-
Fri Sep 17 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.2.el7uek]
- KVM: x86: Check kvm_rebooting in kvm_spurious_fault() (Sean Christopherson) [Orabug: 33360245]
- Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw) [Orabug: 33359680]
- net/mlx5: Rate limit errors in command interface (Leon Romanovsky) [Orabug: 33305503]
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33292634] {CVE-2021-3573}
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33292634]
- Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33292634] {CVE-2021-3564}
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje) [Orabug: 33134287]
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje) [Orabug: 33134287]
- uek-rpm: Add dm-cache-smq.ko module (John Donnelly) [Orabug: 29198153]
-
Fri Sep 10 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.1.el7uek]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33324346]
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter) [Orabug: 33329032]
- ip: Manual backport of pskb_inet_may_pull() (Håkon Bugge) [Orabug: 33329032]
- Revert "Revert "net: geneve: check skb is large enough for IPv4/IPv6 header"" (Håkon Bugge) [Orabug: 33329032]
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33327179] {CVE-2021-40490}
- uek-rpm: add CONFIG_PVPANIC_PCI to aarch64 (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: fix set driver data (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic-pci: Allow automatic loading (Eric Auger) [Orabug: 33155642]
- misc/pvpanic: Remove some dead-code (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic: Make 'pvpanic_probe()' resource managed (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-mmio: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-mmio: Fix error handling in 'pvpanic_mmio_probe()' (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-pci: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic-pci: Fix error handling in 'pvpanic_pci_probe()' (Christophe JAILLET) [Orabug: 33155642]
- misc/pvpanic: Make some symbols static (YueHaibing) [Orabug: 33155642]
- misc/pvpanic: fix return value check in pvpanic_pci_probe() (Qiheng Lin) [Orabug: 33155642]
- misc/pvpanic: add PCI driver (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: probe multiple instances (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: split-up generic and platform dependent code (Mihai Carabas) [Orabug: 33155642]
- misc/pvpanic: Export module FDT device table (Shile Zhang) [Orabug: 33155642]
- misc: pvpanic: sysfs_emit uses should have a newline (Joe Perches) [Orabug: 33155642]
- misc: pvpanic: introduce events device attribue (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: introduce device capability (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: Check devm_ioport_map() for NULL (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Replace OF headers by mod_devicetable.h (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Combine ACPI and platform drivers (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: Use devm_platform_ioremap_resource() (Wang ShaoBo) [Orabug: 33155642]
- driver core: platform: Introduce platform_get_mem_or_io() (Andy Shevchenko) [Orabug: 33155642]
- misc: pvpanic: move bit definition to uapi header file (zhenwei pi) [Orabug: 33155642]
- misc: pvpanic: fix warning implicit declaration (Anders Roxell) [Orabug: 33155642]
- misc/pvpanic: resolve compile errors for arch=um (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: fix a NULL vs IS_ERR() check (Dan Carpenter) [Orabug: 33155642]
- misc/pvpanic: remove a redundant comma (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: convert to SPDX license tags (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: change header file sort style (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: remove unnecessary header file (Peng Hao) [Orabug: 33155642]
- misc/pvpanic : break dependency on ACPI (Peng Hao) [Orabug: 33155642]
- misc/pvpanic : grouping ACPI related stuff (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: add support to get pvpanic device info FDT (Peng Hao) [Orabug: 33155642]
- dt-bindings: misc/pvpanic: add document for pvpanic-mmio (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: add MMIO support (Peng Hao) [Orabug: 33155642]
- misc/pvpanic: simplify the code using acpi_dev_resource_io (Peng Hao) [Orabug: 33155642]
- pvpanic: move pvpanic to misc as common driver (Peng Hao) [Orabug: 33155642]
- fuse: fix bad inode (Miklos Szeredi) [Orabug: 32769032] {CVE-2020-36322}
- Linux 4.14.243 (Greg Kroah-Hartman)
- spi: mediatek: Fix fifo transfer (Guenter Roeck)
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman)
- KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() (Sean Christopherson)
- KVM: do not assume PTE is writable after follow_pfn (Paolo Bonzini)
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman)
- net: Fix zero-copy head len calculation. (Pravin B Shelar)
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He)
- r8152: Fix potential PM refcount imbalance (Takashi Iwai)
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin)
- btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues)
- Linux 4.14.242 (Greg Kroah-Hartman)
- Revert "perf map: Fix dso->nsinfo refcounting" (Arnaldo Carvalho de Melo)
- can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter)
- sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner)
- net/mlx5: Fix flow table chaining (Maor Gottlieb)
- net: llc: fix skb_over_panic (Pavel Skripkin)
- mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong)
- tipc: fix sleeping in tipc accept routine (Hoang Le)
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso)
- netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal)
- cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi)
- x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka)
- nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski)
- NIU: fix incorrect error return, missed in previous revert (Paul Jakma)
- can: esd_usb2: fix memory leak (Pavel Skripkin)
- can: ems_usb: fix memory leak (Pavel Skripkin)
- can: usb_8dev: fix memory leak (Pavel Skripkin)
- can: mcba_usb_start(): add missing urb->transfer_dma initialization (Pavel Skripkin)
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan)
- x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)
- gro: ensure frag0 meets IP header alignment (Eric Dumazet)
- virtio_net: Do not pull payload in skb->head (Eric Dumazet)
- ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla)
- hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi)
- hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi)
- hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi)
- sctp: move 198 addresses from unusable to private scope (Xin Long)
- net: annotate data race around sk_ll_usec (Eric Dumazet)
- net/802/garp: fix memleak in garp_request_join() (Yang Yingliang)
- net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang)
- workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang)
- af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)
- net: split out functions related to registering inflight socket files (Jens Axboe)
- KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky)
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman)
