An unbreakable Enterprise kernel-container security update has been released for Oracle Linux 8.

El-errata: ELSA-2021-9623 Important: Oracle Linux 8 Unbreakable Enterprise kernel-container security update

Oracle Linux Security Advisory ELSA-2021-9623

  http://linux.oracle.com/errata/ELSA-2021-9623.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-container-5.4.17-2136.302.6.1.el8.x86_64.rpm
kernel-uek-container-debug-5.4.17-2136.302.6.1.el8.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/kernel-uek-container-5.4.17-2136.302.6.1.el8.src.rpm

Related CVEs:

CVE-2021-41864



Description of changes:

[5.4.17-2136.302.6.1.el8]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug:
33667276]

[5.4.17-2136.302.6.el8]
- Revert "fs: align IOCB_* flags with RWF_* flags" (Prasad Singamsetty)
[Orabug: 33627551]

[5.4.17-2136.302.5.el8]
- Revert "drm: Initialize struct drm_crtc_state.no_vblank from device settings" (Somasundaram Krishnasamy) [Orabug: 33611832]
- Revert "drm/atomic-helper: reset vblank on crtc reset" (Somasundaram Krishnasamy) [Orabug: 33611832]
- net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria) [Orabug: 29444833]
- net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu) [Orabug: 29444833]
- net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu) [Orabug: 29444833]
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling) [Orabug: 33538583]
- uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y for uek6/u3 (Sherry Yang) [Orabug: 33580598]
- Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds) [Orabug: 33580598]
- x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora) [Orabug: 33580824]
- x86/asm: add clzero based page clearing (Ankur Arora) [Orabug: 33580824]
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora) [Orabug: 33580824]
- uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy) [Orabug: 33596873]

[5.4.17-2136.302.4.el8]
- KVM: nSVM: Copy vmcb12 nRIP field to vmcb02 (Maciej S. Szmigiero) [Orabug: 33590307]
- KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint (Maciej S. Szmigiero) [Orabug: 33590307]
- KVM: nSVM: move nested vmrun tracepoint to enter_svm_guest_mode (Maxim Levitsky) [Orabug: 33590307]
- x86/platform/uv: Add uv_hub_info_s to UEK KABI (John Donnelly) [Orabug: 33397019]
- x86/platform/uv: Modify order of fields in uv_hub_info_s to avoid panic (Steve Wahl) [Orabug: 33397019]
- arm64/bpf: remove 128MB limit for BPF JIT programs (Russell King) [Orabug: 33518795]
- kernfs: don't create a negative dentry if inactive node exists (Ian Kent) [Orabug: 33548753]
- kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [Orabug: 33548753]
- kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [Orabug: 33548753]
- kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [Orabug: 33548753]
- kernfs: switch kernfs to use an rwsem (Ian Kent) [Orabug: 33548753]
- kernfs: use VFS negative dentry caching (Ian Kent) [Orabug: 33548753]
- kernfs: add a revision to identify directory node changes (Ian Kent) [Orabug: 33548753]
- selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [Orabug: 33577735]
- Revert "net/rds: Allocate pages on HCA NUMA nodeid" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Use the same vector for send & receive" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Get rid of tasklets" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Put more CPU cores to work" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Make workers use the designated CPU" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/mlx5: Add new verb "ib_get_vector_irqn"" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Add "preferred_cpu" option to "rds_rdma.ko"" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Follow the observed CQ CPU affinity" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Throttle check for CQ CPU affinity" (Gerd Rausch) [Orabug: 33590962]
- Revert "net/rds: Bring tasklets back for better latency" (Gerd Rausch) [Orabug: 33590962]
- Revert "IB/mlx4: Implement backend callback for "ib_get_vector_irqn"" (Gerd Rausch) [Orabug: 33590962]

[5.4.17-2136.302.2.el8]
- x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield) [Orabug: 32921559]
- x86/kernel: Convert to new CPU match macros (Thomas Gleixner) [Orabug: 32921559]
- net/mlx5: Disable mr_cache for SFs (Mikhael Goikhman) [Orabug: 33523558]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster) [Orabug: 33571340]
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui) [Orabug: 33548142]
- uek-rpm: Enable CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86_64 kernels (Dave Kleikamp) [Orabug: 33564971]

[5.4.17-2136.302.1.el8]
- arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga) [Orabug: 33428617]
