-
Fri Nov 05 2021 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.2.el7uek]
- rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Håkon Bugge) [Orabug: 33538398]
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo) [Orabug: 33536948]
- nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields) [Orabug: 33536948]
- xen/netfront: stop tx queues during live migration (Dongli Zhang) [Orabug: 33536404]
- Linux 4.14.252 (Greg Kroah-Hartman)
- r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum)
- qed: Fix missing error code in qed_slowpath_start() (chongjiapeng)
- acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu)
- drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter)
- drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King)
- pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter)
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan)
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan)
- nfc: fix error handling of nfc_proto_register() (Ziyang Xuan)
- ethernet: s2io: fix setting mac address during resume (Arnd Bergmann)
- net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun)
- net: korina: select CRC32 (Vegard Nossum)
- net: arc: select CRC32 (Vegard Nossum)
- iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter)
- iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter)
- iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N)
- iio: adc128s052: Fix the error handling path of 'adc128_probe()' (Christophe JAILLET)
- iio: adc: aspeed: set driver data when adc probe. (Billy Tsai)
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov)
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd)
- virtio: write back F_VERSION_1 before validate (Halil Pasic)
- USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc)
- USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas)
- USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang)
- USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado)
- Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen)
- usb: musb: dsps: Fix the probe error path (Miquel Raynal)
- efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua)
- efi/cper: use stack buffer for error record decoding (Ard Biesheuvel)
- cb710: avoid NULL pointer subtraction (Arnd Bergmann)
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov)
- xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti)
- btrfs: check for error when looking up inode during dir entry replay (Filipe Manana)
- btrfs: deal with errors when adding inode reference during log replay (Filipe Manana)
- btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana)
- s390: fix strrchr() implementation (Roberto Sassu)
- ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai)
- stable: clamp SUBLEVEL in 4.14 (Sasha Levin)
- Linux 4.14.251 (Greg Kroah-Hartman)
- sched: Always inline is_percpu_thread() (Peter Zijlstra)
- perf/x86: Reset destroy callback on event init failure (Anand K Mistry)
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)
- scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong)
- net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap)
- m68k: Handle arrivals of multiple signals correctly (Al Viro)
- mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing)
- netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden)
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori)
- net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli)
- i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles)
- i40e: fix endless loop under rtnl (Jiri Benc)
- rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet)
- drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang)
- netlink: annotate data races around nlk->bound (Eric Dumazet)
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet)
- ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel)
- ptp_pch: Load module automatically if ID matches (Andy Shevchenko)
- powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohár)
- net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet)
- phy: mdio: fix memory leak (Pavel Skripkin)
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu)
- xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov)
- bpf, mips: Validate conditional branch offsets (Piotr Krysiuk)
- bpf: add also cbpf long jump test cases with heavy expansion (Daniel Borkmann)
- ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg)
- ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros)
- xen/balloon: fix cancelled balloon action (Juergen Gross)
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (Trond Myklebust)
- ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)
- USB: cdc-acm: fix break reporting (Johan Hovold)
- USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold)
- Partially revert "usb: Kconfig: using select for USB_COMMON dependency" (Ben Hutchings)
- Linux 4.14.250 (Greg Kroah-Hartman)
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan)
- scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong)
- usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang)
- usb: testusb: Fix for showing the connection speed (Faizel K B)
- scsi: sd: Free scsi_disk device via put_device() (Ming Lei)
- ext2: fix sleeping in atomic bugs on error (Dan Carpenter)
- sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds)
- xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich)
- net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean)
-
Fri Oct 29 2021 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.1.el7uek]
- RDS: Remove obsolete flag (Hans Westgaard Ry) [Orabug: 33516782]
- RDMA/mlx5: Avoid taking MRs from larger MR cache pools when a pool is empty (Aharon Landau) [Orabug: 33514377]
- IB/mlx4: Implement backend callback for "ib_get_vector_irqn" (Gerd Rausch) [Orabug: 33509437]
- Revert "x86/vector: search CPU vector starts from last successfully assigned" (John Donnelly) [Orabug: 33488855]
- rds: Fix leak in rds_init (Håkon Bugge) [Orabug: 33488611]
- rds: include pid in rds_sock struct (Rohit Nair) [Orabug: 33481153]
- RDS-IB: Add garbage-collection to cache (Hans Westgaard Ry) [Orabug: 33426208]
- RDS-IB: Fix cachehit statistics (Hans Westgaard Ry) [Orabug: 33426208]
- RDS-IB: Fix cache-allocation statistics (Hans Westgaard Ry) [Orabug: 33426208]
- netem: use 64 bit divide by rate (Stephen Hemminger) [Orabug: 33135408]
- fs/dcache: add trace points for negative dentry pruning (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: remove global pool for negative dentry percpu counters (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: enforce a hard limit on the negative dentry count (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: Estimate the number of negative dentries to prune per filesystem (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: change name and granularity of negative dentry sysctl parameter (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: schedule only one instance of negative dentry shrinker (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: correct the usage of static_key for negative dentry (Gautham Ananthakrishna) [Orabug: 31182222]
- fs/dcache: Spread negative dentry pruning across multiple CPUs (Waiman Long) [Orabug: 31182222]
- fs/dcache: Enable automatic pruning of negative dentries (Waiman Long) [Orabug: 31182222]
- fs/dcache: Add sysctl parameter neg-dentry-pc as a soft limit on negative dentries (Waiman Long) [Orabug: 31182222]
- fs/dcache: Track & report number of negative dentries (Waiman Long) [Orabug: 31182222]
- Linux 4.14.249 (Greg Kroah-Hartman)
- cred: allow get_cred() and put_cred() to be given NULL. (NeilBrown)
- HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam)
- netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik)
- HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman)
- crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (Dan Carpenter)
- usb: hso: remove the bailout parameter (Dongliang Mu)
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)
- hso: fix bailout in error case of probe (Oliver Neukum)
- arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 (Suzuki K Poulose)
- ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin)
- ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin)
- ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin)
- ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin)
- EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri)
- net: udp: annotate data race around udp_sk(sk)->corkflag (Eric Dumazet)
- ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun)
- ipack: ipoctal: fix module reference leak (Johan Hovold)
- ipack: ipoctal: fix missing allocation-failure check (Johan Hovold)
- ipack: ipoctal: fix tty-registration error handling (Johan Hovold)
- ipack: ipoctal: fix tty registration race (Johan Hovold)
- ipack: ipoctal: fix stack information leak (Johan Hovold)
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Saeed Mirzamohammadi)
- scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy)
- e100: fix buffer overrun in e100_get_regs (Jacob Keller)
- e100: fix length calculation in e100_get_regs_len (Jacob Keller)