-
Fri Sep 03 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.0.el7uek]
- Linux 4.14.241 (Greg Kroah-Hartman)
- xhci: add xhci_get_virt_ep() helper (Mathias Nyman)
- spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)
- btrfs: compression: don't try to compress if we don't have enough pages (David Sterba)
- iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold)
- iio: accel: bma180: Use explicit member assignment (Linus Walleij)
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger)
- drm: Return -ENOTTY for non-drm ioctls (Charles Baylis)
- selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne)
- ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme)
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva)
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) [Orabug: 33198436] {CVE-2021-3679}
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan)
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping)
- USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray)
- USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco)
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda)
- usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson)
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski)
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman)
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin)
- xhci: Fix lost USB 2 remote wake (Mathias Nyman)
- ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai)
- s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik)
- Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei)
- proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri)
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin)
- spi: cadence: Correct initialisation of runtime PM again (Marek Vasut)
- scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov)
- scsi: iscsi: Fix iface sysfs attr detection (Mike Christie)
- netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi)
- net: decnet: Fix sleeping inside in af_decnet (Yajun Deng)
- net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan)
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King)
- liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King)
- spi: mediatek: fix fifo rx mode (Peter Hess)
- perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini)
- perf test bpf: Free obj_buf (Riccardo Mancini)
- perf lzma: Close lzma stream on exit (Riccardo Mancini)
- perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini)
- perf map: Fix dso->nsinfo refcounting (Riccardo Mancini)
- igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov)
- iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET)
- e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET)
- fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET)
- igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET)
- ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET)
- igb: Fix use-after-free error during reset (Vinicius Costa Gomes)
- ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet)
- tcp: annotate data races around tp->mtu_info (Eric Dumazet)
- dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand)
- net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)
- net: send SYNACK packet with accepted fwmark (Alexander Ovechkin)
- net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)
- net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin)
- net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin)
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli)
- net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller)
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin)
- net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko)
- sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal)
- scsi: libfc: Fix array index out of bound exception (Javed Hasan)
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King)
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich)
- thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang)
- arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab)
- arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla)
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue)
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer)
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser)
- ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki)
- ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki)
- ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki)
- ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki)
- reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel)
- arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang)
- ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang)
- ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia)
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker)
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker)
- ARM: dts: gemini: add device_type on pci (Corentin Labbe)
- Linux 4.14.240 (Greg Kroah-Hartman)
- net: bridge: multicast: fix PIM hello router port marking race (Nikolay Aleksandrov)
- MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz)
- mips: disable branch profiling in boot/decompress.o (Randy Dunlap)
- mips: always link byteswap helpers into decompressor (Arnd Bergmann)
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET)
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)
- memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski)
- memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski)
- reset: bail if try_module_get() fails (Philipp Zabel)
- ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki)
- ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven)
- rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter)
- memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski)
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski)
- reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski)
- hexagon: use common DISCARDS macro (Nathan Chancellor)
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust)
- ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei)
- x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner)
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng)
- nfs: fix acl memory leak of posix_acl_create() (Gao Xiang)
- watchdog: aspeed: fix hardware timeout calculation (Tao Ren)
- um: fix error return code in winch_tramp() (Zhen Lei)
- um: fix error return code in slip_open() (Zhen Lei)
- power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold)
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński)
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu)
- virtio_console: Assure used length from device is limited (Xie Yongji) [Orabug: 33209273] {CVE-2021-38160}
- virtio_net: Fix error handling in virtnet_restore() (Xie Yongji)
- virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji)
- ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede)
- ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang)
- pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König)
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei)
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei)
- NFS: nfs_find_open_context() may only select open files (Trond Myklebust)
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton)
