-
Fri Jul 05 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.334.3.el7uek]
- rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia) [Orabug: 36529562]
- pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson) [Orabug: 36762919]
-
Thu Jul 04 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.334.2.el7uek]
- LTS tag: v5.4.278 (Alok Tiwari)
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (Daniel J Blueman)
- io_uring: fail NOP if non-zero op flags is passed in (Ming Lei)
- nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov)
- s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger)
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li)
- sparc: move struct termio to asm/termios.h (Mike Gilbert)
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet)
- net: fix __dst_negative_advice() race (Eric Dumazet)
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson)
- kdb: Merge identical case statements in kdb_read() (Daniel Thompson)
- kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson)
- kdb: Use format-strings rather than '- kdb: Fix buffer overflow during tab-complete (Daniel Thompson)
- sparc64: Fix number of online CPUs (Sam Ravnborg)
- intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin)
- net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich)
- net/ipv6: Fix route deleting failure when metric equals 0 (xu xin)
- crypto: ecrdsa - Fix module auto-load on add_key (Vitaly Chikunov)
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)
- media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil)
- media: mxl5xx: Move xpt structures off stack (Nathan Chancellor)
- media: mc: mark the media devnode as registered from the, start (Hans Verkuil)
- arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen)
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith)
- arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski)
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (Christoffer Sandberg)
- ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov)
- drm/amdgpu: add error handle to avoid out-of-bounds (Bob Zhou)
- media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma)
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu)
- x86/mm: Remove broken vsyscall emulation code from the page fault code (Linus Torvalds)
- nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi)
- afs: Don't cross .backup mountpoint from backup volume (Marc Dionne)
- mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz)
- binder: fix max_thread type inconsistency (Carlos Llamas)
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Chuck Lever)
- ALSA: timer: Set lower bound of start tick time (Takashi Iwai)
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing)
- spi: stm32: Don't warn about spurious interrupts (Uwe Kleine-König)
- kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada)
- netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal)
- net:fec: Add fec_enet_deinit() (Xiaolei Wang)
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran)
- smsc95xx: use usbnet->driver_priv (Andre Edich)
- smsc95xx: remove redundant function arguments (Andre Edich)
- enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats)
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa)
- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran)
- nvmet: fix ns enable/disable possible hang (Sagi Grimberg)
- spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko)
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet)
- net: fec: avoid lock evasion when reading pps_enable (Wei Fang)
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko)
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao)
- openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole)
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima)
- params: lift param_set_uint_minmax to common code (Sagi Grimberg)
- ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu)
- sunrpc: fix NFSACL RPC retry on soft mount (Dan Aloni)
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada)
- null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun)
- media: cec: cec-api: add locking in cec_release() (Hans Verkuil)
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil)
- um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie)
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde)
- scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh)
- media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter)
- um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu)
- um: Fix return value in ubd_init() (Duoming Zhou)
- drm/msm/dpu: Always flush the slave INTF on the CTL (Marijn Suijten)
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu)
- Input: ims-pcu - fix printf string overflow (Arnd Bergmann)
- libsubcmd: Fix parse-options memory leak (Ian Rogers)
- serial: sh-sci: protect invalidating RXDMA on shutdown (Wolfram Sang)
- f2fs: fix to release node block count in error path of f2fs_new_node_page() (Chao Yu)
- extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)
- ppdev: Add an error check in register_device (Huai-Yuan Liu)
- ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)
- stm class: Fix a double free in stm_register_device() (Dan Carpenter)
- usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff)
- microblaze: Remove early printk call from cpuinfo-static.c (Michal Simek)
- microblaze: Remove gcc flag for non existing early_printk.c file (Michal Simek)
- iio: pressure: dps310: support negative temperature values (Thomas Haemmerle)
- greybus: arche-ctrl: move device table to its right location (Arnd Bergmann)
