An unbreakable Enterprise kernel security update (aarch64) has been released for Oracle Linux 7.

El-errata: ELSA-2021-9407 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update (aarch64)

Oracle Linux Security Advisory ELSA-2021-9407

  http://linux.oracle.com/errata/ELSA-2021-9407.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

aarch64:
kernel-uek-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-debug-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-debug-devel-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-devel-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-tools-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-tools-libs-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-tools-libs-devel-4.14.35-2047.506.8.el7uek.aarch64.rpm
perf-4.14.35-2047.506.8.el7uek.aarch64.rpm
python-perf-4.14.35-2047.506.8.el7uek.aarch64.rpm
kernel-uek-headers-4.14.35-2047.506.8.el7uek.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.14.35-2047.506.8.el7uek.src.rpm

Related CVEs:

CVE-2020-14304
CVE-2020-25670
CVE-2020-25671
CVE-2020-25672
CVE-2021-33909



Description of changes:

[4.14.35-2047.506.8.el7uek]
- A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33187189]
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33187192]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33187195]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33187199]
- rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge) [Orabug: 33187200]

[4.14.35-2047.506.7.el7uek]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le) [Orabug: 33167357]
- Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy) [Orabug: 33167350]

[4.14.35-2047.506.6.el7uek]
- rds: Check for illegal flags when creating an MR (Håkon Bugge) [Orabug: 33144339]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen) [Orabug: 33135633] {CVE-2021-33909}

[4.14.35-2047.506.5.el7uek]
- xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky) [Orabug: 33131619]

[4.14.35-2047.506.4.el7uek]
- rds/ib: avoid use of trace_printk() (Alan Maguire) [Orabug: 33120588]
- RDMA/cma: Remove unnecessary INIT->INIT transition (Håkon Bugge) [Orabug: 33114515]
- ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan) [Orabug: 33027709]

[4.14.35-2047.506.3.el7uek]
- capmem: Mark the pages as non-readonly+dirty. (David Clear) [Orabug: 33116008]
- PCI/ERR: Retain status from error notification (Keith Busch) [Orabug: 32747989]
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo) [Orabug: 33106366]
- net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk) [Orabug: 31895299] {CVE-2020-14304}

