El-errata: ELSA-2022-9147 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update
Oracle Linux Security Advisory ELSA-2022-9147
http://linux.oracle.com/errata/ELSA-2022-9147.html
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
x86_64:
kernel-uek-5.4.17-2136.304.4.1.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.304.4.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.304.4.1.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.304.4.1.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.304.4.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.304.4.1.el7uek.x86_64.rpm
aarch64:
kernel-uek-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.304.4.1.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
kernel-uek-tools-libs-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
perf-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
python-perf-5.4.17-2136.304.4.1.el7uek.aarch64.rpm
SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.304.4.1.el7uek.src.rpm
Related CVEs:
CVE-2021-3640
CVE-2021-3752
CVE-2021-4155
CVE-2021-44733
CVE-2022-0185
CVE-2022-0492
Description of changes:
[5.4.17-2136.304.4.1.el7uek]
- Revert "rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info" (Rohit Nair) [Orabug: 33832625]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832582] {CVE-2022-0492}
[5.4.17-2136.304.4.el7uek]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie) [Orabug: 33794250]
- scsi: libiscsi: Drop taskqueuelock (Mike Christie) [Orabug: 33794250]
- ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang) [Orabug: 33495339]
- KVM: SVM: Don't intercept #GP for SEV guests (Sean Christopherson) [Orabug: 33446920]
- Revert "KVM: SVM: avoid infinite loop on NPF from bad address" (Sean Christopherson) [Orabug: 33446920]
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson) [Orabug: 33446920]
- rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33660929]
- tee: handle lookup of shm with reference count 0 (Jens Wiklander) [Orabug: 33739582] {CVE-2021-44733}
- smp: always continue to process IRQ work (Stephen Brennan) [Orabug: 33802464]
[5.4.17-2136.304.3.el7uek]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel) [Orabug: 33766454] {CVE-2022-0185}
- LTS tag: v5.4.161 (Sherry Yang)
- erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang)
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu)
- PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier)
- PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier)
- PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)
- parisc/entry: fix trace test in syscall exit path (Sven Schnelle)
- fortify: Explicitly disable Clang support (Kees Cook)
- scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim)
- ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki)
- scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter)
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)
- LTS tag: v5.4.160 (Sherry Yang) [Orabug: 33536399]
- selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko)
- ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann)
- SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust)
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohár)
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde)
- s390/cio: make ccw_device_dma_* more robust (Halil Pasic)
- s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle)
- s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)
- video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut)
- mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin)
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao)
- powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao)
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)
- powerpc/bpf: Validate branch ranges (Naveen N. Rao)
- powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)
- ovl: fix deadlock in splice write (Miklos Szeredi)
- 9p/net: fix missing error check in p9_check_errors (Dominique Martinet)
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann)
- f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim)
- irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren)
- parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller)
- parisc: Fix backtrace to always include init funtion names (Helge Deller)
- ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)
- ARM: 9155/1: fix early early_iounmap() (Michał Mirosław)
- selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn)
- cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy)
- net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li)
- vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)
- net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang)
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet)
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend)
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann)
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)
- llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers)
- zram: off by one in read_block_state() (Dan Carpenter)
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)
- net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan)
- net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)
- xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)
- i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' (Christophe JAILLET)
- NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust)
- scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)
- scsi: qla2xxx: Fix gnl list corruption (Quinn Tran)
- ar7: fix kernel builds for compiler test (Jackie Liu)
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)
- m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (Eric W. Biederman)
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (Lars-Peter Clausen)
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal)
- soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (Robert-Ionut Alexa)
- auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven)
- auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven)
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven)
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea)
- mtd: core: don't remove debugfs directory if device is in use (Zev Weiss)
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov)
- fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai)
- NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust)
- opp: Fix return in _opp_add_static_v2() (YueHaibing)
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Pali Rohár)
- PCI: aardvark: Don't spam about PIO Response Status (Marek Behún)
- drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71))
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers)
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen)
- apparmor: fix error check (Tom Rix)
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede)
- mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven)
- powerpc/44x/fsp2: add missing of_node_put (Bixuan Cui)
- HID: u2fzero: properly handle timeouts in usb_submit_urb (Andrej Shadura)
- HID: u2fzero: clarify error check and length calculations (Andrej Shadura)
- serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula)
- phy: qcom-qusb2: Fix a memory leak on probe (Vladimir Zapolskiy)
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald)
- ASoC: cs42l42: Correct some register default values (Richard Fitzgerald)
- ARM: dts: stm32: fix SAI sub nodes register range (Olivier Moysan)
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (Vegard Nossum)
- RDMA/mlx4: Return missed an error if device doesn't support steering (Leon Romanovsky)
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter)
- power: supply: rt5033_battery: Change voltage values to µV (Jakob Hauser)
- usb: gadget: hid: fix error code in do_config() (Dan Carpenter)
- serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko)
- video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy)
- clk: at91: check pmc node status before registering syscore ops (Clément Léger)
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu)
- soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET)
- arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade)
- ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai)
- JFS: fix memleak in jfs_mount (Dongliang Mu)
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu)
- scsi: dc395: Fix error case unwinding (Tong Zhang)
- ARM: dts: at91: tse850: the emacphy interface is rmii (Peter Rosin)
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties (Anand Moon)
- RDMA/bnxt_re: Fix query SRQ failure (Selvin Xavier)
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (Marijn Suijten)
- arm64: dts: rockchip: Fix GPU register width for RK3328 (Alex Bee)
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu)
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (Christophe JAILLET)
- RDMA/rxe: Fix wrong port_cap_flags (Junji Wei)
- ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu)
- ibmvnic: don't stop queue in xmit (Sukadev Bhattiprolu)
- udp6: allow SO_MARK ctrl msg to affect routing (Jakub Kicinski)
- selftests/bpf: Fix fclose/pclose mismatch in test_progs (Andrea Righi)
- crypto: pcrypt - Delay write to padata->info (Daniel Jordan)
- net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle))
- net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K)
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (Alex Deucher)
- wcn36xx: add proper DMA memory barriers in rx path (Benjamin Li)
- libertas: Fix possible memory leak in probe and disconnect (Wang Hai)
- libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai)
- KVM: s390: Fix handle_sske page fault handling (Janis Schoetterl-Glausch)
- samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang)
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Jon Maxwell)
- irq: mips: avoid nested irq_enter() (Mark Rutland)
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand)
- libbpf: Fix BTF data layout checks and allow empty BTF (Andrii Nakryiko)
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa)
- drm/msm: Fix potential NULL dereference in DPU SSPP (Jessica Zhang)
- clocksource/drivers/timer-ti-dm: Select TIMER_OF (Kees Cook)
- PM: hibernate: fix sparse warnings (Anders Roxell)
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Max Gurtovoy)
- phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner)
- mwifiex: Send DELBA requests according to spec (Jonas Dreßler)
- rsi: stop thread firstly in rsi_91x_init() error handling (Ziyang Xuan)
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Lorenzo Bianconi)
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor)
- block: ataflop: fix breakage introduced at blk-mq refactoring (Michael Schmitz)
- mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET)
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski)
- drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter)
- ath10k: fix max antenna gain unit (Sven Eckelmann)
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (Zev Weiss)
- hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang)
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Daniel Borkmann)
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter)
- memstick: avoid out-of-range warning (Arnd Bergmann)
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Tony Lindgren)
- b43: fix a lower bounds test (Dan Carpenter)
- b43legacy: fix a lower bounds test (Dan Carpenter)
- hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann)
- crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu)
- crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu)
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (Evgeny Novikov)
- netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)
- EDAC/amd64: Handle three rank interleaving mode (Yazen Ghannam)
- ath9k: Fix potential interrupt storm on queue reset (Linus Lüssing)
- media: em28xx: Don't use ops->suspend if it is NULL (Colin Ian King)
- cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva)
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (Arnd Bergmann)
- kprobes: Do not use local variable when creating debugfs file (Punit Agrawal)
- media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King)
- media: tm6000: Avoid card name truncation (Kees Cook)
- media: si470x: Avoid card name truncation (Kees Cook)
- media: radio-wl1273: Avoid card name truncation (Kees Cook)
- media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' (Christophe JAILLET)
- media: TDA1997x: handle short reads of hdmi info frame. (Tom Rix)
- media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin)
- media: cxd2880-spi: Fix a null pointer dereference on error handling path (Colin Ian King)
- media: em28xx: add missing em28xx_close_extension (Pavel Skripkin)
- drm/amdgpu: fix warning for overflow check (Arnd Bergmann)
- ath10k: Fix missing frame timestamp for beacon/probe-resp (Loic Poulain)
- net: dsa: rtl8366rb: Fix off-by-one bug (Linus Walleij)
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Jiasheng Jiang)
- crypto: caam - disable pkc for non-E SoCs (Michael Walle)
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (Dinghao Liu)
- wilc1000: fix possible memory leak in cfg_scan_result() (Ajay Singh)
- cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
- net: net_namespace: Fix undefined member in key_remove_domain() (Yajun Deng)
- virtio-gpu: fix possible memory allocation failure (liuyuntao)
- drm/v3d: fix wait for TMU write combiner flush (Iago Toral Quiroga)
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Neeraj Upadhyay)
- Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi)
- selftests/bpf: Fix strobemeta selftest regression (Andrii Nakryiko)