- serial: max3100: Fix bitwise types (Andy Shevchenko)
- serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko)
- serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko)
- firmware: dmi-id: add a release callback function (Arnd Bergmann)
- dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni)
- soundwire: cadence: fix invalid PDI offset (Pierre-Louis Bossart)
- soundwire: cadence_master: improve PDI allocation (Bard Liao)
- soundwire: intel: don't filter out PDI0/1 (Pierre-Louis Bossart)
- soundwire: cadence/intel: simplify PDI/port mapping (Pierre-Louis Bossart)
- greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva)
- sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov)
- af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet)
- netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet)
- RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky)
- selftests/kcmp: remove unused open mode (Edward Liaw)
- selftests/kcmp: Make the test output consistent and clear (Gautam Menghani)
- SUNRPC: Fix gss_free_in_token_pages() (Chuck Lever)
- sunrpc: removed redundant procp check (Aleksandr Aprelkov)
- ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara)
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter)
- RDMA/hns: Use complete parentheses in macros (Chengchang Tang)
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (Marek Vasut)
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt)
- drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu)
- fbdev: sh7760fb: allow modular build (Randy Dunlap)
- platform/x86: wmi: Make two functions static (YueHaibing)
- media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda)
- media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov)
- fbdev: sisfb: hide unused variables (Arnd Bergmann)
- powerpc/fsl-soc: hide unused const variable (Arnd Bergmann)
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green)
- fbdev: shmobile: fix snprintf truncation (Arnd Bergmann)
- mtd: rawnand: hynix: fixed typo (Maxim Korotkov)
- drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam)
- ipv6: sr: fix invalid unregister error path (Hangbin Liu)
- ipv6: sr: add missing seg6_local_exit (Hangbin Liu)
- net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets)
- net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao)
- net: ethernet: cortina: Locking fixes (Linus Walleij)
- m68k: mac: Fix reboot hang on Mac IIci (Finn Thain)
- m68k: Fix spinlock race in kernel thread creation (Michael Schmitz)
- net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)
- usb: aqc111: stop lying about skb->truesize (Eric Dumazet)
- wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)
- scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh)
- scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh)
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (Chen Ni)
- Revert "sh: Handle calling csum_partial with misaligned data" (Guenter Roeck)
- sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven)
- wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich)
- wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich)
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain)
- tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet)
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)
- tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)
- wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov)
- wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)
- x86/purgatory: Switch to the position-independent small code model (Ard Biesheuvel)
- scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov)
- scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang)
- cpufreq: exit() callback is optional (Viresh Kumar)
- cpufreq: Rearrange locking in cpufreq_remove_dev() (Rafael J. Wysocki)
- cpufreq: Split cpufreq_offline() (Rafael J. Wysocki)
- cpufreq: Reorganize checks in cpufreq_offline() (Rafael J. Wysocki)
- ACPI: disable -Wstringop-truncation (Arnd Bergmann)
- irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu)
- scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney)
- scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney)
- scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney)
- scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney)
- qed: avoid truncating work queue length (Arnd Bergmann)
- wifi: ath10k: poll service ready message before failing (Baochen Qiang)
- md: fix resync softlockup when bitmap size is less than array size (Yu Kuai)
- null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun)
- jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev)
- s390/cio: fix tracepoint subchannel type field (Peter Oberparleiter)
- crypto: ccp - drop platform ifdef checks (Arnd Bergmann)
- parisc: add missing export of __cmpxchg_u8() (Al Viro)
- nilfs2: fix out-of-range warning (Arnd Bergmann)
- ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak)
- firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart)
- crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin)
- openpromfs: finish conversion to the new mount API (Eric Sandeen)
- nvme: find numa distance only if controller has valid numa id (Nilay Shroff)
- drm/amdkfd: Flush the process wq before creating a kfd_process (Lancelot SIX)
- ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart)
- ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang)
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang)
- drm/amd/display: Set color_mgmt_changed to true on unsuspend (Joshua Ashton)
- net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas)
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev)
- nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi)
- nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi)
- net: smc91x: Fix m68k kernel compilation for ColdFire CPU (Thorsten Blum)
- ring-buffer: Fix a race between readers and resize checks (Petr Pavlu)
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke)
-
Thu Jun 27 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.334.1.el7uek]
- rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia) [Orabug: 36529583]
- xfs: make sure sb_fdblocks is non-negative (Wengang Wang) [Orabug: 36596998]
- xfs: fix sb write verify for lazysbcount (Long Li) [Orabug: 36596998]
- rds/rdma: Clear rds_info_socket before use (Juan Garcia) [Orabug: 36613125]
-
Thu Jun 20 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.333.5.el7uek]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [Orabug: 36768758] {CVE-2024-38381}
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)
- ipv6: sr: fix incorrect unregister order (Hangbin Liu)
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)
- fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [Orabug: 36765636] {CVE-2024-38587}
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)
-
Thu Jun 13 2024 Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.333.4.el7uek]
- PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson) [Orabug: 36622673]
- RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry) [Orabug: 36696279]
- net/mlx5e: Fix a race in command alloc flow (Shifeng Li) [Orabug: 36702071]
- Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (Qing Huang) [Orabug: 36702071]
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock) [Orabug: 36722084]
-
Thu Jun 06 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.3.el7uek]
- LTS tag: v5.4.277 (Sherry Yang)
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)
- usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus)
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam) [Orabug: 36784409] {CVE-2023-52585}
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring)
- firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)
- smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [Orabug: 36654336] {CVE-2023-52434}
- net: bcmgenet: synchronize UMAC_CMD access (Doug Berger)
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger)
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger)
- net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger)
- Revert "net: bcmgenet: use RGMII loopback for MAC reset" (Doug Berger)
- ext4: fix bug_on in __es_tree_search (Baokun Li)
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov)
- LTS tag: v5.4.276 (Sherry Yang)
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai)
- pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing)
- pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter)
- pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang)
- regulator: core: fix debugfs creation regression (Johan Hovold)
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [Orabug: 36683113] {CVE-2024-36883}
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [Orabug: 36691528] {CVE-2024-36960}
- dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [Orabug: 36643338] {CVE-2024-35947}
- tipc: fix UAF in error path (Paolo Abeni) [Orabug: 36683231] {CVE-2024-36886}
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [Orabug: 36630450] {CVE-2024-27401}
- net: qede: use return from qede_parse_flow_attr() for flower (Asbjørn Sloth Tønnesen)
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen)
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [Orabug: 36683279] {CVE-2024-36902}
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [Orabug: 36683485] {CVE-2024-36946}
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [Orabug: 36679451] {CVE-2024-36017}
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [Orabug: 36630443] {CVE-2024-27399}
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [Orabug: 36630438] {CVE-2024-27398}
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [Orabug: 36683292] {CVE-2024-36904}
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [Orabug: 36683296] {CVE-2024-36905}
- xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey)
- pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang)
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)
- clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd)
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)
- 9p: explicitly deny setlease attempts (Jeff Layton)
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [Orabug: 36691538] {CVE-2024-36964}
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)
- MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang)
- gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding)
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)
- btrfs: always clear PERTRANS metadata during commit (Boris Burkov)
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov)
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)
- tools/power turbostat: Fix added raw MSR output (Doug Smythies)
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [Orabug: 36683505] {CVE-2024-36950}
- ata: sata_gemini: Check clk_enable() result (Chen Ni)
- net: bcmgenet: Reset RBUF on first open (Phil Elwell)
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai)
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [Orabug: 36683368] {CVE-2024-36919}
- net: mark racy access on sk->sk_rcvbuf (linke li)
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev)
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price)
