Oracle Linux 6265 Published by

An unbreakable Enterprise kernel-container security update has been released for Oracle Linux 7.



El-errata: ELSA-2021-9406 Important: Oracle Linux 7 Unbreakable Enterprise kernel-container security update


Oracle Linux Security Advisory ELSA-2021-9406

  http://linux.oracle.com/errata/ELSA-2021-9406.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-container-5.4.17-2102.204.4.2.el7.x86_64.rpm
kernel-uek-container-debug-5.4.17-2102.204.4.2.el7.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-container-5.4.17-2102.204.4.2.el7.src.rpm

Related CVEs:

CVE-2020-14304
CVE-2020-24586
CVE-2020-24587
CVE-2020-24588
CVE-2020-26141
CVE-2020-26145
CVE-2020-26147
CVE-2021-23134
CVE-2021-33909
CVE-2021-3564



Description of changes:

[5.4.17-2102.204.4.2.el7]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447]

[5.4.17-2102.204.4.1.el7]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150427]
- arm64: mm: kdump: Fix /proc/kcore (Henry Willard) [Orabug: 32570847]

[5.4.17-2102.204.4.el7]
- Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy) [Orabug: 33167303]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le) [Orabug: 33165876]
- A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33161268]
- rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge) [Orabug: 33104687]

[5.4.17-2102.204.3.el7]
- rds: Check for illegal flags when creating an MR (Håkon Bugge) [Orabug: 33144338]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen) [Orabug: 33135632] {CVE-2021-33909}

[5.4.17-2102.204.2.el7]
- RDMA/core/sa_query: Remove unused argument (Håkon Bugge) [Orabug: 33113136]
- RDMA/cma: Fix incorrect Packet Lifetime calculation (Håkon Bugge) [Orabug: 33113136]
- RDMA: Remove a few extra calls to ib_get_client_data() (Jason Gunthorpe) [Orabug: 33113136]
- RDMA/cma: Protect RMW with qp_mutex (Håkon Bugge) [Orabug: 33113136]
- IB/cma: Introduce rdma_set_min_rnr_timer() (Håkon Bugge) [Orabug: 33113136]
- RDMA/iwcm: Allow AFONLY binding for IPv6 addresses (Bernard Metzler) [Orabug: 33113136]
- RDMA/cma: Remove unnecessary INIT->INIT transition (Håkon Bugge) [Orabug: 33113136]
- RDMA/cma: Use ACK timeout for RoCE packetLifeTime (Dag Moxnes) [Orabug: 33113136]
- crypto: ccp - Don't initialize SEV support without the SEV feature (Venu Busireddy) [Orabug: 33110762]
- xfs: fix out of bound access (Junxiao Bi) [Orabug: 33089469]
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan) [Orabug: 33042746]
- PCI/ERR: Retain status from error notification (Keith Busch) [Orabug: 32995246]
- perf maps: Do not use an rbtree to sort by map name (Arnaldo Carvalho de Melo) [Orabug: 32726674]
- block: return the correct bvec when checking for gaps (Long Li) [Orabug: 33000789]

[5.4.17-2102.204.1.el7]
- LTS tag: v5.4.128 (Jack Vogel)
- ARM: OMAP: replace setup_irq() by request_irq() (afzal mohammed)
- KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read (Eric Auger)
- tools headers UAPI: Sync linux/in.h copy with the kernel sources (Arnaldo Carvalho de Melo)
- net: fec_ptp: add clock rate zero check (Fugang Duan)
- net: stmmac: disable clocks in stmmac_remove_config_dt() (Joakim Zhang)
- mm/slub.c: include swab.h (Andrew Morton)
- mm/slub: fix redzoning for small allocations (Kees Cook)
- mm/slub: clarify verification reporting (Kees Cook)
- net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)
- net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)
- net: ll_temac: Fix TX BD buffer overwrite (Esben Haabendal)
- net: ll_temac: Make sure to free skb when it is completely used (Esben Haabendal)
- drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. (Yifan Zhang)
- drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. (Yifan Zhang)
- cfg80211: avoid double free of PMSR request (Avraham Stern)
- cfg80211: make certificate generation more robust (Johannes Berg)
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)
- x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)
- x86/pkru: Write hardware init value to PKRU when xstate is init (Thomas Gleixner)
- x86/process: Check PF_KTHREAD and not current->mm for kernel threads (Thomas Gleixner)
- ARCv2: save ABI registers across signal handling (Vineet Gupta)
- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (Sean Christopherson)
- PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)
- PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)
- PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohár)
- PCI: aardvark: Don't rely on jiffies while holding spinlock (Remi Pommarel)
- PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)
- PCI: Mark TI C667X to avoid bus reset (Antti Järvinen)
- tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))
- tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))
- tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))
- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)
- can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)
- can: j1939: fix Use-after-Free, hold skb ref while in use (Oleksij Rempel)
- can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)
- hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)
- radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)
- pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled (Sergio Paracuellos)
- spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() (Patrice Chotard)
- ASoC: rt5659: Fix the lost powers for the HDA header (Jack Yu)
- regulator: bd70528: Fix off-by-one for buck123 .n_voltages setting (Axel Lin)
- net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)
- icmp: don't send out ICMP messages with a source address of 0.0.0.0 (Toke Høiland-Jørgensen)
- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path (Somnath Kotur)
- bnxt_en: Rediscover PHY capabilities after firmware reset (Michael Chan)
- cxgb4: fix wrong shift. (Pavel Machek)
- net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)
- net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)
- be2net: Fix an error handling path in 'be_probe()' (Christophe JAILLET)
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)
- net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)
- net: fec_ptp: fix issue caused by refactor the fec_devtype (Joakim Zhang)
- net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)
- lantiq: net: fix duplicated skb in rx descriptor ring (Aleksander Jan Bajkowski)
- net: cdc_ncm: switch to eth%d interface naming (Maciej Żenczykowski)
- ptp: improve max_adj check against unreasonable values (Jakub Kicinski)
- net: qrtr: fix OOB Read in qrtr_endpoint_post (Pavel Skripkin)
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()' (Christophe JAILLET)
- qlcnic: Fix an error handling path in 'qlcnic_probe()' (Christophe JAILLET)
- net: make get_net_ns return error if NET_NS is disabled (Changbin Du)
- net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)
- alx: Fix an error handling path in 'alx_probe()' (Christophe JAILLET)
- sch_cake: Fix out of bounds when parsing TCP options and header (Maxim Mikityanskiy)
- netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)
- net/mlx5e: Block offload of outer header csum for UDP tunnels (Aya Levin)
- net/mlx5e: allow TSO on VXLAN over VLAN topologies (Davide Caratti)
- net/mlx5: Consider RoCE cap before init RDMA resources (Maor Gottlieb)
- net/mlx5e: Fix page reclaim for dead peer hairpin (Dima Chumak)
- net/mlx5e: Remove dependency in IPsec initialization flows (Huy Nguyen)
- net/sched: act_ct: handle DNAT tuple collision (Marcelo Ricardo Leitner)
- rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)
- udp: fix race between close() and udp_abort() (Paolo Abeni)
- net: lantiq: disable interrupt before sheduling NAPI (Aleksander Jan Bajkowski)
- net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)
- vrf: fix maximum MTU (Nicolas Dichtel)
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)
- batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)
- kvm: LAPIC: Restore guard to prevent illegal APIC register access (Jim Mattson)
- mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)
- afs: Fix an IS_ERR() vs NULL check (Dan Carpenter)
- dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)
- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)
- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)
- LTS tag: v5.4.127 (Jack Vogel)
- fib: Return the correct errno code (Zheng Yongjun)
- net: Return the correct errno code (Zheng Yongjun)
- net/x25: Return the correct errno code (Zheng Yongjun)
- rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)
- drm/amd/display: Allow bandwidth validation for 0 streams. (Bindu Ramamurthy)
- net: ipconfig: Don't override command-line hostnames or domains (Josh Triplett)
- nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)
- nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)
- nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V (Ewan D. Milne)
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally (Daniel Wagner)
- ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)
- scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)