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Pablo Neira Ayuso)
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle)
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (Sven Schnelle)
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller)
- parisc: fix warning in flush_tlb_all (Sven Schnelle)
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (Vitaly Kuznetsov)
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang)
- btrfs: do not take the uuid_mutex in btrfs_rm_device (Josef Bacik)
- net: annotate data-race in neigh_output() (Eric Dumazet)
- vrf: run conntrack only in context of lower/physdev for locally generated packets (Florian Westphal)
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann)
- gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra)
- ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu)
- smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa)
- iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg)
- selftests: kvm: fix mismatched fclose() after popen() (Shuah Khan)
- PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin)
- nvme: drop scan_lock and always kick requeue list when removing namespaces (Hannes Reinecke)
- nvmet-tcp: fix use-after-free when a port is removed (Israel Rukshin)
- nvmet: fix use-after-free when a port is removed (Israel Rukshin)
- block: remove inaccurate requeue check (Jens Axboe)
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma)
- tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh)
- workqueue: make sysfs of unbound kworker cpumask more clever (Menglong Dong)
- lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin)
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin)
- memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma)
- leaking_addresses: Always print a trailing newline (Kees Cook)
- ACPI: battery: Accept charges over the design capacity as full (André Almeida)
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher)
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li)
- tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware))
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart)
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam)
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (Ricardo Ribalda)
- media: ipu3-imgu: imgu_fmt: Handle properly try (Ricardo Ribalda)
- ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki)
- ipmi: Disable some operations during a panic (Corey Minyard)
- media: rcar-csi2: Add checking to rcsi2_start_receiver() (Nadezda Lutovinova)
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Hans de Goede)
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap)
- media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana)
- media: imx: set a media_device bus_info string (Martin Kepplinger)
- media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova)
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li)
- media: uvcvideo: Set unique vdev name based in type (Ricardo Ribalda)
- media: uvcvideo: Return -EIO for control errors (Ricardo Ribalda)
- media: uvcvideo: Set capability in s_param (Ricardo Ribalda)
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (Dmitriy Ulitin)
- media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma)
- media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender)
- ath10k: high latency fixes for beacon buffer (Alagu Sankar)
- mwifiex: Properly initialize private structure on interface type changes (Jonas Dreßler)
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Dreßler)
- x86: Increase exception stack sizes (Peter Zijlstra)
- smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta)
- locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra)
- MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski)
- MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski)
- platform/x86: wmi: do not fail if disabling fails (Barnabás Pőcze)
- drm/panel-orientation-quirks: add Valve Steam Deck (Simon Ser)
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai) {CVE-2021-3640}
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (Hans de Goede)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (Hans de Goede)
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (Hans de Goede)
- dma-buf: WARN on dmabuf release with pending attachments (Charan Teja Reddy)
- USB: chipidea: fix interrupt deadlock (Johan Hovold)
- USB: iowarrior: fix control-message timeouts (Johan Hovold)
- USB: serial: keyspan: fix memleak on probe errors (Wang Hai)
- iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen)
- pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang)
- quota: correct error number in free_dqentry() (Zhang Yi)
- quota: check block number when reading the block in quota file (Zhang Yi)
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behún)
- PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behún)
- PCI: aardvark: Fix reporting Data Link Layer Link Active (Pali Rohár)
- PCI: aardvark: Do not unmask unused interrupts (Pali Rohár)
- PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohár)
- PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohár)
- PCI: pci-bridge-emul: Fix emulation of W1C bits (Marek Behún)
- xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross)
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin)
- ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai)
- serial: core: Fix initializing and restoring termios speed (Pali Rohár)
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni)
- can: j1939: j1939_can_recv(): ignore messages with invalid source address (Zhang Changzhong)
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Zhang Changzhong)
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Sean Christopherson)
- power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler)
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak)
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman)
- signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman)
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad)
- rsi: Fix module dev_oper_mode parameter description (Marek Vasut)
- rsi: fix rate mask set leading to P2P failure (Martin Fuzzey)
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0 (Martin Fuzzey)
- rsi: fix occasional initialisation failure with BT coex (Martin Fuzzey)
- wcn36xx: handle connection loss indication (Benjamin Li)
- libata: fix checking of DMA state (Reimar Döffinger)
- mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Dreßler)
- wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain)
- evm: mark evm_fixmode as __ro_after_init (Austin Kim)
- rtl8187: fix control-message timeouts (Johan Hovold)
- PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein)
- ath10k: fix division by zero in send path (Johan Hovold)
- ath10k: fix control-message timeout (Johan Hovold)
- ath6kl: fix control-message timeout (Johan Hovold)
