. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam) [Orabug: 31600665]
- bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Return error when allocating zero size context memory. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam) [Orabug: 31600665]
- bnxt_en: Free context memory after disabling PCI in probe error path. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan) [Orabug: 31600665]
- bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan) [Orabug: 31600665]
- bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan) [Orabug: 31600665]
- bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Support UDP RSS hashing on 575XX chips. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Remove the setting of dev_port. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Improve link up detection. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Fix NTUPLE firmware command failures. (Michael Chan) [Orabug: 31600665]
- bnxt: apply computed clamp value for coalece parameter (Jonathan Lemon) [Orabug: 31600665]
- bnxt_en: Fix MSIX request logic for RDMA driver. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Allow PHY settings on multi-function or NPAR PFs if allowed by FW. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Add async. event logic for PHY configuration changes. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Refactor the initialization of the ethtool link settings. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Skip disabling autoneg before PHY loopback when appropriate. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Assign more RSS context resources to the VFs. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Initialize context memory to the value specified by firmware. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Fix suspend/resume path on 57500 chips (Vasundhara Volam) [Orabug: 31600665]
- bnxt_en: Send FUNC_RESOURCE_QCAPS command in bnxt_resume() (Vasundhara Volam) [Orabug: 31600665]
- bnxt_en: Combine 2 functions calling the same HWRM_DRV_RGTR fw command. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Do driver unregister cleanup in bnxt_init_one() failure path. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Disable/enable Bus master during suspend/resume. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Add chip IDs for 57452 and 57454 chips. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Improve RX buffer error handling. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Update firmware interface spec to 1.10.1.12. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Call bnxt_ulp_stop()/bnxt_ulp_start() during suspend/resume. (Pavan Chebbi) [Orabug: 31600665]
- bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. (Michael Chan) [Orabug: 31600665]
- bnxt_en: Update firmware interface spec. to 1.10.0.100. (Michael Chan) [Orabug: 31600665]

[4.14.35-2025.400.5.el7uek]
- PCI: vmd: Filter resource type bits from shadow register (Jon Derrick) [Orabug: 31688061]
- PCI: vmd: Add device id for VMD device 8086:9A0B (Jon Derrick) [Orabug: 31688061]
- PCI: vmd: Fix shadow offsets to reflect spec changes (Jon Derrick) [Orabug: 31688061]
- PCI: vmd: Fix config addressing when using bus offsets (Jon Derrick) [Orabug: 31688061]
- PCI/VMD: Configure MPS settings before adding devices (Jon Derrick) [Orabug: 31688061]
- PCI: vmd: Add an additional VMD device id to driver device id table (Jon Derrick) [Orabug: 31688061]
- PCI: vmd: Add offset to bus numbers if necessary (Jon Derrick) [Orabug: 31688061]
- PCI: vmd: Assign membar addresses from shadow registers (Jon Derrick) [Orabug: 31688061]
- PCI: Add Intel VMD devices to pci ids (Jon Derrick) [Orabug: 31688061]
- Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy) [Orabug: 31358098]
- certs: Remove Oracle cert compiled into the kernel (Eric Snowberg) [Orabug: 31555616]
- net: dsa: Do not leave DSA master with NULL netdev_ops (Allen Pais) [Orabug: 31658286]
- uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp) [Orabug: 29251777]
- vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora) [Orabug: 31663630] {CVE-2020-12888} {CVE-2020-12888}
- rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry) [Orabug: 31648240]
- octeontx2-serdes: Fix compile error (Dave Kleikamp) [Orabug: 31649691]
- uek-rpm: config updates for SDK-10.3.3.0-PR8 kernel patches (Dave Kleikamp) [Orabug: 31649691]
- hwrng: cavium: Check health status while reading random data (Sunil Goutham) [Orabug: 31649691]