- hwmon: (tmp421) fix rounding for negative values (Paul Fertser)
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long)
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi)
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang)
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi)
- mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg)
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse)
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao)
- tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente)
- qnx4: work around gcc false positive warning bug (Linus Torvalds)
- xen/balloon: fix balloon kthread freezing (Juergen Gross)
- PCI: aardvark: Fix checking for PIO status (Evan Wang)
- PCI: aardvark: Fix checking for PIO Non-posted Request (Pali Rohár)
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohár)
- spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds)
- net: 6pack: Fix tx timeout and slot time (Guenter Roeck)
- alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck)
- arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li)
- parisc: Use absolute_pointer() to define PAGE0 (Helge Deller)
- qnx4: avoid stringop-overread errors (Linus Torvalds)
- sparc: avoid stringop-overread errors (Linus Torvalds)
- net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck)
- compiler.h: Introduce absolute_pointer macro (Guenter Roeck)
- xen/balloon: use a kernel thread instead a workqueue (Juergen Gross)
- m68k: Double cast io functions to unsigned long (Guenter Roeck)
- net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson)
- net: macb: fix use after free on rmmod (Tong Zhang)
- blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng)
- md: fix a lock order reversal in md_alloc (Christoph Hellwig)
- irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
- thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter)
- scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li)
- net/mlx4_en: Don't allow aRFS for encapsulated packets (Aya Levin)
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan)
- net: hso: fix muxed tty registration (Johan Hovold)
- serial: mvebu-uart: fix driver's tx_empty callback (Pali Rohár)
- mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter)
- USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao)
- USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski)
- USB: serial: option: add Telit LN920 compositions (Carlo Lobrano)
- USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski)
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski)
- staging: greybus: uart: fix tty use after free (Johan Hovold)
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt)
- usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary)
- xen/x86: fix PV trap handling on secondary processors (Jan Beulich)
- cifs: fix incorrect check for null pointer in header_assemble (Steve French)
- usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter)
- usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter)
- Linux 4.14.248 (Greg Kroah-Hartman)
- drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck)
- blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin)
- pwm: rockchip: Don't modify HW state in .remove() callback (Uwe Kleine-König)
- nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun)
- nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun)
- nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun)
- ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton)
- dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey)
- dmaengine: ioat: depends on !UML (Johannes Berg)
- parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck)
- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn)
- pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-König)
- profiling: fix shift-out-of-bounds bugs (Pavel Skripkin)
- prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov)
- 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji)
- thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter)
- dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko)
- sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner)
- sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner)
- crypto: talitos - fix max key size for sha384 and sha512 (Christophe Leroy)
- apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko)
- rcu: Fix missed wakeup of exp_wq waiters (Neeraj Upadhyay)
- s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich)
-
Fri Oct 22 2021 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.0.el7uek]
- xen-blkfront: sanitize the removal state machine (Christoph Hellwig) [Orabug: 33486179]
- xen/blkfront: fix ring info addressing (Juergen Gross) [Orabug: 33486179]
- xen/blkfront: limit allocated memory size to actual use case (Juergen Gross) [Orabug: 33486179]
- xen-blkfront: do not remove disk when device_create_file() is failed (Dongli Zhang) [Orabug: 33486179]
- cifs: move cifsFileInfo_put logic into a work-queue (Ronnie Sahlberg) [Orabug: 33473933]
- genirq/affinity: Spread irq vectors among present CPUs as far as possible (Ming Lei) [Orabug: 33456847]
- genirq/affinity: Allow irq spreading from a given starting point (Ming Lei) [Orabug: 33456847]
- genirq/affinity: Move actual irq vector spreading into a helper function (Ming Lei) [Orabug: 33456847]
- genirq/affinity: Rename *node_to_possible_cpumask as *node_to_cpumask (Ming Lei) [Orabug: 33456847]
- net/mlx5: Initialize nvec based on "num_possible_cpus()" (Gerd Rausch) [Orabug: 33451394]
- net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 33308966]
- net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 33308966]
- net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 33308966]
- net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch) [Orabug: 33308966]
- net/mlx5: Add new verb "ib_get_vector_irqn" (Gerd Rausch) [Orabug: 33308966]
- net/mlx5: Fix MLX5_EQ_VEC_COMP_BASE usage (Gerd Rausch) [Orabug: 33308966]
- net/rds: Fix "rds_ib_init" initialization order (Gerd Rausch) [Orabug: 33308966]
- net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 33308966]
- net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 33308966]
- net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 33308966]
- net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 33308966]
- net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 33308966]
- net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33308966]
- net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33308966]
- btrfs: always wait on ordered extents at fsync time (Josef Bacik) [Orabug: 33046870]
- sctp: account stream padding length for reconf chunk (Eiichi Tsukata) [Orabug: 32816609]
-
Fri Oct 22 2021 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.509.2.el7uek]
- rds/ib: handle rds uncongested notifications in worker (Manjunath Patil) [Orabug: 33467790]
- block: Fix bio_integrity_payload handling for cloned bios (Martin K. Petersen) [Orabug: 33485629]
-
Fri Oct 15 2021 John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.509.1.el7uek]
- net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33449986]
- net/mlx{4,5}: Fix signed formal parameter (Håkon Bugge) [Orabug: 33449986]
- openvswitch: fix build warning in ovs_fragment() (John Donnelly) [Orabug: 33460370]
- arm64: pensando: Kernel PCIe manager for Pensando SmartNIC (Rob Gardner) [Orabug: 33413998]
- net/rds: "no error" is no error (Gerd Rausch) [Orabug: 33457412]
- x86/vector: search CPU vector starts from last successfully assigned (Joe Jin) [Orabug: 33451207]
- Linux 4.14.247 (Greg Kroah-Hartman)
- s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich)
- net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda)
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu)
- netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans)
- net: dsa: b53: Fix calculating number of switch ports (Rafał Miłecki)
- ARC: export clear_user_page() for modules (Randy Dunlap)
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' (Christophe JAILLET)
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko)
- ethtool: Fix an error code in cxgb2.c (Yang Li)
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas)
- PCI: Add ACS quirks for Cavium multi-function devices (George Cherian)
- mfd: Don't use irq_create_mapping() to resolve a mapping (Marc Zyngier)
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal)
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() (David Hildenbrand)
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (zhenggy)
- net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet)
- events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers)
- tipc: increase timeout in tipc_sk_enqueue() (Hoang Le)
- r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli)
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang)
- ptp: dp83640: don't define PAGE0 (Randy Dunlap)
- net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet)
- x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport)
- PM: base: power: don't try to use non-existing RTC for storing data (Juergen Gross)
- bnx2x: Fix enabling network interfaces without VFs (Adrian Bunk)
