-
Wed Jul 03 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.539.2.el7uek]
- rds/rdma: Clear rds_info_socket before use (Juan Garcia) [Orabug: 36613108]
-
Fri Jun 28 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.539.1.el7uek]
- xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [Orabug: 36759719]
- xfs: fix sb write verify for lazysbcount (Wengang Wang) [Orabug: 36759719]
- rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia) [Orabug: 36529577]
-
Fri Jun 28 2024 Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.538.5.el7uek]
- crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek) [Orabug: 36681826]
-
Tue Jun 18 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.4.el7uek]
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)
-
Fri Jun 14 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.3.el7uek]
- uek-rpm: disable --strict-build-id on mips64 (Stephen Brennan) [Orabug: 36717400]
- LTS version: v4.14.348 (Yifei Liu)
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet)
- dm: limit the number of targets and parameter size area (Mikulas Patocka) [Orabug: 36298556] {CVE-2023-52429} {CVE-2024-23851}
- Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli)
- LTS version: v4.14.347 (Yifei Liu)
- rds: Fix build regression. (David S. Miller)
- RDS: IB: Use DEFINE_PER_CPU_SHARED_ALIGNED for rds_ib_stats (Nathan Chancellor)
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [Orabug: 36683114] {CVE-2024-36883}
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [Orabug: 36691530] {CVE-2024-36960}
- dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [Orabug: 36643339] {CVE-2024-35947}
- tipc: fix UAF in error path (Paolo Abeni) [Orabug: 36683232] {CVE-2024-36886}
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [Orabug: 36630451] {CVE-2024-27401}
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [Orabug: 36579512] {CVE-2024-26923}
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [Orabug: 36683280] {CVE-2024-36902}
- net/ipv6: Refactor fib6_rule_action (David Ahern)
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)
- net: bridge: use DEV_STATS_INC() (Eric Dumazet) [Orabug: 36654610] {CVE-2023-52578}
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [Orabug: 36683486] {CVE-2024-36946}
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [Orabug: 36679452] {CVE-2024-36017}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [Orabug: 36630444] {CVE-2024-27399}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [Orabug: 36630439] {CVE-2024-27398}
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [Orabug: 36683297] {CVE-2024-36905}
- tcp: remove redundant check on tskb (Colin Ian King)
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)
- 9p: explicitly deny setlease attempts (Jeff Layton)
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [Orabug: 36691539] {CVE-2024-36964}
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)
- tools/power turbostat: Fix added raw MSR output (Doug Smythies)
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [Orabug: 36683506] {CVE-2024-36950}
- ata: sata_gemini: Check clk_enable() result (Chen Ni)
- net: bcmgenet: Reset RBUF on first open (Phil Elwell)
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai)
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [Orabug: 36683369] {CVE-2024-36919}
- net: mark racy access on sk->sk_rcvbuf (linke li)
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)
- tipc: fix a possible memleak in tipc_buf_append (Xin Long) [Orabug: 36683527] {CVE-2024-36954}
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)
- net: dsa: mv88e6xxx: Fix name of switch 88E6141 (Uwe Kleine-König)
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)
- net l2tp: drop flow hash on forward (David Bauer)
- nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [Orabug: 36683427] {CVE-2024-36933}
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36683432] {CVE-2024-36934}
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [Orabug: 36683545] {CVE-2024-36959}
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [Orabug: 36683461] {CVE-2024-36940}
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)
- ethernet: add a helper for assigning port addresses (Jakub Kicinski)
- net: create netdev->dev_addr assignment helpers (Jakub Kicinski)
- net: slightly optimize eth_type_trans (Li RongQing)
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [Orabug: 36683465] {CVE-2024-36941}
- dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)
- dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)
- LTS version: v4.14.346 (Yifei Liu)
- Simplify major/minor non-dynamic logic (Mauro Carvalho Chehab)
- net: fix unused variable warning in do_tcp_setsockopt() (Harshit Mogalapalli)
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [Orabug: 36643497] {CVE-2024-35997}
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [Orabug: 36643469] {CVE-2024-35984}
- i2c: add param sanity check to i2c_transfer() (Ard Biesheuvel)
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)
- net: b44: set pause params only when interface is up (Peter Münster)
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [Orabug: 36642470] {CVE-2024-35847}
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [Orabug: 36642482] {CVE-2024-35849}
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)
- tracing: Show size of requested perf buffer (Robin H. Johnson)
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [Orabug: 36545066] {CVE-2024-26922}
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [Orabug: 36597969] {CVE-2024-27000}
- serial: core: Provide port lock wrappers (Thomas Gleixner)
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [Orabug: 36643518] {CVE-2024-36004}