[4.14.35-2047.506.2.el7uek]
- KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins) [Orabug: 33089240]
- mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi) [Orabug: 33042327]
- mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi) [Orabug: 33042327]
- mm: soft-offline: close the race against page allocation (Naoya Horiguchi) [Orabug: 33042327]
- mm: fix race on soft-offlining free huge pages (Naoya Horiguchi) [Orabug: 33042327]
- Revert "xen/fb: allow xenfb initialization for hvm guests" (Joe Jin) [Orabug: 33075317]
- scsi: qla2xxx: Fix use after free in bsg (Quinn Tran) [Orabug: 32912131]
- block: fix a race between del_gendisk and BLKRRPART (Gulam Mohamed) [Orabug: 32285697]
- block: prevent block device lookups at the beginning of del_gendisk (Christoph Hellwig) [Orabug: 32285697]
- block: take bd_mutex around delete_partitions in del_gendisk (Christoph Hellwig) [Orabug: 32285697]
- Linux 4.14.231 (Greg Kroah-Hartman)
- xen/events: fix setting irq affinity (Juergen Gross)
- perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)
- net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)
- block: only update parent bi_status when bio fail (Yufen Yu)
- gfs2: report "already frozen/thawed" errors (Bob Peterson)
- drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)
- KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)
- KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)
- Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath." (Greg Kroah-Hartman)
- net: ieee802154: stop dump llsec params for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)
- net: ieee802154: forbid monitor for set llsec params (Alexander Aring)
- net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)
- net: ieee802154: fix nl802154 add llsec key (Alexander Aring)
- net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)
- net: ieee802154: fix nl802154 del llsec key (Alexander Aring)
- net: ieee802154: nl-mac: fix check on panid (Alexander Aring)
- net: mac802154: Fix general protection fault (Pavel Skripkin)
- drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)
- drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)
- net: tun: set tun->dev->addr_len during TUNSETLINK processing (Phillip Potter)
- cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)
- usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)
- net/ncsi: Avoid GFP_KERNEL in response handler (Samuel Mendoza-Jonas)
- net/ncsi: Refactor MAC, VLAN filters (Samuel Mendoza-Jonas)
- net/ncsi: Add generic netlink family (Samuel Mendoza-Jonas)
- net/ncsi: Don't return error on normal response (Samuel Mendoza-Jonas)
- net/ncsi: Improve general state logging (Samuel Mendoza-Jonas)
- net/ncsi: Make local function ncsi_get_filter() static (Wei Yongjun)
- clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)
- RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)
- net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)
- s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)
- workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)
- clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)
- clk: fix invalid usage of list cursor in register (Lukasz Bartosik)
- soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)
- ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)
- net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)
- ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)
- net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)
- gianfar: Handle error code at MAC address change (Claudiu Manoil)
- sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)
- amd-xgbe: Update DMA coherency values (Shyam Sundar S K)
- ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang)
- regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven)
- i2c: turn recovery error on init to debug (Wolfram Sang)
- usbip: synchronize event handler with sysfs code paths (Shuah Khan)
- usbip: stub-dev synchronize sysfs code paths (Shuah Khan)
- usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan)
- net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov)
- net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet)
- batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field (Tetsuo Handa)
- ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behún)
- parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang)
- parisc: parisc-agp requires SBA IOMMU driver (Helge Deller)
- fs: direct-io: fix missing sdio->boundary (Jack Qiu)
- ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich)
- net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh (Muhammad Usama Anjum)
- xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu)
- nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni)
- nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni) {CVE-2020-25672}
- nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni) {CVE-2020-25671}
- nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni) {CVE-2020-25670}
- ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede)
- ALSA: aloop: Fix initialization of controls (Jonas Holmberg)
- Linux 4.14.230 (Greg Kroah-Hartman)
- can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello)
- init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada)
- init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens)
- cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch)
- cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg)
- ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich)
- scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck)
- x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann)
- platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas)
- drm/msm: Ratelimit invalid-fence message (Rob Clark)
- mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel)
- mISDN: fix crash in fritzpci (Tong Zhang)
- net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov)
- ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard)
- Linux 4.14.229 (Greg Kroah-Hartman)
- drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng)
- staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan)
- staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan)
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang)
- USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold)
- USB: cdc-acm: downgrade message to debug (Oliver Neukum)
- USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum)
- cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum)
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun)
- usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren)
- USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)
- usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan)
- firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma)
- extcon: Fix error handling in extcon_dev_register (Dinghao Liu)
- extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski)
- pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan)
- reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa)
- drm/amdgpu: check alignment on CPU page for bo map (X Ruoyao)
- drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das)
- mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy)
- tracing: Fix stack trace event size (Steven Rostedt (VMware))
- ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang)
- ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang)
- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang)
- bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer)
- net: wan/lmc: unregister device when no matching device is found (Tong Zhang)
- appletalk: Fix skb allocation size in loopback case (Doug Brown)
- net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi)
- brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce)
- ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F))
- ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar)
- staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang)
- staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang)
- scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan)
- scsi: st: Fix a use after free in st_open() (Lv Yunlong)
- vhost: Fix vhost_vq_reset() (Laurent Vivier)
- powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy)
- ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure)
- ASoC: cs42l42: Fix mixer volume control (Lucas Tanure)
- ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede)
- ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood)
- ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)
- ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)
- rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields)
- ext4: fix bh ref count on error paths (Zhaolong Zhang)
- ipv6: weaken the v4mapped source check (Jakub Kicinski)
- selinux: vsock: Set SID for socket returned by accept() (David Brazdil)
- Linux 4.14.228 (Greg Kroah-Hartman)
- can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" (Marc Kleine-Budde)
- ext4: add reclaim checks to xattr code (Jan Kara)
- mac80211: fix double free in ibss_leave (Markus Theil)
- net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet)
- net: sched: validate stab values (Eric Dumazet)
- can: dev: Move device back to init netns on owning netns delete (Martin Willi)
- locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner)
- scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai)
- scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai)
- perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter)
- ACPI: scan: Use unique number for instance_no (Andy Shevchenko)
- ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki)
- RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja)
- net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin)
- arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin)
- drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov)
- net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe)
- net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold)
- mac80211: fix rate mask reset (Johannes Berg)
- can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun)
- can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang)
- can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang)
- can: peak_usb: add forgotten supported devices (Stephane Grosjean)
- ftgmac100: Restart MAC HW once (Dylan Hung)
- net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong)
- e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu)
- e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits)
- net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port (Florian Fainelli)
- macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet)
- libbpf: Fix INSTALL flag order (Georgi Valkov)
- bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko)
- ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea)
- arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geantă)
- arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geantă)
- arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geantă)
- squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher)
- squashfs: fix inode lookup sanity checks (Sean Nyekjaer)
- ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich)
- ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich)
- nfs: we don't support removing system.nfs4_acl (J. Bruce Fields)
- drm/radeon: fix AGP dependency (Christian König)
- u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra)
- sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner)
- atm: idt77252: fix null-ptr-dereference (Tong Zhang)
- atm: uPD98402: fix incorrect allocation (Tong Zhang)
- net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai)
- net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai)
- NFS: Correct size calculation for create reply length (Frank Sorenson)
- nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler)
- gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li)
- sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov)
- net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai)
- ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu)
- Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" (Hayes Wang)
- atm: lanai: dont run lanai_dev_close if not open (Tong Zhang)
- atm: eni: dont release is never initialized (Tong Zhang)
- powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman)
- net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)

