-
Fri May 14 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.1.el7uek]
- Linux 4.14.208 (Greg Kroah-Hartman)
- ACPI: GED: fix -Wformat (Nick Desaulniers)
- can: proc: can_remove_proc(): silence remove_proc_entry warning (Zhang Changzhong)
- mac80211: always wind down STA state (Johannes Berg)
- Input: sunkbd - avoid use-after-free in teardown paths (Dmitry Torokhov)
- powerpc/8xx: Always fault when _PAGE_ACCESSED is not set (Christophe Leroy)
- gpio: mockup: fix resource leak in error path (Bartosz Golaszewski)
- i2c: imx: Fix external abort on interrupt in exit paths (Krzysztof Kozlowski)
- i2c: imx: use clk notifier for rate changes (Lucas Stach)
- powerpc/64s: flush L1D after user accesses (Nicholas Piggin) {CVE-2020-4788}
- powerpc/uaccess: Evaluate macro arguments once, before user access is allowed (Nicholas Piggin)
- powerpc: Fix __clear_user() with KUAP enabled (Andrew Donnellan)
- powerpc: Implement user_access_begin and friends (Christophe Leroy)
- powerpc: Add a framework for user access tracking (Christophe Leroy)
- powerpc/64s: flush L1D on kernel entry (Nicholas Piggin) {CVE-2020-4788}
- powerpc/64s: move some exception handlers out of line (Daniel Axtens)
- powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL (Daniel Axtens)
- Linux 4.14.207 (Greg Kroah-Hartman)
- mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race (Nicholas Piggin)
- Convert trailing spaces and periods in path components (Boris Protopopov)
- reboot: fix overflow parsing reboot cpu number (Matteo Croce)
- Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" (Matteo Croce)
- perf/core: Fix crash when using HW tracing kernel filters (Mathieu Poirier)
- x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (Anand K Mistry)
- random32: make prandom_u32() output unpredictable (George Spelvin)
- net: Update window_clamp if SOCK_RCVBUF is set (Mao Wenan)
- r8169: fix potential skb double free in an error path (Heiner Kallweit)
- vrf: Fix fast path output packet handling with async Netfilter rules (Martin Willi)
- net/x25: Fix null-ptr-deref in x25_connect (Martin Schiller)
- net/af_iucv: fix null pointer dereference on shutdown (Ursula Braun)
- IPv6: Set SIT tunnel hard_header_len to zero (Oliver Herms)
- swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" (Stefano Stabellini)
- pinctrl: amd: fix incorrect way to disable debounce filter (Coiby Xu)
- pinctrl: amd: use higher precision for 512 RtcClk (Coiby Xu)
- drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (Thomas Zimmermann)
- don't dump the threads that had been already exiting when zapped. (Al Viro)
- selinux: Fix error return code in sel_ib_pkey_sid_slow() (Chen Zhou)
- mei: protect mei_cl_mtu from null dereference (Alexander Usyskin)
- usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (Chris Brandt)
- uio: Fix use-after-free in uio_unregister_device() (Shin'ichiro Kawasaki)
- thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (Jing Xiangfeng)
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (Joseph Qi)
- ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA (Kaixu Xia)
- perf: Fix get_recursion_context() (Peter Zijlstra)
- cosa: Add missing kfree in error path of cosa_write (Wang Hai)
- of/address: Fix of_node memory leak in of_dma_is_coherent (Evan Nimmo)
- xfs: fix a missing unlock on error in xfs_fs_map_blocks (Christoph Hellwig)
- xfs: fix rmap key and record comparison functions (Darrick J. Wong)
- xfs: fix flags argument to rmap lookup when converting shared file rmaps (Darrick J. Wong)
- nbd: fix a block_device refcount leak in nbd_release (Christoph Hellwig)
- pinctrl: aspeed: Fix GPI only function problem. (Billy Tsai)
- ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template (Andrew Jeffery)
- pinctrl: intel: Set default bias in case no particular value given (Andy Shevchenko)
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (Hannes Reinecke)
- cfg80211: regulatory: Fix inconsistent format argument (Ye Bin)
- mac80211: fix use of skb payload instead of header (Johannes Berg)
- drm/amdgpu: perform srbm soft reset always on SDMA resume (Evan Quan)
- scsi: hpsa: Fix memory leak in hpsa_init_one() (Keita Suzuki)
- gfs2: check for live vs. read-only file system in gfs2_fitrim (Bob Peterson)
- gfs2: Add missing truncate_inode_pages_final for sd_aspace (Bob Peterson)
- gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free (Bob Peterson)
- usb: gadget: goku_udc: fix potential crashes in probe (Evgeny Novikov)
- ath9k_htc: Use appropriate rs_datalen type (Masashi Honma)
- Btrfs: fix missing error return if writeback for extent buffer never started (Filipe Manana)
- xfs: flush new eof page on truncate to avoid post-eof corruption (Brian Foster)
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (Stephane Grosjean)
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (Stephane Grosjean)
- can: peak_usb: add range checking in decode operations (Dan Carpenter)
- can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (Oleksij Rempel)
- can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (Oliver Hartkopp)
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (Vincent Mailhol)
- can: rx-offload: don't call kfree_skb() from IRQ context (Marc Kleine-Budde)
- ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (Dan Carpenter)
- perf tools: Add missing swap for ino_generation (Jiri Olsa)
- net: xfrm: fix a race condition during allocing spi (zhuoliang zhang)
- hv_balloon: disable warning when floor reached (Olaf Hering)
- genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY (Marc Zyngier)
- btrfs: reschedule when cloning lots of extents (Johannes Thumshirn)
- btrfs: sysfs: init devices outside of the chunk_mutex (Josef Bacik)
- nbd: don't update block size after device is started (Ming Lei)
- time: Prevent undefined behaviour in timespec64_to_ns() (Zeng Tao)
- mm: mempolicy: fix potential pte_unmap_unlock pte error (Shijie Luo)
- ring-buffer: Fix recursion protection transitions between interrupt context (Steven Rostedt (VMware))
- regulator: defer probe when trying to get voltage from unresolved supply (Michał Mirosław)
- rds: Change return code from rds_send_xmit() when lock is taken (Håkon Bugge) [Orabug: 32852117]
- rds: Fix unintended fall-through in rds_send_worker (Håkon Bugge) [Orabug: 32852117]
- tcp: send in-queue bytes in cmsg upon read (Soheil Hassas Yeganeh) [Orabug: 32871463]
-
Fri May 07 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.0.el7uek]
- IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil) [Orabug: 32853000]
- x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky) [Orabug: 32817187]
- net/mlx5e: Rx, Fix checksum calculation for new hardware (Saeed Mahameed) [Orabug: 32553186]
- net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (Saeed Mahameed) [Orabug: 32553186]
- net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames (Cong Wang) [Orabug: 32553186]
- mlx5: fix get_ip_proto() (Cong Wang) [Orabug: 32553186]
- net/mlx5e: Set ECN for received packets using CQE indication (Natali Shechtman) [Orabug: 32553186]
- net/mlx5e: CHECKSUM_COMPLETE offload for VLAN/QinQ packets (Gal Pressman) [Orabug: 32553186]
-
Fri Apr 23 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.1.el7uek]
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk) [Orabug: 32759961] {CVE-2021-29154}
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy) [Orabug: 32781585]
- ext4: handle error of ext4_setup_system_zone() on remount (Jan Kara) [Orabug: 32656590] {CVE-2021-3428}
-
Fri Apr 16 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.0.el7uek]
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet) [Orabug: 32660047]
- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit) [Orabug: 32640437]
- iommu/amd: Increase interrupt remapping table limit to 512 entries (Suravee Suthikulpanit) [Orabug: 32640437]
- rds: ib: move statistics counting from caller to callee in rds_ib_recv_refill (Håkon Bugge) [Orabug: 32702021]
- uek-rpm: Enable IRQ time accounting option for UEK5 (Saeed Mirzamohammadi) [Orabug: 32733985]
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana) [Orabug: 32669453] {CVE-2021-28964}
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang) [Orabug: 32669472] {CVE-2021-28971}
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich) [Orabug: 32697854] {CVE-2021-28688}
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang) [Orabug: 32545320]
- rds: Add code to debug rds_tcp loopback hang (Rao Shoaib) [Orabug: 32422982]
- bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656764] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk) [Orabug: 32656764] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk) [Orabug: 32656764] {CVE-2020-27170} {CVE-2020-27171}