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [Orabug: 36630428] {CVE-2024-27396}
- net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)
- NFC: trf7970a: disable all regulators on removal (Paul Geurts)
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)
- vxlan: drop packets from invalid src-address (David Bauer)
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [Orabug: 36597906] {CVE-2024-26981}
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [Orabug: 36597943] {CVE-2024-26993}
- speakup: Avoid crash on very long word (Samuel Thibault) [Orabug: 36597948] {CVE-2024-26994}
- usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan) [Orabug: 36765453] {CVE-2024-26997}
- Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang)
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [Orabug: 36597964] {CVE-2024-26999}
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) [Orabug: 36597977] {CVE-2024-27001}
- drm: nv04: Fix out of bounds access (Mikhail Kobuk) [Orabug: 36597996] {CVE-2024-27008}
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [Orabug: 36598015] {CVE-2024-27013}
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [Orabug: 36598046] {CVE-2024-27020}
- netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso)
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) [Orabug: 36643371] {CVE-2024-35955}
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz)
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)
- tracing: hide unused ftrace_event_id_fops (Arnd Bergmann)
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [Orabug: 36643404] {CVE-2024-35960}
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [Orabug: 36643433] {CVE-2024-35969}
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) [Orabug: 36643444] {CVE-2024-35973}
- nouveau: fix function cast warning (Arnd Bergmann)
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [Orabug: 36643455] {CVE-2024-35978}
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [Orabug: 36643463] {CVE-2024-35982}
- LTS version: v4.14.345 (Yifei Liu)
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)
- Revert "net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()" (Vegard Nossum)
- netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35814446] {CVE-2023-4881}
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)
- Revert "ext4: fix to check return value of freeze_bdev() in ext4_shutdown()" (Vegard Nossum)
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)
- Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)
- x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [Orabug: 36643058] {CVE-2024-35877}
- virtio: reenable config if freezing device failed (David Hildenbrand)
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [Orabug: 36685662] {CVE-2023-52880}
- fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [Orabug: 36643193] {CVE-2024-35922}
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)
- tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)
- block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [Orabug: 36643211] {CVE-2024-35925}
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)
- media: sta2x11: fix irq handler cast (Arnd Bergmann)
- isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [Orabug: 36643240] {CVE-2024-35930}
- sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [Orabug: 36643257] {CVE-2024-35933}
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [Orabug: 36643268] {CVE-2024-35935}
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [Orabug: 36643274] {CVE-2024-35936}
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [Orabug: 36643322] {CVE-2024-35944}
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)
- init: open /initrd.image with O_LARGEFILE (John Sperbeck)
- staging: vc04_services: fix information leak in create_component() (Dan Carpenter)
- staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)
- staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson)
- staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson)
- staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson)
- ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [Orabug: 36643094] {CVE-2024-35886}
- selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)
- net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [Orabug: 36643118] {CVE-2024-35893}
- net: stmmac: fix rx queue priority assignment (Piotr Wejman)
- net: stmmac: Fix issues when number of Queues >= 4 (Jose Abreu)
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)
- netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [Orabug: 36654624] {CVE-2023-52620}
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)
- Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)
- tcp: properly terminate timers for kernel sockets (Eric Dumazet) [Orabug: 36643167] {CVE-2024-35910}
- mptcp: add sk_stop_timer_sync helper (Geliang Tang)
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [Orabug: 36643179] {CVE-2024-35915}
- USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [Orabug: 36596630] {CVE-2024-26934}
- scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)
- scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [Orabug: 36596616] {CVE-2024-26931}
- usb: udc: remove warning when queue disabled ep (yuan linyu) [Orabug: 36642387] {CVE-2024-35822}
- usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)
- usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)
- efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)
- perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)
- loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)
- Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)
- btrfs: add define for oldest generation (Anand Jain)
- printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [Orabug: 36530191] {CVE-2024-26654}
- ALSA: aica: Fix a long-time build breakage (Takashi Iwai)
- ALSA: sh: aica: Convert timers to use timer_setup() (Kees Cook)
- usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [Orabug: 36642167] {CVE-2024-35789}
- mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)
- vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)
- usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)
- usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [Orabug: 36642400] {CVE-2024-35825}
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [Orabug: 36598220] {CVE-2024-27059}
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)
- netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)
- netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [Orabug: 36530111] {CVE-2024-26642}
- comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)
- nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [Orabug: 36596793] {CVE-2024-26955}
- nilfs2: use a more common logging style (Joe Perches)
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [Orabug: 36596800] {CVE-2024-26956}
- memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)
- drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)
- drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)
- s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [Orabug: 36596824] {CVE-2024-26957}
- soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [Orabug: 36642374] {CVE-2024-35819}
- soc: fsl: qbman: Add CGR update function (Sean Anderson)
- soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [Orabug: 36642247] {CVE-2024-35806}
- vfio/platform: Disable virqfds on cleanup (Alex Williamson)
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)
- speakup: Fix 8bit characters from direct synth (Samuel Thibault)
- hwmon: (amc6821) add of_match table (Josua Mayer)
- dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)
- PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [Orabug: 36642262] {CVE-2024-35809}
- PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)
- fuse: don't unhash root (Miklos Szeredi)
- mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)
- PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)
- USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)
- USB: serial: add device ID for VeriFone adapter (Cameron Williams)
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)
- powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596858] {CVE-2024-26965}
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596863] {CVE-2024-26966}
- PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)
- parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)
- parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)
- parisc: Fix ip_fast_csum (Guenter Roeck)
- parisc: Do not hardcode registers in checksum functions (Helge Deller)
- ubi: correct the calculation of fastmap size (Zhang Yi)
- ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [Orabug: 36356636] {CVE-2024-25739}
- ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))
- fat: fix uninitialized field in nostale filehandles (Jan Kara) [Orabug: 36597869] {CVE-2024-26973}
- crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [Orabug: 36597874] {CVE-2024-26974}
- crypto: qat - fix double free during reset (Svyatoslav Pankratov)
- sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [Orabug: 36597883] {CVE-2024-26976}
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)
- arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)
- ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) [Orabug: 36647652] {CVE-2023-47233} {CVE-2024-35811}
- x86/bugs: Use sysfs_emit() (Borislav Petkov)
- LTS version: v4.14.344 (Yifei Liu)
- binder: signal epoll threads of self-work (Carlos Llamas) [Orabug: 36529906] {CVE-2024-26606}
- ANDROID: binder: Add thread->process_todo flag. (Martijn Coenen)
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)
- scsi: bnx2fc: Remove set but not used variable 'oxid' (YueHaibing)
- net: check dev->gso_max_size in gso_features_check() (Eric Dumazet)
- driver: staging: count ashmem_range into SLAB_RECLAIMBLE (Zhaoyang Huang)
- net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)
- staging: android: ashmem: Remove use of unlikely() (Alistair Strachan)
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li)
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)
- ALSA: hda/realtek - ALC897 headset MIC no sound (Kailang Yang)
- ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (Kailang Yang)
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)
- ALSA: hda/realtek - The front Mic on a HP machine doesn't work (Jeremy Szu)
- ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (Jian-Hong Pan)
- ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (Jian-Hong Pan)
- ALSA: hda/realtek - Add Headset Mic supported for HP cPC (Kailang Yang)
- ALSA: hda/realtek - More constifications (Takashi Iwai)
- Add Acer Aspire Ethos 8951G model quirk (Sergey Bostandzhyan)
- devcoredump: Send uevent once devcd is ready (Mukesh Ojha)
- devcoredump : Serialize devcd_del work (Mukesh Ojha)
- netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Phil Sutter)
- netfilter: xt_owner: Add supplementary groups option (Lukasz Pawelczyk)
- mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij)
- mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker)
- s390/cmma: fix detection of DAT pages (Heiko Carstens)
- s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev)
- ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang)
- hfsplus: unmap the page in the "fail_page" label (Fabio M. De Francesco)
- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (Marios Levogiannis)