- xen: reset legacy rtc flag for PV domU (Juergen Gross)
- platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda)
- memcg: enable accounting for pids in nested pid namespaces (Vasily Averin)
- mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian)
- cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat)
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap)
- scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki)
- parisc: fix crash with signals and alloca (Mikulas Patocka)
- net: w5100: check return value after calling platform_get_resource() (Yang Yingliang)
- net: fix NULL pointer reference in cipso_v4_doi_free (王贇)
- ath9k: fix sleeping in atomic context (Miaoqing Pan)
- ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen)
- parport: remove non-zero check on count (Colin Ian King)
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo)
- ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang)
- usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan)
- usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam)
- usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova)
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" (Mathias Nyman)
- cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui)
- selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian)
- mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb)
- mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani)
- gfs2: Don't call dlm after protocol is unmounted (Bob Peterson)
- staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook)
- rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields)
- ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner)
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li)
- Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi)
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor)
- arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul)
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil)
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output (Hans de Goede)
- Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi)
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko)
- staging: ks7010: Fix the initialization of the 'sleep_status' structure (Christophe JAILLET)
- serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman)
- hvsi: don't panic on tty_register_driver failure (Jiri Slaby)
- xtensa: ISS: don't panic in rs_init (Jiri Slaby)
- serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki)
- s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens)
- flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva)
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva)
- video: fbdev: riva: Error out if 'pixclock' equals zero (Zheyu Ma)
- video: fbdev: kyro: Error out if 'pixclock' equals zero (Zheyu Ma)
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero (Zheyu Ma)
- bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh)
- bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh)
- tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma)
- staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven)
- usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham)
- usb: gadget: u_ether: fix a potential null pointer dereference (Maciej Żenczykowski)
- usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv)
- usb: host: fotg210: fix the endpoint's transactional opportunities calculation (Kelly Devilliv)
- Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang)
- netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng)
- video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma)
- ARM: dts: qcom: apq8064: correct clock names (David Heidelberg)
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron)
- PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki)
- crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson)
- media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab)
- MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel)
- scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter)
- pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei)
- openrisc: don't printk() unconditionally (Randy Dunlap)
- vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe)
- pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi)
- docs: Fix infiniband uverbs minor number (Leon Romanovsky)
- RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky)
- HID: input: do not report stylus battery state as "full" (Dmitry Torokhov)
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohár)
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohár)
- PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon)
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczyński)
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behún)
- ARM: 9105/1: atags_to_fdt: don't warn about stack size (David Heidelberg)
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede)
- media: rc-loopback: return number of emitters rather than error (Sean Young)
- media: uvc: don't do DMA on stack (Mauro Carvalho Chehab)
- VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai)
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel)
- power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski)
- block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal)
- crypto: public_key: fix overflow during implicit conversion (zhenwei pi)
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska)
- 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha)
- include/linux/list.h: add a macro to test if entry is pointing to the head (Andy Shevchenko)
- xen: fix setting of max_pfn in shared_info (Juergen Gross)
- powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain)
- PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Górecki)
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel)
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel)
- rtc: tps65910: Correct driver module alias (Dmitry Osipenko)
- fbmem: don't allow too huge resolutions (Tetsuo Handa)
- clk: kirkwood: Fix a clocking boot regression (Linus Walleij)
- backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson)
- IMA: remove -Wmissing-prototypes warning (Austin Kim)
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng)
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger)
- tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi)
- netns: protect netns ID lookups with RCU (Guillaume Nault)
- net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren)
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang)
- ipv4: make exception cache less predictible (Eric Dumazet)
- bcma: Fix memory leak for internally-handled cores (Zenghui Yu)
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter)
- tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan)
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (Christophe JAILLET)
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov)
- i2c: mt65xx: fix IRQ check (Sergey Shtylyov)
- CIFS: Fix a potencially linear read overflow (Len Baker)
- mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- i2c: s3c2410: fix IRQ check (Sergey Shtylyov)
- i2c: iop3xx: fix deferred probing (Sergey Shtylyov)
- Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin)
- usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova)
- mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang)
- usb: phy: tahvo: add IRQ check (Sergey Shtylyov)
- usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov)
- Bluetooth: Move shutdown callback before flushing tx and rx queue (Kai-Heng Feng)
- usb: phy: twl6030: add IRQ checks (Sergey Shtylyov)
- usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov)
- usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov)
- drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET)
- Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi)
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (Colin Ian King)
- soc: qcom: smsm: Fix missed interrupts if state changes while masked (Stephan Gerhold)
- PCI: PM: Enable PME if it can be signaled from D3cold (Rafael J. Wysocki)
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (Rafael J. Wysocki)
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (Dongliang Mu)
- i2c: highlander: add IRQ check (Sergey Shtylyov)
- net: cipso: fix warnings in netlbl_cipsov4_add_std (Pavel Skripkin)
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos (Martin KaFai Lau)
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (Dan Carpenter)
- media: go7007: remove redundant initialization (Pavel Skripkin)
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (Dongliang Mu)
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (Dongliang Mu)
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally (Geert Uytterhoeven)
- certs: Trigger creation of RSA module signing key if it's not an RSA key (Stefan Berger)
- crypto: qat - use proper type for vf_mask (Giovanni Cabiddu)
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel (Phong Hoang)
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
- m68k: emu: Fix invalid free in nfeth_cleanup() (Pavel Skripkin)
- udf_get_extendedattr() had no boundary checks. (Stian Skjelstad)