- orangefs: fix orangefs df output. (Mike Marshall)
- x86/fpu: Return proper error codes from user access functions (Thomas Gleixner)
- watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka)
- watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei)
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei)
- watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei)
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers)
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
- power: supply: ab8500: Avoid NULL pointers (Linus Walleij)
- pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König)
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov)
- i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov)
- intel_th: Wait until port is in reset before programming it (Alexander Shishkin)
- staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto)
- ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao)
- backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König)
- powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt)
- usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang)
- usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol)
- ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto)
- ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei)
- selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev)
- ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang)
- gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli)
- powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand)
- ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai)
- s390/sclp_vt220: fix console name to match device (Valentin Vidic)
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei)
- scsi: qedi: Fix null ref during abort handling (Mike Christie)
- scsi: iscsi: Fix shost->max_id use (Mike Christie)
- scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)
- fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong)
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET)
- scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry)
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart)
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart)
- w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio)
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto)
- misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong)
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun)
- PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohár)
- PCI: aardvark: Don't rely on jiffies while holding spinlock (Remi Pommarel)
- tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware))
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler)
- KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan)
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson)
- smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa)
- jfs: fix GPF in diFree (Pavel Skripkin)
- media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung)
- media: gspca/sunplus: fix zero-length control requests (Johan Hovold)
- media: gspca/sq905: fix control-request direction (Johan Hovold)
- media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin)
- media: dtv5100: fix control-request directions (Johan Hovold)
- dm btree remove: assign new_root only when removal succeeds (Hou Tao)
- ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong)
- tracing: Simplify & fix saved_tgids logic (Paul Burton)
- seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)
- power: supply: ab8500: Fix an old bug (Linus Walleij)
- ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu)
- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor)
- ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko)
- cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner)
- ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson)
- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle)
- mmc: core: clear flags before allowing to retune (Wolfram Sang)
- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper)
- pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz)
- drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng)
- usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov)
- powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor)
- mac80211: fix memory corruption in EAPOL handling (Davis Mosenkovs)
- fuse: reject internal errno (Miklos Szeredi)
- bdi: Do not use freezable workqueue (Mika Westerberg)
- fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers)
- sctp: add size validation when walking chunks (Marcelo Ricardo Leitner)
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner) [Orabug: 33198408] {CVE-2021-3655}
- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang)
- Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng)
- Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu)
- wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva)
- sfc: error code if SRIOV cannot be disabled (Íñigo Huguet)
- sfc: avoid double pci_remove of VFs (Íñigo Huguet)
- iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg)
- RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang)
- vsock: notify server to shutdown when client has pending signal (Longpeng(Mike))
- atm: nicstar: register the interrupt handler in the right place (Zheyu Ma)
- atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma)
- MIPS: add PMD table accounting into MIPS'pmd_alloc_one (Huang Pei)
- cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei)
- wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson)
- wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren)
- xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert)
- selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim)
- fjes: check return value after calling platform_get_resource() (Yang Yingliang)
- net: micrel: check return value after calling platform_get_resource() (Yang Yingliang)
- net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang)
- virtio_net: Remove BUG() to avoid machine dead (Xianting Tian)
- dm space maps: don't reset space map allocation cursor when committing (Joe Thornber)
- RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong)
- ipv6: use prandom_u32() for ID generation (Willy Tarreau)
- clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko)
- clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto)
- e100: handle eeprom as little endian (Jesse Brandeburg)
- udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)
- drm/virtio: Fix double free on probe failure (Xie Yongji)
- reiserfs: add check for invalid 1st journal block (Pavel Skripkin)
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior)
- atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei)
- mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)
- atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei)
- hugetlb: clear huge pte during flush function on mips platform (Bibo Mao)
- net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko)
- drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang)
- drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)
- drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)
- mmc: vub3000: fix control-request direction (Johan Hovold)
- selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen)
- mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin)
- leds: ktd2692: Fix an error handling path (Christophe JAILLET)
- leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei)
- configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng)
- extcon: max8997: Add missing modalias string (Marek Szyprowski)
- extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold)
- phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET)
- scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei)
- of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven)
- ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald)
- staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter)
- staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter)
- iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko)
- s390: appldata depends on PROC_SYSCTL (Randy Dunlap)
- scsi: FlashPoint: Rename si_flags field (Randy Dunlap)
- tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET)
- char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai)
- Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei)
- ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang)
- iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
- iio: adis_buffer: do not return ints in irq handlers (Nuno Sa)
- mwifiex: re-fix for unaligned accesses (Arnd Bergmann)
- tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET)
- net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin)
- writeback: fix obtain a reference to a freeing memcg css (Muchun Song)
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
- Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden)
- i40e: Fix error handling in i40e_vsi_open (Dinghao Liu)
- net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan)
- vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet)
- pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet)
- net: ethernet: ezchip: fix error handling (Pavel Skripkin)
- net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin)
- net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin)
- samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai)
- netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso)
- netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin)
- ath10k: Fix an error code in ath10k_add_interface() (Yang Li)
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET)
- wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap)
- drm: qxl: ensure surf.data is ininitialized (Colin Ian King)
- RDMA/rxe: Fix failure during driver load (Kamal Heib)
- ehea: fix error return code in ehea_restart_qps() (Zhen Lei)
- drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang)
- net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko)
- ocfs2: fix snprintf() checking (Dan Carpenter)
- ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński)
- crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu)
- spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt)
- btrfs: clear log tree recovering status if starting transaction fails (David Sterba)
- hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck)
- hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck)
- media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min)
- mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei)
- media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva)
- media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei)
- media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong)
- pata_ep93xx: fix deferred probing (Sergey Shtylyov)
- crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET)
- pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov)
- media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap)
- pata_rb532_cf: fix deferred probing (Sergey Shtylyov)
- sata_highbank: fix deferred probing (Sergey Shtylyov)
- crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei)
- crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe)
- media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab)
- ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann)
- HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke)
- ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald)
- platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong)
- ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo)
- ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda)
- fs: dlm: fix memory leak when fenced (Alexander Aring)
- random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald)
- fs: dlm: cancel work sync othercon (Alexander Aring)
- block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F))
- ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu)
- lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald)
- hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing)
- ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello)
- HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov)
- regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin)
- btrfs: disable build on platforms having page size 256K (Christophe Leroy)
- btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik)
- btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik)
- media: siano: fix device register error path (Mauro Carvalho Chehab)
- media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab)
- crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel)
- mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma)
- media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu)
- media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov)
- media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma)
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong)
- media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente)
- crypto: qat - remove unused macro in FW loader (Jack Xu)
- crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu)
- media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam)
- media: cobalt: fix race condition in setting HPD (Hans Verkuil)
- media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin)
- crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- spi: omap-100k: Fix the length judgment problem (Tian Tao)
- spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang)
- spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang)
- spi: Make of_register_spi_device also set the fwnode (Charles Keepax)
- fuse: check connected before queueing on fpq->io (Miklos Szeredi)
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou)
- rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut)
- ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch)
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár)
- serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary)
- serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary)
- serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda)
- iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang)
- iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang)
- iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde)
- rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey)
- s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan)
- SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu)
- SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu)