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (Jian-Hong Pan)
- ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (Richard Sailer)
- ALSA: hda/realtek - Headset microphone and internal speaker support for System76 oryp5 (Jeremy Soller)
- ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (Jeremy Soller)
- ALSA: hda/realtek - Add support for ALC1220 (Peisen)
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang)
- pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-König)
- pwm: sti: Avoid conditional gotos (Thierry Reding)
- tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen)
- tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi)
- tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean)
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET)
- ledtrig-cpu: Limit to 8 CPUs (Pavel Machek)
- leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-König)
- leds: pwm: convert to atomic PWM API (Uwe Kleine-König)
- leds: pwm: simplify if condition (Uwe Kleine-König)
- regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET)
- regmap: Allow missing device in regmap_name_read_file() (David Lechner)
- tcp_metrics: add missing barriers on delete (Eric Dumazet)
- tcp: batch tcp_net_metrics_exit (Eric Dumazet)
- tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)
- tcp: Namespace-ify sysctl_tcp_early_retrans (Eric Dumazet)
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet)
- ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal)
- libata: make ata_port_type const (Bhumika Goyal)
- libata: Add new med_power_with_dipm link_power_management_policy setting (Hans de Goede)
- ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang)
- ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (Jaroslav Kysela)
- ALSA: hda: Add Intel NUC7i3BNB to the power_save blacklist (Hans de Goede)
- ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov)
- ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao)
- ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao)
- scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)
- usb: typec: tcpci: clear the fault status bit (Marco Felsch)
- usb: typec: add fwnode to tcpc (Li Jun)
- staging: typec: fix endianness mismatch identified by sparse (Gabriel L. Somlo)
- staging: typec: tcpm: Document data structures (Guenter Roeck)
- serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)
- sc16is7xx: Set iobase to device index (Daniel Mack)
- dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li)
- drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun)
- ARM: dts: BCM53573: Drop nonexistent #usb-cells (Rafał Miłecki)
- ARM: dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name (Serge Semin)
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin)
- ath9k: use irqsave() in USB's complete callback (Sebastian Andrzej Siewior)
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov)
- mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET)
- mwifiex: drop 'set_consistent_dma_mask' log message (Brian Norris)
- bonding: fix macvlan over alb bond support (Hangbin Liu)
- net: remove bond_slave_has_mac_rcu() (Jakub Kicinski)
- fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong)
- fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann)
- fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann)
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun)
- Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (Alexander Stein)
- MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang)
- MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang)
- fs: dlm: fix mismatch of plock results from userspace (Alexander Aring)
- fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring)
- fs: dlm: change plock interrupted message to debug again (Alexander Aring)
- fs: dlm: add pid to debug log (Alexander Aring)
- dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel)
- dlm: improve plock logging if interrupted (Alexander Aring)
- nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust)
- nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields)
- mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundebøll)
- mmc: meson-gx: remove useless lock (Jerome Brunet)
- PM: sleep: wakeirq: fix wake irq arming (Johan Hovold)
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun)
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier)
- scsi: zfcp: workqueue: set description for port work items with their WWPN as context (Steffen Maier)
- btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana)
- btrfs: simplify IS_ERR/PTR_ERR checks (Al Viro)
- fs: dlm: interrupt posix locks only when process is killed (Alexander Aring)
- dlm: rearrange async condition return (Alexander Aring)
- dlm: cleanup plock_op vs plock_xop (Alexander Aring)
- ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng)
- ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu)
- tcp: annotate data-races around tp->linger2 (Eric Dumazet)
- net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu)
- ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li)
- ceph: define argument structure for handle_cap_grant (Yan, Zheng)
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli)
- net: bcmgenet: Avoid calling platform_device_put() twice in bcmgenet_mii_exit() (Wei Yongjun)
- net: tcp_input: Neaten DBGUNDO (Joe Perches)
- i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock)
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut)
- i2c: xiic: Fix broken locking on tx_msg (Marek Vasut)
- i2c: xiic: Change code alignment to 1 space only (Jaakko Laine)
- i2c: xiic: Add timeout to the rx fifo wait loop (Shubhrajyoti Datta)
- i2c: xiic: Fix kerneldoc warnings (Shubhrajyoti Datta)
- hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu)