- crypto: qat - do not export adf_iov_putmsg() (Giovanni Cabiddu)
- crypto: qat - fix naming for init/shutdown VF to PF notifications (Marco Chiappero)
- crypto: qat - fix reuse of completion variable (Marco Chiappero)
- crypto: qat - handle both source of interrupt in VF ISR (Giovanni Cabiddu)
- crypto: qat - do not ignore errors from enable_vf2pf_comms() (Giovanni Cabiddu)
- libata: fix ata_host_start() (Damien Le Moal)
- s390/cio: add dev_busid sysfs entry for each subchannel (Vineeth Vijayan)
- power: supply: max17042_battery: fix typo in MAx17042_TOFF (Sebastian Krzyszkowiak)
- nvme-rdma: don't update queue count when failing to set io queues (Ruozhu Li)
- isofs: joliet: Fix iocharset=utf8 mount option (Pali Rohár)
- udf: Check LVID earlier (Jan Kara)
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() (Tony Lindgren)
- power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors (Hans de Goede)
- crypto: mxs-dcp - Check for DMA mapping errors (Sean Anderson)
- regmap: fix the offset of register error log (Jeongtae Park)
- PCI: Call Max Payload Size-related fixup quirks early (Marek Behún)
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions (Paul Gortmaker)
- usb: host: xhci-rcar: Don't reload firmware after the completion (Yoshihiro Shimoda)
- Revert "btrfs: compression: don't try to compress if we don't have enough pages" (Qu Wenruo)
- mm/page_alloc: speed up the iteration of max_order (Muchun Song)
- net: ll_temac: Remove left-over debug message (Esben Haabendal)
- powerpc/boot: Delete unneeded .globl _zimage_start (Fangrui Song)
- powerpc/module64: Fix comment in R_PPC64_ENTRY handling (Michael Ellerman)
- crypto: talitos - reduce max key size for SEC1 (Christophe Leroy)
- mm/kmemleak.c: make cond_resched() rate-limiting more efficient (Andrew Morton)
- s390/disassembler: correct disassembly lines alignment (Vasily Gorbik)
- ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) (Mathieu Desnoyers)
- ath10k: fix recent bandwidth conversion bug (Christian Lamparter)
- f2fs: fix potential overflow (Chao Yu)
- USB: serial: mos7720: improve OOM-handling in read_mos_reg() (Tom Rix)
- igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian)
- media: stkwebcam: fix memory leak in stk_camera_probe (Pavel Skripkin)
- clk: fix build warning for orphan_list (Greg Kroah-Hartman)
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (Zubin Mithra)
- ARM: 8918/2: only build return_address() if needed (Ben Dooks)
- cryptoloop: add a deprecation warning (Christoph Hellwig)
- perf/x86/amd/ibs: Work around erratum #1197 (Kim Phillips)
- perf/x86/intel/pt: Fix mask of num_address_ranges (Xiaoyao Li)
- qede: Fix memset corruption (Shai Malin)
- net: macb: Add a NULL check on desc_ptp (Harini Katakam)
- qed: Fix the VF msix vectors flow (Shai Malin)
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG (Randy Dunlap)
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)
- Linux 4.14.246 (Greg Kroah-Hartman)
- Revert "floppy: reintroduce O_NDELAY fix" (Denis Efremov)
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)
- KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs (Sean Christopherson)
- fbmem: add margin check to fb_check_caps() (George Kennedy)
- vt_kdsetmode: extend console locking (Linus Torvalds)
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs)
- drm: Copy drm_wait_vblank to user before returning (Mark Yacoub)
- vringh: Use wiov->used to check for read/write desc order (Neeraj Upadhyay)
- virtio: Improve vq->broken access to avoid any compiler optimization (Parav Pandit)
- opp: remove WARN when no valid OPPs remain (Michał Mirosław)
- usb: gadget: u_audio: fix race condition on endpoint stop (Jerome Brunet)
- net: marvell: fix MVNETA_TX_IN_PRGRS bit number (Maxim Kiselev)
- xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' (Christophe JAILLET)
- ip_gre: add validation for csum_start (Shreyansh Chouhan)
- e1000e: Fix the max snoop/no-snoop latency for 10M (Sasha Neftin)
- IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() (Tuo Li)
- usb: dwc3: gadget: Stop EP0 transfers during pullup disable (Wesley Cheng)
- usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (Thinh Nguyen)
- USB: serial: option: add new VID/PID to support Fibocom FG150 (Zhengjun Zhang)
- Revert "USB: serial: ch341: fix character loss at high transfer rates" (Johan Hovold)
- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (Stefan Mätje)
- ARC: Fix CONFIG_STACKDEPOT (Guenter Roeck)
-
Fri Oct 08 2021 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.509.0.el7uek]
- uek-rpm: Pensando: disable CONFIG_PENSANDO_SOC_BSM_ENABLE (Dave Kleikamp) [Orabug: 33428270]
- KVM: SVM: Drop __sme_page_pa for vmsave/vmload (Alejandro Jimenez) [Orabug: 33413954]
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy) [Orabug: 33406904]
- kvm: export per-vcpu exits to userspace (Dongli Zhang) [Orabug: 33403457]
- tools/power/turbostat: Fallback to an MSR read for EPB (Borislav Petkov) [Orabug: 33387024]
- RDMA/core: Save kernel caller name when creating CQ using ib_create_cq() (Bharat Potnuri) [Orabug: 33353576]
- locking/csd_lock: Make csdlock_debug=1 default (Stephen Brennan) [Orabug: 33245814]
- uek-rpm: config: Enable CONFIG_CSD_LOCK_WAIT_DEBUG (Stephen Brennan) [Orabug: 33245814]
- locking/csd_lock: Remove unused "idle" event (Stephen Brennan) [Orabug: 33245814]
- locking/csd_lock: Add more data to CSD lock debugging (Juergen Gross) [Orabug: 33245814]
- smp: refactor queueing of single smp call (Stephen Brennan) [Orabug: 33245814]
- locking/csd_lock: Prepare more CSD lock debugging (Juergen Gross) [Orabug: 33245814]
- locking/csd_lock: Add boot parameter for controlling CSD lock debugging (Juergen Gross) [Orabug: 33245814]
- kernel/smp: Provide CSD lock timeout diagnostics (Paul E. McKenney) [Orabug: 33245814]
- smp: Fix kABI breakage in __call_single_data (Stephen Brennan) [Orabug: 33245814]
- smp: Add source and destination CPUs to __call_single_data (Paul E. McKenney) [Orabug: 33245814]
- x86/jump_label: Initialize static branching early (Pavel Tatashin) [Orabug: 33245814]
- x86/alternatives, jumplabel: Use text_poke_early() before mm_init() (Pavel Tatashin) [Orabug: 33245814]
- NFSv4.1 make cachethis=no for writes (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS: Add missing encode / decode sequence_maxsz to v4.2 operations (Anna Schumaker) [Orabug: 33209530] {CVE-2021-38199}
- NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust) [Orabug: 33209530] {CVE-2021-38199}
- NFS add a simple sync nfs4_proc_commit after async COPY (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS handle COPY ERR_OFFLOAD_NO_REQS (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS send OFFLOAD_CANCEL when COPY killed (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS export nfs4_async_handle_error (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS handle COPY reply CB_OFFLOAD call race (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS add support for asynchronous COPY (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS COPY xdr handle async reply (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS OFFLOAD_CANCEL xdr (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS CB_OFFLOAD xdr (Olga Kornievskaia) [Orabug: 33209530] {CVE-2021-38199}
- NFS: Merge nfs41_free_stateid() with _nfs41_free_stateid() (Anna Schumaker) [Orabug: 33209530] {CVE-2021-38199}
- NFS: Pass "privileged" value to nfs4_init_sequence() (Anna Schumaker) [Orabug: 33209530] {CVE-2021-38199}
- NFS: Move call to nfs4_state_protect() to nfs4_commit_setup() (Anna Schumaker) [Orabug: 33209530] {CVE-2021-38199}
- NFS: Move call to nfs4_state_protect_write() to nfs4_write_setup() (Anna Schumaker) [Orabug: 33209530] {CVE-2021-38199}
- NFS: Move delegation recall into the NFSv4 callback for rename_setup() (Trond Myklebust) [Orabug: 33209530] {CVE-2021-38199}
- uek-rpm: Remove unnecessary ld.so.conf.d file (Stephen Brennan) [Orabug: 33186981]
- dccp: don't duplicate ccid when cloning dccp sock (Lin, Zhenpeng) [Orabug: 32046139] {CVE-2017-6074} {CVE-2020-16119} {CVE-2020-16119}
- ocfs2: drop acl cache for directories too (Wengang Wang) [Orabug: 33253529]
- Linux 4.14.245 (Sasha Levin) {CVE-2021-3656}
- netfilter: nft_exthdr: fix endianness of tcp option cast (Sergey Marinkevich)
- fs: warn about impending deprecation of mandatory locks (Jeff Layton)
- locks: print a warning when mount fails due to lack of "mand" support (Jeff Layton)
- ASoC: intel: atom: Fix breakage for PCM buffer address setup (Takashi Iwai)
- btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (NeilBrown)
- ipack: tpci200: fix many double free issues in tpci200_pci_probe (Dongliang Mu)
- ALSA: hda - fix the 'Capture Switch' value change notifications (Jaroslav Kysela)
- mmc: dw_mmc: Fix hang on data CRC error (Vincent Whitchurch)
- net: mdio-mux: Handle -EPROBE_DEFER correctly (Saravana Kannan)
- net: mdio-mux: Don't ignore memory allocation errors (Saravana Kannan)
- net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 (Dinghao Liu)
- ptp_pch: Restore dependency on PCI (Andy Shevchenko)
- net: 6pack: fix slab-out-of-bounds in decode_data (Pavel Skripkin)