- riscv: Use -mno-relax when using lld linker (Khem Raj)
- HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- gfs2: Prevent direct-I/O write fallback errors from getting lost (Andreas Gruenbacher)
- ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)
- drm/tegra: sor: Do not leak runtime PM reference (Pavel Machek (CIP))
- HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)
- HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)
- HID: multitouch: set Stylus suffix for Stylus-application devices, too (Ahelenia Ziemiańska)
- HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)
- HID: hid-input: add mapping for emoji picker key (Dmitry Torokhov)
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 (Nirenjan Krishnan)
- net: ieee802154: fix null deref in parse dev addr (Dan Robertson)
- LTS tag: v5.4.126 (Jack Vogel)
- proc: only require mm_struct for writing (Linus Torvalds)
- tracing: Correct the length check which causes memory corruption (Liangyan)
- ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)
- scsi: core: Fix failure handling of scsi_add_host_with_dma() (Ming Lei)
- scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo)
- NFSv4: Fix second deadlock in nfs4_evict_inode() (Trond Myklebust)
- NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)
- kvm: fix previous commit for 32-bit builds (Paolo Bonzini)
- perf session: Correct buffer copying when peeking events (Leo Yan)
- NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() (Trond Myklebust)
- NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel)
- KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message (Sean Christopherson)
- sched/fair: Make sure to update tg contrib for blocked load (Vincent Guittot)
- perf: Fix data race between pin_count increment/decrement (Marco Elver)
- vmlinux.lds.h: Avoid orphan section with !SMP (Nathan Chancellor)
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled (Shay Drory)
- RDMA/ipoib: Fix warning caused by destroying non-initial netns (Kamal Heib)
- usb: typec: mux: Fix copy-paste mistake in typec_mux_match (Bjorn Andersson)
- regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)
- regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)
- usb: fix various gadget panics on 10gbps cabling (Maciej Żenczykowski)
- usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej Żenczykowski)
- usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)
- USB: serial: cp210x: fix alternate function for CP2102N QFN20 (Stefan Agner)
- USB: serial: quatech2: fix control-request directions (Johan Hovold)
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)
- usb: typec: wcove: Use LE to CPU conversion when accessing msg->header (Andy Shevchenko)
- usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni)
- usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms (Kyle Tso)
- usb: f_ncm: only first packet of aggregate needs to start timer (Maciej Żenczykowski)
- USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej Żenczykowski)
- cgroup1: don't allow '\n' in renaming (Alexander Kuznetsov)
- btrfs: promote debugging asserts to full-fledged checks in validate_super (Nikolay Borisov)
- btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)
- staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)
- kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)
- drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)
- drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)
- spi: bcm2835: Fix out-of-bounds access with more than 4 slaves (Lukas Wunner)
- x86/boot: Add .text.* to setup.ld (Arvind Sankar)
- i2c: mpc: implement erratum A-004447 workaround (Chris Packham)
- i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)
- spi: Cleanup on failure of initial setup (Lukas Wunner)
- spi: Don't have controller clean up spi device before driver unbind (Saravana Kannan)
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)
- nvme-tcp: remove incorrect Kconfig dep in BLK_DEV_NVME (Sagi Grimberg)
- bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)
- dm verity: fix require_signatures module_param permissions (John Keeping)
- MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)
- nvme-fabrics: decode host pathing error for connect (Hannes Reinecke)
- net: dsa: microchip: enable phy errata workaround on 9567 (George McCollister)
- net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)
- net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)
- scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq (Yang Yingliang)
- scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)
- wq: handle VM suspension in stall detection (Sergey Senozhatsky)
- cgroup: disable controllers at parse time (Shakeel Butt)
- net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)
- netlink: disable IRQs for netlink_lock_table() (Johannes Berg)
- bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)
- isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)
- spi: sprd: Add missing MODULE_DEVICE_TABLE (Chunyan Zhang)
- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)
- vfio-ccw: Serialize FSM IDLE state with I/O completion (Eric Farman)
- ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet (Hans de Goede)
- ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet (Hans de Goede)
- usb: cdns3: Fix runtime PM imbalance on error (Dinghao Liu)
- net/nfc/rawsock.c: fix a permission check bug (Jeimon)
- spi: Fix spi device unregister flow (Saravana Kannan)
- ASoC: max98088: fix ni clock divider calculation (Marco Felsch)
- proc: Track /proc/$pid/attr/ opener mm_struct (Kees Cook)
- LTS tag: v5.4.125 (Jack Vogel)
- neighbour: allow NUD_NOARP entries to be forced GCed (David Ahern)
- i2c: qcom-geni: Suspend and resume the bus during SYSTEM_SLEEP_PM ops (Roja Rani Yarubandi)
- xen-pciback: redo VF placement in the virtual topology (Jan Beulich)
- lib/lz4: explicitly support in-place decompression (Gao Xiang)
- x86/kvm: Disable all PV features on crash (Vitaly Kuznetsov)
- x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov)
- x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov)
- KVM: arm64: Fix debug register indexing (Marc Zyngier)
- KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode (Sean Christopherson)
- btrfs: fix unmountable seed device after fstrim (Anand Jain)
- mm/filemap: fix storing to a THP shadow entry (Matthew Wilcox (Oracle))
- XArray: add xas_split (Matthew Wilcox (Oracle))
- XArray: add xa_get_order (Matthew Wilcox (Oracle))
- mm: add thp_order (Matthew Wilcox (Oracle))
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY (Mina Almasry)
- btrfs: fixup error handling in fixup_inode_link_counts (Josef Bacik)
- btrfs: return errors from btrfs_del_csums in cleanup_ref_head (Josef Bacik)
- btrfs: fix error handling in btrfs_del_csums (Josef Bacik)
- btrfs: mark ordered extent and inode with error if we fail to finish (Josef Bacik)
- drm/amdgpu: make sure we unpin the UVD BO (Nirmoy Das)
- drm/amdgpu: Don't query CE and UE errors (Luben Tuikov)
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski)
- ocfs2: fix data corruption by fallocate (Junxiao Bi)
- pid: take a reference when initializing `cad_pid` (Mark Rutland)
- usb: dwc2: Fix build in periphal-only mode (Phil Elwell)
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)
- ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators (Marek Vasut)
- ARM: dts: imx6dl-yapp4: Fix RGMII connection to QCA8334 switch (Michal Vokáč)
- ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx (Carlos M)
- ALSA: timer: Fix master timer notification (Takashi Iwai)
- HID: multitouch: require Finger field to mark Win8 reports as MT (Ahelenia Ziemiańska)
- HID: magicmouse: fix NULL-deref on disconnect (Johan Hovold)
- HID: i2c-hid: Skip ELAN power-on command after reset (Johnny Chuang)
- net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin)
- net: caif: fix memory leak in caif_device_notify (Pavel Skripkin)
- net: caif: add proper error handling (Pavel Skripkin)
- net: caif: added cfserl_release function (Pavel Skripkin)
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)
- Bluetooth: fix the erroneous flush_work() order (Lin Ma) {CVE-2021-3564}
- tipc: fix unique bearer names sanity check (Hoang Le)
- tipc: add extack messages for bearer/media failure (Hoang Le)
- bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act (Tony Lindgren)
- ARM: dts: imx: emcon-avari: Fix nxp,pca8574 #gpio-cells (Geert Uytterhoeven)
- ARM: dts: imx7d-pico: Fix the 'tuning-step' property (Fabio Estevam)
- ARM: dts: imx7d-meerkat96: Fix the 'tuning-step' property (Fabio Estevam)
- arm64: dts: zii-ultra: fix 12V_MAIN voltage (Lucas Stach)
- arm64: dts: ls1028a: fix memory node (Michael Walle)
- i40e: add correct exception tracing for XDP (Magnus Karlsson)
- i40e: optimize for XDP_REDIRECT in xsk path (Magnus Karlsson)
- i2c: qcom-geni: Add shutdown callback for i2c (Roja Rani Yarubandi)
- ice: Allow all LLDP packets from PF to Tx (Dave Ertman)
- ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared (Brett Creeley)
- ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions (Coco Li)