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu) [Orabug: 33431722] {CVE-2021-41864}
- xen/netfront: stop tx queues during live migration (Dongli Zhang) [Orabug: 33536399]
- Revert "xfs: Lower CIL flush limit for large logs" (Catherine Hoang) [Orabug: 33536463]
- Revert "xfs: Throttle commits on delayed background CIL push" (Catherine Hoang) [Orabug: 33536463]
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo) [Orabug: 33536966]
- nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields) [Orabug: 33536966]
- rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Håkon Bugge) [Orabug: 33538397]

[5.4.17-2136.302.0.el8]
- LTS tag: v5.4.152 (Jack Vogel)
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan)
- silence nfscache allocation warnings with kvzalloc (Rik van Riel)
- perf/x86: Reset destroy callback on event init failure (Anand K Mistry)
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (Fares Mehanna)
- KVM: do not shrink halt_poll_ns below grow_start (Sergey Senozhatsky)
- tools/vm/page-types: remove dependency on opt_file for idle page tracking (Changbin Du)
- scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong)
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (Shuah Khan)
- selftests: be sure to make khdr before other targets (Li Zhijian)
- usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang)
- usb: testusb: Fix for showing the connection speed (Faizel K B)
- scsi: sd: Free scsi_disk device via put_device() (Ming Lei)
- ext2: fix sleeping in atomic bugs on error (Dan Carpenter)
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds)
- xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich)
- net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean)
- LTS tag: v5.4.151 (Jack Vogel)
- HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam)
- netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik)
- HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman)
- usb: hso: remove the bailout parameter (Dongliang Mu)
- libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind (sumiyawang)
- PCI: Fix pci_host_bridge struct device release/free handling (Rob Herring)
- net: stmmac: don't attach interface until resume finishes (Leon Yu)
- net: udp: annotate data race around udp_sk(sk)->corkflag (Eric Dumazet)
- HID: u2fzero: ignore incomplete packets without data (Andrej Shadura)
- ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun)
- ext4: fix reserved space counter leakage (Jeffle Xu)
- ext4: fix loff_t overflow in ext4_max_bitmap_size() (Ritesh Harjani)
- ipack: ipoctal: fix module reference leak (Johan Hovold)
- ipack: ipoctal: fix missing allocation-failure check (Johan Hovold)
- ipack: ipoctal: fix tty-registration error handling (Johan Hovold)
- ipack: ipoctal: fix tty registration race (Johan Hovold)
- ipack: ipoctal: fix stack information leak (Johan Hovold)
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error (Nirmoy Das)
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings (Chen Jingwen)
- perf/x86/intel: Update event constraints for ICX (Kan Liang)
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet)
- net: sched: flower: protect fl_walk() with rcu (Vlad Buslov)
- net: hns3: do not allow call hns3_nic_net_open repeatedly (Jian Shen)
- scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy)
- Revert "block, bfq: honor already-setup queue merges" (Jens Axboe)
- selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (Jiri Benc)
- e100: fix buffer overrun in e100_get_regs (Jacob Keller)
- e100: fix length calculation in e100_get_regs_len (Jacob Keller)
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present (Xiao Liang)
- hwmon: (tmp421) fix rounding for negative values (Paul Fertser)
- hwmon: (tmp421) report /PVLD condition as fault (Paul Fertser)
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long)
- mac80211-hwsim: fix late beacon hrtimer handling (Johannes Berg)
- mac80211: mesh: fix potentially unaligned access (Johannes Berg)
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi)
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang)
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Vadim Pasternak)
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi)
- drm/amd/display: Pass PCI deviceid into DC (Charlene Liu)
- x86/kvmclock: Move this_cpu_pvti into kvmclock.h (Zelin Deng)
- mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg)
- scsi: ufs: Fix illegal offset in UPIU event trace (Jonathan Hsu)
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
- fs-verity: fix signed integer overflow with i_size near S64_MAX (Eric Biggers)
- usb: cdns3: fix race condition before setting doorbell (Pawel Laszczak)
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse)
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao)
- tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente)
- LTS tag: v5.4.150 (Jack Vogel)
- qnx4: work around gcc false positive warning bug (Linus Torvalds)
- xen/balloon: fix balloon kthread freezing (Juergen Gross)
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohár)
- thermal/drivers/int340x: Do not set a wrong tcc offset on resume (Antoine Tenart)
- EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri)
- spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds)
- net: 6pack: Fix tx timeout and slot time (Guenter Roeck)
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck)
- arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li)
- parisc: Use absolute_pointer() to define PAGE0 (Helge Deller)
- qnx4: avoid stringop-overread errors (Linus Torvalds)
- sparc: avoid stringop-overread errors (Linus Torvalds)
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck)
- compiler.h: Introduce absolute_pointer macro (Guenter Roeck)
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin)
- sparc32: page align size in arch_dma_alloc (Andreas Larsson)
- nvme-multipath: fix ANA state updates when a namespace is not present (Anton Eidelman)
- xen/balloon: use a kernel thread instead a workqueue (Juergen Gross)
- bpf: Add oversize check before call kvcalloc() (Bixuan Cui)
- ipv6: delay fib6_sernum increase in fib6_add (zhang kai)
- m68k: Double cast io functions to unsigned long (Guenter Roeck)
- net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson)
- net: macb: fix use after free on rmmod (Tong Zhang)
- blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng)
- md: fix a lock order reversal in md_alloc (Christoph Hellwig)
- irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
- irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (Randy Dunlap)
- scsi: lpfc: Use correct scnprintf() limit (Dan Carpenter)
- scsi: qla2xxx: Restore initiator in dual mode (Dmitry Bogdanov)
- cifs: fix a sign extension bug (Dan Carpenter)
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter)
- fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (Jiapeng Chong)
- fpga: machxo2-spi: Return an error on failure (Tom Rix)
- tty: synclink_gt: rename a conflicting function name (Randy Dunlap)
- tty: synclink_gt, drop unneeded forward declarations (Jiri Slaby)
- scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li)
- net/mlx4_en: Don't allow aRFS for encapsulated packets (Aya Levin)
- qed: rdma - don't wait for resources under hw error recovery flow (Shai Malin)
- gpio: uniphier: Fix void functions to remove return value (Kunihiko Hayashi)
- net/smc: add missing error check in smc_clc_prfx_set() (Karsten Graul)
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan)
- enetc: Fix illegal access when reading affinity_hint (Claudiu Manoil)
- platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (Andy Shevchenko)
- afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (David Howells)
- net: hso: fix muxed tty registration (Johan Hovold)
- serial: mvebu-uart: fix driver's tx_empty callback (Pali Rohár)
- xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I)
- btrfs: prevent __btrfs_dump_space_info() to underflow its free space (Qu Wenruo)
- erofs: fix up erofs_lookup tracepoint (Gao Xiang)
- mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter)
- USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao)
- USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski)
- USB: serial: option: add Telit LN920 compositions (Carlo Lobrano)
- USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski)
- usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I)
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski)
- staging: greybus: uart: fix tty use after free (Johan Hovold)
- binder: make sure fd closes complete (Todd Kjos)
- USB: cdc-acm: fix minor-number release (Johan Hovold)
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt)
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary)
- xen/x86: fix PV trap handling on secondary processors (Jan Beulich)
- cifs: fix incorrect check for null pointer in header_assemble (Steve French)
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter)
- usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (Minas Harutyunyan)
- usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (Minas Harutyunyan)
- usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter)
- LTS tag: v5.4.149 (Jack Vogel)
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck)
- rtc: rx8010: select REGMAP_I2C (Yu-Tung Chang)
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin)
- pwm: stm32-lp: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- pwm: rockchip: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- pwm: img: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun)