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean)
- can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp)
- ext4: fix avefreec in find_group_orlov (Pan Dong)
- ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi)
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi)
- ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi)
- btrfs: clear defrag status of a root if starting transaction fails (David Sterba)
- btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana)
- ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches)
- iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro)
- ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi)
- USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen)
- usb: gadget: eem: fix echo command packet response issue (Linyu Yuan)
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin)
- Input: usbtouchscreen - fix control-request directions (Johan Hovold)
- media: dvb-usb: fix wrong definition (Pavel Skripkin)
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung)
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp) [Orabug: 33309109]
- Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy) [Orabug: 33307212]
-
Wed Sep 01 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.el7uek]
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva) [Orabug: 33296813]
- Revert "mm: memcontrol: eliminate raw access to stat and event counters" (Ritika Srivastava) [Orabug: 33254727]
- Revert "mm: memcontrol: implement lruvec stat functions on top of each other" (Ritika Srivastava) [Orabug: 33254727]
- KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin) [Orabug: 33054089] {CVE-2021-22543} {CVE-2021-22543}
- ocfs2: issue zeroout to EOF blocks (Junxiao Bi) [Orabug: 32974988]
- ocfs2: fix zero out valid data (Junxiao Bi) [Orabug: 32974988]
-
Fri Aug 27 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.6.el7uek]
- xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang) [Orabug: 33277336]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge) [Orabug: 33253068]
- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33246581]
- scsi: lpfc: Fix crash due to port reset racing vs adapter error handling (James Smart) [Orabug: 33213341]
- xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33141334]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 33141334]
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) [Orabug: 33114988] {CVE-2021-3612}
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372381]
- dsc-drivers: update for 1.15.9-C-32 (Shannon Nelson) [Orabug: 33281086]
- dts/pensando: creating reserved dma memory pool for mnet devices (Neel Patel) [Orabug: 33281086]
- pcie: rm pcie register access message (#256) (Brad Smith) [Orabug: 33281086]
- drivers: updates for 1.15.9-C-28 (Shannon Nelson) [Orabug: 33281086]
-
Fri Aug 20 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.5.el7uek]
- rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire) [Orabug: 33243560]
- KVM: SVM: use vmsave/vmload for saving/restoring additional host state (Michael Roth) [Orabug: 33225761]
- KVM: SVM: Use asm goto to handle unexpected #UD on SVM instructions (Sean Christopherson) [Orabug: 33225761]
- kvm: svm/avic: Do not send AVIC doorbell to self (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm/avic: Fix invalidate logical APIC id entry (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm: Fix improper check when deactivate AVIC (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm: Fix AVIC DFR and LDR handling (Suthikulpanit, Suravee) [Orabug: 33225761]
- scsi: qla2xxx: Add heartbeat check (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (Baokun Li) [Orabug: 33116624]
- scsi: qla2xxx: Remove duplicate declarations (Shaokun Zhang) [Orabug: 33116624]
- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (Daniel Wagner) [Orabug: 33116624]
- scsi: qla2xxx: Remove redundant assignment to rval (Jiapeng Chong) [Orabug: 33116624]
- scsi: qla2xxx: Prevent PRLI in target mode (Anastasia Kovaleva) [Orabug: 33116624]
- scsi: qla2xxx: Add marginal path handling support (Bikash Hazarika) [Orabug: 33116624]
- scsi: qla2xxx: Reserve extra IRQ vectors (Roman Bolshakov) [Orabug: 33116624]
- scsi: qla2xxx: Reuse existing error handling path (Christophe JAILLET) [Orabug: 33116624]
- scsi: qla2xxx: Remove unneeded if-null-free check (Qiheng Lin) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.106-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Update default AER debug mask (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix mailbox recovery during PCIe error (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix crash in PCIe error handling (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix RISC RESET completion polling (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix stuck session (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Add H:C:T info in the log message for fc ports (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Fix IOPS drop seen in some adapters (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Check kzalloc() return value (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Simplify qla8044_minidump_process_control() (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Suppress Coverity complaints about dseg_r* (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Fix endianness annotations (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Constify struct qla_tgt_func_tmpl (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Use dma_pool_zalloc() (Wang Qing) [Orabug: 33116624]
- scsi: qla2xxx: Fix a couple of misdocumented functions (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix incorrectly named function qla8044_check_temp() (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix a couple of misnamed functions (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix some incorrect formatting/spelling issues (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Replace __qla2x00_marker()'s missing underscores (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Simplify if statement (Jiapeng Chong) [Orabug: 33116624]
- scsi: qla2xxx: Simplify the calculation of variables (Jiapeng Zhong) [Orabug: 33116624]
- scsi: qla2xxx: Fix some memory corruption (Dan Carpenter) [Orabug: 33116624]
- scsi: qla2xxx: Remove redundant NULL check (Yang Li) [Orabug: 33116624]
- scsi: qla2xxx: Remove unnecessary NULL check (Dan Carpenter) [Orabug: 33116624]
- scsi: qla2xxx: Assign boolean values to a bool variable (Jiapeng Zhong) [Orabug: 33116624]
- scsi: qla2xxx: fc_remote_port_chkready() returns a SCSI result value (Hannes Reinecke) [Orabug: 33116624]
- scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (Enzo Matsumiya) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.105-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Enable NVMe CONF (BIT_7) when enabling SLER (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix mailbox Ch erroneous error (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Wait for ABTS response on I/O timeouts for NVMe (Bikash Hazarika) [Orabug: 33116624]