- ixgbevf: add correct exception tracing for XDP (Magnus Karlsson)
- ieee802154: fix error return code in ieee802154_llsec_getparams() (Wei Yongjun)
- ieee802154: fix error return code in ieee802154_add_iface() (Zhen Lei)
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (Pablo Neira Ayuso)
- netfilter: nft_ct: skip expectations for confirmed conntrack (Pablo Neira Ayuso)
- ACPICA: Clean up context mutex during object deletion (Erik Kaneda)
- net/sched: act_ct: Fix ct template allocation for zone 0 (Ariel Levkovich)
- HID: i2c-hid: fix format string mismatch (Arnd Bergmann)
- HID: pidff: fix error return code in hid_pidff_init() (Zhen Lei)
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service (Julian Anastasov)
- vfio/platform: fix module_put call in error flow (Max Gurtovoy)
- samples: vfio-mdev: fix error handing in mdpy_fb_probe() (Wei Yongjun)
- vfio/pci: zap_vma_ptes() needs MMU (Randy Dunlap)
- vfio/pci: Fix error return code in vfio_ecap_init() (Zhen Lei)
- efi: cper: fix snprintf() use in cper_dimm_err_location() (Rasmus Villemoes)
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (Heiner Kallweit)
- netfilter: conntrack: unregister ipv4 sockopts on error unwind (Florian Westphal)
- hwmon: (dell-smm-hwmon) Fix index values (Armin Wolf)
- nl80211: validate key indexes for cfg80211_registered_device (Anant Thazhemadam)
- ALSA: usb: update old-style static const declaration (Pierre-Louis Bossart)
- net: usb: cdc_ncm: don't spew notifications (Grant Grundler)
- btrfs: tree-checker: do not error out if extent ref hash doesn't match (Josef Bacik)
- LTS tag: v5.4.124 (Jack Vogel)
- usb: core: reduce power-on-good delay time of root hub (Chunfeng Yun)
- neighbour: Prevent Race condition in neighbour subsytem (Chinmay Agarwal)
- net: hso: bail out on interrupt URB allocation failure (Johan Hovold)
- Revert "Revert "ALSA: usx2y: Fix potential NULL pointer dereference"" (Greg Kroah-Hartman)
- net: hns3: check the return of skb_checksum_help() (Yunsheng Lin)
- drivers/net/ethernet: clean up unused assignments (Jesse Brandeburg)
- i915: fix build warning in intel_dp_get_link_status() (Greg Kroah-Hartman)
- drm/i915/display: fix compiler warning about array overrun (Linus Torvalds)
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c (Randy Dunlap)
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file (Randy Dunlap)
- sch_dsmark: fix a NULL deref in qdisc_reset() (Taehee Yoo)
- net: ethernet: mtk_eth_soc: Fix packet statistics support for MT7628/88 (Stefan Roese)
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be static (kernel test robot)
- ipv6: record frag_max_size in atomic fragments in input path (Francesco Ruggeri)
- net: lantiq: fix memory corruption in RX ring (Aleksander Jan Bajkowski)
- scsi: libsas: Use _safe() loop in sas_resume_port() (Dan Carpenter)
- ixgbe: fix large MTU request from VF (Jesse Brandeburg)
- bpf: Set mac_len in bpf_skb_change_head (Jussi Maki)
- ASoC: cs35l33: fix an error code in probe() (Dan Carpenter)
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (Dan Carpenter)
- cxgb4: avoid accessing registers when clearing filters (Raju Rangoju)
- gve: Correct SKB queue index validation. (David Awogbemila)
- gve: Upgrade memory barrier in poll routine (Catherine Sullivan)
- gve: Add NULL pointer checks when freeing irqs. (David Awogbemila)
- gve: Update mgmt_msix_idx if num_ntfy changes (David Awogbemila)
- gve: Check TX QPL was actually assigned (Catherine Sullivan)
- mld: fix panic in mld_newpack() (Taehee Yoo)
- bnxt_en: Include new P5 HV definition in VF check. (Andy Gospodarek)
- net: bnx2: Fix error return code in bnx2_init_board() (Zhen Lei)
- net: hso: check for allocation failure in hso_create_bulk_serial_device() (Dan Carpenter)
- tls splice: check SPLICE_F_NONBLOCK instead of MSG_DONTWAIT (Jim Ma)
- openvswitch: meter: fix race when getting now_ms. (Tao Liu)
- net: mdio: octeon: Fix some double free issues (Christophe JAILLET)
- net: mdio: thunder: Fix a double free issue in the .remove function (Christophe JAILLET)
- net: fec: fix the potential memory leak in fec_enet_init() (Fugang Duan)
- net: really orphan skbs tied to closing sk (Paolo Abeni)
- vfio-ccw: Check initialized flag in cp_init() (Eric Farman)
- ASoC: cs42l42: Regmap must use_single_read/write (Richard Fitzgerald)
- net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count (Vladimir Oltean)
- net: netcp: Fix an error message (Christophe JAILLET)
- drm/amd/amdgpu: fix a potential deadlock in gpu reset (Lang Yu)
- drm/amdgpu: Fix a use-after-free (xinhui pan)
- drm/amd/amdgpu: fix refcount leak (Jingwen Chen)
- drm/amd/display: Disconnect non-DP with no EDID (Chris Park)
- SMB3: incorrect file id in requests compounded with open (Steve French)
- platform/x86: touchscreen_dmi: Add info for the Mediacom Winpad 7.0 W700 tablet (Teava Radu)
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (Andy Shevchenko)
- platform/x86: hp-wireless: add AMD's hardware id to the supported list (Shyam Sundar S K)
- btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik)
- openrisc: Define memory barrier mb (Peter Zijlstra)
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic (Matt Wang)
- btrfs: return whole extents in fiemap (Boris Burkov)
- brcmfmac: properly check for bus register errors (Greg Kroah-Hartman)
- Revert "brcmfmac: add a check for the status of usb_register" (Greg Kroah-Hartman)
- net: liquidio: Add missing null pointer checks (Tom Seewald)
- Revert "net: liquidio: fix a NULL pointer dereference" (Greg Kroah-Hartman)
- media: gspca: properly check for errors in po1030_probe() (Greg Kroah-Hartman)
- Revert "media: gspca: Check the return value of write_bridge for timeout" (Greg Kroah-Hartman)
- media: gspca: mt9m111: Check write_bridge for timeout (Alaa Emad)
- Revert "media: gspca: mt9m111: Check write_bridge for timeout" (Greg Kroah-Hartman)
- media: dvb: Add check on sp8870_readreg return (Alaa Emad)
- Revert "media: dvb: Add check on sp8870_readreg" (Greg Kroah-Hartman)
- ASoC: cs43130: handle errors in cs43130_probe() properly (Greg Kroah-Hartman)
- Revert "ASoC: cs43130: fix a NULL pointer dereference" (Greg Kroah-Hartman)
- libertas: register sysfs groups properly (Greg Kroah-Hartman)
- Revert "libertas: add checks for the return value of sysfs_create_group" (Greg Kroah-Hartman)
- dmaengine: qcom_hidma: comment platform_driver_register call (Phillip Potter)
- Revert "dmaengine: qcom_hidma: Check for driver register failure" (Greg Kroah-Hartman)
- isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info (Phillip Potter)
- Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc" (Greg Kroah-Hartman)
- ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() (Anirudh Rayabharam)
- Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()" (Greg Kroah-Hartman)
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (Phillip Potter)
- Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference" (Greg Kroah-Hartman)
- Revert "ALSA: gus: add a check of the status of snd_ctl_add" (Greg Kroah-Hartman)
- char: hpet: add checks after calling ioremap (Tom Seewald)
- Revert "char: hpet: fix a missing check of ioremap" (Greg Kroah-Hartman)
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit (Du Cheng)
- Revert "net/smc: fix a NULL pointer dereference" (Greg Kroah-Hartman)
- net: fujitsu: fix potential null-ptr-deref (Anirudh Rayabharam)
- Revert "net: fujitsu: fix a potential NULL pointer dereference" (Greg Kroah-Hartman)
- serial: max310x: unregister uart driver in case of failure and abort (Atul Gopinathan)
- Revert "serial: max310x: pass return value of spi_register_driver" (Greg Kroah-Hartman)
- Revert "ALSA: sb: fix a missing check of snd_ctl_add" (Greg Kroah-Hartman)
- Revert "media: usb: gspca: add a missed check for goto_low_power" (Greg Kroah-Hartman)
- gpio: cadence: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume (Kai-Heng Feng)
- perf jevents: Fix getting maximum number of fds (Felix Fietkau)
- i2c: sh_mobile: Use new clock calculation formulas for RZ/G2E (Geert Uytterhoeven)
- i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare)
- i2c: s3c2410: fix possible NULL pointer deref on read message after write (Krzysztof Kozlowski)
- net: dsa: sja1105: error out on unsupported PHY mode (Vladimir Oltean)
- net: dsa: fix a crash if ->get_sset_count() fails (Dan Carpenter)
- net: dsa: mt7530: fix VLAN traffic leaks (DENG Qingfang)
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)
- tipc: skb_linearize the head skb when reassembling msgs (Xin Long)
- tipc: wait and exit until all work queues are done (Xin Long)
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" (Hoang Le)
- net/mlx5e: Fix nullptr in add_vlan_push_action() (Dima Chumak)
- net/mlx5e: Fix multipath lag activation (Dima Chumak)
- drm/meson: fix shutdown crash when component not probed (Neil Armstrong)
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (Zhang Xiaoxu)
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)
- NFS: Fix an Oopsable condition in __nfs_pageio_add_request() (Trond Myklebust)