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun)
- btrfs: fix lockdep warning while mounting sprout fs (Anand Jain)
- ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton)
- ceph: request Fw caps before updating the mtime in ceph_write_iter (Jeff Layton)
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey)
- dmaengine: ioat: depends on !UML (Johannes Berg)
- dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (Zou Wei)
- parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck)
- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (Thomas Gleixner)
- thermal/core: Fix thermal_cooling_device_register() prototype (Arnd Bergmann)
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn)
- net: stmmac: reset Tx desc base address before restarting Tx (Jongsung Kim)
- phy: avoid unnecessary link-up delay in polling mode (Petr Oros)
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-König)
- profiling: fix shift-out-of-bounds bugs (Pavel Skripkin)
- nilfs2: use refcount_dec_and_lock() to fix potential UAF (Zhen Lei)
- prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov)
- 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji)
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter)
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko)
- um: virtio_uml: fix memory leak on init failures (Johannes Berg)
- staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (Nathan Chancellor)
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner)
- sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner)
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin)
- ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin)
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin)
- ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin)
- apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko)
- ARM: Qualify enabling of swiotlb_init() (Florian Fainelli)
- s390/pci_mmio: fully validate the VMA before calling follow_pte() (David Hildenbrand)
- console: consume APC, DM, DCS (nick black)
- PCI/ACPI: Add Ampere Altra SOC MCFG quirk (Tuan Phan)
- PCI: aardvark: Fix reporting CRS value (Pali Rohár)
- PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (Pali Rohár)
- PCI: aardvark: Indicate error in 'val' when config read fails (Pali Rohár)
- PCI: pci-bridge-emul: Fix big-endian support (Grzegorz Jaszczyk)
- LTS tag: v5.4.148 (Jack Vogel)
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich)
- s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich)
- net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda)
- ip_gre: validate csum_start only on pull (Willem de Bruijn)
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu)
- fq_codel: reject silly quantum parameters (Eric Dumazet)
- netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans)
- net: dsa: b53: Fix calculating number of switch ports (Rafał Miłecki)
- perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (Li Huafei)
- ARC: export clear_user_page() for modules (Randy Dunlap)
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' (Christophe JAILLET)
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko)
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state (Oliver Upton)
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (Matthias Schiffer)
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug (Dan Carpenter)
- mfd: axp20x: Update AXP288 volatile ranges (Hans de Goede)
- NTB: perf: Fix an error code in perf_setup_inbuf() (Yang Li)
- NTB: Fix an error code in ntb_msit_probe() (Yang Li)
- ethtool: Fix an error code in cxgb2.c (Yang Li)
- PCI: ibmphp: Fix double unmap of io_mem (Vishal Aslot)
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas)
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Ryoga Saito)
- PCI: Add ACS quirks for Cavium multi-function devices (George Cherian)
- tracing/probes: Reject events which have the same name of existing one (Masami Hiramatsu)
- mfd: Don't use irq_create_mapping() to resolve a mapping (Marc Zyngier)
- fuse: fix use after free in fuse_read_interrupt() (Miklos Szeredi)
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (Wasim Khan)
- mfd: db8500-prcmu: Adjust map to reality (Linus Walleij)
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal)
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() (David Hildenbrand)
- net: hns3: fix the timing issue of VF clearing interrupt sources (Jiaran Zhang)
- net: hns3: disable mac in flr process (Yufeng Mo)
- net: hns3: change affinity_mask to numa node range (Yufeng Mo)
- net: hns3: pad the short tunnel frame before sending to hardware (Yufeng Mo)
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (Nicholas Piggin)