[4.14.35-2047.506.1.el7uek]
- drivers/uio: Fix incorrect calls to pm_runtime_enable/disable. (David Clear) [Orabug: 33070176]
- dts/pensando: Add board config partitions. (David Clear) [Orabug: 33070176]
- drivers: updates driver version string to 1.15.9.7 (Thomas Tai) [Orabug: 33065280]
- drivers: updates for 1.15.9.7 (Shannon Nelson) [Orabug: 33065280]
- arm64: Stop printing the virtual memory layout (Laura Abbott) [Orabug: 33059865]
- uek-rpm: Fix Pensando's network application error (Thomas Tai) [Orabug: 33050671]
- RDMA/cma: Fix rdma_resolve_route memory leak (Gerd Rausch) [Orabug: 33048382]
- uek-rpm: enable selinux for Pensando (Thomas Tai) [Orabug: 33032940]
- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran) [Orabug: 32989009]
- xfs: fix lockup issue (Junxiao Bi) [Orabug: 32880215]
- Build Pensando drivers for uek5 kernel (Vijay Kumar) [Orabug: 32569849]
- net/ethernet/pensando: Fix Pensando driver build (Vijay Kumar) [Orabug: 32569849]
- Added mdev, mnet_uio_pdrv and ionic_mnic driver src to UEK5 (Vijay Kumar) [Orabug: 32569849]
- Linux 4.14.227 (Greg Kroah-Hartman)
- genirq: Disable interrupts for force threaded handlers (Thomas Gleixner)
- ext4: fix potential error in ext4_do_update_inode (Shijie Luo)
- ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F))
- ext4: find old entry again if failed to rename whiteout (zhangyi (F))
- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov)
- x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov)
- kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov)
- x86/ioapic: Ignore IRQ2 again (Thomas Gleixner)
- PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler)
- iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang)
- iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang)
- iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang)
- iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu)
- iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter)
- iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux)
- iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron)
- usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin)
- USB: replace hardcode maximum usb string length by definition (Macpaul Lin)
- usb-storage: Add quirk to defeat Kindle's automatic unload (Alan Stern)
- nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg)
- scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter)
- net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)
- sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras)
- svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler)
- NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty)
- nvmet: don't check iosqes,iocqes for discovery controllers (Sagi Grimberg)
- tools build feature: Check if pthread_barrier_t is available (Arnaldo Carvalho de Melo)
- perf: Make perf able to build with latest libbfd (Changbin Du)
- tools build: Check if gettid() is available before providing helper (Arnaldo Carvalho de Melo)
- tools build feature: Check if eventfd() is available (Arnaldo Carvalho de Melo)
- tools build feature: Check if get_current_dir_name() is available (Arnaldo Carvalho de Melo)
- perf tools: Use - Revert "PM: runtime: Update device status before letting suppliers suspend" (Rafael J. Wysocki)
- net: dsa: b53: Support setting learning on port (Florian Fainelli)
- bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)
- ext4: check journal inode extents more carefully (Jan Kara)
- ext4: don't allow overlapping system zones (Jan Kara)
- Linux 4.14.226 (Greg Kroah-Hartman)
- xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross)
- xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross)
- xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross)
- iio: imu: adis16400: release allocated memory on failure (Navid Emamdoost)
- KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier)
- hwmon: (lm90) Fix max6658 sporadic wrong temperature reading (Boyang Yu)
- binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak)
- powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao)
- include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle))
- stop_machine: mark helpers __always_inline (Arnd Bergmann)
- configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang)
- block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai)
- NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek)
- sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov)
- staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott)
- staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott)
- staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott)
- staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson)
- staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson)
- staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter)
- staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter)
- staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter)
- staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() (Dan Carpenter)
- staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() (Dan Carpenter)
- usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan)
- usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan)
- usbip: fix vudc to check for stream socket (Shuah Khan)
- usbip: fix vhci_hcd to check for stream socket (Shuah Khan)
- usbip: fix stub_dev to check for stream socket (Shuah Khan)
- USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel)
- USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal)
- USB: serial: ch341: add new Product ID (Niv Sardi)
- USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin)
- usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman)
- xhci: Improve detection of device initiated wake signal. (Mathias Nyman)
- usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda)
- usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol)
- usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol)
- USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter)
- Goodix Fingerprint device is not a modem (Yorick de Wid)
- mmc: core: Fix partition switch time for eMMC (Adrian Hunter)