- NFS: fix an incorrect limit in filelayout_decode_layout() (Dan Carpenter)
- fs/nfs: Use fatal_signal_pending instead of signal_pending (zhouchuangao)
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)
- spi: spi-geni-qcom: Fix use-after-free on unbind (Lukas Wunner)
- net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() (Yoshihiro Shimoda)
- usb: dwc3: gadget: Properly track pending and queued SG (Thinh Nguyen)
- thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID (Srinivas Pandruvada)
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC (Zolton Jheng)
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products (Dominik Andreas Schorpp)
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (Daniele Palmas)
- USB: serial: ti_usb_3410_5052: add startech.com device id (Sean MacLennan)
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (Zheyu Ma)
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (Geert Uytterhoeven)
- serial: tegra: Fix a mask operation that is always true (Colin Ian King)
- USB: usbfs: Don't WARN about excessively large memory allocations (Alan Stern)
- USB: trancevibrator: fix control-request direction (Johan Hovold)
- serial: 8250_pci: handle FL_NOIRQ board flag (Christian Gmeiner)
- serial: 8250_pci: Add support for new HPE serial device (Randy Wright)
- iio: adc: ad7793: Add missing error code in ad7793_setup() (YueHaibing)
- iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers (Jonathan Cameron)
- iio: adc: ad7124: Fix missbalanced regulator enable / disable on error. (Jonathan Cameron)
- iio: adc: ad7768-1: Fix too small buffer passed to iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: gyro: fxas21002c: balance runtime power in error path (Rui Miguel Silva)
- staging: iio: cdc: ad7746: avoid overwrite of num_channels (Lucas Stankus)
- mei: request autosuspend after sending rx flow control (Alexander Usyskin)
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (Mathias Nyman)
- misc/uss720: fix memory leak in uss720_probe (Dongliang Mu)
- serial: core: fix suspicious security_locked_down() call (Ondrej Mosnacek)
- Documentation: seccomp: Fix user notification documentation (Sargun Dhillon)
- kgdb: fix gcc-11 warnings harder (Greg Kroah-Hartman)
- selftests/gpio: Fix build when source tree is read only (Michael Ellerman)
- selftests/gpio: Move include of lib.mk up (Michael Ellerman)
- selftests/gpio: Use TEST_GEN_PROGS_EXTENDED (Michael Ellerman)
- drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate (James Zhu)
- drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate (James Zhu)
- drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate (James Zhu)
- dm snapshot: properly fix a crash when an origin has no snapshots (Mikulas Patocka)
- ath10k: Validate first subframe of A-MSDU before processing the list (Sriram R)
- ath10k: Fix TKIP Michael MIC verification for PCIe (Wen Gong) {CVE-2020-26141}
- ath10k: drop MPDU which has discard flag set by firmware for SDIO (Wen Gong) {CVE-2020-24588}
- ath10k: drop fragments with multicast DA for SDIO (Wen Gong) {CVE-2020-26145}
- ath10k: drop fragments with multicast DA for PCIe (Wen Gong) {CVE-2020-26145}
- ath10k: add CCMP PN replay protection for fragmented frames for PCIe (Wen Gong)
- mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong) {CVE-2020-24586} {CVE-2020-24587}
- mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)
- mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)
- mac80211: check defrag PN against current frame (Johannes Berg)
- mac80211: add fragment cache to sta_info (Johannes Berg)
- mac80211: drop A-MSDUs on old ciphers (Johannes Berg) {CVE-2020-24588}
- cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef) {CVE-2020-24588}
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)
- mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef) {CVE-2020-24586} {CVE-2020-24587}
- mac80211: assure all fragments are encrypted (Mathy Vanhoef) {CVE-2020-26147}
- net: hso: fix control-request directions (Johan Hovold)
- proc: Check /proc/$pid/attr/ writes against file opener (Kees Cook)
- perf scripts python: exported-sql-viewer.py: Fix warning display (Adrian Hunter)
- perf scripts python: exported-sql-viewer.py: Fix Array TypeError (Adrian Hunter)
- perf scripts python: exported-sql-viewer.py: Fix copy to clipboard from Top Calls by elapsed Time report (Adrian Hunter)
- perf intel-pt: Fix transaction abort handling (Adrian Hunter)
- perf intel-pt: Fix sample instruction bytes (Adrian Hunter)
- iommu/vt-d: Fix sysfs leak in alloc_iommu() (Rolf Eike Beer)
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Anna Schumaker)
- cifs: set server->cipher_type to AES-128-CCM for SMB3.0 (Aurelien Aptel)
- ALSA: usb-audio: scarlett2: Improve driver startup messages (Geoffrey D. Bennett)
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci (Geoffrey D. Bennett)
- ALSA: hda/realtek: Headphone volume is controlled by Front mixer (Hui Wang)
- LTS tag: v5.4.123 (Jack Vogel)
- NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu)
- perf unwind: Set userdata for all __report_module() paths (Dave Rigby)
- perf unwind: Fix separate debug info files when using elfutils' libdw's unwinder (Jan Kratochvil)
- usb: dwc3: gadget: Enable suspend events (Jack Pham)
- bpf: No need to simulate speculative domain for immediates (Daniel Borkmann)
- bpf: Fix mask direction swap upon off reg sign change (Daniel Borkmann)
- bpf: Wrap aux data inside bpf_sanitize_info container (Daniel Borkmann)
- LTS tag: v5.4.122 (Jack Vogel)
- Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)
- video: hgafb: correctly handle card detect failure during probe (Anirudh Rayabharam)
- nvmet: use new ana_log_size instead the old one (Hou Pu)
- Bluetooth: L2CAP: Fix handling LE modes by L2CAP_OPTIONS (Luiz Augusto von Dentz)
- ext4: fix error handling in ext4_end_enable_verity() (Eric Biggers)
- nvme-multipath: fix double initialization of ANA state (Christoph Hellwig)
- tty: vt: always invoke vc->vc_sw->con_resize callback (Tetsuo Handa)
- vt: Fix character height handling with VT_RESIZEX (Maciej W. Rozycki)
- vgacon: Record video mode changes with VT_RESIZEX (Maciej W. Rozycki)
- video: hgafb: fix potential NULL pointer dereference (Igor Matheus Andrade Torrente)
- qlcnic: Add null check after calling netdev_alloc_skb (Tom Seewald)
- leds: lp5523: check return value of lp5xx_read and jump to cleanup code (Phillip Potter)
- ics932s401: fix broken handling of errors when word reading fails (Darrick J. Wong)
- net: rtlwifi: properly check for alloc_workqueue() failure (Greg Kroah-Hartman)
- scsi: ufs: handle cleanup correctly on devm_reset_control_get error (Phillip Potter)
- net: stmicro: handle clk_prepare() failure during init (Anirudh Rayabharam)
- ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (Du Cheng)
- Revert "niu: fix missing checks of niu_pci_eeprom_read" (Greg Kroah-Hartman)
- Revert "qlcnic: Avoid potential NULL pointer dereference" (Greg Kroah-Hartman)
- Revert "rtlwifi: fix a potential NULL pointer dereference" (Greg Kroah-Hartman)
- Revert "media: rcar_drif: fix a memory disclosure" (Greg Kroah-Hartman)
- cdrom: gdrom: initialize global variable at init time (Greg Kroah-Hartman)
- cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom (Atul Gopinathan)
- Revert "gdrom: fix a memory leak bug" (Greg Kroah-Hartman)
- Revert "scsi: ufs: fix a missing check of devm_reset_control_get" (Greg Kroah-Hartman)
- Revert "ecryptfs: replace BUG_ON with error handling code" (Greg Kroah-Hartman)
- Revert "video: imsttfb: fix potential NULL pointer dereferences" (Greg Kroah-Hartman)
- Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" (Greg Kroah-Hartman)
- Revert "leds: lp5523: fix a missing check of return value of lp55xx_read" (Greg Kroah-Hartman)
- Revert "net: stmicro: fix a missing check of clk_prepare" (Greg Kroah-Hartman)
- Revert "video: hgafb: fix potential NULL pointer dereference" (Greg Kroah-Hartman)
- dm snapshot: fix crash with transient storage and zero chunk size (Mikulas Patocka)
- xen-pciback: reconfigure also from backend watch handler (Jan Beulich)
- mmc: sdhci-pci-gli: increase 1.8V regulator wait (Daniel Beer)
- drm/amdgpu: update sdma golden setting for Navi12 (Guchun Chen)
- drm/amdgpu: update gc golden setting for Navi12 (Guchun Chen)
- drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang (Changfeng)
- Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference" (Greg Kroah-Hartman)
- rapidio: handle create_workqueue() failure (Anirudh Rayabharam)
- Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails" (Greg Kroah-Hartman)
- uio_hv_generic: Fix a memory leak in error handling paths (Christophe JAILLET)
- ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx (Elia Devito)
- ALSA: hda/realtek: Add fixup for HP OMEN laptop (Takashi Iwai)
- ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA (Takashi Iwai)
- ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 (PeiSen Hou)
- ALSA: hda/realtek: reset eapd coeff to default value for alc287 (Hui Wang)
- ALSA: firewire-lib: fix check for the size of isochronous packet payload (Takashi Sakamoto)