- bnxt: don't lock the tx queue from napi poll (Jakub Kicinski)
- vhost: Fix the calculation in vhost_overflow() (Xie Yongji)
- dccp: add do-while-0 stubs for dccp_pr_debug macros (Randy Dunlap)
- Bluetooth: hidp: use correct wait queue when removing ctrl_wait (Ole Bjørn Midtbø)
- net: usb: lan78xx: don't modify phy_device state concurrently (Ivan T. Ivanov)
- ARM: dts: nomadik: Fix up interrupt controller node names (Sudeep Holla)
- scsi: core: Avoid printing an error if target_alloc() returns -ENXIO (Sreekanth Reddy)
- scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() (Ye Bin)
- scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() (Harshvardhan Jha)
- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (Peter Ujfalusi)
- ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 (Dave Gerlach)
- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (Yu Kuai)
- ath9k: Postpone key cache entry deletion for TXQ frames reference it (Jouni Malinen)
- ath: Modify ath_key_delete() to not need full key entry (Jouni Malinen)
- ath: Export ath_hw_keysetmac() (Jouni Malinen)
- ath9k: Clear key cache explicitly on disabling hardware (Jouni Malinen)
- ath: Use safer key clearing with key cache entries (Jouni Malinen)
- x86/fpu: Make init_fpstate correct with optimized XSAVE (Thomas Gleixner)
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)
- mac80211: drop data frames without key on encrypted links (Johannes Berg)
- vmlinux.lds.h: Handle clang's module.{c,d}tor sections (Nathan Chancellor)
- PCI/MSI: Enforce MSI[X] entry updates to be visible (Thomas Gleixner)
- PCI/MSI: Enforce that MSI-X table entry is masked for update (Thomas Gleixner)
- PCI/MSI: Mask all unused MSI-X entries (Thomas Gleixner)
- PCI/MSI: Protect msi_desc::masked for multi-MSI (Saeed Mirzamohammadi)
- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (Thomas Gleixner)
- PCI/MSI: Correct misleading comments (Thomas Gleixner)
- PCI/MSI: Do not set invalid bits in MSI mask (Thomas Gleixner)
- PCI/MSI: Enable and mask MSI-X early (Thomas Gleixner)
- x86/resctrl: Fix default monitoring groups reporting (Babu Moger)
- x86/tools: Fix objdump version check again (Randy Dunlap)
- powerpc/kprobes: Fix kprobe Oops happens in booke (Pu Lehui)
- vsock/virtio: avoid potential deadlock when vsock device remove (Longpeng(Mike))
- xen/events: Fix race in set_evtchn_to_irq (Maximilian Heyne)
- tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets (Neal Cardwell)
- net: bridge: fix memleak in br_add_if() (Yang Yingliang)
- net: Fix memory leak in ieee802154_raw_deliver (Takeshi Misawa)
- psample: Add a fwd declaration for skbuff (Roi Dayan)
- ppp: Fix generating ifname when empty IFLA_IFNAME is specified (Pali Rohár)
- net: dsa: mt7530: add the missing RxUnicast MIB counter (DENG Qingfang)
- ASoC: cs42l42: Remove duplicate control for WNF filter frequency (Richard Fitzgerald)
- ASoC: cs42l42: Fix inversion of ADC Notch Switch control (Richard Fitzgerald)
- ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J (Richard Fitzgerald)
- ASoC: cs42l42: Correct definition of ADC Volume control (Richard Fitzgerald)
- ACPI: NFIT: Fix support for virtual SPA ranges (Dan Williams)
- i2c: dev: zero out array used for i2c reads from userspace (Greg Kroah-Hartman)
- ASoC: intel: atom: Fix reference to PCM buffer address (Takashi Iwai)
- iio: adc: Fix incorrect exit of for-loop (Colin Ian King)
- iio: humidity: hdc100x: Add margin to the conversion time (Chris Lesiak)
- Linux 4.14.244 (Greg Kroah-Hartman)
- net: xilinx_emaclite: Do not print real IOMEM pointer (YueHaibing)
- ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi)
- ppp: Fix generating ppp unit id when ifname is not specified (Pali Rohár)
- USB:ehci:fix Kunpeng920 ehci hardware problem (Longfang Liu)
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren)
- alpha: Send stop IPI to send to online CPUs (Prarit Bhargava)
- reiserfs: check directory items on read from disk (Shreyansh Chouhan)
- reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai)
- libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig)
- qmi_wwan: add network device usage statistics for qmimux devices (Reinhard Speyerer)
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)
- spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu)
- pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma)
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki)
- serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki)
- ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)
- pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71))
- media: rtl28xxu: fix zero-length control request (Johan Hovold)
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang)
- scripts/tracing: fix the bug that can't parse raw_trace_func (Hui Su)
- usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko)
- usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev)
- usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell)
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev)
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer)
- USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau)
- USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas)
- USB: usbtmc: Fix RCU stall warning (Qiang.zhang)
- net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin)
- net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin)
- net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin)
- bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter)
- mips: Fix non-POSIX regexp (H. Nikolaus Schaller)
- nfp: update ethtool reporting of pauseframe control (Fei Qin)
- net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil)
- scsi: sr: Return correct event when media event code is 3 (Li Manyi)
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller)
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi)
- ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai)
- Revert "ACPICA: Fix memory leak caused by _CID repair function" (Rafael J. Wysocki)
-
Tue Sep 28 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.3.el7uek]
- fuse: fix live lock in fuse_iget() (Amir Goldstein) [Orabug: 33396682] {CVE-2021-28950}
- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi) [Orabug: 33392821]
- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra) [Orabug: 33352735]
-
Fri Sep 17 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.2.el7uek]
- KVM: x86: Check kvm_rebooting in kvm_spurious_fault() (Sean Christopherson) [Orabug: 33360245]
- Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw) [Orabug: 33359680]
- net/mlx5: Rate limit errors in command interface (Leon Romanovsky) [Orabug: 33305503]
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33292634] {CVE-2021-3573}
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33292634]
- Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33292634] {CVE-2021-3564}
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje) [Orabug: 33134287]
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje) [Orabug: 33134287]
- uek-rpm: Add dm-cache-smq.ko module (John Donnelly) [Orabug: 29198153]
-
Fri Sep 10 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.1.el7uek]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33324346]
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter) [Orabug: 33329032]
- ip: Manual backport of pskb_inet_may_pull() (Håkon Bugge) [Orabug: 33329032]
- Revert "Revert "net: geneve: check skb is large enough for IPv4/IPv6 header"" (Håkon Bugge) [Orabug: 33329032]
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33327179] {CVE-2021-40490}
- uek-rpm: add CONFIG_PVPANIC_PCI to aarch64 (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: fix set driver data (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic-pci: Allow automatic loading (Eric Auger) [Orabug: 33155642]
- misc/pvpanic: Remove some dead-code (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic: Make 'pvpanic_probe()' resource managed (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-mmio: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-mmio: Fix error handling in 'pvpanic_mmio_probe()' (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-pci: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-pci: Fix error handling in 'pvpanic_pci_probe()' (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic: Make some symbols static (YueHaibing) [Orabug: 33155642]
- misc/pvpanic: fix return value check in pvpanic_pci_probe() (Qiheng Lin) [Orabug: 33155642]
- misc/pvpanic: add PCI driver (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: probe multiple instances (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: split-up generic and platform dependent code (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: Export module FDT device table (Shile Zhang) [Orabug: 33155642]
- misc: pvpanic: sysfs_emit uses should have a newline (Joe Perches) [Orabug: 33155642]