- octeontx2-af: Debugfs entry to show mapping btw CGX, NIX and a PF. (Rakesh Babu) [Orabug: 31649691]
- octeontx2-serdes: Fix prbs error reporting (Chandrakala Chavva) [Orabug: 31649691]
- drivers:cpt - add support for CPT1 in VF driver (Srujana Challa) [Orabug: 31649691]
- octeontx2-af: Add support for CPT1 in debugfs (Srujana Challa) [Orabug: 31649691]
- drivers: cpt - add support for microcode load on CPT1 (Srujana Challa) [Orabug: 31649691]
- octeontx2-af: Mbox changes for 98xx CPT block (Srujana Challa) [Orabug: 31649691]
- octeontx2-af: Fix REE error handling (Smadar Fuks) [Orabug: 31649691]
- octeontx2-af: Update SDP AF driver to handle multiple SDP blocks (Radha Mohan Chintakuntla) [Orabug: 31649691]
- soc: octeontx2: Add SDP PF driver (Radha Mohan Chintakuntla) [Orabug: 31649691]
- octeontx2: marvell: Add driver support for LLC lock and unlock (Bhaskara Budiredla) [Orabug: 31649691]
- octeontx2-af: fix DMAC filter table corruption (Sunil Kumar Kori) [Orabug: 31649691]
- octeontx2-af: Add new Mbox messages and handlers for new REE blocks (Smadar Fuks) [Orabug: 31649691]
- octeontx2-af: Introducing REE block for 98xx (Smadar Fuks) [Orabug: 31649691]
- octeontx2-af: Enable PF BCAST entry for packet replication (Subbaraya Sundeep) [Orabug: 31649691]
- octeontx2-serdes: Update PRBS APIs to start/stop per QLM lane (Chandrakala Chavva) [Orabug: 31649691]
- CIFS: dump IPC tcon in debug proc file (Aurelien Aptel) [Orabug: 31540174]
- CIFS: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (Aurelien Aptel) [Orabug: 31540174]
- CIFS: make IPC a regular tcon (Aurelien Aptel) [Orabug: 31540174]
- CIFS: don't log STATUS_NOT_FOUND errors for DFS (Aurelien Aptel) [Orabug: 31540174]
- efi: Restrict efivar_ssdt_load when the kernel is locked down (Matthew Garrett) [Orabug: 31643407] {CVE-2019-20908}
- uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling) [Orabug: 30647041]
- IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi) [Orabug: 31631530]
- uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy) [Orabug: 31644908]
- Revert "mm/vmscan.c: prevent useless kswapd loops" (John Donnelly) [Orabug: 31625172]

[4.14.35-2025.400.4.el7uek]
- ocfs2: change slot number type s16 to u16 (Junxiao Bi) [Orabug: 31480604]
- ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi) [Orabug: 31480604]
- ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi) [Orabug: 31480604]
- ocfs2: load global_inode_alloc (Junxiao Bi) [Orabug: 31480604]
- ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi) [Orabug: 31480604]
- dm cache: submit writethrough writes in parallel to origin and cache (Mike Snitzer) [Orabug: 31397438]
- nvme: Assign subsys instance from first ctrl (Keith Busch) [Orabug: 31315361]
- kvm/vmx: Add dy_apicv_has_pending_interrupt op. (Boris Ostrovsky) [Orabug: 31602225]
- x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck) [Orabug: 31606253]
- qla2xxx: Pick up missing hunk from original patch (Quinn Tran) [Orabug: 31607567]
- byteorder: Move {cpu_to_be32, be32_to_cpu}_array() from Thunderbolt to core (Mika Westerberg) [Orabug: 31607567]
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter) [Orabug: 31607567]
- scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner) [Orabug: 31607567]
- scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner) [Orabug: 31607567]
- scsi: qla2xxx: Remove an unused function (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan) [Orabug: 31607567]
- scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan) [Orabug: 31607567]
- scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan) [Orabug: 31607567]
- scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan) [Orabug: 31607567]
- scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko) [Orabug: 31607567]
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King) [Orabug: 31607567]
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi) [Orabug: 31607567]
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix regression warnings (Nilesh Javali) [Orabug: 31607567]
- scsi: qla2xxx: Remove non functional code (Daniel Wagner) [Orabug: 31607567]
- scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi) [Orabug: 31607567]
- scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu) [Orabug: 31607567]
- scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi) [Orabug: 31607567]
- scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Fix RDP respond data format (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: add more FW debug information (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez) [Orabug: 31607567]
- scsi: qla2xxx: fix FW resource count values (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez) [Orabug: 31607567]
- scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez) [Orabug: 31607567]
- scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez) [Orabug: 31607567]
- scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali) [Orabug: 31607567]
- scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali) [Orabug: 31607567]
- scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Fix RDP response size (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix fw options handle eh_bus_reset() (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Use correct number of vectors for online CPUs (Ming Lei) [Orabug: 31607567]
- scsi: qla2xxx: Fix stalled relogin (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Fix kernel crash due to late workqueue allocation (himanshu.madhani@cavium.com) [Orabug: 31607567]
- scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko) [Orabug: 31607567]
- scsi: qla2xxx: Fix issue with adapter's stopping state (Viacheslav Dubeyko) [Orabug: 31607567]
- scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne) [Orabug: 31607567]
- scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck) [Orabug: 31607567]
- scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck) [Orabug: 31607567]
- scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Fix RIDA Format-2 (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Consolidate fabric scan (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Correct fcport flags handling (Shyam Sundar) [Orabug: 31607567]
- scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran) [Orabug: 31607567]
- qla2xxx: Update driver version to 10.01.00.22.81.1-k (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Use common routine to free fcport struct (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (Joe Carnuccio) [Orabug: 31607567]
- scsi: qla2xxx: Fix update_fcport for current_topology (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Cleanup unused async_logout_done (Shyam Sundar) [Orabug: 31607567]
- scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar) [Orabug: 31607567]
- scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Allow PLOGI in target mode (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Don't defer relogin unconditonally (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Send Notify ACK after N2N PLOGI (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Configure local loop for N2N target (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Use explicit LOGO in target mode (Quinn Tran) [Orabug: 31607567]
- scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Initialize free_work before flushing it (Roman Bolshakov) [Orabug: 31607567]
- scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (Roman Bolshakov) [Orabug: 31607567]
- Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails" (Martin K. Petersen) [Orabug: 31607567]
- scsi: qla2xxx: Fix memory leak when sending I/O fails (Arun Easi) [Orabug: 31607567]
- scsi: qla2xxx: Modify NVMe include directives (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Change a stack variable into a static const variable (Bart Van Assche) [Orabug: 31607567]
- scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (Himanshu Madhani) [Orabug: 31607567]
- scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Bill Kuzeja) [Orabug: 31607567]

[4.14.35-2025.400.3.el7uek]
- psi: Fix double free (Tom Hromatka) [Orabug: 31595120]
- tools/power turbostat: Support Ice Lake server (Thomas Tai) [Orabug: 31543222]
- uek-rpm: config updates for SDK-10.3.3.0-PR6 kernel patches (Dave Kleikamp) [Orabug: 31590716]
- uek-rpm: Update aarch64 UEK5 config files with "make olddefconfig" (Dave Kleikamp) [Orabug: 31590716]
- octeontx2-af: Add CUSTOM0 to flow keyx algo (Kiran Kumar K) [Orabug: 31590716]
- octeontx2-pf: Stop tx queues in case of subsequent calls failure (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: Increase mbox response timeout to 3 seconds (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: Fix nix_inline_ipsec_cfg mailbox (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Update CPT_LF_ALLOC mbox (Srujana Challa) [Orabug: 31590716]
- drivers: cpt - remove notify_group_change (Srujana Challa) [Orabug: 31590716]
- octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla) [Orabug: 31590716]
- octeontx2-af: Do not change maximum NPC interfaces (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: Calculate LBK link correctly (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Display NIX1 also in debugfs (Rakesh Babu) [Orabug: 31590716]
- octeontx2-af: Add NIX1 interfaces to NPC (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Get block address from slot number (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Mbox changes for 98xx (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Assign NIX block addresses (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Add new REE blocks to AF (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2: gti: Fix task stack pointer corruption (Bharat Bhushan) [Orabug: 31590716]
- octeontx2-af: Fix cpt_rd_wr_register mailbox (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: Fix TCP/UDP checksum offload for IPv6 pkts (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-pf: Add ntuple filter support for FDSA (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: Add flow steering support for FDSA tag (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla) [Orabug: 31590716]
- octeontx2: gti: restore gpr x29 for kernel context (Bharat Bhushan) [Orabug: 31590716]
- drivers: spi: octeontx2: Add 95MM LOKI 98xx in supported SUBSID (Suneel Garapati) [Orabug: 31590716]
- drivers: spi: Use rcvd_present instead of MIDR check (Suneel Garapati) [Orabug: 31590716]
- octeontx2: gti: fix return to ATF after handling nmi (Bharat Bhushan) [Orabug: 31590716]
- octeontx2-af: Fix MSIX handler mailbox (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Setup MCE context for assigned NIX (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Map NIX block from CGX connection (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Return assigned NIX/CPT block address (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Initialize NIX1 block (Rakesh Babu) [Orabug: 31590716]
- octeontx2-af: Add support for NIX1, CPT1 and NDC_NIX1 (Rakesh Babu) [Orabug: 31590716]
- octeontx2-af: Update get_rsrc_map for new blocks (Subbaraya Sundeep) [Orabug: 31590716]
- drivers: marvell: otx2-sdei-ghes: Set GHES block_status correctly. (Rick Farrington) [Orabug: 31590716]
- drivers: marvell: otx2-sdei-ghes: Add misc documentation. (Rick Farrington) [Orabug: 31590716]
- crypto: cpt - fixed build issue with cpt driver as module (Srujana Challa) [Orabug: 31590716]
- arm64: enable workaround for Marvell erratum 37119 in Kconfig (Naveen Mamindlapalli) [Orabug: 31590716]
- octeontx2-rm: remove unused cpt_cur (Stefan Chulski) [Orabug: 31590716]
- octeontx2-af: Reduce dependency on firmware command interface version (Linu Cherian) [Orabug: 31590716]
- octeontx2-af: Synchronize mcam rule list ops (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: Add XDP support to RVU PF driver (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: Disable default NPC entries properly (Subbaraya Sundeep) [Orabug: 31590716]
- crypto:cpt - get HW capabilities using LOAD_FVC op (SrujanaChalla) [Orabug: 31590716]
- octeontx2-af: support for custom L2 header (Satheesh Paul A) [Orabug: 31590716]
- gpio: thunderx: Configure pin function at probe (Michal Mazur) [Orabug: 31590716]
- gpio: thunderx: avoid potential deadlock (Peter Swain) [Orabug: 31590716]
- fs: pstore: ram: WriteBack cache before reset (Lukasz Majczak) [Orabug: 31590716]
- crypto:cpt - rename ucode tarfile names as per cpt revision (SrujanaChalla) [Orabug: 31590716]
- crypto: cpt - remove verification of PCI subsystem ID (SrujanaChalla) [Orabug: 31590716]
- crypto:cpt - fixed DMA fault with kernel crypto tests (SrujanaChalla) [Orabug: 31590716]
- crypto:cpt - fixed cleanup for inline IPsec RX LF cfg (SrujanaChalla) [Orabug: 31590716]
- marvell/zip : OcteonTX and OcteonTX2 ZIP Virtual Function driver (Akash Saxena) [Orabug: 31590716]
- pci: octeontx2: Limit config space writes errata workaround to older silicons (Sunil Goutham) [Orabug: 31590716]
- drivers: spi: octeontx2: Add fix for hw issue (Suneel Garapati) [Orabug: 31590716]
- drivers: spi: octeontx2: use read after write for MPI_CFG (Suneel Garapati) [Orabug: 31590716]
- drivers: spi: octeontx2: set tritx in config register (Suneel Garapati) [Orabug: 31590716]
- spi-nor: Enable 4B opcodes for various flashes (Guo Yi) [Orabug: 31590716]