- scsi: qla2xxx: Move some messages from debug to normal log level (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Add error counters to debugfs node (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Implementation to get and manage host, target stats and initiator port (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.104-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Fix device loss on 4G and older HBAs (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Fix N2N and NVMe connect retry failure (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix FW initialization error on big endian machines (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Fix compilation issue in PPC systems (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Don't check for fw_started while posting NVMe command (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Tear down session if FW say it is down (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Limit interrupt vectors to number of CPUs (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Change post del message from debug level to log level (Saurav Kashyap) [Orabug: 33116624]
- scsi: qla2xxx: Remove trailing semicolon in macro definition (Tom Rix) [Orabug: 33116624]
- scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (Ahmed S. Darwish) [Orabug: 33116624]
- scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (Ahmed S. Darwish) [Orabug: 33116624]
- scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (Ahmed S. Darwish) [Orabug: 33116624]
- scsi: Remove unneeded break statements (Tom Rix) [Orabug: 33116624]
- scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (Muneendra Kumar) [Orabug: 33116624]
- scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (Muneendra Kumar) [Orabug: 33116624]
- scsi: core: No retries on abort success (Muneendra Kumar) [Orabug: 33116624]
- scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (Muneendra Kumar) [Orabug: 33116624]
-
Mon Aug 16 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.4.el7uek]
- drivers: updated for 1.15.9.26 (Shannon Nelson) [Orabug: 33235357]
- XFS: code enhancement to help debug (Wengang Wang) [Orabug: 33186644]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33234941] {CVE-2021-3656} {CVE-2021-3656}
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky) [Orabug: 33234967] {CVE-2021-3653} {CVE-2021-3653}
-
Fri Aug 13 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.3.el7uek]
- drivers: updates for 1.15.9.21 (Shannon Nelson) [Orabug: 33220300]
- Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil) [Orabug: 33220435]
- Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil) [Orabug: 33220435]
- Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil) [Orabug: 33220435]
- Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil) [Orabug: 33220435]
- NFS: Don't call generic_error_remove_page() while holding locks (Trond Myklebust) [Orabug: 33213898]
- ip6_gre: proper dev_{hold|put} in ndo_[un]init methods (aloktiw) [Orabug: 33179252]
- ifb: fix packets checksum (Jon Maxwell) [Orabug: 33145562]
- Linux 4.14.239 (Greg Kroah-Hartman)
- xen/events: reset active flag for lateeoi events later (Juergen Gross)
- kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)
- kthread_worker: split code for canceling the delayed work timer (Petr Mladek)
- kfifo: DECLARE_KIFO_PTR(fifo, u64) does not work on arm 32 bit (Sean Young)
- drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König)
- scsi: sr: Return appropriate error code when disk is ejected (ManYi Li)
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins)
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins)
- mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins)
- mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins)
- mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins)
- mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins)
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins)
- mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins)
- mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins)
- mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins)
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi)
- mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang)
- mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins)
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins)
- mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin)
- mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin)
- mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi)
- include/linux/mmdebug.h: make VM_WARN* non-rvals (Michal Hocko)
-
Fri Aug 06 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.2.el7uek]
- uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan) [Orabug: 33186981]
- rds: Congestion tracepoints should be enabled by default (Greg Jumper) [Orabug: 33145670]
- Linux 4.14.238 (Sasha Levin)
- i2c: robotfuzz-osif: fix control-request directions (Johan Hovold)
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin)
- pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne)
- net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal)
- net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook)
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
- net/packet: annotate accesses to po->ifindex (Eric Dumazet)
- net/packet: annotate accesses to po->bind (Eric Dumazet)
- net: caif: fix memory leak in ldisc_open (Pavel Skripkin)
- inet: annotate date races around sk->sk_txhash (Eric Dumazet)
- ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun)
- mac80211: drop multicast fragments (Johannes Berg)
- cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng)
- mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)
- Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki)
- arm64: perf: Disable PMU while processing counter overflows (Suzuki K Poulose)
- MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor)
- Makefile: Move -Wno-unused-but-set-variable out of GCC only block (Nathan Chancellor)
- ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann)
- drm/radeon: wait for moving fence after pinning (Christian König)
- drm/nouveau: wait for moving fence after pinning v2 (Christian König)
- x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)
- unfuck sysfs_mount() (Al Viro)
- kernfs: deal with kernfs_fill_super() failures (Al Viro)
- usb: dwc3: core: fix kernel panic when do reboot (Peter Chen)
- inet: use bigger hash table for IP ID generation (Eric Dumazet)
- can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)
- net: fec_ptp: add clock rate zero check (Fugang Duan)
- mm/slub.c: include swab.h (Andrew Morton)
- net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)
- net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)
- dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)
- ARCv2: save ABI registers across signal handling (Vineet Gupta)
- PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)
- PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)
- PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)
- PCI: Mark TI C667X to avoid bus reset (Antti Järvinen)
- tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))
- tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))
- tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))
- usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)
- can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)
- hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)
- radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)
- net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)
- icmp: don't send out ICMP messages with a source address of 0.0.0.0 (Toke Høiland-Jørgensen)
- net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)
- net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)
- be2net: Fix an error handling path in 'be_probe()' (Christophe JAILLET)
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)
- net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)
- net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)
- net: cdc_ncm: switch to eth%d interface naming (Maciej Żenczykowski)
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()' (Christophe JAILLET)
- qlcnic: Fix an error handling path in 'qlcnic_probe()' (Christophe JAILLET)
- net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)
- alx: Fix an error handling path in 'alx_probe()' (Christophe JAILLET)
- netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)
- rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)
- udp: fix race between close() and udp_abort() (Paolo Abeni)
- net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)
- batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)
- mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)
- dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)
- dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)
- dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)
- fib: Return the correct errno code (Zheng Yongjun)
- net: Return the correct errno code (Zheng Yongjun)
- net/x25: Return the correct errno code (Zheng Yongjun)
- rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)
- net: ipconfig: Don't override command-line hostnames or domains (Josh Triplett)
- nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)
- nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)
- nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)
- ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)
- scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)
- HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
- ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)
- HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)
- HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)
- HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)
- net: ieee802154: fix null deref in parse dev addr (Dan Robertson)
- Linux 4.14.237 (Greg Kroah-Hartman)
- proc: only require mm_struct for writing (Linus Torvalds)
- tracing: Correct the length check which causes memory corruption (Liangyan)
- ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))
- scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)
- scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)
- scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)
- NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)
- kvm: fix previous commit for 32-bit builds (Paolo Bonzini)
- perf session: Correct buffer copying when peeking events (Leo Yan)
- NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)
- perf: Fix data race between pin_count increment/decrement (Marco Elver)
- regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)
- regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)
- usb: fix various gadget panics on 10gbps cabling (Maciej Żenczykowski)
- usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej Żenczykowski)
- usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)
- USB: serial: quatech2: fix control-request directions (Johan Hovold)
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)
- usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)
- USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej Żenczykowski)
- cgroup1: don't allow '
' in renaming (Alexander Kuznetsov)
- btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)
- staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)
- kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)
- drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)
- drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)
- i2c: mpc: implement erratum A-004447 workaround (Chris Packham)
- i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)
- powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)
- bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)
- MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)
- net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)
- net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)
- scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)
- wq: handle VM suspension in stall detection (Sergey Senozhatsky)
- cgroup: disable controllers at parse time (Shakeel Butt)
- net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)
- netlink: disable IRQs for netlink_lock_table() (Johannes Berg)
- bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)
- isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)
- ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)
- net/nfc/rawsock.c: fix a permission check bug (Jeimon)
- proc: Track /proc/$pid/attr/ opener mm_struct (Kees Cook)
- rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150437]
- rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150414]
- rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177350]
- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo) [Orabug: 33114648] {CVE-2021-3609}
-
Fri Jul 30 2021 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.1.el7uek]
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek) [Orabug: 33030700] {CVE-2021-34693}
- Linux 4.14.236 (Greg Kroah-Hartman)
- xen-pciback: redo VF placement in the virtual topology (Jan Beulich)
- sched/fair: Optimize select_idle_cpu (Cheng Jian)
- KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode (Sean Christopherson)
- bnxt_en: Remove the setting of dev_port. (Michael Chan)
- bpf: No need to simulate speculative domain for immediates (Daniel Borkmann)
- bpf: Fix mask direction swap upon off reg sign change (Daniel Borkmann)
- bpf: Wrap aux data inside bpf_sanitize_info container (Daniel Borkmann)
- bpf: Fix leakage of uninitialized bpf stack under speculation (Daniel Borkmann)
- selftests/bpf: make 'dubious pointer arithmetic' test useful (Alexei Starovoitov)
- selftests/bpf: fix test_align (Alexei Starovoitov)
- bpf/verifier: disallow pointer subtraction (Alexei Starovoitov)
- bpf: Update selftests to reflect new error states (Daniel Borkmann)
- bpf: Tighten speculative pointer arithmetic mask (Daniel Borkmann)
- bpf: Move sanitize_val_alu out of op switch (Daniel Borkmann)
- bpf: Refactor and streamline bounds check into helper (Daniel Borkmann)
- bpf: Improve verifier error messages for users (Daniel Borkmann)
- bpf: Rework ptr_limit into alu_limit and add common error path (Daniel Borkmann)
- bpf: Ensure off_reg has no mixed signed bounds for all types (Daniel Borkmann)
- bpf: Move off_reg into sanitize_ptr_alu (Daniel Borkmann)
- bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY (Mina Almasry)
- btrfs: fixup error handling in fixup_inode_link_counts (Josef Bacik)
- btrfs: fix error handling in btrfs_del_csums (Josef Bacik)
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski)
- ocfs2: fix data corruption by fallocate (Junxiao Bi)
- pid: take a reference when initializing `cad_pid` (Mark Rutland)