- Revert "ALSA: sb8: add a check for request_region" (Greg Kroah-Hartman)
- ALSA: hda: fixup headset for ASUS GU502 laptop (Daniel Cordova A)
- ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto)
- ALSA: usb-audio: Validate MS endpoint descriptors (Takashi Iwai)
- ALSA: firewire-lib: fix calculation for size of IR context payload (Takashi Sakamoto)
- ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 (Takashi Sakamoto)
- ALSA: line6: Fix racy initialization of LINE6 MIDI (Takashi Iwai)
- ALSA: intel8x0: Don't update period unless prepared (Takashi Iwai)
- ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency (Takashi Sakamoto)
- cifs: fix memory leak in smb2_copychunk_range (Ronnie Sahlberg)
- btrfs: avoid RCU stalls while running delayed iputs (Josef Bacik)
- locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal (Zqiang)

[5.4.17-2102.204.0.el7]
- LTS tag: v5.4.121 (Jack Vogel)
- scripts: switch explicitly to Python 3 (Andy Shevchenko)
- tweewide: Fix most Shebang lines (Finn Behrens)
- KVM: arm64: Initialize VCPU mdcr_el2 before loading it (Alexandru Elisei)
- ipv6: remove extra dev_hold() for fallback tunnels (Eric Dumazet)
- ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- sit: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- ip6_gre: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- net: stmmac: Do not enable RX FIFO overflow interrupts (Yannick Vignon)
- lib: stackdepot: turn depot_lock spinlock to raw_spinlock (Zqiang)
- block: reexpand iov_iter after read/write (yangerkun)
- ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP (Hui Wang)
- gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 (Hans de Goede)
- drm/amd/display: Fix two cursor duplication when using overlay (Rodrigo Siqueira)
- bridge: Fix possible races between assigning rx_handler_data and setting IFF_BRIDGE_PORT bit (Zhang Zhengming)
- scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found (Bodo Stroesser)
- ceph: fix fscache invalidation (Jeff Layton)
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (James Smart)
- riscv: Workaround mcount name prior to clang-13 (Nathan Chancellor)
- scripts/recordmcount.pl: Fix RISC-V regex for clang (Nathan Chancellor)
- ARM: 9075/1: kernel: Fix interrupted SMC calls (Manivannan Sadhasivam)
- um: Disable CONFIG_GCOV with MODULES (Johannes Berg)
- um: Mark all kernel symbols as local (Johannes Berg)
- Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state (Hans de Goede)
- Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices (Hans de Goede)
- ACPI / hotplug / PCI: Fix reference count leak in enable_slot() (Feilong Lin)
- ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() (louis.wang)
- dmaengine: dw-edma: Fix crash on loading/unloading driver (Gustavo Pimentel)
- PCI: thunder: Fix compile testing (Arnd Bergmann)
- virtio_net: Do not pull payload in skb->head (Eric Dumazet)
- xsk: Simplify detection of empty and full rings (Magnus Karlsson)
- pinctrl: ingenic: Improve unreachable code generation (Josh Poimboeuf)
- isdn: capi: fix mismatched prototypes (Arnd Bergmann)
- cxgb4: Fix the -Wmisleading-indentation warning (Kaixu Xia)
- usb: sl811-hcd: improve misleading indentation (Arnd Bergmann)
- kgdb: fix gcc-11 warning on indentation (Arnd Bergmann)
- x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes (Arnd Bergmann)
- LTS tag: v5.4.120 (Jack Vogel)
- ASoC: rsnd: check all BUSIF status when error (Kuninori Morimoto)
- nvme: do not try to reconfigure APST when the controller is not live (Christoph Hellwig)
- clk: exynos7: Mark aclk_fsys1_200 as critical (Paweł Chmiel)
- netfilter: conntrack: Make global sysctls readonly in non-init netns (Jonathon Reinhart)
- kobject_uevent: remove warning in init_uevent_argv() (Greg Kroah-Hartman)
- usb: typec: tcpm: Fix error while calculating PPS out values (Badhri Jagan Sridharan)
- ARM: 9027/1: head.S: explicitly map DT even if it lives in the first physical section (Ard Biesheuvel)
- ARM: 9020/1: mm: use correct section size macro to describe the FDT virtual address (Ard Biesheuvel)
- ARM: 9012/1: move device tree mapping out of linear region (Ard Biesheuvel)
- ARM: 9011/1: centralize phys-to-virt conversion of DT/ATAGS address (Ard Biesheuvel)
- f2fs: fix error handling in f2fs_end_enable_verity() (Eric Biggers)
- thermal/core/fair share: Lock the thermal zone while looping over instances (Lukasz Luba)
- MIPS: Avoid handcoded DIVU in `__div64_32' altogether (Maciej W. Rozycki)
- MIPS: Avoid DIVU in `__div64_32' is result would be zero (Maciej W. Rozycki)
- MIPS: Reinstate platform `__div64_32' handler (Maciej W. Rozycki)
- FDDI: defxx: Make MMIO the configuration default except for EISA (Maciej W. Rozycki)
- mm: fix struct page layout on 32-bit systems (Matthew Wilcox (Oracle))
- KVM: x86: Cancel pvclock_gtod_work on module removal (Thomas Gleixner)
- cdc-wdm: untangle a circular dependency between callback and softint (Oliver Neukum)
- iio: tsl2583: Fix division by a zero lux_val (Colin Ian King)
- iio: gyro: mpu3050: Fix reported temperature value (Dmitry Osipenko)
- xhci: Add reset resume quirk for AMD xhci controller. (Sandeep Singh)
- xhci: Do not use GFP_KERNEL in (potentially) atomic context (Christophe JAILLET)
- usb: dwc3: gadget: Return success always for kick transfer in ep queue (Wesley Cheng)
- usb: core: hub: fix race condition about TRSMRCY of resume (Chunfeng Yun)
- usb: dwc2: Fix gadget DMA unmap direction (Phil Elwell)
- usb: xhci: Increase timeout for HC halt (Maximilian Luz)
- usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield (Ferry Toth)
- usb: dwc3: omap: improve extcon initialization (Marcel Hamer)
- iomap: fix sub-page uptodate handling (Christoph Hellwig)
- blk-mq: Swap two calls in blk_mq_exit_queue() (Bart Van Assche)
- nbd: Fix NULL pointer in flush_workqueue (Sun Ke)
- kyber: fix out of bounds access when preempted (Omar Sandoval)
- ACPI: scan: Fix a memory leak in an error handling path (Christophe JAILLET)
- hwmon: (occ) Fix poll rate limiting (Eddie James)
- usb: fotg210-hcd: Fix an error message (Christophe JAILLET)
- iio: proximity: pulsedlight: Fix rumtime PM imbalance on error (Dinghao Liu)
- drm/i915: Avoid div-by-zero on gen2 (Ville Syrjälä)
- drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected (Kai-Heng Feng)
- mm/hugetlb: fix F_SEAL_FUTURE_WRITE (Peter Xu)
- userfaultfd: release page in error path to avoid BUG_ON (Axel Rasmussen)
- squashfs: fix divide error in calculate_skip() (Phillip Lougher)
- hfsplus: prevent corruption in shrinking truncate (Jouni Roivas)
- powerpc/64s: Fix crashes when toggling entry flush barrier (Michael Ellerman)
- powerpc/64s: Fix crashes when toggling stf barrier (Michael Ellerman)
- ARC: mm: PAE: use 40-bit physical page mask (Vladimir Isaev)
- ARC: entry: fix off-by-one error in syscall number validation (Vineet Gupta)
- i40e: Fix PHY type identifiers for 2.5G and 5G adapters (Mateusz Palczewski)
- i40e: fix the restart auto-negotiation after FEC modified (Jaroslaw Gawin)
- i40e: Fix use-after-free in i40e_client_subtask() (Yunjian Wang)
- netfilter: nftables: avoid overflows in nft_hash_buckets() (Eric Dumazet)
- kernel: kexec_file: fix error return code of kexec_calculate_store_digests() (Jia-Ju Bai)
- sched/fair: Fix unfairness caused by missing load decay (Odin Ugedal)
- sched: Fix out-of-bound access in uclamp (Quentin Perret)
- can: m_can: m_can_tx_work_queue(): fix tx_skb race condition (Marc Kleine-Budde)
- netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check (Pablo Neira Ayuso)
- smc: disallow TCP_ULP in smc_setsockopt() (Cong Wang)
- net: fix nla_strcmp to handle more then one trailing null character (Maciej Żenczykowski)
- ksm: fix potential missing rmap_item for stable_node (Miaohe Lin)
- mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() (Miaohe Lin)
- mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() (Miaohe Lin)
- khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() (Miaohe Lin)
- drm/radeon: Avoid power table parsing memory leaks (Kees Cook)
- drm/radeon: Fix off-by-one power_state index heap overwrite (Kees Cook)
- netfilter: xt_SECMARK: add new revision to fix structure layout (Pablo Neira Ayuso)
- sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b (Xin Long)
- ethernet:enic: Fix a use after free bug in enic_hard_start_xmit (Lv Yunlong)
- sunrpc: Fix misplaced barrier in call_decode (Baptiste Lepers)
- RISC-V: Fix error code returned by riscv_hartid_to_cpuid() (Anup Patel)
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long)
- net: hns3: disable phy loopback setting in hclge_mac_start_phy (Yufeng Mo)
- net: hns3: use netif_tx_disable to stop the transmit queue (Peng Li)
- net: hns3: fix for vxlan gpe tx checksum bug (Hao Chen)
- net: hns3: add check for HNS3_NIC_STATE_INITED in hns3_reset_notify_up_enet() (Jian Shen)
- net: hns3: initialize the message content in hclge_get_link_mode() (Yufeng Mo)
- net: hns3: fix incorrect configuration for igu_egu_hw_err (Yufeng Mo)
- rtc: ds1307: Fix wday settings for rx8130 (Nobuhiro Iwamatsu)
- ceph: fix inode leak on getattr error in __fh_to_dentry (Jeff Layton)