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [Orabug: 36784417] {CVE-2023-52882}
- tipc: fix a possible memleak in tipc_buf_append (Xin Long) [Orabug: 36683526] {CVE-2024-36954}
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)
- net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjørn Sloth Tønnesen)
- net l2tp: drop flow hash on forward (David Bauer)
- nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [Orabug: 36683426] {CVE-2024-36933}
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36683431] {CVE-2024-36934}
- s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda)
- s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda)
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [Orabug: 36683544] {CVE-2024-36959}
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)
- nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [Orabug: 36683443] {CVE-2024-36939}
- nfs: make the rpc_stat per net namespace (Josef Bacik)
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik)
- sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik)
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai)
- pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai)
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)
- pinctrl: mediatek: remove shadow variable declaration (Light Hsieh)
- pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh)
- pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh)
- pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh)
- pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh)
- pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh)
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [Orabug: 36683460] {CVE-2024-36940}
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [Orabug: 36683464] {CVE-2024-36941}
- dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)
- dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)
- LTS tag: v5.4.275 (Sherry Yang)
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)
- udp: preserve the connected status if only UDP cmsg (Yick Xie)
- dm: limit the number of targets and parameter size area (Mikulas Patocka) [Orabug: 36298555] {CVE-2023-52429} {CVE-2024-23851}
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [Orabug: 36643496] {CVE-2024-35997}
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [Orabug: 36643468] {CVE-2024-35984}
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)
- dmaengine: owl: fix register access functions (Arnd Bergmann)
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet)
- tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima)
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)
- net: b44: set pause params only when interface is up (Peter Münster)
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [Orabug: 36642469] {CVE-2024-35847}
- drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [Orabug: 36642481] {CVE-2024-35849}
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli)
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)
- tracing: Show size of requested perf buffer (Robin H. Johnson)
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [Orabug: 36545065] {CVE-2024-26922}
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [Orabug: 36597968] {CVE-2024-27000}
- serial: core: Provide port lock wrappers (Thomas Gleixner)
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)
- iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari)
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [Orabug: 36643517] {CVE-2024-36004}
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel) [Orabug: 36642494] {CVE-2024-35852}
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel) [Orabug: 36643524] {CVE-2024-36006}
- mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel) [Orabug: 36643527] {CVE-2024-36007}
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel) [Orabug: 36642497] {CVE-2024-35853}
- mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel) [Orabug: 36642500] {CVE-2024-35854}
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel) [Orabug: 36642505] {CVE-2024-35855}
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel)
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [Orabug: 36630423] {CVE-2024-27395}
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [Orabug: 36630427] {CVE-2024-27396}
- net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)
- NFC: trf7970a: disable all regulators on removal (Paul Geurts)
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)
- vxlan: drop packets from invalid src-address (David Bauer)
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)
- arm64: dts: mediatek: mt2712: fix validation errors (Rafał Miłecki)
- arm64: dts: mt2712: add ethernet device node (Biao Huang)
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block (Rafał Miłecki)
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" (Rafał Miłecki)
- arm64: dts: mediatek: mt7622: fix IR nodename (Rafał Miłecki)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)
- KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov)
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [Orabug: 36597904] {CVE-2024-26981}
- nouveau: fix instmem race condition around ptr stores (Dave Airlie) [Orabug: 36597921] {CVE-2024-26984}
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [Orabug: 36597942] {CVE-2024-26993}
- speakup: Avoid crash on very long word (Samuel Thibault) [Orabug: 36597947] {CVE-2024-26994}
- usb: Disable USB3 LPM at shutdown (Kai-Heng Feng)
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang)
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [Orabug: 36597963] {CVE-2024-26999}