- misc: pvpanic: introduce events device attribue (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: introduce device capability (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: Check devm_ioport_map() for NULL (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Replace OF headers by mod_devicetable.h (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Combine ACPI and platform drivers (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Use devm_platform_ioremap_resource() (Wang ShaoBo) [Orabug: 33155642]
- driver core: platform: Introduce platform_get_mem_or_io() (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: move bit definition to uapi header file (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: fix warning implicit declaration (Anders Roxell) [Orabug: 33155642]
- misc/pvpanic: resolve compile errors for arch=um (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: fix a NULL vs IS_ERR() check (Dan Carpenter) [Orabug: 33155642]
- misc/pvpanic: remove a redundant comma (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: convert to SPDX license tags (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: change header file sort style (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: remove unnecessary header file (Peng Hao) [Orabug: 33155642]
- misc/pvpanic : break dependency on ACPI (Peng Hao) [Orabug: 33155642]
- misc/pvpanic : grouping ACPI related stuff (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: add support to get pvpanic device info FDT (Peng Hao) [Orabug: 33155642]
- dt-bindings: misc/pvpanic: add document for pvpanic-mmio (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: add MMIO support (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: simplify the code using acpi_dev_resource_io (Peng Hao) [Orabug: 33155642]
- pvpanic: move pvpanic to misc as common driver (Peng Hao) [Orabug: 33155642]
- fuse: fix bad inode (Miklos Szeredi) [Orabug: 32769032] {CVE-2020-36322}
- Linux 4.14.243 (Greg Kroah-Hartman)
- spi: mediatek: Fix fifo transfer (Guenter Roeck)
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman)
- KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() (Sean Christopherson)
- KVM: do not assume PTE is writable after follow_pfn (Paolo Bonzini)
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman)
- net: Fix zero-copy head len calculation. (Pravin B Shelar)
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He)
- r8152: Fix potential PM refcount imbalance (Takashi Iwai)
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin)
- btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues)
- Linux 4.14.242 (Greg Kroah-Hartman)
- Revert "perf map: Fix dso->nsinfo refcounting" (Arnaldo Carvalho de Melo)
- can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter)
- sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner)
- net/mlx5: Fix flow table chaining (Maor Gottlieb)
- net: llc: fix skb_over_panic (Pavel Skripkin)
- mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong)
- tipc: fix sleeping in tipc accept routine (Hoang Le)
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso)
- netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal)
- cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi)
- x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka)
- nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski)
- NIU: fix incorrect error return, missed in previous revert (Paul Jakma)
- can: esd_usb2: fix memory leak (Pavel Skripkin)
- can: ems_usb: fix memory leak (Pavel Skripkin)
- can: usb_8dev: fix memory leak (Pavel Skripkin)
- can: mcba_usb_start(): add missing urb->transfer_dma initialization (Pavel Skripkin)
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan)
- x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)
- gro: ensure frag0 meets IP header alignment (Eric Dumazet)
- virtio_net: Do not pull payload in skb->head (Eric Dumazet)
- ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla)
- hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi)
- hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi)
- hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi)
- sctp: move 198 addresses from unusable to private scope (Xin Long)
- net: annotate data race around sk_ll_usec (Eric Dumazet)
- net/802/garp: fix memleak in garp_request_join() (Yang Yingliang)
- net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang)
- workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang)
- af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)
- net: split out functions related to registering inflight socket files (Jens Axboe)
- KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky)
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman)
-
Fri Sep 03 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.0.el7uek]
- Linux 4.14.241 (Greg Kroah-Hartman)
- xhci: add xhci_get_virt_ep() helper (Mathias Nyman)
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)
- btrfs: compression: don't try to compress if we don't have enough pages (David Sterba)
- iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold)
- iio: accel: bma180: Use explicit member assignment (Linus Walleij)
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger)
- drm: Return -ENOTTY for non-drm ioctls (Charles Baylis)
- selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne)
- ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme)
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva)
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) [Orabug: 33198436] {CVE-2021-3679}
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan)
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping)
- USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray)
- USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco)
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda)
- usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson)
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski)
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman)
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin)
- xhci: Fix lost USB 2 remote wake (Mathias Nyman)
- ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai)
- s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik)
- Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei)
- proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri)
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin)
- spi: cadence: Correct initialisation of runtime PM again (Marek Vasut)
- scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov)
- scsi: iscsi: Fix iface sysfs attr detection (Mike Christie)
- netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi)
- net: decnet: Fix sleeping inside in af_decnet (Yajun Deng)
- net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan)
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King)
- liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King)
- spi: mediatek: fix fifo rx mode (Peter Hess)
- perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini)
- perf test bpf: Free obj_buf (Riccardo Mancini)
- perf lzma: Close lzma stream on exit (Riccardo Mancini)
- perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini)
- perf map: Fix dso->nsinfo refcounting (Riccardo Mancini)
- igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov)
- iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET)
- e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET)
- fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET)
- igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET)
- ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET)
- igb: Fix use-after-free error during reset (Vinicius Costa Gomes)
- ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet)
- tcp: annotate data races around tp->mtu_info (Eric Dumazet)
- dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand)
- net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)
- net: send SYNACK packet with accepted fwmark (Alexander Ovechkin)
- net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)
- net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin)
- net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin)
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli)
- net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller)
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin)
- net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko)
- sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal)
- scsi: libfc: Fix array index out of bound exception (Javed Hasan)
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King)
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich)
- thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang)
- arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab)
- arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla)
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue)
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer)
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser)
- ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki)
- ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki)
- ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki)
- ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki)
- reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel)
- arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang)
- ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang)
- ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia)
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker)
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker)
- ARM: dts: gemini: add device_type on pci (Corentin Labbe)
- Linux 4.14.240 (Greg Kroah-Hartman)
- net: bridge: multicast: fix PIM hello router port marking race (Nikolay Aleksandrov)
- MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz)
- mips: disable branch profiling in boot/decompress.o (Randy Dunlap)
- mips: always link byteswap helpers into decompressor (Arnd Bergmann)
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET)
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)
- memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski)
- memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski)
- reset: bail if try_module_get() fails (Philipp Zabel)
- ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki)
- ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven)
- rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter)
- memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski)
- reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski)
- hexagon: use common DISCARDS macro (Nathan Chancellor)
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust)
- ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei)
- x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner)
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng)
- nfs: fix acl memory leak of posix_acl_create() (Gao Xiang)
- watchdog: aspeed: fix hardware timeout calculation (Tao Ren)
- um: fix error return code in winch_tramp() (Zhen Lei)
- um: fix error return code in slip_open() (Zhen Lei)
- power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold)
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński)
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu)
- virtio_console: Assure used length from device is limited (Xie Yongji) [Orabug: 33209273] {CVE-2021-38160}
- virtio_net: Fix error handling in virtnet_restore() (Xie Yongji)
- virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji)
- ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede)
- ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang)
- pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König)
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei)
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei)
- NFS: nfs_find_open_context() may only select open files (Trond Myklebust)
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton)
- orangefs: fix orangefs df output. (Mike Marshall)
- x86/fpu: Return proper error codes from user access functions (Thomas Gleixner)
- watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka)
- watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei)
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei)
- watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei)
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers)
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
- power: supply: ab8500: Avoid NULL pointers (Linus Walleij)
- pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König)
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov)
- i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov)
- intel_th: Wait until port is in reset before programming it (Alexander Shishkin)
- staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto)
- ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao)
- backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König)
- powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt)
- usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang)
- usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol)
- ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto)
- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei)
- selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev)
- ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang)
- gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli)
- powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand)
- ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai)
- s390/sclp_vt220: fix console name to match device (Valentin Vidic)
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei)
- scsi: qedi: Fix null ref during abort handling (Mike Christie)
- scsi: iscsi: Fix shost->max_id use (Mike Christie)
- scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)
- fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong)
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET)
- scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry)
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart)
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart)
- w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio)
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto)
- misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong)
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun)
- PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohár)
- PCI: aardvark: Don't rely on jiffies while holding spinlock (Remi Pommarel)
- tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware))
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler)
- KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan)
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson)
- smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa)
- jfs: fix GPF in diFree (Pavel Skripkin)
- media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung)
- media: gspca/sunplus: fix zero-length control requests (Johan Hovold)
- media: gspca/sq905: fix control-request direction (Johan Hovold)
- media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin)
- media: dtv5100: fix control-request directions (Johan Hovold)
- dm btree remove: assign new_root only when removal succeeds (Hou Tao)
- ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong)
- tracing: Simplify & fix saved_tgids logic (Paul Burton)
- seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)
- power: supply: ab8500: Fix an old bug (Linus Walleij)
- ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu)
- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor)
- ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko)
- cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner)
- ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson)
- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle)
- mmc: core: clear flags before allowing to retune (Wolfram Sang)
- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper)
- pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz)
- drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng)
- usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov)
- powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor)
- mac80211: fix memory corruption in EAPOL handling (Davis Mosenkovs)
- fuse: reject internal errno (Miklos Szeredi)
- bdi: Do not use freezable workqueue (Mika Westerberg)
- fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers)
- sctp: add size validation when walking chunks (Marcelo Ricardo Leitner)
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner) [Orabug: 33198408] {CVE-2021-3655}
- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang)
- Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng)
- Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu)
- wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva)
- sfc: error code if SRIOV cannot be disabled (Íñigo Huguet)
- sfc: avoid double pci_remove of VFs (Íñigo Huguet)
- iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg)
- RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang)
- vsock: notify server to shutdown when client has pending signal (Longpeng(Mike))
- atm: nicstar: register the interrupt handler in the right place (Zheyu Ma)
- atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma)
- MIPS: add PMD table accounting into MIPS'pmd_alloc_one (Huang Pei)
- cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei)
- wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson)
- wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren)
- xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert)
- selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim)
- fjes: check return value after calling platform_get_resource() (Yang Yingliang)
- net: micrel: check return value after calling platform_get_resource() (Yang Yingliang)
- net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang)
- virtio_net: Remove BUG() to avoid machine dead (Xianting Tian)
- dm space maps: don't reset space map allocation cursor when committing (Joe Thornber)
- RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong)
- ipv6: use prandom_u32() for ID generation (Willy Tarreau)
- clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko)
- clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto)
- e100: handle eeprom as little endian (Jesse Brandeburg)
- udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)
- drm/virtio: Fix double free on probe failure (Xie Yongji)