- rtc: fsl-ftm-alarm: add MODULE_TABLE() (Michael Walle)
- NFSv4.2 fix handling of sr_eof in SEEK's reply (Olga Kornievskaia)
- pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (Nikola Livic)
- PCI: endpoint: Fix missing destroy_workqueue() (Yang Yingliang)
- NFS: Deal correctly with attribute generation counter overflow (Trond Myklebust)
- NFSv4.2: Always flush out writes in nfs42_proc_fallocate() (Trond Myklebust)
- rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() (Jia-Ju Bai)
- ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook (Zhen Lei)
- PCI: Release OF node in pci_scan_device()'s error path (Dmitry Baryshkov)
- PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc() (Pali Rohár)
- f2fs: fix a redundant call to f2fs_balance_fs if an error occurs (Colin Ian King)
- thermal: thermal_of: Fix error return code of thermal_of_populate_bind_params() (Jia-Ju Bai)
- ASoC: rt286: Make RT286_SET_GPIO_* readable and writable (David Ward)
- ia64: module: fix symbolizer crash on fdescr (Sergei Trofimovich)
- bnxt_en: Add PCI IDs for Hyper-V VF devices. (Michael Chan)
- net: ethernet: mtk_eth_soc: fix RX VLAN offload (Felix Fietkau)
- iavf: remove duplicate free resources calls (Stefan Assmann)
- powerpc/iommu: Annotate nested lock for lockdep (Alexey Kardashevskiy)
- qtnfmac: Fix possible buffer overflow in qtnf_event_handle_external_auth (Lee Gibson)
- wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join (Gustavo A. R. Silva)
- wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt (Gustavo A. R. Silva)
- drm/amd/display: fixed divide by zero kernel crash during dsc enablement (Robin Singh)
- powerpc/pseries: Stop calling printk in rtas_stop_self() (Michael Ellerman)
- samples/bpf: Fix broken tracex1 due to kprobe argument change (Yaqi Chen)
- net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule (Du Cheng)
- ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user() (Gustavo A. R. Silva)
- ASoC: rt286: Generalize support for ALC3263 codec (David Ward)
- powerpc/smp: Set numa node before updating mask (Srikar Dronamraju)
- flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target() (Gustavo A. R. Silva)
- sctp: Fix out-of-bounds warning in sctp_process_asconf_param() (Gustavo A. R. Silva)
- ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume (Kai Vehmanen)
- kconfig: nconf: stop endless search loops (Mihai Moldovan)
- selftests: Set CC to clang in lib.mk if LLVM is set (Yonghong Song)
- drm/amd/display: Force vsync flip when reconfiguring MPCC (Anthony Wang)
- iommu/amd: Remove performance counter pre-initialization test (Suravee Suthikulpanit)
- Revert "iommu/amd: Fix performance counter initialization" (Paul Menzel)
- ASoC: rsnd: call rsnd_ssi_master_clk_start() from rsnd_ssi_init() (Kuninori Morimoto)
- cuse: prevent clone (Miklos Szeredi)
- mt76: mt76x0: disable GTK offloading (David Bauer)
- pinctrl: samsung: use 'int' for register masks in Exynos (Krzysztof Kozlowski)
- mac80211: clear the beacon's CRC after channel switch (Emmanuel Grumbach)
- i2c: Add I2C_AQ_NO_REP_START adapter quirk (Bence Csókás)
- ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet (Hans de Goede)
- ip6_vti: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)
- Bluetooth: check for zapped sk before connecting (Archie Pusaka)
- net: bridge: when suppression is enabled exclude RARP packets (Nikolay Aleksandrov)
- Bluetooth: initialize skb_queue_head at l2cap_chan_create() (Tetsuo Handa)
- Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default (Archie Pusaka)
- ALSA: bebob: enable to deliver MIDI messages for multiple ports (Takashi Sakamoto)
- ALSA: rme9652: don't disable if not enabled (Tong Zhang)
- ALSA: hdspm: don't disable if not enabled (Tong Zhang)
- ALSA: hdsp: don't disable if not enabled (Tong Zhang)
- i2c: bail out early when RDWR parameters are wrong (Wolfram Sang)
- ASoC: rsnd: core: Check convert rate in rsnd_hw_params (Mikhail Durnev)
- net: stmmac: Set FIFO sizes for ipq806x (Jonathan McDowell)
- ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF (Hans de Goede)
- tipc: convert dest node's address to network order (Hoang Le)
- fs: dlm: fix debugfs dump (Alexander Aring)
- PM: runtime: Fix unpaired parent child_count for force_resume (Tony Lindgren)
- KVM: x86/mmu: Remove the defunct update_pte() paging hook (Sean Christopherson)
- tpm, tpm_tis: Reserve locality in tpm_tis_resume() (Jarkko Sakkinen)
- tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() (Jarkko Sakkinen)
- tpm: fix error return code in tpm2_get_cc_attrs_tbl() (Zhen Lei)
- LTS tag: v5.4.119 (Jack Vogel)
- Revert "fdt: Properly handle "no-map" field in the memory region" (Quentin Perret)
- Revert "of/fdt: Make sure no-map does not remove already reserved regions" (Quentin Perret)
- Revert "net/sctp: fix race condition in sctp_destroy_sock" (Xin Long)
- smp: Fix smp_call_function_single_async prototype (Arnd Bergmann)
- net: Only allow init netns to set default tcp cong to a restricted algo (Jonathon Reinhart)
- mm/memory-failure: unnecessary amount of unmapping (Jane Chu)
- mm/sparse: add the missing sparse_buffer_fini() in error branch (Wang Wensheng)
- kfifo: fix ternary sign extension bugs (Dan Carpenter)
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (Lv Yunlong)
- net: bridge: mcast: fix broken length + header check for MRDv6 Adv. (Linus Lüssing)
- RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res (Lv Yunlong)
- RDMA/siw: Fix a use after free in siw_alloc_mr (Lv Yunlong)
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Lv Yunlong)
- bnxt_en: Fix RX consumer index logic in the error path. (Michael Chan)
- selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static (Petr Machata)
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter)
- arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (Kunihiko Hayashi)
- ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E (Kunihiko Hayashi)
- bnxt_en: fix ternary sign extension bug in bnxt_show_temp() (Dan Carpenter)
- powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (Christophe Leroy)
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock (Shuah Khan)
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (Toke Høiland-Jørgensen)
- net: phy: intel-xway: enable integrated led functions (Martin Schiller)
- net: renesas: ravb: Fix a stuck issue when a lot of frames are received (Yoshihiro Shimoda)
- net: davinci_emac: Fix incorrect masking of tx and rx error channel (Colin Ian King)
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails (Colin Ian King)
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (Sindhu Devale)
- RDMA/cxgb4: add missing qpid increment (Potnuri Bharat Teja)
- gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check (Alexander Lobakin)
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella)
- mwl8k: Fix a double Free in mwl8k_probe_hw (Lv Yunlong)
- i2c: sh7760: fix IRQ error path (Sergey Shtylyov)
- rtlwifi: 8821ae: upgrade PHY and RF parameters (Ping-Ke Shih)
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (Tyrel Datwyler)
- MIPS: pci-legacy: stop using of_pci_range_to_resource (Ilya Lipnitskiy)
- perf beauty: Fix fsconfig generator (Vitaly Chikunov)
- drm/i915/gvt: Fix error code in intel_gvt_init_device() (Dan Carpenter)
- ASoC: ak5558: correct reset polarity (Shengjiu Wang)
- powerpc/xive: Fix xmon command "dxi" (Cédric Le Goater)
- i2c: sh7760: add IRQ check (Sergey Shtylyov)
- i2c: jz4780: add IRQ check (Sergey Shtylyov)
- i2c: emev2: add IRQ check (Sergey Shtylyov)
- i2c: cadence: add IRQ check (Sergey Shtylyov)
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao)
- i2c: omap: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao)
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao)
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails (Qinglang Miao)
- RDMA/srpt: Fix error return code in srpt_cm_req_recv() (Wang Wensheng)
- net: thunderx: Fix unintentional sign extension issue (Colin Ian King)
- cxgb4: Fix unintentional sign extension issues (Colin Ian King)
- IB/hfi1: Fix error return code in parse_platform_config() (Wang Wensheng)
- RDMA/qedr: Fix error return code in qedr_iw_connect() (Wang Wensheng)
- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit (Nicholas Piggin)
- mt7601u: fix always true expression (Colin Ian King)
- mac80211: bail out if cipher schemes are invalid (Johannes Berg)
- powerpc: iommu: fix build when neither PCI or IBMVIO is set (Randy Dunlap)
- powerpc/perf: Fix PMU constraint check for EBB events (Athira Rajeev)
- powerpc/64s: Fix pte update for kernel memory on radix (Jordan Niethe)
- liquidio: Fix unintented sign extension of a left shift of a u16 (Colin Ian King)
- ASoC: simple-card: fix possible uninitialized single_cpu local variable (Krzysztof Kozlowski)
- ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (Takashi Iwai)
- mips: bmips: fix syscon-reboot nodes (Álvaro Fernández Rojas)
- net: hns3: Limiting the scope of vector_ring_chain variable (Salil Mehta)
- nfc: pn533: prevent potential memory corruption (Dan Carpenter)
- bug: Remove redundant condition check in report_bug (Andrew Scull)
- ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (Jia Zhou)
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (Chen Huang)
- inet: use bigger hash table for IP ID generation (Eric Dumazet)
- powerpc/prom: Mark identical_pvr_fixup as __init (Nathan Chancellor)
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init (Nathan Chancellor)
- net: lapbether: Prevent racing when checking whether the netif is running (Xie He)
- perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (Arnaldo Carvalho de Melo)
- HID: plantronics: Workaround for double volume key presses (Maxim Mikityanskiy)
- drivers/block/null_blk/main: Fix a double free in null_init. (Lv Yunlong)
- sched/debug: Fix cgroup_path[] serialization (Waiman Long)
- x86/events/amd/iommu: Fix sysfs type mismatch (Nathan Chancellor)
- HSI: core: fix resource leaks in hsi_add_client_from_dt() (Dan Carpenter)
- nvme-pci: don't simple map sgl when sgls are disabled (Niklas Cassel)
- mfd: stm32-timers: Avoid clearing auto reload register (Fabrice Gasnier)
- scsi: ibmvfc: Fix invalid state machine BUG_ON() (Brian King)
- scsi: sni_53c710: Add IRQ check (Sergey Shtylyov)
- scsi: sun3x_esp: Add IRQ check (Sergey Shtylyov)
- scsi: jazz_esp: Add IRQ check (Sergey Shtylyov)
- scsi: hisi_sas: Fix IRQ checks (Sergey Shtylyov)
- clk: uniphier: Fix potential infinite loop (Colin Ian King)
- clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE (Chen Hui)
- clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback (Quanyang Wang)
- vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (Jason Gunthorpe)
- media: v4l2-ctrls.c: fix race condition in hdl->requests list (Hans Verkuil)
- nvme: retrigger ANA log update if group descriptor isn't found (Hannes Reinecke)
- nvmet-tcp: fix incorrect locking in state_change sk callback (Sagi Grimberg)
- nvme-tcp: block BH in sk state_change sk callback (Sagi Grimberg)
- ata: libahci_platform: fix IRQ check (Sergey Shtylyov)
- sata_mv: add IRQ checks (Sergey Shtylyov)
- pata_ipx4xx_cf: fix IRQ check (Sergey Shtylyov)
- pata_arasan_cf: fix IRQ check (Sergey Shtylyov)
- x86/kprobes: Fix to check non boostable prefixes correctly (Masami Hiramatsu)
- drm/amdkfd: fix build error with AMD_IOMMU_V2=m (Felix Kuehling)
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays (Colin Ian King)
- media: platform: sunxi: sun6i-csi: fix error return code of sun6i_video_start_streaming() (Jia-Ju Bai)
- media: aspeed: fix clock handling logic (Jae Hyun Yoo)
- media: omap4iss: return error code when omap4iss_get() failed (Yang Yingliang)
- media: vivid: fix assignment of dev->fbuf_out_flags (Colin Ian King)
- soc: aspeed: fix a ternary sign expansion bug (Dan Carpenter)
- xen-blkback: fix compatibility bug with single page rings (Paul Durrant)
- ttyprintk: Add TTY hangup callback. (Tetsuo Handa)
- usb: dwc2: Fix hibernation between host and device modes. (Artur Petrosyan)
- usb: dwc2: Fix host mode hibernation exit with remote wakeup flow. (Artur Petrosyan)
- x86/platform/uv: Fix !KEXEC build failure (Ingo Molnar)
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (Steffen Dirkwinkel)
- usbip: vudc: fix missing unlock on error in usbip_sockfd_store() (Ye Bin)
- node: fix device cleanups in error handling code (Dan Carpenter)
- firmware: qcom-scm: Fix QCOM_SCM configuration (He Ying)
- serial: core: return early on unsupported ioctls (Johan Hovold)
- tty: fix return value for unsupported ioctls (Johan Hovold)
- tty: actually undefine superseded ASYNC flags (Johan Hovold)
- USB: cdc-acm: fix TIOCGSERIAL implementation (Johan Hovold)
- USB: cdc-acm: fix unprivileged TIOCCSERIAL (Johan Hovold)
- usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (Colin Ian King)
- spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() (Wang Li)
- cpufreq: armada-37xx: Fix determining base CPU frequency (Pali Rohár)
- cpufreq: armada-37xx: Fix driver cleanup when registration failed (Pali Rohár)
- clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 (Pali Rohár)
- clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz (Pali Rohár)
- cpufreq: armada-37xx: Fix the AVS value for load L1 (Pali Rohár)
- clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock (Marek Behún)
- cpufreq: armada-37xx: Fix setting TBG parent for load levels (Marek Behún)
- crypto: qat - Fix a double free in adf_create_ring (Lv Yunlong)
- ACPI: CPPC: Replace cppc_attr with kobj_attribute (Nathan Chancellor)
- soc: qcom: mdt_loader: Detect truncated read of segments (Bjorn Andersson)
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (Bjorn Andersson)
- spi: Fix use-after-free with devm_spi_alloc_* (William A. Kennington III)
- PM / devfreq: Use more accurate returned new_freq as resume_freq (Dong Aisheng)
- staging: greybus: uart: fix unprivileged TIOCCSERIAL (Johan Hovold)
- staging: rtl8192u: Fix potential infinite loop (Colin Ian King)
- irqchip/gic-v3: Fix OF_BAD_ADDR error handling (Arnd Bergmann)
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (Lv Yunlong)
- m68k: mvme147,mvme16x: Don't wipe PCC timer config bits (Finn Thain)
- soundwire: stream: fix memory leak in stream config error path (Rander Wang)
- memory: pl353: fix mask of ECC page_size config register (gexueyuan)
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (Yang Yingliang)
- usb: gadget: aspeed: fix dma map failure (Tao Ren)
- crypto: qat - fix error path in adf_isr_resource_alloc() (Giovanni Cabiddu)
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (Geert Uytterhoeven)
- soundwire: bus: Fix device found flag correctly (Srinivas Kandagatla)
- bus: qcom: Put child node before return (Pan Bian)
- mtd: require write permissions for locking and badblock ioctls (Michael Walle)
- fotg210-udc: Complete OUT requests on short packets (Fabian Vogt)
- fotg210-udc: Don't DMA more than the buffer can take (Fabian Vogt)
- fotg210-udc: Mask GRP2 interrupts we don't handle (Fabian Vogt)
- fotg210-udc: Remove a dubious condition leading to fotg210_done (Fabian Vogt)
- fotg210-udc: Fix EP0 IN requests bigger than two packets (Fabian Vogt)
- fotg210-udc: Fix DMA on EP0 for length > max packet size (Fabian Vogt)
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Tong Zhang)
- crypto: qat - don't release uninitialized resources (Tong Zhang)
- usb: gadget: pch_udc: Check for DMA mapping error (Andy Shevchenko)
- usb: gadget: pch_udc: Check if driver is present before calling ->setup() (Andy Shevchenko)
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (Andy Shevchenko)
- x86/microcode: Check for offline CPUs before requesting new microcode (Otavio Pontes)
- arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding (Vladimir Barinov)
- spi: stm32: drop devres version of spi_register_master (Antonio Borneo)
- arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges' (Shawn Guo)
- mtd: rawnand: qcom: Return actual error code instead of -ENODEV (Manivannan Sadhasivam)
- mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() (Manivannan Sadhasivam)
- mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC (Álvaro Fernández Rojas)
- mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe() (Dan Carpenter)
- regmap: set debugfs_name to NULL after it is freed (Meng Li)
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (Badhri Jagan Sridharan)
- serial: stm32: fix tx_empty condition (Erwan Le Ray)
- serial: stm32: fix incorrect characters on console (Erwan Le Ray)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family (Krzysztof Kozlowski)
- ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family (Krzysztof Kozlowski)
- ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family (Krzysztof Kozlowski)
- memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (Colin Ian King)
- usb: gadget: pch_udc: Revert d3cb25a12138 completely (Andy Shevchenko)
- ovl: fix missing revert_creds() on error path (Dan Carpenter)
- Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" (Jae Hyun Yoo)
- KVM: Stop looking for coalesced MMIO zones if the bus is destroyed (Sean Christopherson)
- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit (Sean Christopherson)
- KVM: s390: split kvm_s390_real_to_abs (Claudio Imbrenda)
- s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (David Hildenbrand)
- KVM: s390: fix guarded storage control register handling (Heiko Carstens)
- KVM: s390: split kvm_s390_logical_to_effective (Claudio Imbrenda)
- ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable (Sami Loone)
- ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC662 quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (Takashi Iwai)
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (Takashi Iwai)
- drm/amd/display: Reject non-zero src_y and src_x for video planes (Harry Wentland)
- drm/radeon: fix copy of uninitialized variable back to userspace (Colin Ian King)
- drm/panfrost: Don't try to map pages that are already mapped (Boris Brezillon)
- drm/panfrost: Clear MMU irqs before handling the fault (Boris Brezillon)
- rtw88: Fix array overrun in rtw_get_tx_power_params() (Ping-Ke Shih)
- cfg80211: scan: drop entry from hidden_list on overflow (Johannes Berg)