- s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland)
- s390/dasd: fix hanging DASD driver unbind (Stefan Haberland)
- Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") (Eric W. Biederman)
- ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar (Takashi Iwai)
- ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai)
- ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai)
- ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai)
- scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie)
- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens)
- PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczyński)
- PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser)
- powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev)
- powerpc: improve handling of unrecoverable system reset (Nicholas Piggin)
- mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing)
- mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()' (Christophe JAILLET)
- udf: fix silent AED tagLocation corruption (Steven J. Magnani)
- net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang)
- media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy)
- s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman)
- drm: meson_drv add shutdown function (Artem Lapkin)
- drm/compat: Clear bounce structures (Daniel Vetter)
- s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing)
- perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers)
- net: stmmac: stop each tx channel independently (Joakim Zhang)
- net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil)
- net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil)
- net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He)
- net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas)
- net: sched: avoid duplicates in classes dump (Maximilian Heyne)
- net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong)
- net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang)
- sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov)
- Revert "mm, slub: consider rest of partial list if acquire_slab() fails" (Linus Torvalds)
- cifs: return proper error code in statfs(2) (Paulo Alcantara)
- netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin)
- can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang)
- can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang)
- can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel)
- net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth)
- net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann)
- ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau)
- ethernet: alx: fix order of calls on resume (Jakub Kicinski)
- uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin)
- Linux 4.14.225 (Greg Kroah-Hartman)
- drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno)
- misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju)
- PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas)
- platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede)
- platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede)
- platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede)
- platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede)
- platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede)
- platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede)
- mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto)
- iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin)
- dm table: fix iterate_devices based device capability checks (Jeffle Xu)
- rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter)
- ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King)
- usbip: tools: fix build error for multiple definition (Antonio Borneo)
- PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)
- btrfs: fix raid6 qstripe kmap (Ira Weiny)
- btrfs: raid56: simplify tracking of Q stripe presence (David Sterba)
- Linux 4.14.224 (Greg Kroah-Hartman)
- media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)
- swap: fix swapfile read/write offset (Jens Axboe)
- zsmalloc: account the number of compacted pages correctly (Rokudo Yan)
- xen-netback: respect gnttab_map_refs()'s return value (Jan Beulich)
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)
- parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin)
- f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim)
- media: uvcvideo: Allow entities with no pads (Ricardo Ribalda)
- staging: most: sound: add sanity check for function argument (Christian Gromm)
- Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari)
- x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song)
- ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan)
- pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu)
- wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren)
- vt/consolemap: do font sum unsigned (Jiri Slaby)
- x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit)
- staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu)
- dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven)
- net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean)
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai)
- net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver)
- smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov)
- xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang)
- media: mceusb: sanity check for prescaler value (Sean Young)
- JFS: more checks for invalid superblock (Randy Dunlap)
- arm64: Use correct ll/sc atomic constraints (Andrew Murray)
- arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint (Will Deacon)
- arm64: Avoid redundant type conversions in xchg() and cmpxchg() (Will Deacon)
- arm64 module: set plt* section addresses to 0x0 (Shaoying Xu)
- virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck)
- drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky)
- hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz)
- scripts: set proper OpenSSL include dir also for sign-file (Rolf Eike Beer)
- scripts: use pkg-config to locate libcrypto (Rolf Eike Beer)
- net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)