- ath6kl: fix division by zero in send path (Johan Hovold)
- mwifiex: fix division by zero in fw download path (Johan Hovold)
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger)
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski)
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski)
- hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss)
- ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu)
- btrfs: call btrfs_check_rw_degradable only if there is a missing device (Anand Jain)
- btrfs: fix lost error handling when replaying directory deletes (Filipe Manana)
- btrfs: clear MISSING device status bit in btrfs_close_one_device (Li Zhang)
- net/smc: Correct spelling mistake to TCPF_SYN_RECV (Wen Gu)
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset (Yu Xiao)
- vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang)
- r8169: Add device 10ec:8162 to driver r8169 (Janghyub Seo)
- nvmet-tcp: fix header digest verification (Amit Engel)
- drm: panel-orientation-quirks: Add quirk for GPD Win3 (Mario)
- watchdog: Fix OMAP watchdog early handling (Walter Stoll)
- net: multicast: calculate csum of looped-back and forwarded packets (Cyril Strejc)
- spi: spl022: fix Microwire full duplex mode (Thomas Perrot)
- nvmet-tcp: fix a memory leak when releasing a queue (Maurizio Lombardi)
- bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer)
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (Bryant Mairs)
- mmc: winbond: don't build on M68K (Randy Dunlap)
- reset: socfpga: add empty driver allowing consumers to probe (Paweł Anikiel)
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode (Bastien Roucariès)
- hyperv/vmbus: include linux/bitops.h (Arnd Bergmann)
- sfc: Don't use netif_info before net_device setup (Erik Ekman)
- cavium: Fix return values of the probe function (Zheyu Ma)
- scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov)
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (Zheyu Ma)
- cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma)
- x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson)
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Tom Lendacky)
- fuse: fix page stealing (Miklos Szeredi)
- ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai)
- ALSA: timer: Fix use-after-free problem (Wang Wensheng)
- ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim)
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (Alexander Tsoy)
- ALSA: line6: fix control and interrupt message timeouts (Johan Hovold)
- ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold)
- ALSA: ua101: fix division by zero at probe (Johan Hovold)
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (Kai-Heng Feng)
- ALSA: hda/realtek: Add quirk for ASUS UX550VE (Takashi Iwai)
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (Jaroslav Kysela)
- ALSA: hda/realtek: Add quirk for Clevo PC70HS (Tim Crawford)
- media: v4l2-ioctl: Fix check_ext_ctrls (Ricardo Ribalda)
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Sean Young)
- media: ite-cir: IR receiver stop working after receive overflow (Sean Young)
- crypto: s5p-sss - Add error handling in s5p_aes_probe() (Tang Bin)
- firmware/psci: fix application of sizeof to pointer (jing yangyang)
- tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter)
- parisc: Fix ptrace check on syscall return (Helge Deller)
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Löhle)
- scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (Arun Easi)
- libata: fix read log timeout value (Damien Le Moal)
- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)
- Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang)
- Input: iforce - fix control-message timeout (Johan Hovold)
- binder: use cred instead of task for getsecid (Todd Kjos)
- binder: use cred instead of task for selinux checks (Todd Kjos)
- binder: use euid from cred instead of using task (Todd Kjos)
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Nehal Bakulchandra Shah)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman)
- LTS tag: v5.4.159 (Sherry Yang)
- rsi: fix control-message timeout (Johan Hovold)
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (Gustavo A. R. Silva)
- staging: rtl8192u: fix control-message timeouts (Johan Hovold)
- staging: r8712u: fix control-message timeout (Johan Hovold)
- comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold)
- comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold)
- comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold)
- comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold)
- comedi: dt9812: fix DMA buffers on stack (Johan Hovold)
- isofs: Fix out of bound access for corrupted isofs image (Jan Kara)
- printk/console: Allow to disable console output by using console="" or console=null (Petr Mladek)
- binder: don't detect sender/target during buffer cleanup (Todd Kjos)
- usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren)
- usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah)
- usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven)
- usb: ehci: handshake CMD_RUN instead of STS_HALT (Neal Liu)
- Revert "x86/kvm: fix vcpu-id indexed array sizes" (Juergen Gross)
- LTS tag: v5.4.158 (Sherry Yang)
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" (Wang Kefeng)
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy" (Greg Kroah-Hartman)
- sfc: Fix reading non-legacy supported link modes (Erik Ekman)
- Revert "usb: core: hcd: Add support for deferring roothub registration" (Greg Kroah-Hartman)
- Revert "xhci: Set HCD flag to defer primary roothub registration" (Greg Kroah-Hartman)
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)
- net: ethernet: microchip: lan743x: Fix skb allocation failure (Yuiko Oshino)
- vrf: Revert "Reset skb conntrack connection..." (Eugene Crosser)
- scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei)
- LTS tag: v5.4.157 (Sherry Yang)
- perf script: Check session->header.env.arch before using it (Song Liu)
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu (Halil Pasic)
- KVM: s390: clear kicked_mask before sleeping again (Halil Pasic)
- cfg80211: correct bridge/4addr mode check (Janusz Dziedzic)
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT (Julian Wiedmann)
- sctp: add vtag check in sctp_sf_ootb (Xin Long)
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long)
- sctp: add vtag check in sctp_sf_violation (Xin Long)
- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long)
- sctp: fix the processing for INIT_ACK chunk (Xin Long)
- sctp: use init_tag from inithdr for ABORT chunk (Xin Long)
- phy: phy_start_aneg: Add an unlocked version (Andrew Lunn)
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency (Andrew Lunn)
- net/tls: Fix flipped sign in async_wait.err assignment (Daniel Jordan)
- net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner)
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent (Yuiko Oshino)