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) [Orabug: 36597976] {CVE-2024-27001}
- binder: check offset alignment in binder_get_object() (Carlos Llamas) [Orabug: 36579651] {CVE-2024-26926}
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers)
- clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd) [Orabug: 36597987] {CVE-2024-27004}
- clk: Initialize struct clk_core kref earlier (Stephen Boyd)
- clk: Print an info line before disabling unused clocks (Konrad Dybcio)
- clk: remove extra empty line (Claudiu Beznea)
- clk: Mark 'all_lists' as const (Stephen Boyd)
- clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd)
- drm: nv04: Fix out of bounds access (Mikhail Kobuk) [Orabug: 36597995] {CVE-2024-27008}
- RDMA/rxe: Fix the problem "mutex_destroy missing" (Yanjun.Zhu)
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [Orabug: 36598014] {CVE-2024-27013}
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [Orabug: 36598045] {CVE-2024-27020}
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) [Orabug: 36643370] {CVE-2024-35955}
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)
- btrfs: record delayed inode root in transaction (Boris Burkov)
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz)
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)
- drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [Orabug: 36643358] {CVE-2024-35950}
- btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)
- net: ena: Fix potential sign extension issue (David Arinzon)
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [Orabug: 36579511] {CVE-2024-26923}
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [Orabug: 36643403] {CVE-2024-35960}
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [Orabug: 36643432] {CVE-2024-35969}
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)
- ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) [Orabug: 36643443] {CVE-2024-35973}
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik)
- net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)
- nouveau: fix function cast warning (Arnd Bergmann)
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [Orabug: 36643454] {CVE-2024-35978}
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [Orabug: 36643462] {CVE-2024-35982}
-
Thu Jun 06 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.2.el7uek]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang) [Orabug: 36655469]
- slub: introduce count_partial_free_approx() (Jianfeng Wang) [Orabug: 36655469]
-
Thu May 30 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.1.el7uek]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje) [Orabug: 35830449]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan) [Orabug: 36307093]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan) [Orabug: 36307093]
- RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg) [Orabug: 36375215]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang) [Orabug: 36460675]
- fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google)) [Orabug: 36460675]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460675]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460675]
- tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng) [Orabug: 36460675]
- function_graph: Support recording and printing the return value of function (Donglin Peng) [Orabug: 36460675]
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware)) [Orabug: 36460675]
- block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed) [Orabug: 36511453]
- Revert "Use inflight IO in io acct of high latency devices" (Gulam Mohamed) [Orabug: 36511453]
- kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan) [Orabug: 36572635]
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [Orabug: 36592398]
- x86/returnthunk: Allow different return thunks (Peter Zijlstra) [Orabug: 36628382]
- tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) [Orabug: 36637454]
- tcp: disable TFO blackhole logic by default (Wei Wang) [Orabug: 36637454]
-
Thu May 30 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.5.el7uek]
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet)
-
Fri May 17 2024 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.4.el7uek]
- bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))
- usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan) [Orabug: 36765452] {CVE-2024-26997}
- Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)
- LTS tag: v5.4.274 (Sherry Yang)
- x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Kim Phillips)
- x86/cpu: Support AMD Automatic IBRS (Kim Phillips)
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong)
- ip_gre: do not report erspan version on GRE interface (Hangbin Liu)
- erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu)
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)
- Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)
- x86/alternative: Don't call text_poke() in lazy TLB mode (Juergen Gross)
- drm/i915/gt: Reset queue_priority_hint on parking (Chris Wilson) [Orabug: 36596705] {CVE-2024-26937}
- x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [Orabug: 36643056] {CVE-2024-35877}
- virtio: reenable config if freezing device failed (David Hildenbrand)
- drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() (Guo Mengqi)
- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [Orabug: 36685661] {CVE-2023-52880}
- netfilter: nf_tables: discard table flag update with pending basechain deletion (Pablo Neira Ayuso) [Orabug: 36643133] {CVE-2024-35897}
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Pablo Neira Ayuso) [Orabug: 36579648] {CVE-2024-26925}