[4.14.35-2047.506.0.el7uek]
- Linux 4.14.223 (Greg Kroah-Hartman)
- dm era: Update in-core bitset after committing the metadata (Nikos Tsironis)
- net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld)
- ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky)
- ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet)
- sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld)
- gtp: use icmp_ndo_send helper (Jason A. Donenfeld)
- icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld)
- icmp: introduce helper for nat'd source address in network device context (Jason A. Donenfeld)
- dm era: only resize metadata in preresume (Nikos Tsironis)
- dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis)
- dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis)
- dm era: Fix bitset memory leaks (Nikos Tsironis)
- dm era: Verify the data block size hasn't changed (Nikos Tsironis)
- dm era: Recover committed writeset after crash (Nikos Tsironis)
- gfs2: Don't skip dlm unlock if glock has an lvb (Bob Peterson)
- sparc32: fix a user-triggerable oops in clear_user() (Al Viro)
- f2fs: fix out-of-repair __setattr_copy() (Chao Yu)
- printk: fix deadlock when kernel panic (Muchun Song)
- gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev)
- mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li)
- module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song)
- libnvdimm/dimm: Avoid race between probe and available_slots_show() (Dan Williams)
- usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (Yoshihiro Shimoda)
- mm: hugetlb: fix a race between freeing and dissolving the page (Muchun Song)
- hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz)
- fs/affs: release old buffer head on error path (Pan Bian)
- mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian)
- watchdog: mei_wdt: request stop on unregister (Alexander Usyskin)
- arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe)
- floppy: reintroduce O_NDELAY fix (Jiri Kosina)
- x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)
- staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser)
- drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov)
- seccomp: Add missing return in non-void function (Paul Cercueil)
- crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe)
- crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe)
- btrfs: fix extent buffer leak on failure to copy root (Filipe Manana)
- btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik)
- btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik)
- KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen)
- tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley)
- ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou)
- usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt (Thinh Nguyen)
- usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen)
- USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter)
- USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter)
- usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil)
- USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak)
- Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza)
- Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)
- Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crête)
- Input: raydium_ts_i2c - do not send zero length (jeffrey.lin)
- HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke)
- ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao)
- ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki)
- blk-settings: align max_sectors on "logical_block_size" boundary (Mikulas Patocka)
- scsi: bnx2fc: Fix Kconfig warning & CNIC build errors (Randy Dunlap)
- mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin)
- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard)
- arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier)
- mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin)
- mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin)
- ocfs2: fix a use after free on error (Dan Carpenter)
- net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan)
- i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski)
- i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba)
- ext4: fix potential htree index checksum corruption (Theodore Ts'o)
- drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio)
- PCI: Align checking of syscall user config accessors (Heiner Kallweit)
- VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen)
- pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South)
- misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju)
- misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju)
- sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap)
- Input: elo - fix an error code in elo_connect() (Dan Carpenter)
- perf test: Fix unaligned access in sample parsing test (Namhyung Kim)
- perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter)
- spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko)
- powerpc/8xx: Fix software emulation interrupt (Christophe Leroy)
- powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch)
- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter)
- spi: stm32: properly handle 0 byte transfer (Alain Volmat)
- RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson)
- perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo)
- tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware))
- amba: Fix resource leak for drivers without .remove (Uwe Kleine-König)
- ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (Vladimir Murzin)
- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET)
- powerpc/47x: Disable 256k page size (Christophe Leroy)
- IB/umad: Return EIO in case of when device disassociated (Shay Drory)
- auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven)
- isofs: release buffer head before return (Pan Bian)
- spi: atmel: Put allocated master before return (Pan Bian)
- certs: Fix blacklist flag type confusion (David Howells)