- ibmvnic: check failover_pending in login response (Sukadev Bhattiprolu)
- dt-bindings: arm: Fix Toradex compatible typo (David Heidelberg)
- qed: Handle management FW error (Shai Malin)
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (zhenggy)
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (Vladimir Oltean)
- net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet)
- vhost_net: fix OoB on sendmsg() failure. (Paolo Abeni)
- events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers)
- net/mlx5: Fix potential sleeping in atomic context (Maor Gottlieb)
- net/mlx5: FWTrace, cancel work on alloc pd error flow (Saeed Mahameed)
- perf machine: Initialize srcline string member in add_location struct (Michael Petlan)
- tipc: increase timeout in tipc_sk_enqueue() (Hoang Le)
- r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli)
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang)
- ptp: dp83640: don't define PAGE0 (Randy Dunlap)
- net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet)
- tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long)
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport)
- s390/sclp: fix Secure-IPL facility detection (Alexander Egorenkov)
- drm/etnaviv: add missing MMU context put when reaping MMU mapping (Lucas Stach)
- drm/etnaviv: reference MMU context when setting up hardware state (Lucas Stach)
- drm/etnaviv: fix MMU context leak on GPU reset (Lucas Stach)
- drm/etnaviv: exec and MMU state is lost when resetting the GPU (Lucas Stach)
- drm/etnaviv: keep MMU context across runtime suspend/resume (Lucas Stach)
- drm/etnaviv: stop abusing mmu_context as FE running marker (Lucas Stach)
- drm/etnaviv: put submit prev MMU context when it exists (Lucas Stach)
- drm/etnaviv: return context from etnaviv_iommu_context_get (Lucas Stach)
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (Ernst Sjöstrand)
- PCI: Add AMD GPU multi-function power dependencies (Evan Quan)
- PM: base: power: don't try to use non-existing RTC for storing data (Juergen Gross)
- arm64/sve: Use correct size when reinitialising SVE state (Mark Brown)
- xen: reset legacy rtc flag for PV domU (Juergen Gross)
- btrfs: fix upper limit for max_inline for page size 64K (Anand Jain)
- drm/panfrost: Clamp lock region to Bifrost minimum (Alyssa Rosenzweig)
- drm/panfrost: Use u64 for size in lock_region (Alyssa Rosenzweig)
- drm/panfrost: Simplify lock_region calculation (Alyssa Rosenzweig)
- drm/amdgpu: Fix BUG_ON assert (Andrey Grodzovsky)
- drm/msi/mdp4: populate priv->kms in mdp4_kms_init (David Heidelberg)
- net: dsa: lantiq_gswip: fix maximum frame length (Jan Hoffmann)
- lib/test_stackinit: Fix static initializer test (Kees Cook)
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda)
- memcg: enable accounting for pids in nested pid namespaces (Vasily Averin)
- mm,vmscan: fix divide by zero in get_scan_count (Rik van Riel)
- mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian)
- s390/pv: fix the forcing of the swiotlb (Halil Pasic)
- cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat)
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap)
- scsi: qla2xxx: Changes to support kdump kernel (Saurav Kashyap)
- scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki)
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() (chenying)
- parisc: fix crash with signals and alloca (Mikulas Patocka)
- net: w5100: check return value after calling platform_get_resource() (Yang Yingliang)
- fix array-index-out-of-bounds in taprio_change (Haimin Zhang)
- net: fix NULL pointer reference in cipso_v4_doi_free (王贇)
- ath9k: fix sleeping in atomic context (Miaoqing Pan)
- ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen)
- parport: remove non-zero check on count (Colin Ian King)
- net/mlx5: DR, Enable QP retransmission (Yevgeny Kliteynik)
- iwlwifi: mvm: fix access to BSS elements (Johannes Berg)
- iwlwifi: mvm: avoid static queue number aliasing (Johannes Berg)
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed (Zhang Qilong)
- drm/amdkfd: Account for SH/SE count when setting up cu masks. (Sean Keely)
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo)
- ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang)
- usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan)
- usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam)
- usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova)
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" (Mathias Nyman)
- cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui)
- mmc: core: Return correct emmc response in case of ioctl error (Nishad Kamdar)
- selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian)
- mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb)
- mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani)