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (Dan Carpenter)
- md: Fix missing unused status line of /proc/mdstat (Jan Glauber)
- md: md_open returns -EBUSY when entering racing area (Zhao Heming)
- md: factor out a mddev_find_locked helper from mddev_find (Christoph Hellwig)
- md: split mddev_find (Christoph Hellwig)
- md-cluster: fix use-after-free issue when removing rdev (Heming Zhao)
- misc: vmw_vmci: explicitly initialize vmci_datagram payload (Tetsuo Handa)
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (Tetsuo Handa)
- misc: lis3lv02d: Fix false-positive WARN on various HP models (Hans de Goede)
- iio:accel:adis16201: Fix wrong axis assignment that prevents loading (Jonathan Cameron)
- PCI: Allow VPD access for QLogic ISP2722 (Arun Easi)
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (Maciej W. Rozycki)
- MIPS: pci-rt2880: fix slot 0 configuration (Ilya Lipnitskiy)
- MIPS: pci-mt7620: fix PLL lock check (Ilya Lipnitskiy)
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function (Lukasz Majczak)
- ASoC: samsung: tm2_wm5110: check of of_parse return value (Pierre-Louis Bossart)
- usb: xhci-mtk: improve bandwidth scheduling with TT (Chunfeng Yun)
- usb: xhci-mtk: remove or operator for setting schedule parameters (Chunfeng Yun)
- usb: typec: tcpm: update power supply once partner accepts (Badhri Jagan Sridharan)
- usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply (Badhri Jagan Sridharan)
- usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply (Badhri Jagan Sridharan)
- staging: fwserial: fix TIOCSSERIAL permission check (Johan Hovold)
- tty: moxa: fix TIOCSSERIAL permission check (Johan Hovold)
- staging: fwserial: fix TIOCSSERIAL jiffies conversions (Johan Hovold)
- USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check (Johan Hovold)
- staging: greybus: uart: fix TIOCSSERIAL jiffies conversions (Johan Hovold)
- USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions (Johan Hovold)
- tty: amiserial: fix TIOCSSERIAL permission check (Johan Hovold)
- tty: moxa: fix TIOCSSERIAL jiffies conversions (Johan Hovold)
- Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" (Johan Hovold)
- net/nfc: fix use-after-free llcp_sock_bind/connect (Or Cohen) {CVE-2021-23134}
- LTS tag: v5.4.118 (Jack Vogel)
- dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Benjamin Block)
- dm integrity: fix missing goto in bitmap_flush_interval error handling (Tian Tao)
- dm space map common: fix division bug in sm_ll_find_free_block() (Joe Thornber)
- dm persistent data: packed struct should have an aligned() attribute too (Joe Thornber)
- tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware))
- tracing: Map all PIDs to command lines (Steven Rostedt (VMware))
- rsi: Use resume_noirq for SDIO (Marek Vasut)
- tty: fix memory leak in vc_deallocate (Pavel Skripkin)
- usb: dwc2: Fix session request interrupt handler (Artur Petrosyan)
- usb: dwc3: gadget: Fix START_TRANSFER link state check (Thinh Nguyen)
- usb: gadget/function/f_fs string table fix for multiple languages (Dean Anderson)
- usb: gadget: Fix double free of device descriptor pointers (Hemant Kumar)
- usb: gadget: dummy_hcd: fix gpf in gadget_setup (Anirudh Rayabharam)
- media: staging/intel-ipu3: Fix race condition during set_fmt (Ricardo Ribalda)
- media: staging/intel-ipu3: Fix set_fmt error handling (Ricardo Ribalda)
- media: staging/intel-ipu3: Fix memory leak in imu_fmt (Ricardo Ribalda)
- media: dvb-usb: Fix memory leak at error in dvb_usb_device_init() (Takashi Iwai)
- media: dvb-usb: Fix use-after-free access (Takashi Iwai)
- media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye)
- ext4: fix error code in ext4_commit_super (Fengnan Chang)
- ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() (Zhang Yi)
- ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi)
- kbuild: update config_data.gz only when the content of .config is changed (Masahiro Yamada)
- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported (Sean Christopherson)
- Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") (Thomas Gleixner)
- jffs2: check the validity of dstlen in jffs2_zlib_compress() (Yang Yang)
- Fix misc new gcc warnings (Linus Torvalds)
- security: commoncap: fix -Wstringop-overread warning (Arnd Bergmann)
- fuse: fix write deadlock (Vivek Goyal)
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences (Heinz Mauelshagen)
- crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS (Eric Biggers)
- tpm: vtpm_proxy: Avoid reading host log when using a virtual device (Stefan Berger)
- tpm: efi: Use local variable for calculating final log size (Stefan Berger)
- intel_th: pci: Add Alder Lake-M support (Alexander Shishkin)
- powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h (Tony Ambardar)
- powerpc/eeh: Fix EEH handling for hugepages in ioremap space. (Mahesh Salgaonkar)
- jffs2: Fix kasan slab-out-of-bounds problem (lizhe)
- Input: ili210x - add missing negation for touch indication on ili210x (Hansem Ro)
- NFSv4: Don't discard segments marked for return in _pnfs_return_layout() (Trond Myklebust)
- NFS: Don't discard pNFS layout segments that are marked for return (Trond Myklebust)
- ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Marc Zyngier)
- openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti)
- mlxsw: spectrum_mr: Update egress RIF list before route's action (Ido Schimmel)
- f2fs: fix to avoid out-of-bounds memory access (Chao Yu)
- ubifs: Only check replay with inode type to judge if inode linked (Guochun Mao)
- virtiofs: fix memory leak in virtio_fs_probe() (Luis Henriques)
- Makefile: Move -Wno-unused-but-set-variable out of GCC only block (Nathan Chancellor)
- arm64/vdso: Discard .note.gnu.property sections in vDSO (Bill Wendling)
- btrfs: fix race when picking most recent mod log operation for an old root (Filipe Manana)
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx (Eckhart Mohr)
- ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops (Sami Loone)
- ALSA: hda/realtek: fix mic boost on Intel NUC 8 (Phil Calvin)
- ALSA: hda/realtek: GA503 use same quirks as GA401 (Luke D Jones)
- ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8 (Timo Gurr)
- ALSA: usb-audio: More constifications (Takashi Iwai)
- ALSA: usb-audio: Explicitly set up the clock selector (Takashi Iwai)
- ALSA: sb: Fix two use after free in snd_sb_qsound_build (Lv Yunlong)
- ALSA: hda/conexant: Re-order CX5066 quirk table entries (Takashi Iwai)
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer (Lv Yunlong)
- s390/archrandom: add parameter check for s390_arch_random_generate (Harald Freudenberger)
- scsi: libfc: Fix a format specifier (Bart Van Assche)
- mfd: arizona: Fix rumtime PM imbalance on error (Dinghao Liu)
- scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic (James Smart)
- scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode (James Smart)
- scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response (James Smart)
- drm/amdgpu: fix NULL pointer dereference (Guchun Chen)
- amdgpu: avoid incorrect %hu format string (Arnd Bergmann)
- drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug (Qu Huang)
- drm/msm/mdp5: Do not multiply vclk line count by 100 (Marijn Suijten)
- drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal (Marijn Suijten)
- sched/fair: Ignore percpu threads for imbalance pulls (Lingutla Chandrasekhar)
- media: gscpa/stv06xx: fix memory leak (Hans Verkuil)
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init (Pavel Skripkin)
- media: platform: sti: Fix runtime PM imbalance in regs_show (Dinghao Liu)
- media: i2c: adv7842: fix possible use-after-free in adv7842_remove() (Yang Yingliang)
- media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove() (Yang Yingliang)
- media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() (Yang Yingliang)
- media: adv7604: fix possible use-after-free in adv76xx_remove() (Yang Yingliang)
- media: tc358743: fix possible use-after-free in tc358743_remove() (Yang Yingliang)
- power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() (Yang Yingliang)
- power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() (Yang Yingliang)
- clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return (Colin Ian King)
- media: vivid: update EDID (Hans Verkuil)
- media: em28xx: fix memory leak (Muhammad Usama Anjum)
- scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() (Ewan D. Milne)
- scsi: smartpqi: Add new PCI IDs (Kevin Barnett)
- scsi: smartpqi: Correct request leakage during reset operations (Murthy Bhat)
- ata: ahci: Disable SXS for Hisilicon Kunpeng920 (Xingui Yang)
- mmc: sdhci-pci: Add PCI IDs for Intel LKF (Adrian Hunter)
- scsi: qla2xxx: Fix use after free in bsg (Quinn Tran)
- drm/vkms: fix misuse of WARN_ON (Dmitry Vyukov)
- scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() (Bart Van Assche)
- drm/amd/display: fix dml prefetch validation (Dmytro Laktyushkin)
- drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool' (Anson Jacob)
- drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f (shaoyunl)