- regulator: axp20x: Fix reference cout leak (Pan Bian)
- clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix)
- rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski)
- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea)
- of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat)
- fdt: Properly handle "no-map" field in the memory region (KarimAllah Ahmed)
- mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda)
- dmaengine: hsu: disable spurious interrupt (Ferry Toth)
- dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET)
- dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET)
- HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap)
- spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav)
- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl)
- capabilities: Don't allow writing ambiguous v3 file capabilities (Eric W. Biederman)
- jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix)
- fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King)
- ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian)
- ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian)
- crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() (Daniele Alessandrelli)
- hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock)
- btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng)
- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft))
- ata: ahci_brcm: Add back regulators management (Florian Fainelli)
- media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart)
- media: pxa_camera: declare variable when DEBUG is defined (Tom Rix)
- media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET)
- media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng)
- media: lmedm04: Fix misuse of comma (Joe Perches)
- crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa)
- ASoC: cs42l56: fix up error handling in probe (Dan Carpenter)
- media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu)
- media: media/pci: Fix memleak in empress_init (Dinghao Liu)
- media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET)
- media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi)
- MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor)
- MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor)
- crypto: sun4i-ss - fix kmap usage (Corentin Labbe)
- gma500: clean up error handling in init (Dan Carpenter)
- drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang)
- fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap)
- net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier)
- net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K)
- net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K)
- ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan)
- b43: N-PHY: Fix the update of coef for the PHY revision >= 3case (Colin Ian King)
- mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King)
- bnxt_en: reverse order of TX disable and carrier off (Edwin Peer)
- ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lüssing)
- bpf_lru_list: Read double-checked variable once without lock (Marco Elver)
- ARM: s3c: fix fiq for clang IAS (Arnd Bergmann)
- arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht)
- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai)
- usb: dwc2: Make "trimming xfer length" a debug message (Guenter Roeck)
- usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck)
- usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck)
- ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren)
- Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian)
- Bluetooth: drop HCI device reference before return (Pan Bian)
- usb: gadget: u_audio: Free requests only after callback (Jack Pham)
- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (Christophe JAILLET)
- arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski)
- arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski)
- ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski)
- Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill)
- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)
- random: fix the RNDRESEEDCRNG ioctl (Eric Biggers)
- MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin)
- kdb: Make memory allocations more robust (Sumit Garg)
- vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers)
- scripts/recordmcount.pl: support big endian for ARCH sh (Rong Chen)
- cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. (Shyam Prasad N)
- NET: usb: qmi_wwan: Adding support for Cinterion MV31 (Christoph Schemmel)
- arm64: tegra: Add power-domain for Tegra210 HDA (Sameer Pujar)
- ntfs: check for valid standard information attribute (Rustam Kovhaev)
- usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable (Stefan Ursella)
- HID: make arrays usage and value to be the same (Will McVicker)
- Linux 4.14.222 (Greg Kroah-Hartman)
- kvm: check tlbs_dirty directly (Lai Jiangshan)
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)
- USB: Gadget Ethernet: Re-enable Jumbo frames. (John Greb)
- scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)
- xen/arm: don't ignore return errors from set_phys_to_machine (Stefano Stabellini)
- tracing: Avoid calling cc-option -mrecord-mcount for every Makefile (Vasily Gorbik)
- tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-mcount (Greg Thelen)
- trace: Use -mcount-record for dynamic ftrace (Andi Kleen)
- x86/build: Disable CET instrumentation in the kernel for 32-bit too (Borislav Petkov)
- h8300: fix PREEMPTION build, TI_PRE_COUNT undefined (Randy Dunlap)
- i2c: stm32f7: fix configuration of the digital filter (Alain Volmat)
- vsock: fix locking in vsock_shutdown() (Stefano Garzarella)
- vsock/virtio: update credit only if socket is not closed (Stefano Garzarella)
- net: watchdog: hold device global xmit lock during tx disable (Edwin Peer)
- net/vmw_vsock: improve locking in vsock_connect_timeout() (Norbert Slusarek)
- usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (Serge Semin)