- of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS (Marc Zyngier)
- ASoC: Intel: Skylake: Fix passing loadable flag for module (Gustaw Lewandowski)
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (Cezary Rojewski)
- btrfs: tree-log: check btrfs_lookup_data_extent return value (Marcos Paulo de Souza)
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch (Arnd Bergmann)
- drm/exynos: Always initialize mapping in exynos_drm_register_dma() (Nathan Chancellor)
- lockd: lockd server-side shouldn't set fl_ops (J. Bruce Fields)
- usb: chipidea: host: fix port index underflow and UBSAN complains (Li Jun)
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson)
- staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook)
- rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields)
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD (Luke Hsiao)
- serial: sh-sci: fix break handling for sysrq (Ulrich Hecht)
- opp: Don't print an error if required-opps is missing (Rajendra Nayak)
- Bluetooth: Fix handling of LE Enhanced Connection Complete (Luiz Augusto von Dentz)
- nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data (Sagi Grimberg)
- arm64: dts: ls1046a: fix eeprom entries (Raag Jadav)
- arm64: tegra: Fix compatible string for Tegra132 CPUs (Thierry Reding)
- ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner)
- mac80211: Fix monitor MTU limit so that A-MSDUs get through (Johan Almbladh)
- drm/display: fix possible null-pointer dereference in dcn10_set_clock() (Tuo Li)
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li)
- net/mlx5: Fix variable type to match 64bit (Eran Ben Elisha)
- Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi)
- Bluetooth: schedule SCO timeouts with delayed_work (Desmond Cheong Zhi Xi)
- selftests/bpf: Fix xdp_tx.c prog section name (Jussi Maki)
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (David Heidelberg)
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor)
- arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul)
- ARM: dts: imx53-ppd: Fix ACHC entry (Sebastian Reichel)
- media: tegra-cec: Handle errors of clk_prepare_enable() (Evgeny Novikov)
- media: TDA1997x: fix tda1997x_query_dv_timings() return value (Krzysztof Hałasa)
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil)
- media: imx258: Limit the max analogue gain to 480 (Umang Jain)
- media: imx258: Rectify mismatch of VTS value (Laurent Pinchart)
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output (Hans de Goede)
- arm64: tegra: Fix Tegra194 PCIe EP compatible string (Vidya Sagar)
- bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Yufeng Mo)
- workqueue: Fix possible memory leaks in wq_numa_init() (Zhen Lei)
- Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi)
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko)
- samples: bpf: Fix tracex7 error raised on the missing argument (Juhee Kang)
- staging: ks7010: Fix the initialization of the 'sleep_status' structure (Christophe JAILLET)
- serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman)
- hvsi: don't panic on tty_register_driver failure (Jiri Slaby)
- xtensa: ISS: don't panic in rs_init (Jiri Slaby)
- serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki)
- s390: make PCI mio support a machine flag (Niklas Schnelle)
- s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens)
- flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva)
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva)
- video: fbdev: riva: Error out if 'pixclock' equals zero (Zheyu Ma)
- video: fbdev: kyro: Error out if 'pixclock' equals zero (Zheyu Ma)
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero (Zheyu Ma)
- bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh)
- bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh)
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex (Anson Jacob)
- drm/amd/display: Fix timer_per_pixel unit error (Oliver Logush)
- tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma)
- staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven)
- usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham)
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() (Evgeny Novikov)
- usb: gadget: u_ether: fix a potential null pointer dereference (Maciej Żenczykowski)
- usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv)
- usb: host: fotg210: fix the endpoint's transactional opportunities calculation (Kelly Devilliv)
- igc: Check if num of q_vectors is smaller than max before array access (Sasha Neftin)
- drm: avoid blocking in drm_clients_info's rcu section (Desmond Cheong Zhi Xi)
- Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang)
- netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng)