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson) [Orabug: 32709123] {CVE-2021-29650}
- netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [Orabug: 32709123] {CVE-2021-29650}
-
Wed Apr 14 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.5.el7uek]
- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam) [Orabug: 32655105]
- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju) [Orabug: 32751642]
- IB/mlx5: Use fragmented QP's buffer for in-kernel users (Guy Levi) [Orabug: 32627473]
- net/mlx5: Refactor fragmented buffer struct fields and init flow (Tariq Toukan) [Orabug: 32627473]
-
Mon Apr 05 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.4.el7uek]
- Revert "rds: ib: Remove two ib_modify_qp() calls" (Sharath Srinivasan) [Orabug: 32715567]
- uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy) [Orabug: 32532514]
-
Fri Mar 26 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.3.el7uek]
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui) [Orabug: 32620797]
- video: hyperv_fb: Fix the cache type when mapping the VRAM (Dexuan Cui) [Orabug: 32620797]
- RDMA/core: Fix corrupted SL on passive side (Håkon Bugge) [Orabug: 32644356]
-
Fri Mar 19 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.2.el7uek]
- EDAC: skx_common: downgrade message importance on missing PCI device (Aristeu Rozanski) [Orabug: 32651294]
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich) [Orabug: 32651477] {CVE-2021-28038}
- KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged (Wanpeng Li) [Orabug: 32633928]
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross) [Orabug: 32640132]
-
Fri Mar 12 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.1.el7uek]
- mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang) [Orabug: 32619973]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603381] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603381] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32603381] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32603381] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32603381] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- uek-rpm: add opbmc to nano-kernel (Eric Snowberg) [Orabug: 32555678]
- ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy) [Orabug: 32608965]
-
Fri Mar 05 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.0.el7uek]
- rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire) [Orabug: 32586918]
- rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire) [Orabug: 32586918]
- rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire) [Orabug: 32580944]
- hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo) [Orabug: 32576073]
- vhost: do not try to access device IOTLB when not initialized (Jason Wang) [Orabug: 31906788]
- uek-rpm: config-aarch-embedded2 update for Feb 2021 Elba patches (Dave Kleikamp) [Orabug: 32544715]
- huge page support for device memory (Neel Patel) [Orabug: 32544715]
- mmc: sdhci-cadence-elba.c: Remove SDHCI_QUIRK_BROKEN_TIMEOUT_VAL (David Clear) [Orabug: 32544715]
- KVM: nVMX: use correct clean fields when copying from eVMCS (Vitaly Kuznetsov) [Orabug: 32544092]
- net/mlx4_en: Handle TX error CQE (Moshe Shemesh) [Orabug: 32492971]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh) [Orabug: 32492971]
- PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran) [Orabug: 32527186]
- net/rds: Reject error code change (Ka-Cheong Poon) [Orabug: 32565543]
- rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge) [Orabug: 32519917]
- arm64: kexec: add support for kexec with spin-table (Henry Willard) [Orabug: 32546040]
- x86/kvm/hyper-v: move VMX controls sanitization out of nested_enable_evmcs() (Vitaly Kuznetsov) [Orabug: 32543800]
- x86/kvm/hyper-v: remove stale evmcs_already_enabled check from nested_enable_evmcs() (Vitaly Kuznetsov) [Orabug: 32543800]
- net/rds: Need to check shutdown progress in rds_conn_path_destroy() (Ka-Cheong Poon) [Orabug: 32536002]
- A/A Bonding: In rdmaip synchronize access to ip_config[].rdmaip_dev (Sharath Srinivasan) [Orabug: 32050122]
- net/rds: In rds_send_xmit() use sg_next() to get the next sg entry (Sharath Srinivasan) [Orabug: 32125836]
- net/rds: increase 1MB MR pool size for RDS (Manjunath Patil) [Orabug: 32551377]