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails (Yuiko Oshino)
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck)
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string (Mark Zhang)
- net: Prevent infinite while loop in skb_tx_hash() (Michael Chan)
- net: batman-adv: fix error handling (Pavel Skripkin)
- regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang)
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node (Clément Bœsch)
- RDMA/mlx5: Set user priority for DCT (Patrisious Haddad)
- nvme-tcp: fix data digest pointer calculation (Varun Prakash)
- nvmet-tcp: fix data digest pointer calculation (Varun Prakash)
- IB/hfi1: Fix abba locking issue with sc_disable() (Mike Marciniszyn)
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn)
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function (Liu Jian)
- drm/ttm: fix memleak in ttm_transfered_destroy (Christian König)
- net: lan78xx: fix division by zero in send path (Johan Hovold)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (Johannes Berg)
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen)
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo)
- mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung)
- mmc: cqhci: clear HALT state after CQE enable (Wenbin Mei)
- mmc: vub300: fix control-message timeouts (Johan Hovold)
- net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan)
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register" (Pavel Skripkin)
- nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski)
- ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma)
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode" (Rafał Miłecki)
- usbnet: fix error return code in usbnet_probe() (Wang Hai)
- usbnet: sanity check for maxpacket (Oliver Neukum)
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)
- ipv6: use siphash in rt6_exception_hash() (Eric Dumazet)
- powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao)
- ARM: 9141/1: only warn about XIP address when not compile testing (Arnd Bergmann)
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann)
- ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann)
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)
[5.4.17-2136.304.2.el7uek]
- xfs: only relog deferred intent items if free space in the log gets low (Darrick J. Wong) [Orabug: 33548995]
- xfs: expose the log push threshold (Darrick J. Wong) [Orabug: 33548995]
- xfs: periodically relog deferred intent items (Darrick J. Wong) [Orabug: 33548995]
- xfs: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 33548995]
- xfs: change the order in which child and parent defer ops are finished (Darrick J. Wong) [Orabug: 33548995]
- hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add hugetlb demote page support (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add demote bool to gigantic page routines (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add demote hugetlb page sysfs interfaces (Mike Kravetz) [Orabug: 33652181]
- hugetlb: before freeing hugetlb page set dtor to appropriate value (Mike Kravetz) [Orabug: 33652181]
- hugetlb: drop ref count earlier after page allocation (Mike Kravetz) [Orabug: 33652181]
- hugetlb: simplify prep_compound_gigantic_page ref count racing code (Mike Kravetz) [Orabug: 33652181]
- hugetlb: address ref count racing in prep_compound_gigantic_page (Mike Kravetz) [Orabug: 33652181]
- hugetlb: remove prep_compound_huge_page cleanup (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add lockdep_assert_held() calls for hugetlb_lock (Mike Kravetz) [Orabug: 33652181]
- Revert "Revert "net/mlx4_core: Add masking for a few queries on HCA caps"" (Freddy Carrillo) [Orabug: 33666385]
- uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw) [Orabug: 33730433]
- rds: ib: Incorporate the stat counter "ib_rdma_flush_mr_pool_avoided" in the structure "rds_ib_stat_names" (Praveen Kumar Kannoju) [Orabug: 33742436]
- memcg: fix use-after-free in uncharge_batch (Michal Hocko) [Orabug: 33752722]
- xfs: force the log offline when log intent item recovery fails (Darrick J. Wong) [Orabug: 33757272]
- xfs: cancel intents immediately if process_intents fails (Darrick J. Wong) [Orabug: 33757272]
[5.4.17-2136.304.1.el7uek]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33745420] {CVE-2021-4155}
- Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo) [Orabug: 33406414] {CVE-2021-3752}
- x86/mce: Correct the detection of invalid notifier priorities (Zhen Lei) [Orabug: 33427594]
- x86/mce/dev-mcelog: Do not update kflags on AMD systems (Smita Koralahalli) [Orabug: 33427594]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam) [Orabug: 33427594]
- RAS/CEC: Fix cec_init() prototype (Luca Stefani) [Orabug: 33427594]
- EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam) [Orabug: 33427594]
- x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli) [Orabug: 33427594]
- x86/mce/dev-mcelog: Fix -Wstringop-truncation warning about strncpy() (Tony Luck) [Orabug: 33427594]
- x86/mce: Drop bogus comment about mce.kflags (Tony Luck) [Orabug: 33427594]
- EDAC: Drop the EDAC report status checks (Tony Luck) [Orabug: 33427594]
- x86/mce: Add mce=print_all option (Tony Luck) [Orabug: 33427594]
- x86/mce: Change default MCE logger to check mce->kflags (Tony Luck) [Orabug: 33427594]
- x86/mce: Fix all mce notifiers to update the mce->kflags bitmask (Tony Luck) [Orabug: 33427594]
- x86/mce: Add a struct mce.kflags field (Tony Luck) [Orabug: 33427594]
- x86/mce: Convert the CEC to use the MCE notifier (Tony Luck) [Orabug: 33427594]
- x86/mce: Rename "first" function as "early" (Tony Luck) [Orabug: 33427594]
- x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov) [Orabug: 33427594]
- x86/mce/dev-mcelog: Dynamically allocate space for machine check records (Tony Luck) [Orabug: 33427594]
- EDAC/mc: Determine mci pointer from the error descriptor (Robert Richter) [Orabug: 33427594]
- EDAC: Store error type in struct edac_raw_error_desc (Robert Richter) [Orabug: 33427594]
- x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schönherr) [Orabug: 33427594]
- EDAC: Unify the mc_event tracepoint call (Robert Richter) [Orabug: 33427594]
- EDAC/ghes: Remove intermediate buffer pvt->detail_location (Robert Richter) [Orabug: 33427594]
- xfs: fix an incore inode UAF in xfs_bui_recover (Darrick J. Wong) [Orabug: 33541225]
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering (Darrick J. Wong) [Orabug: 33541225]
- xfs: clean up bmap intent item recovery checking (Darrick J. Wong) [Orabug: 33541225]
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky) [Orabug: 33547490]
- efi/mokvar: Reserve the table only if it is in boot services data (Borislav Petkov) [Orabug: 33547490]
- efi: mokvar: add missing include of asm/early_ioremap.h (Ard Biesheuvel) [Orabug: 33547490]