- video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma)
- ARM: dts: qcom: apq8064: correct clock names (David Heidelberg)
- iavf: fix locking of critical sections (Stefan Assmann)
- iavf: do not override the adapter state in the watchdog task (Stefan Assmann)
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron)
- tipc: keep the skb in rcv queue until the whole data is read (Xin Long)
- PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki)
- crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson)
- media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab)
- ASoC: atmel: ATMEL drivers don't need HAS_DMA (Randy Dunlap)
- drm/amdgpu: Fix amdgpu_ras_eeprom_init() (Luben Tuikov)
- userfaultfd: prevent concurrent API initialization (Nadav Amit)
- kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y (Masahiro Yamada)
- MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel)
- f2fs: fix to unmap pages from userspace process in punch_hole() (Chao Yu)
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() (Chao Yu)
- f2fs: fix to account missing .skipped_gc_rwsem (Chao Yu)
- KVM: PPC: Fix clearing never mapped TCEs in realmode (Alexey Kardashevskiy)
- clk: at91: clk-generated: Limit the requested rate to our range (Codrin Ciubotariu)
- clk: at91: clk-generated: pass the id of changeable parent at registration (Claudiu Beznea)
- clk: at91: sam9x60: Don't use audio PLL (Codrin Ciubotariu)
- fscache: Fix cookie key hashing (David Howells)
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (Hans de Goede)
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (Nicholas Piggin)
- HID: i2c-hid: Fix Elan touchpad regression (Jim Broadus)
- scsi: target: avoid per-loop XCOPY buffer allocations (David Disseldorp)
- powerpc/config: Renable MTD_PHYSMAP_OF (Joel Stanley)
- scsi: qedf: Fix error codes in qedf_alloc_global_queues() (Dan Carpenter)
- scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter)
- scsi: smartpqi: Fix an error code in pqi_get_raid_map() (Dan Carpenter)
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei)
- scsi: fdomain: Fix error return code in fdomain_probe() (Wei Li)
- SUNRPC: Fix potential memory corruption (Trond Myklebust)
- dma-debug: fix debugfs initialization order (Anthony Iliopoulos)
- openrisc: don't printk() unconditionally (Randy Dunlap)
- f2fs: reduce the scope of setting fsck tag when de->name_len is zero (Yangtao Li)
- f2fs: show f2fs instance in printk_ratelimited (Chao Yu)
- RDMA/efa: Remove double QP type assignment (Leon Romanovsky)
- powerpc/stacktrace: Include linux/delay.h (Michal Suchanek)
- vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe)
- pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi)
- docs: Fix infiniband uverbs minor number (Leon Romanovsky)
- RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky)
- IB/hfi1: Adjust pkey entry in index 0 (Mike Marciniszyn)
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND (Christoph Hellwig)
- f2fs: quota: fix potential deadlock (Chao Yu)
- HID: input: do not report stylus battery state as "full" (Dmitry Torokhov)
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohár)
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohár)
- PCI: aardvark: Fix checking for PIO status (Evan Wang)
- PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon)
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczyński)
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behún)
- PCI/portdrv: Enable Bandwidth Notification only if port supports it (Stuart Hayes)
- ARM: 9105/1: atags_to_fdt: don't warn about stack size (David Heidelberg)
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede)
- dmaengine: imx-sdma: remove duplicated sdma_load_context (Robin Gong)
- Revert "dmaengine: imx-sdma: refine to load context only once" (Robin Gong)
- media: rc-loopback: return number of emitters rather than error (Sean Young)
- media: uvc: don't do DMA on stack (Mauro Carvalho Chehab)
- VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai)
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel)
- power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski)
- block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal)
- crypto: public_key: fix overflow during implicit conversion (zhenwei pi)
- arm64: head: avoid over-mapping in map_memory (Mark Rutland)
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap (Iwona Winiarska)
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska)
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs (Manivannan Sadhasivam)
- pinctrl: ingenic: Fix incorrect pull up/down info (Paul Cercueil)
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast (Marc Zyngier)
- tools/thermal/tmon: Add cross compiling support (Rolf Eike Beer)