- drivers: mtd: spi-nor: update 4B_OPCODES flag for n25q00 and mx66l1g45g (Suneel Garapati) [Orabug: 31590716]
- octeontx2-af: add parser support for Forward DSA (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: wait for tx link idle for credits change (Nithin Dabilpuram) [Orabug: 31590716]
- octeontx2-af: clear sw xoff before flush (Nithin Dabilpuram) [Orabug: 31590716]
- octeontx2-af: enable tx shaping feature for 96xx C0 (Nithin Dabilpuram) [Orabug: 31590716]
- octeontx2-af: Disable SMQ sticky mode to avoid NIX PSE deadlock (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: Setup edge used for GPIO timing (Michal Mazur) [Orabug: 31590716]
- octeontx2-af: Update NIX_TXSCHQ_CONFIG mbox to handle read request (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-pf: Fix memory double free in otx2_aura_pool_free (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-af: Update dmac field in vf vlan rule (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-pf: Remove unnecessary mbox request in unbind (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: Simplify npc_set_pkind mbox handler (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: Reset HW config done to parse switch headers in FLR (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: modify default cpt limits (SrujanaChalla) [Orabug: 31590716]
- octeontx2-af: Update tx parse nibble config (Hariprasad Kelam) [Orabug: 31590716]
- octeontx2-af: fix compilation warning (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-af: add support for custom KPU entries (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-af: prepare for custom KPU profiles (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-af: fix memory leaks on probe failure (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-af: fix LD CUSTOM LTYPE aliasing (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-pf: Don't configure RSS context when interface is down (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Set SMQ MAXLEN to max hardware supported value (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: fix detection of IP layer (Michal Mazur) [Orabug: 31590716]
- octeontx2-pf: Fix flow control support for LBK devices (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Implement cgx stat rst (Revital Regev) [Orabug: 31590716]
- octeontx2-af: Allow to configure flow tag LSB byte as RSS adder (Jerin Jacob) [Orabug: 31590716]
- octeontx2-af: fix missing blocks quota validation (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-af: Fix rvu_reg_poll() to poll reg atleast twice (Sunil Goutham) [Orabug: 31590716]
- crypto: cpt - allow cpt_af_lfx_ctl2 register access to vf (Tejasree Kondoj) [Orabug: 31590716]
- octeontx2-af: Cleanup nixlf and blkaddr retrieval logic (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Restore RSS and pause frame config settings (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Fix netdev watchdog timeout value (Sunil Goutham) [Orabug: 31590716]
- octeontx2-af: extend RSS supported offload types (Kiran Kumar K) [Orabug: 31590716]
- octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: Put CGX LMAC also in Higig2 mode (hariprasad) [Orabug: 31590716]
- octeontx2-pf: Reset HW config for HIGIG/EDSA in driver unbind (hariprasad) [Orabug: 31590716]
- octeontx2-pf: Remove multisegment RX_SG processing logic (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Allocate receive buffers of MTU size (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli) [Orabug: 31590716]
- octeontx2-af: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli) [Orabug: 31590716]
- octeontx2-pf: Do not set num_msgs in mbox header (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: Use mutex for mbox locking (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: update vlan offload rule (hariprasad) [Orabug: 31590716]
- octeontx2-af: Handle pfvf mac address changes (hariprasad) [Orabug: 31590716]
- octeontx2-pf: Set default RR_QUANTUM for transmit scheduling levels (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: Adjust pause frame time and interval (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Use likely and unlikely (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Process CQE_TX first and then CQE_RX (Sunil Goutham) [Orabug: 31590716]
- octeontx2-pf: Discover NIX block address from RVUM (Subbaraya Sundeep) [Orabug: 31590716]
- octeontx2-pf: Flush pending SQE on teardown (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-pf: Remove warning messages in fast path (Geetha sowjanya) [Orabug: 31590716]