- usb: dwc3: ulpi: fix checkpatch warning (Felipe Balbi)
- netfilter: conntrack: skip identical origin tuple in same zone only (Florian Westphal)
- netfilter: xt_recent: Fix attempt to update deleted entry (Jozsef Kadlecsik)
- bpf: Check for integer overflow when using roundup_pow_of_two() (Bui Quang Minh)
- memblock: do not start bottom-up allocations with kernel_end (Roman Gushchin)
- ARM: ensure the signal page contains defined contents (Russell King)
- ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL (Alexandre Belloni)
- ovl: skip getxattr of security labels (Amir Goldstein)
- cap: fix conversions on getxattr (Miklos Szeredi)
- ovl: perform vfs_getxattr() with mounter creds (Miklos Szeredi)
- platform/x86: hp-wmi: Disable tablet-mode reporting by default (Hans de Goede)
- arm64: dts: rockchip: Fix PCIe DT properties on rk3399 (Marc Zyngier)
- MIPS: BMIPS: Fix section mismatch warning (Jaedon Shin)
- arm/xen: Don't probe xenbus as part of an early initcall (Julien Grall)
- tracing: Check length before giving out the filter buffer (Steven Rostedt (VMware))
- tracing: Do not count ftrace events in top level enable output (Steven Rostedt (VMware))
- squashfs: add more sanity checks in xattr id lookup (Phillip Lougher)
- squashfs: add more sanity checks in inode lookup (Phillip Lougher)
- squashfs: add more sanity checks in id lookup (Phillip Lougher)
- memcg: fix a crash in wb_workfn when a device disappears (Theodore Ts'o)
- include/trace/events/writeback.h: fix -Wstringop-truncation warnings (Qian Cai)
- lib/string: Add strscpy_pad() function (Tobin C. Harding)
- SUNRPC: Handle 0 length opaque XDR object data properly (Dave Wysochanski)
- SUNRPC: Move simple_get_bytes and simple_get_netobj into private header (Dave Wysochanski)
- iwlwifi: mvm: guard against device removal in reprobe (Johannes Berg)
- iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (Emmanuel Grumbach)
- iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (Johannes Berg)
- pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() (Trond Myklebust)
- af_key: relax availability checks for skb size calculation (Cong Wang)
- remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar)
- remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar)
- fgraph: Initialize tracing_graph_pause at task creation (Steven Rostedt (VMware))
- Linux 4.14.221 (Greg Kroah-Hartman)
- net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add (DENG Qingfang)
- iommu/vt-d: Do not use flush-queue when caching-mode is on (Nadav Amit)
- Input: xpad - sync supported devices with fork on GitHub (Benjamin Valentin)
- x86/apic: Add extra serialization for non-serializing MSRs (Dave Hansen)
- x86/build: Disable CET instrumentation in the kernel (Josh Poimboeuf)
- mm: thp: fix MADV_REMOVE deadlock on shmem THP (Hugh Dickins)
- mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active (Muchun Song)
- mm: hugetlb: fix a race between isolating and freeing page (Muchun Song)
- mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page (Muchun Song)
- ARM: footbridge: fix dc21285 PCI configuration accessors (Russell King)
- nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs (Thorsten Leemhuis)
- mmc: core: Limit retries when analyse of SDIO tuples fails (Fengnan Chang)
- smb3: Fix out-of-bounds bug in SMB2_negotiate() (Gustavo A. R. Silva)
- cifs: report error instead of invalid when revalidating a dentry fails (Aurelien Aptel)
- xhci: fix bounce buffer usage for non-sg list case (Mathias Nyman)
- kretprobe: Avoid re-registration of the same kretprobe earlier (Wang ShaoBo)
- mac80211: fix station rate table updates on assoc (Felix Fietkau)
- ovl: fix dentry leak in ovl_get_redirect (Liangyan)
- usb: dwc2: Fix endpoint direction check in ep_from_windex (Heiko Stuebner)
- USB: usblp: don't call usb_set_interface if there's a single alt (Jeremy Figgins)
- USB: gadget: legacy: fix an error code in eth_bind() (Dan Carpenter)
- ipv4: fix race condition between route lookup and invalidation (Wei Wang)
- elfcore: fix building with clang (Arnd Bergmann)
- objtool: Support Clang non-section symbols in ORC generation (Josh Poimboeuf)
- net: lapb: Copy the skb before sending a packet (Xie He)
- arm64: dts: ls1046a: fix dcfg address range (Zyta Szpak)
- USB: serial: option: Adding support for Cinterion MV31 (Christoph Schemmel)
- USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 (Chenxin Jin)
- USB: serial: cp210x: add pid/vid for WSDA-200-USB (Pho Tran)
- Linux 4.14.220 (Greg Kroah-Hartman)
- kthread: Extract KTHREAD_IS_PER_CPU (Peter Zijlstra)
- objtool: Don't fail on missing symbol table (Josh Poimboeuf)
- scsi: ibmvfc: Set default timeout to avoid crash during migration (Brian King)
- mac80211: fix fast-rx encryption check (Felix Fietkau)
- scsi: libfc: Avoid invoking response handler twice if ep is already completed (Javed Hasan)
- scsi: scsi_transport_srp: Don't block target in failfast state (Martin Wilck)
- x86: __always_inline __{rd,wr}msr() (Peter Zijlstra)
- phy: cpcap-usb: Fix warning for missing regulator_disable (Tony Lindgren)
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)
- base: core: Remove WARN_ON from link dependencies check (Benjamin Gaignard)
- net_sched: gen_estimator: support large ewma log (Eric Dumazet)
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)
- ACPI: thermal: Do not call acpi_thermal_check() directly (Rafael J. Wysocki)
- ibmvnic: Ensure that CRQ entry read are correctly ordered (Lijun Pan)
- net: dsa: bcm_sf2: put device node before return (Pan Bian)
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33044345]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 32804265]
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 32863569]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 32863569]
- xfs: fix xlog_finish_defer_ops (Wengang Wang) [Orabug: 32982355]
- Revert "Allow mce to reset instead of panic on UE" (William Roche) [Orabug: 32820277]