- 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha)
- xen: fix setting of max_pfn in shared_info (Juergen Gross)
- powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain)
- PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Górecki)
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel)
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel)
- btrfs: reset replace target device to allocation state on close (Desmond Cheong Zhi Xi)
- btrfs: wake up async_delalloc_pages waiters after submit (Josef Bacik)
- rtc: tps65910: Correct driver module alias (Dmitry Osipenko)
- LTS tag: v5.4.147 (Jack Vogel)
- Revert "time: Handle negative seconds correctly in timespec64_to_ns()" (Greg Kroah-Hartman)
- Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" (Greg Kroah-Hartman)
- Revert "block: nbd: add sanity check for first_minor" (Greg Kroah-Hartman)
- Revert "Bluetooth: Move shutdown callback before flushing tx and rx queue" (Sasha Levin)
- LTS tag: v5.4.146 (Jack Vogel)
- clk: kirkwood: Fix a clocking boot regression (Linus Walleij)
- backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson)
- fbmem: don't allow too huge resolutions (Tetsuo Handa)
- IMA: remove the dependency on CRYPTO_MD5 (THOBY Simon)
- IMA: remove -Wmissing-prototypes warning (Austin Kim)
- fuse: flush extending writes (Miklos Szeredi)
- fuse: truncate pagecache on atomic_o_trunc (Miklos Szeredi)
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (Sean Christopherson)
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng)
- KVM: s390: index kvm->arch.idle_mask by vcpu_idx (Halil Pasic)
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger)
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op (Kim Phillips)
- tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi)
- bpf: Fix pointer arithmetic mask tightening under state pruning (Daniel Borkmann)
- bpf: verifier: Allocate idmap scratch in verifier env (Lorenz Bauer)
- bpf: Fix leakage due to insufficient speculative store bypass mitigation (Daniel Borkmann)
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4 (Daniel Borkmann)
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb() (Eric Dumazet)
- octeontx2-af: Fix loop in free and unmap counter (Subbaraya Sundeep)
- net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren)
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang)
- ipv4: make exception cache less predictible (Eric Dumazet)
- ipv6: make exception cache less predictible (Eric Dumazet)
- brcmfmac: pcie: fix oops on failure to resume and reprobe (Ahmad Fatoum)
- bcma: Fix memory leak for internally-handled cores (Zenghui Yu)
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter)
- ASoC: wcd9335: Disable irq on slave ports in the remove function (Christophe JAILLET)
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (Christophe JAILLET)
- ASoC: wcd9335: Fix a double irq free in the remove function (Christophe JAILLET)
- tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan)
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (Christophe JAILLET)
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov)
- i2c: mt65xx: fix IRQ check (Sergey Shtylyov)
- CIFS: Fix a potencially linear read overflow (Len Baker)
- bpf: Fix possible out of bound write in narrow load handling (Andrey Ignatov)
- mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- ASoC: Intel: Skylake: Fix module resource and format selection (Cezary Rojewski)
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (Cezary Rojewski)
- rsi: fix an error code in rsi_probe() (Dan Carpenter)
- rsi: fix error code in rsi_load_9116_firmware() (Dan Carpenter)
- i2c: s3c2410: fix IRQ check (Sergey Shtylyov)
- i2c: iop3xx: fix deferred probing (Sergey Shtylyov)
- Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin)
- mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu)
- usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova)
- nfsd4: Fix forced-expiry locking (J. Bruce Fields)
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington)
- mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang)
- usb: phy: tahvo: add IRQ check (Sergey Shtylyov)
- usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov)
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (Geert Uytterhoeven)
- usb: phy: twl6030: add IRQ checks (Sergey Shtylyov)
- usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov)
- usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov)
- drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET)
- Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi)
- counter: 104-quad-8: Return error when invalid mode during ceiling_write (William Breathitt Gray)
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)

_______________________________________________