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)
- ALSA: timer: Fix master timer notification (Takashi Iwai)
- net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin)
- net: caif: fix memory leak in caif_device_notify (Pavel Skripkin)
- net: caif: add proper error handling (Pavel Skripkin)
- net: caif: added cfserl_release function (Pavel Skripkin)
- ieee802154: fix error return code in ieee802154_llsec_getparams() (Wei Yongjun)
- ieee802154: fix error return code in ieee802154_add_iface() (Zhen Lei)
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (Pablo Neira Ayuso)
- HID: i2c-hid: fix format string mismatch (Arnd Bergmann)
- HID: pidff: fix error return code in hid_pidff_init() (Zhen Lei)
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service (Julian Anastasov)
- vfio/platform: fix module_put call in error flow (Max Gurtovoy)
- vfio/pci: zap_vma_ptes() needs MMU (Randy Dunlap)
- vfio/pci: Fix error return code in vfio_ecap_init() (Zhen Lei)
- efi: cper: fix snprintf() use in cper_dimm_err_location() (Rasmus Villemoes)
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (Heiner Kallweit)
- net: usb: cdc_ncm: don't spew notifications (Grant Grundler)
- Linux 4.14.235 (Greg Kroah-Hartman)
- usb: core: reduce power-on-good delay time of root hub (Chunfeng Yun)
- drivers/net/ethernet: clean up unused assignments (Jesse Brandeburg)
- hugetlbfs: hugetlb_fault_mutex_hash() cleanup (Mike Kravetz)
- MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c (Randy Dunlap)
- MIPS: alchemy: xxs1500: add gpio-au1000.h header file (Randy Dunlap)
- sch_dsmark: fix a NULL deref in qdisc_reset() (Taehee Yoo)
- ipv6: record frag_max_size in atomic fragments in input path (Francesco Ruggeri)
- scsi: libsas: Use _safe() loop in sas_resume_port() (Dan Carpenter)
- ixgbe: fix large MTU request from VF (Jesse Brandeburg)
- bpf: Set mac_len in bpf_skb_change_head (Jussi Maki)
- ASoC: cs35l33: fix an error code in probe() (Dan Carpenter)
- staging: emxx_udc: fix loop in _nbu2ss_nuke() (Dan Carpenter)
- mld: fix panic in mld_newpack() (Taehee Yoo)
- net: bnx2: Fix error return code in bnx2_init_board() (Zhen Lei)
- net: mdio: octeon: Fix some double free issues (Christophe JAILLET)
- net: mdio: thunder: Fix a double free issue in the .remove function (Christophe JAILLET)
- net: netcp: Fix an error message (Christophe JAILLET)
- drm/amdgpu: Fix a use-after-free (xinhui pan)
- SMB3: incorrect file id in requests compounded with open (Steve French)
- platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (Andy Shevchenko)
- platform/x86: hp-wireless: add AMD's hardware id to the supported list (Shyam Sundar S K)
- btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik)
- openrisc: Define memory barrier mb (Peter Zijlstra)
- scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic (Matt Wang)
- media: gspca: properly check for errors in po1030_probe() (Greg Kroah-Hartman)
- media: dvb: Add check on sp8870_readreg return (Alaa Emad)
- libertas: register sysfs groups properly (Greg Kroah-Hartman)
- dmaengine: qcom_hidma: comment platform_driver_register call (Phillip Potter)
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (Phillip Potter)
- char: hpet: add checks after calling ioremap (Tom Seewald)
- net: caif: remove BUG_ON(dev == NULL) in caif_xmit (Du Cheng)
- net: fujitsu: fix potential null-ptr-deref (Anirudh Rayabharam)
- serial: max310x: unregister uart driver in case of failure and abort (Atul Gopinathan)
- platform/x86: hp_accel: Avoid invoking _INI to speed up resume (Kai-Heng Feng)
- perf jevents: Fix getting maximum number of fds (Felix Fietkau)
- i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare)
- i2c: s3c2410: fix possible NULL pointer deref on read message after write (Krzysztof Kozlowski)
- tipc: skb_linearize the head skb when reassembling msgs (Xin Long)
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" (Hoang Le)
- drm/meson: fix shutdown crash when component not probed (Neil Armstrong)
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (Zhang Xiaoxu)
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)
- NFS: fix an incorrect limit in filelayout_decode_layout() (Dan Carpenter)
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)
- net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)
- usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() (Yoshihiro Shimoda)
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC (Zolton Jheng)
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products (Dominik Andreas Schorpp)
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (Daniele Palmas)
- USB: serial: ti_usb_3410_5052: add startech.com device id (Sean MacLennan)
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (Zheyu Ma)
- serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (Geert Uytterhoeven)
- USB: trancevibrator: fix control-request direction (Johan Hovold)
- iio: adc: ad7793: Add missing error code in ad7793_setup() (YueHaibing)
- staging: iio: cdc: ad7746: avoid overwrite of num_channels (Lucas Stankus)
- mei: request autosuspend after sending rx flow control (Alexander Usyskin)
- thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (Mathias Nyman)
- misc/uss720: fix memory leak in uss720_probe (Dongliang Mu)
- kgdb: fix gcc-11 warnings harder (Greg Kroah-Hartman)
- dm snapshot: properly fix a crash when an origin has no snapshots (Mikulas Patocka)
- ath10k: Validate first subframe of A-MSDU before processing the list (Sriram R)
- mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong) {CVE-2020-24586} {CVE-2020-24587}
- mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)
- mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)
- mac80211: check defrag PN against current frame (Johannes Berg)
- mac80211: add fragment cache to sta_info (Johannes Berg)
- mac80211: drop A-MSDUs on old ciphers (Johannes Berg) {CVE-2020-24588}
- cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef) {CVE-2020-24588}
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)
- mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef) {CVE-2020-24587} {CVE-2020-24586}
- mac80211: assure all fragments are encrypted (Mathy Vanhoef) {CVE-2020-26147}
- net: hso: fix control-request directions (Johan Hovold)
- proc: Check /proc/$pid/attr/ writes against file opener (Kees Cook)
- perf intel-pt: Fix transaction abort handling (Adrian Hunter)
- perf intel-pt: Fix sample instruction bytes (Adrian Hunter)
- iommu/vt-d: Fix sysfs leak in alloc_iommu() (Rolf Eike Beer)
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Anna Schumaker)
- NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu)
- usb: dwc3: gadget: Enable suspend events (Jack Pham)
- scripts: switch explicitly to Python 3 (Andy Shevchenko)
- tweewide: Fix most Shebang lines (Finn Behrens)
- A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan) [Orabug: 33161269]
- capmem: Mark the pages as non-readonly+dirty. (David Clear) [Orabug: 33155665]
- Revert "capmem: Mark the pages as non-readonly+dirty." (Dave Kleikamp) [Orabug: 33155665]
- ionic: clean interrupt before enabling queue to avoid credit race (Shannon Nelson) [Orabug: 33155665]
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le) [Orabug: 33165871]
- Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy) [Orabug: 33156450]