- efi: mokvar-table: fix some issues in new code (Ard Biesheuvel) [Orabug: 33547490]
- efi: Support for MOK variable config table (Lenny Szubowicz) [Orabug: 33547490]
- efi: Rename arm-init to efi-init common for all arch (Atish Patra) [Orabug: 33547490]
- uek-rpm: Update ol7 locklist with fnic symbols (John Donnelly) [Orabug: 33590906]
- uek-rpm: Update ol8 locklist with fnic symbols (John Donnelly) [Orabug: 33590906]
- rds_rdma: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33616020]
- net/mlx4: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33616020]
- net/mlx5: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33616020]
- IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Håkon Bugge) [Orabug: 33616020]
- Revert "net/mlx{4,5}: Fix signed formal parameter" (Håkon Bugge) [Orabug: 33616020]
- Revert "net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero" (Håkon Bugge) [Orabug: 33616020]
- Revert "rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV" (Håkon Bugge) [Orabug: 33616020]
- mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan) [Orabug: 33646165]
- mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan) [Orabug: 33646165]
- Revert "io_uring: reinforce cancel on flush during exit" (Lee Jones) [Orabug: 33687075]
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy) [Orabug: 33731040]
- ocfs2: fix data corruption on truncate (Jan Kara) [Orabug: 33740343]
[5.4.17-2136.303.3.el7uek]
- xfs: xfs_defer_capture should absorb remaining transaction reservation (Darrick J. Wong) [Orabug: 33520061]
- xfs: xfs_defer_capture should absorb remaining block reservations (Darrick J. Wong) [Orabug: 33520061]
- xfs: proper replay of deferred ops queued during log recovery (Darrick J. Wong) [Orabug: 33520061]
- xfs: attach inode to dquot in xfs_bui_item_recover (Darrick J. Wong) [Orabug: 33520061]
- xfs: log new intent items created as part of finishing recovered intent items (Darrick J. Wong) [Orabug: 33520061]
- xfs: spell out the parameter name for ->cancel_item (Christoph Hellwig) [Orabug: 33520061]
- xfs: use a xfs_btree_cur for the ->finish_cleanup state (Christoph Hellwig) [Orabug: 33520061]
- xfs: turn dfp_done into a xfs_log_item (Christoph Hellwig) [Orabug: 33520061]
- xfs: refactor xfs_defer_finish_noroll (Christoph Hellwig) [Orabug: 33520061]
- xfs: turn dfp_intent into a xfs_log_item (Christoph Hellwig) [Orabug: 33520061]
- xfs: merge the ->diff_items defer op into ->create_intent (Christoph Hellwig) [Orabug: 33520061]
- xfs: merge the ->log_item defer op into ->create_intent (Christoph Hellwig) [Orabug: 33520061]
- xfs: factor out a xfs_defer_create_intent helper (Christoph Hellwig) [Orabug: 33520061]
- sched: Fix Core-wide rq->lock for uninitialized CPUs (Peter Zijlstra) [Orabug: 33568834]
- admin-guide/hw-vuln: Rephrase a section of core-scheduling.rst (Fabio M. De Francesco) [Orabug: 33568834]
- Documentation: Add usecases, design and interface for core scheduling (Joel Fernandes (Google)) [Orabug: 33568834]
- kselftest: Add test for core sched prctl interface (Chris Hyser) [Orabug: 33568834]
- sched: prctl() core-scheduling interface (Chris Hyser) [Orabug: 33568834]
- sched: Inherit task cookie on fork() (Peter Zijlstra) [Orabug: 33568834]
- sched: Trivial core scheduling cookie management (Peter Zijlstra) [Orabug: 33568834]
- sched: Migration changes for core scheduling (Aubrey Li) [Orabug: 33568834]
- sched: Trivial forced-newidle balancer (Peter Zijlstra) [Orabug: 33568834]
- sched/fair: Snapshot the min_vruntime of CPUs on force idle (Joel Fernandes (Google)) [Orabug: 33568834]
- sched: Fix priority inversion of cookied task with sibling (Joel Fernandes (Google)) [Orabug: 33568834]
- sched/fair: Fix forced idle sibling starvation corner case (Vineeth Pillai) [Orabug: 33568834]
- sched: Add core wide task selection and scheduling (Peter Zijlstra) [Orabug: 33568834]
- sched: Basic tracking of matching tasks (Peter Zijlstra) [Orabug: 33568834]
- sched: Introduce sched_class::pick_task() (Peter Zijlstra) [Orabug: 33568834]
- sched: Allow sched_core_put() from atomic context (Peter Zijlstra) [Orabug: 33568834]
- sched: Optimize rq_lockp() usage (Peter Zijlstra) [Orabug: 33568834]
- sched: Core-wide rq->lock (Peter Zijlstra) [Orabug: 33568834]
- sched: Prepare for Core-wide rq->lock (Peter Zijlstra) [Orabug: 33568834]
- sched: Wrap rq::lock access (Peter Zijlstra) [Orabug: 33568834]
- sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra) [Orabug: 33568834]
- sched/fair: Add a few assertions (Peter Zijlstra) [Orabug: 33568834]
- sched: Extract the task putting code from pick_next_task() (Chen Yu) [Orabug: 33568834]
- rss_stat: add support to detect RSS updates of external mm (Joel Fernandes (Google)) [Orabug: 33568834]
- Revert "sched: Wrap rq::lock access" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Introduce sched_class::pick_task()" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Core-wide rq->lock" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/fair: Add a few assertions" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Basic tracking of matching tasks" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Update core scheduler queue when taking cpu online/offline" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Add core wide task selection and scheduling." (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/fair: wrapper for cfs_rq->min_vruntime" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/fair: core wide vruntime comparison" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Trivial forced-newidle balancer" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: migration changes for core scheduling" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: cgroup tagging interface for core scheduling" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Cleanup kABI" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Enable disabling via CONFIG_SCHED_CORE" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/core: remove undesired trace_printk from core scheduling backport" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/core: cleanup kABI for struct rq" (Kamalesh Babulal) [Orabug: 33568834]
- RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib) [Orabug: 33615342]
- xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong) [Orabug: 33676190]
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679803] {CVE-2021-0920}
[5.4.17-2136.303.2.el7uek]
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen) [Orabug: 33594983] {CVE-2021-43975}
- RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry) [Orabug: 33620311]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33652503]
- sched: Mitigate increased latencies for sysctl_sched_wakeup_granularity. (chris hyser) [Orabug: 33107207]
- net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan) [Orabug: 33585475]
- proc: allow pid_revalidate() during LOOKUP_RCU (Stephen Brennan) [Orabug: 33647511]