- reiserfs: add check for invalid 1st journal block (Pavel Skripkin)
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior)
- atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei)
- mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)
- atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei)
- hugetlb: clear huge pte during flush function on mips platform (Bibo Mao)
- net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko)
- drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang)
- drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)
- drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)
- mmc: vub3000: fix control-request direction (Johan Hovold)
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen)
- mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin)
- leds: ktd2692: Fix an error handling path (Christophe JAILLET)
- leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei)
- configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng)
- extcon: max8997: Add missing modalias string (Marek Szyprowski)
- extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold)
- phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET)
- scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei)
- of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven)
- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald)
- staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter)
- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter)
- iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko)
- s390: appldata depends on PROC_SYSCTL (Randy Dunlap)
- scsi: FlashPoint: Rename si_flags field (Randy Dunlap)
- tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET)
- char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai)
- Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei)
- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang)
- iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adis_buffer: do not return ints in irq handlers (Nuno Sa)
- mwifiex: re-fix for unaligned accesses (Arnd Bergmann)
- tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET)
- net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin)
- writeback: fix obtain a reference to a freeing memcg css (Muchun Song)
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
- Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden)
- i40e: Fix error handling in i40e_vsi_open (Dinghao Liu)
- net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan)
- vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet)
- pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet)
- net: ethernet: ezchip: fix error handling (Pavel Skripkin)
- net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin)
- net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin)
- samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai)
- netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso)
- netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin)
- ath10k: Fix an error code in ath10k_add_interface() (Yang Li)
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET)
- wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap)
- drm: qxl: ensure surf.data is ininitialized (Colin Ian King)
- RDMA/rxe: Fix failure during driver load (Kamal Heib)
- ehea: fix error return code in ehea_restart_qps() (Zhen Lei)
- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang)
- net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko)
- ocfs2: fix snprintf() checking (Dan Carpenter)
- ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński)
- crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu)
- spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt)
- btrfs: clear log tree recovering status if starting transaction fails (David Sterba)
- hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck)
- hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck)
- media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min)
- mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei)
- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva)
- media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei)
- media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong)
- pata_ep93xx: fix deferred probing (Sergey Shtylyov)
- crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET)
- pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov)
- media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap)
- pata_rb532_cf: fix deferred probing (Sergey Shtylyov)
- sata_highbank: fix deferred probing (Sergey Shtylyov)
- crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei)
- crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe)
- media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab)
- ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann)
- HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke)
- ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald)
- platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong)
- ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo)
- ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda)
- fs: dlm: fix memory leak when fenced (Alexander Aring)
- random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald)
- fs: dlm: cancel work sync othercon (Alexander Aring)
- block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F))
- ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu)
- lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald)
- hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing)
- ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello)
- HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov)
- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin)
- btrfs: disable build on platforms having page size 256K (Christophe Leroy)
- btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik)
- btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik)
- media: siano: fix device register error path (Mauro Carvalho Chehab)
- media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab)
- crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel)
- mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma)
- media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu)
- media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov)
- media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma)
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong)
- media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente)
- crypto: qat - remove unused macro in FW loader (Jack Xu)
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu)
- media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam)
- media: cobalt: fix race condition in setting HPD (Hans Verkuil)
- media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin)
- crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- spi: omap-100k: Fix the length judgment problem (Tian Tao)
- spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang)
- spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang)
- spi: Make of_register_spi_device also set the fwnode (Charles Keepax)
- fuse: check connected before queueing on fpq->io (Miklos Szeredi)
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou)
- rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut)
- ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch)
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár)
- serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary)
- serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary)
- serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda)
- iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang)
- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang)
- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde)
- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey)
- s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan)
- SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu)
- SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu)
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean)
- can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp)
- ext4: fix avefreec in find_group_orlov (Pan Dong)
- ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi)
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi)
- ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi)
- btrfs: clear defrag status of a root if starting transaction fails (David Sterba)
- btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana)
- ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches)
- iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro)
- ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi)
- USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen)
- usb: gadget: eem: fix echo command packet response issue (Linyu Yuan)
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin)
- Input: usbtouchscreen - fix control-request directions (Johan Hovold)
- media: dvb-usb: fix wrong definition (Pavel Skripkin)
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung)
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp) [Orabug: 33309109]
- Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy) [Orabug: 33307212]