- octeontx2-af: Undo PTP NPC config in FLR (Harman Kalra) [Orabug: 31590716]
- octeontx2-rm: remove CPT LF resource management (Vidya Velumuri) [Orabug: 31590716]
- octeontx2-serdes: Add gserr and gserc eye display (Tomasz Michalec) [Orabug: 31590716]
- octeontx2-serdes: Add CONFIG_OCTEONTX_SERDES (Tomasz Michalec) [Orabug: 31590716]
- octeontx2-dpi: Add MRRS and MPS configuration to dpi driver. (Subrahmanyam Nilla) [Orabug: 31590716]
- octeontx2: gti: Enable GTI wdog for non-VHE Linux (Bharat Bhushan) [Orabug: 31590716]
- octeontx2-serdes: Check SVC UUID on module init (Tomasz Michalec) [Orabug: 31590716]
- edac: octeontx2: RAS error-injection (Rick Farrington) [Orabug: 31590716]
- drivers: marvell: octeontx2: add support for GHES (Rick Farrington) [Orabug: 31590716]
- octeontx2-serdes: Implement PRBS command (Tomasz Michalec) [Orabug: 31590716]
- octeontx2-dpi: fix compilation warnings (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-rm: fix compilation warning (Stanislaw Kardach) [Orabug: 31590716]
- octeontx2-serdes: Handle not implemented SMC (Tomasz Michalec) [Orabug: 31590716]
- octeontx2: PCI Console driver: fix initialization WARNing (Rick Farrington) [Orabug: 31590716]
- octeontx2-serdes: Fix settings write return code (Tomasz Michalec) [Orabug: 31590716]
- octeontx2: fixup PCI Remote Console driver shutdown function (Dave Aldridge) [Orabug: 31590716]
- octeontx2: add OcteonTX2 PCI Console driver (Rick Farrington) [Orabug: 31590716]
- Revert "octeontx2: add OcteonTX2 PCI Remote Console driver" (Dave Kleikamp) [Orabug: 31590716]
- Revert "octeontx2: fixup PCI Remote Console driver shutdown function" (Dave Kleikamp) [Orabug: 31590716]
- octeontx2: gti: Start wdog timer on online cpus (Bharat Bhushan) [Orabug: 31590716]
- octeontx2-serdes: Add serdes diagnostic commands (Tomasz Michalec) [Orabug: 31590716]
- proc: publish no of macs in octeontx_info node (Sujeet Baranwal) [Orabug: 31590716]
- arm64: Disable UNMAP_KERNEL_AT_EL0 when enable GTI WDOG (Bharat Bhushan) [Orabug: 31590716]
- arm64: Add workaround for Marvell erratum 37119 (Andrew Pinski) [Orabug: 31590716]
- x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser) [Orabug: 31557901] {CVE-2020-10768}

[4.14.35-2025.400.2.el7uek]
- vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [Orabug: 31439669] {CVE-2020-12888}
- vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [Orabug: 31439669] {CVE-2020-12888} {CVE-2020-12888}
- vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson) [Orabug: 31439669] {CVE-2020-12888}
- vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [Orabug: 31439669] {CVE-2020-12888}
- vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [Orabug: 31439669] {CVE-2020-12888}
- scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 31526089]
- thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne) [Orabug: 31564727]
- thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne) [Orabug: 31564727]
- dtrace: ensure that fatal signals trigger signal-handle probes (Kris Van Hees) [Orabug: 31398827] [Orabug: 31562416]
- x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas) [Orabug: 31515070]
- x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas) [Orabug: 31515070]
- x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas) [Orabug: 31515070]
- KVM: arm/arm64: Fixup the kvm_exit tracepoint (Christoffer Dall) [Orabug: 31510089]
- acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld) [Orabug: 31493186]
- tcp: implement coalescing on backlog queue (Eric Dumazet) [Orabug: 31419400]
- tcp: drop dst in tcp_add_backlog() (Eric Dumazet) [Orabug: 31419400]
- bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann) [Orabug: 31419400]
- media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost) [Orabug: 31351670] {CVE-2019-19054}
- dtrace: recursion in dtrace_dynvar() can lead to out-of-stack crash (Kris Van Hees) [Orabug: 31481801]

[4.14.35-2025.400.1.el7uek]
- Linux 4.14.184 (Greg Kroah-Hartman)
- uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned (Oleg Nesterov)
- iio: vcnl4000: Fix i2c swapped word reading. (Mathieu Othacehe)
- x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)
- nvmem: qfprom: remove incorrect write support (Srinivas Kandagatla)
- CDC-ACM: heed quirk also in error handling (Oliver Neukum)
- staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (Pascal Terjan)
- tty: hvc_console, fix crashes on parallel open/close (Jiri Slaby)