- selinux: slow_avc_audit has become non-blocking (Al Viro) [Orabug: 33647511]
- make dump_common_audit_data() safe to be called from RCU pathwalk (Al Viro) [Orabug: 33647511]
- new helper: d_find_alias_rcu() (Al Viro) [Orabug: 33647511]
[5.4.17-2136.303.1.el7uek]
- Revert "fs: align IOCB_* flags with RWF_* flags" (Prasad Singamsetty) [Orabug: 33642850]
- ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [Orabug: 33501676]
- net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann) [Orabug: 33520710]
- cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich) [Orabug: 33542895]
- uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly) [Orabug: 33557973]
- EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo) [Orabug: 33585319]
- EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo) [Orabug: 33585319]
- EDAC, skx_common: Refactor so that we initialize "dev" in result of adxl decode. (Tony Luck) [Orabug: 33585319]
- net/rds: Don't pummel the subnet-manager (Gerd Rausch) [Orabug: 33589566]
- rds: ib: Ack seq not always received in monotonic increasing order (Håkon Bugge) [Orabug: 33599862]
- rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju) [Orabug: 33619953]
[5.4.17-2136.303.0.el7uek]
- LTS tag: v5.4.156 (Jack Vogel)
- pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (Fabien Dessenne)
- ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (Nick Desaulniers)
- tracing: Have all levels of checks prevent recursion (Steven Rostedt (VMware))
- net: mdiobus: Fix memory leak in __mdiobus_register (Yanfei Xu)
- Input: snvs_pwrkey - add clk handling (Uwe Kleine-König)
- ALSA: hda: avoid write to STATESTS if controller is in reset (Kai Vehmanen)
- platform/x86: intel_scu_ipc: Update timeout value in comment (Prashant Malani)
- isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma)
- ARM: dts: spear3xx: Fix gmac node (Herve Codina)
- net: stmmac: add support for dwmac 3.40a (Herve Codina)
- btrfs: deal with errors when checking if a dir entry exists during log replay (Filipe Manana)
- gcc-plugins/structleak: add makefile var for disabling structleak (Brendan Higgins)
- selftests: netfilter: remove stray bash debug line (Florian Westphal)
- netfilter: Kconfig: use 'default y' instead of 'm' for bool config option (Vegard Nossum)
- isdn: cpai: check ctr->cnr to avoid array index out of bound (Xiaolong Huang)
- nfc: nci: fix the UAF of rf_conn_info object (Lin Ma)
- mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin)
- mm, slub: fix mismatch between reconstructed freelist depth and cnt (Miaohe Lin)
- powerpc/idle: Don't corrupt back chain when going idle (Michael Ellerman)
- KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (Michael Ellerman)
- KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (Michael Ellerman)
- powerpc64/idle: Fix SP offsets when saving GPRs (Christopher M. Riedl)
- audit: fix possible null-pointer dereference in audit_filter_rules (Gaosheng Cui)
- ASoC: DAPM: Fix missing kctl change notifications (Takashi Iwai)
- ALSA: hda/realtek: Add quirk for Clevo PC50HS (Steven Clarkson)
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (Brendan Grieve)
- vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle))
- elfcore: correct reference to CONFIG_UML (Lukas Bulwahn)
- ocfs2: mount fails with buffer overflow in strlen (Valentin Vidic)
- ocfs2: fix data corruption after conversion from inline format (Jan Kara)
- ceph: fix handling of "meta" errors (Jeff Layton)
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Zhang Changzhong)
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Zhang Changzhong)
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan)
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Ziyang Xuan)
- can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma)
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (Stephane Grosjean)
- can: rcar_can: fix suspend/resume (Yoshihiro Shimoda)
- net: enetc: fix ethtool counter name for PM0_TERR (Vladimir Oltean)
- net: stmmac: Fix E2E delay mechanism (Kurt Kanzenbach)
- net: hns3: disable sriov before unload hclge layer (Peng Li)
- net: hns3: add limit ets dwrr bandwidth cannot be 0 (Guangbin Huang)
- net: hns3: reset DWRR of unused tc to zero (Guangbin Huang)
- NIOS2: irqflags: rename a redefined register name (Randy Dunlap)
- net: dsa: lantiq_gswip: fix register definition (Aleksander Jan Bajkowski)
- lan78xx: select CRC32 (Vegard Nossum)
- netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart)
- ASoC: wm8960: Fix clock configuration on slave mode (Shengjiu Wang)
- dma-debug: fix sg checks in debug_dma_map_sg() (Gerald Schaefer)
- NFSD: Keep existing listeners on portlist error (Benjamin Coddington)
- xtensa: xtfpga: Try software restart before simulating CPU reset (Guenter Roeck)
- xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (Max Filippov)
- ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (Eugen Hristev)
- tee: optee: Fix missing devices unregister during optee_remove (Sumit Garg)
- net: switchdev: do not propagate bridge updates across bridges (Russell King)
- parisc: math-emu: Fix fall-through warnings (Helge Deller)
- LTS tag: v5.4.155 (Jack Vogel)
- ionic: don't remove netdev->dev_addr when syncing uc list (Shannon Nelson)
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum)
- qed: Fix missing error code in qed_slowpath_start() (chongjiapeng)
- mqprio: Correct stats in mqprio_dump_class_stats(). (Sebastian Andrzej Siewior)
- acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu)
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter)
- drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (Dan Carpenter)
- drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King)
- drm/panel: olimex-lcd-olinuxino: select CRC32 (Vegard Nossum)
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (Vadim Pasternak)
- mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel)
- ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (Wang Hai)
- pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter)
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan)
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan)
- nfc: fix error handling of nfc_proto_register() (Ziyang Xuan)
- ethernet: s2io: fix setting mac address during resume (Arnd Bergmann)
- net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun)
- net: stmmac: fix get_hw_feature() on old hardware (Herve Codina)
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (Aya Levin)
- net: korina: select CRC32 (Vegard Nossum)
- net: arc: select CRC32 (Vegard Nossum)
- gpio: pca953x: Improve bias setting (Andy Shevchenko)
- iio: dac: ti-dac5571: fix an error code in probe() (Dan Carpenter)
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter)
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter)
- iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N)
- iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (Hui Liu)
- iio: adc128s052: Fix the error handling path of 'adc128_probe()' (Christophe JAILLET)
- iio: adc: aspeed: set driver data when adc probe. (Billy Tsai)
- powerpc/xive: Discard disabled interrupts in get_irqchip_state() (Cédric Le Goater)
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov)
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd)
- EDAC/armada-xp: Fix output of uncorrectable error counter (Hans Potsch)
- virtio: write back F_VERSION_1 before validate (Halil Pasic)
- USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc)
- USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas)
- USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang)
- USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado)
- Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen)
- usb: musb: dsps: Fix the probe error path (Miquel Raynal)
- efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua)
- efi/cper: use stack buffer for error record decoding (Ard Biesheuvel)
- cb710: avoid NULL pointer subtraction (Arnd Bergmann)
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov)
- xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti)
- xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell)
- mei: me: add Ice Lake-N device id. (Andy Shevchenko)
- x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (James Morse)
- watchdog: orion: use 0 for unset heartbeat (Chris Packham)
- btrfs: check for error when looking up inode during dir entry replay (Filipe Manana)
- btrfs: deal with errors when adding inode reference during log replay (Filipe Manana)
- btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana)
- btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)
- csky: Fixup regs.sr broken in ptrace (Guo Ren)
- csky: don't let sigreturn play with priveleged bits of status register (Al Viro)
- s390: fix strrchr() implementation (Roberto Sassu)
- nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^' (Steven Rostedt)
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)
- ALSA: hda/realtek - ALC236 headset MIC recording issue (Kailang Yang)
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G (Werner Sembach)
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity (Werner Sembach)
- ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai)
- ALSA: usb-audio: Add quirk for VF0770 (Jonas Hahnfeld)
- ovl: simplify file splice (Miklos Szeredi)
- LTS tag: v5.4.154 (Jack Vogel)
- sched: Always inline is_percpu_thread() (Peter Zijlstra)
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)
- scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong)
- drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi)
- net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap)
- mac80211: check return value of rhashtable_init (MichelleJin)
- net: prevent user from passing illegal stab size (王贇)
- m68k: Handle arrivals of multiple signals correctly (Al Viro)
- mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing)
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue (Florian Westphal)
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (Florian Westphal)
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (Joshua-Dickens)
- netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden)
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori)
- ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi)
- net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli)
- LTS tag: v5.4.153 (Jack Vogel)
- x86/Kconfig: Correct reference to MWINCHIP3D (Lukas Bulwahn)
- x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner)
- x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (Lukas Bulwahn)
- RISC-V: Include clone3() on rv32 (Palmer Dabbelt)
- bpf, s390: Fix potential memory leak about jit_data (Tiezhu Yang)
- i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles)
- net: prefer socket bound to interface when not in VRF (Mike Manning)
- i40e: Fix freeing of uninitialized misc IRQ vector (Sylwester Dziedziuch)
- i40e: fix endless loop under rtnl (Jiri Benc)
- gve: fix gve_get_stats() (Eric Dumazet)
- rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet)
- gve: Correct available tx qpl check (Catherine Sullivan)
- drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang)
- video: fbdev: gbefb: Only instantiate device when built for IP32 (Mark Brown)
- bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (Tony Lindgren)
- netlink: annotate data races around nlk->bound (Eric Dumazet)
- net: sfp: Fix typo in state machine debug string (Sean Anderson)
- net/sched: sch_taprio: properly cancel timer from taprio_destroy() (Eric Dumazet)
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet)
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel)
- arm64: dts: ls1028a: add missing CAN nodes (Michael Walle)
- arm64: dts: freescale: Fix SP805 clock-names (Andre Przywara)
- ptp_pch: Load module automatically if ID matches (Andy Shevchenko)
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohár)
- net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet)
- phy: mdio: fix memory leak (Pavel Skripkin)
- bpf, arm: Fix register clobbering in div/mod implementation (Johan Almbladh)
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov)
- xtensa: use CONFIG_USE_OF instead of CONFIG_OF (Randy Dunlap)
- xtensa: move XCHAL_KIO_* definitions to kmem_layout.h (Max Filippov)
- arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (Dmitry Baryshkov)
- ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (Marek Vasut)
- ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (Marek Vasut)
- soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (Shawn Guo)
- ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (Marijn Suijten)
- soc: qcom: socinfo: Fixed argument passed to platform_set_data() (Antonio Martorana)
- bpf, mips: Validate conditional branch offsets (Piotr Krysiuk)
- MIPS: BPF: Restore MIPS32 cBPF JIT (Paul Burton)
- ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg)
- ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros)
- xen/balloon: fix cancelled balloon action (Juergen Gross)
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (Trond Myklebust)
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (Patrick Ho)
- ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)
- mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (Neil Armstrong)
- xen/privcmd: fix error handling in mmap-resource processing (Jan Beulich)
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes (Xu Yang)
- USB: cdc-acm: fix break reporting (Johan Hovold)
- USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold)
- Partially revert "usb: Kconfig: using select for USB_COMMON dependency" (Ben Hutchings)
_______________________________________________
An unbreakable Enterprise kernel security update has been released for Oracle Linux 7.