- hwrng: virtio - always add a pending request (Laurent Vivier)
- hwrng: virtio - don't waste entropy (Laurent Vivier)
- hwrng: virtio - don't wait on cleanup (Laurent Vivier)
- hwrng: virtio - add an internal buffer (Laurent Vivier)
- nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski)
- nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski)
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz)
- irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier)
- Documentation: fix little inconsistencies (Pavel Machek)
- usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni)
- net/rose: fix races in rose_kill_by_device() (Eric Dumazet)
- reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)
- ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)
- PCI: keystone: Don't discard .probe() callback (Uwe Kleine-König)
- PCI: keystone: Don't discard .remove() callback (Uwe Kleine-König)
- can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde)
- can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde)
- r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac)
- xen-netback: use default TX queue size for vifs (Roger Pau Monne)
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)
- arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller (Konrad Dybcio)
- regmap: Account for register length in SMBus I/O limits (Mark Brown)
- x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui)
- ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni)
- PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam)
- pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello)
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) [Orabug: 36768894] {CVE-2024-26766}
- usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)
- btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)
- pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothoré)
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)
- arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno)
- IB/isert: Fix unaligned immediate-data handling (Sagi Grimberg)
- fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller)
- smb3: fix touch -h of symlink (Steve French)
- MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen)
- cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova)
- macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov)
- ppp: limit MRU to 64K (Willem de Bruijn)
- ptp: annotate data-race around q->head and q->tail (Eric Dumazet)
- xen/events: fix delayed eoi list handling (Juergen Gross)
- tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida)
- tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida)
- iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski)
- selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel)
- media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch)
- block: fix signed int overflow in Amiga partition support (Michael Schmitz)
- iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray)
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)
- btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana)
- pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello)
- ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai)
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey)
- ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)
-
Fri Jun 07 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.2.el7uek]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang) [Orabug: 36655470]
- slub: introduce count_partial_free_approx() (Jianfeng Wang) [Orabug: 36655470]
-
Fri May 31 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.1.el7uek]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK5 (Jianfeng Wang) [Orabug: 36460666]
- fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google)) [Orabug: 36460666]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460666]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460666]
- arm64: ftrace: remove return_regs macros (Mark Rutland) [Orabug: 36460666]
- function_graph: Support recording and printing the return value of function (Donglin Peng) [Orabug: 36460666]
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware)) [Orabug: 36460666]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje) [Orabug: 35830450]
-
Fri May 31 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.537.4.el7uek]
- uek-rpm: iptables/nftables TABLE_ADD failed (Operation not supported) (Venkat Venkatsubra) [Orabug: 36638482]
- Revert "crypto: api - Disallow identical driver names" (Greg Kroah-Hartman)
- Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" (Siddh Raman Pant)
-
Fri May 17 2024 Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.537.3.el7uek]
- ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)
- ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov)
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche) [Orabug: 36642358] {CVE-2024-35815}
- igb: fix __free_irq warnings seen during module unload. (Imran Khan) [Orabug: 36618479]
- mm: fix misleading-indentation build warning (Anthony Yznaga) [Orabug: 36612276]
- uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi) [Orabug: 36545474]
- uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi) [Orabug: 36545474]
- cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock (Tejun Heo) [Orabug: 36480026]
- uek-rpm: ol7: fix prod build with editbuildid (Stephen Brennan) [Orabug: 35099077]
- uek-rpm: ol7: Prevent vmlinux build ID mismatch (Stephen Brennan) [Orabug: 35099077]
- uek-rpm: ol7: Remove fancy_debuginfo (Stephen Brennan) [Orabug: 35099077]
-
Mon May 13 2024 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.537.2.el7uek]
- Fix the type of set_ready_only in block device (Yifei Liu) [Orabug: 36612441]