- vt: keyboard: avoid signed integer overflow in k_ascii (Dmitry Torokhov)
- usb: musb: Fix runtime PM imbalance on error (Dinghao Liu)
- usb: musb: start session in resume for host port (Bin Liu)
- USB: serial: option: add Telit LE910C1-EUX compositions (Daniele Palmas)
- USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (Bin Liu)
- USB: serial: qcserial: add DW5816e QDL support (Matt Jolly)
- l2tp: add sk_family checks to l2tp_validate_socket (Eric Dumazet)
- net: check untrusted gso_size at kernel entry (Willem de Bruijn)
- vsock: fix timeout in vsock_accept() (Stefano Garzarella)
- NFC: st21nfca: add missed kfree_skb() in an error path (Chuhong Yuan)
- net: usb: qmi_wwan: add Telit LE910C1-EUX composition (Daniele Palmas)
- l2tp: do not use inet_hash()/inet_unhash() (Eric Dumazet)
- devinet: fix memleak in inetdev_init() (Yang Yingliang)
- airo: Fix read overflows sending packets (Dan Carpenter)
- scsi: ufs: Release clock if DMA map fails (Can Guo)
- mmc: fix compilation of user API (Jérôme Pouiller)
- kernel/relay.c: handle alloc_percpu returning NULL in relay_open (Daniel Axtens)
- p54usb: add AirVasT USB stick device-id (Giuseppe Marco Randazzo)
- HID: i2c-hid: add Schneider SCL142ALM to descriptor override (Julian Sax)
- HID: sony: Fix for broken buttons on DS3 USB dongles (Scott Shumate)
- net: smsc911x: Fix runtime PM imbalance on error (Dinghao Liu)
- net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x (Jonathan McDowell)
- net/ethernet/freescale: rework quiesce/activate for ucc_geth (Valentin Longchamp)
- net: bmac: Fix read of MAC address from ROM (Jeremy Kerr)
- x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables (Nathan Chancellor)
- i2c: altera: Fix race between xfer_msg and isr thread (Atsushi Nemoto)
- ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT (Vineet Gupta)
- ARC: Fix ICCM & DCCM runtime size checks (Eugeniy Paltsev)
- pppoe: only process PADT targeted at local interfaces (Guillaume Nault)
- s390/ftrace: save traced function caller (Vasily Gorbik)
- spi: dw: use "smp_mb()" to avoid sending spi data error (Xinwei Kong)
- scsi: hisi_sas: Check sas_port before using it (Xiang Chen)
- libnvdimm: Fix endian conversion issues  (Aneesh Kumar K.V)
- scsi: scsi_devinfo: fixup string compare (Hannes Reinecke)
- Linux 4.14.183 (Greg Kroah-Hartman)
- scsi: zfcp: fix request object use-after-free in send path causing wrong traces (Benjamin Block)
- genirq/generic_pending: Do not lose pending affinity update (Thomas Gleixner)
- net: hns: Fixes the missing put_device in positive leg for roce reset (Salil Mehta)
- net: hns: fix unsigned comparison to less than zero (Colin Ian King)
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (David Howells)
- sc16is7xx: move label 'err_spi' to correct section (Guoqing Jiang)
- mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() (Liviu Dudau)
- netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build (Pablo Neira Ayuso)
- bonding: Fix reference count leak in bond_sysfs_slave_add. (Qiushi Wu)
- qlcnic: fix missing release in qlcnic_83xx_interrupt_test. (Qiushi Wu)
- esp6: get the right proto for transport mode in esp6_gso_encap (Xin Long)
- netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code (Pablo Neira Ayuso)
- netfilter: nfnetlink_cthelper: unbreak userspace helper support (Pablo Neira Ayuso)
- netfilter: ipset: Fix subcounter update skip (Phil Sutter)
- netfilter: nft_reject_bridge: enable reject with bridge vlan (Michael Braun)
- ip_vti: receive ipip packet by calling ip_tunnel_rcv (Xin Long)
- vti4: eliminated some duplicate code. (Jeremy Sowden)
- xfrm: fix error in comment (Antony Antony)
- xfrm: fix a NULL-ptr deref in xfrm_local_error (Xin Long)
- xfrm: fix a warning in xfrm_policy_insert_list (Xin Long)
- xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output (Xin Long)
- xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input (Xin Long)
- copy_xstate_to_kernel(): don't leave parts of destination uninitialized (Al Viro)
- x86/dma: Fix max PFN arithmetic overflow on 32 bit systems (Alexander Dahl)
- mac80211: mesh: fix discovery timer re-arming issue / crash (Linus Lüssing)
- parisc: Fix kernel panic in mem_init() (Helge Deller)
- iommu: Fix reference count leak in iommu_group_alloc. (Qiushi Wu)
- include/asm-generic/topology.h: guard cpumask_of_node() macro argument (Arnd Bergmann)
- fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)
- mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (Konstantin Khlebnikov)
- libceph: ignore pool overlay and cache logic on redirects (Jerry Lee)
- ALSA: hda/realtek - Add new codec supported for ALC287 (Kailang Yang)
- exec: Always set cap_ambient in cap_bprm_set_creds (Eric W. Biederman)
- ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (Chris Chiu)
- ALSA: hwdep: fix a left shifting 1 by 31 UB bug (Changming Liu)
- RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (Qiushi Wu)
- mmc: block: Fix use-after-free issue for rpmb (Peng Hao)
- ARM: dts: bcm2835-rpi-zero-w: Fix led polarity (Vincent Stehlé)
- ARM: dts/imx6q-bx50v3: Set display interface clock parents (Robert Beckett)
- ARM: dts: imx6q-bx50v3: Add internal switch (Sebastian Reichel)
- IB/qib: Call kobject_put() when kobject_init_and_add() fails (Kaike Wan)
- gpio: exar: Fix bad handling for ida_simple_get error path (Takashi Iwai)
- ARM: uaccess: fix DACR mismatch with nested exceptions (Russell King)
- ARM: uaccess: integrate uaccess_save and uaccess_restore (Russell King)
- ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h (Russell King)
- ARM: 8843/1: use unified assembler in headers (Stefan Agner)
- Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (Wei Yongjun)
- Input: synaptics-rmi4 - really fix attn_data use-after-free (Evan Green)
- Input: i8042 - add ThinkPad S230u to i8042 reset list (Kevin Locke)
- Input: dlink-dir685-touchkeys - fix a typo in driver name (Christophe JAILLET)
- Input: xpad - add custom init packet for Xbox One S controllers (Łukasz Patron)
- Input: evdev - call input_flush_device() on release(), not flush() (Brendan Shanks)
- Input: usbtouchscreen - add support for BonXeon TP (James Hilliard)
- samples: bpf: Fix build error (Matteo Croce)
- cifs: Fix null pointer check in cifs_read (Steve French)
- net: freescale: select CONFIG_FIXED_PHY where needed (Arnd Bergmann)
- usb: gadget: legacy: fix redundant initialization warnings (Masahiro Yamada)
- cachefiles: Fix race between read_waiter and read_copier involving op->to_do (Lei Xue)
- gfs2: move privileged user check to gfs2_quota_lock_check (Bob Peterson)
- net: microchip: encx24j600: add missed kthread_stop (Chuhong Yuan)
- gpio: tegra: mask GPIO IRQs during IRQ shutdown (Stephen Warren)
- ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi (Johan Jonker)
- arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node (Johan Jonker)
- ARM: dts: rockchip: fix phy nodename for rk3228-evb (Johan Jonker)
- net/mlx4_core: fix a memory leak bug. (Qiushi Wu)
- net: sun: fix missing release regions in cas_init_one(). (Qiushi Wu)
- net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (Manivannan Sadhasivam)
- net/mlx5e: Update netdev txq on completions during closure (Moshe Shemesh)
- sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (Jere Leppänen)
- r8152: support additional Microsoft Surface Ethernet Adapter variant (Marc Payne)
- net sched: fix reporting the first-time use timestamp (Roman Mashak)
- net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" (Yuqi Jin)
- net/mlx5: Add command entry handling completion (Moshe Shemesh)
- net: ipip: fix wrong address family in init error path (Vadim Fedorenko)
- ax25: fix setsockopt(SO_BINDTODEVICE) (Eric Dumazet)
- rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry) [Orabug: 31504053]
- mm: Fix mremap not considering huge pmd devmap (Fan Yang) [Orabug: 31452397] {CVE-2020-10757} {CVE-2020-10757}
- PCI/DPC: Add missing pci_dpc_init() to pci probe function (Thomas Tai) [Orabug: 31511974]
- selftests/bpf: do not run test_kmod.sh for UEK5 (Alan Maguire) [Orabug: 31357234]
- bpf: do not allow root to mangle valid pointers (Alexei Starovoitov) [Orabug: 31357234]
- selftests/bpf: fix invalid bit operation to verify tcpbpf events (Alan Maguire) [Orabug: 31357234]
- net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon) [Orabug: 31501437]
- RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon) [Orabug: 31323839]
- RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe) [Orabug: 31323839]
- RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg) [Orabug: 31323839]
- KVM: VMX: check descriptor table exits on instruction emulation (Oliver Upton) [Orabug: 31481335]
- Revert "rds: Introduce rds_conn_to_path helper" (Håkon Bugge) [Orabug: 31476448]
- Revert "rds: Do not cancel RDMAs that have been posted to the HCA" (Håkon Bugge) [Orabug: 31476448]
- Revert "rds: Three cancel fixes" (Håkon Bugge) [Orabug: 31476448]