- netfilter: nf_tables: release batch on table validation from abort path (Pablo Neira Ayuso)
- netfilter: nf_tables: reject new basechain after table flag update (Pablo Neira Ayuso) [Orabug: 36643144] {CVE-2024-35900}
- fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [Orabug: 36643192] {CVE-2024-35922}
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)
- usb: typec: tcpci: add generic tcpci fallback compatible (Marco Felsch)
- tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (Ricardo B. Marliere)
- Input: allocate keycode for Display refresh rate toggle (Gergo Koteles)
- block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [Orabug: 36643210] {CVE-2024-35925}
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" (Daniel Drake)
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)
- drm/amd/display: Fix nanosec stat overflow (Aric Cyr)
- media: sta2x11: fix irq handler cast (Arnd Bergmann)
- isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [Orabug: 36643239] {CVE-2024-35930}
- sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [Orabug: 36643256] {CVE-2024-35933}
- btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [Orabug: 36643267] {CVE-2024-35935}
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [Orabug: 36643273] {CVE-2024-35936}
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)
- ionic: set adminq irq affinity (Shannon Nelson)
- arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)
- arm64: dts: rockchip: fix rk3328 hdmi ports node (Johan Jonker)
- panic: Flush kernel log buffer at the end (John Ogness)
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [Orabug: 36643321] {CVE-2024-35944}
- wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)
- s390/entry: align system call table on 8 bytes (Sumanth Korikkar)
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD))
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)
- ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)
- scsi: mylex: Fix sysfs buffer lengths (Arnd Bergmann)
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)
- net: ravb: Always process TX descriptor ring (Paul Barker)
- erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [Orabug: 36643106] {CVE-2024-35888}
- erspan: Add type I version 0 support. (William Tu)
- init: open /initrd.image with O_LARGEFILE (John Sperbeck)
- initramfs: switch initramfs unpacking to struct file based APIs (Christoph Hellwig)
- fs: add a vfs_fchmod helper (Christoph Hellwig)
- fs: add a vfs_fchown helper (Christoph Hellwig)
- staging: vc04_services: fix information leak in create_component() (Dan Carpenter)
- staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)
- i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov) [Orabug: 36683051] {CVE-2024-36020}
- ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [Orabug: 36643093] {CVE-2024-35886}
- selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)
- net: stmmac: fix rx queue priority assignment (Piotr Wejman)
- net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [Orabug: 36643117] {CVE-2024-35893}
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Jakub Sitnicki)
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [Orabug: 36643137] {CVE-2024-35898}
- netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) [Orabug: 36643141] {CVE-2024-35899}
- mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)
- vfio/platform: Create persistent IRQ handlers (Alex Williamson) [Orabug: 36531105] {CVE-2024-26813}
- vfio/pci: Create persistent INTx handler (Alex Williamson) [Orabug: 36531100] {CVE-2024-26812}
- vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson)
- vfio/pci: Lock external INTx masking ops (Alex Williamson) [Orabug: 36531069] {CVE-2024-26810}
- vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) [Orabug: 36531123] {CVE-2024-27437}
- netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [Orabug: 36654623] {CVE-2023-52620}
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)
- Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Heiner Kallweit)
- dm integrity: fix out-of-range warning (Arnd Bergmann)
- tcp: properly terminate timers for kernel sockets (Eric Dumazet) [Orabug: 36643165] {CVE-2024-35910}
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Przemek Kitszel)
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [Orabug: 36643177] {CVE-2024-35915}
- USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [Orabug: 36596629] {CVE-2024-26934}
- scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)
- scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [Orabug: 36596615] {CVE-2024-26931}
- usb: udc: remove warning when queue disabled ep (yuan linyu) [Orabug: 36642386] {CVE-2024-35822}
- usb: dwc2: gadget: LPM flow fix (Minas Harutyunyan)
- usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)
- usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)
- usb: dwc2: host: Fix remote wakeup from hibernation (Minas Harutyunyan)
- scsi: core: Fix unremoved procfs host directory regression (Guilherme G. Piccoli) [Orabug: 36596633] {CVE-2024-26935}
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [Orabug: 36530190] {CVE-2024-26654}
- usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [Orabug: 36642166] {CVE-2024-35789}
- mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)
- vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)
- bounds: support non-power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)
- efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)
- perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)
- loop: loop_set_status_from_info() check before assignment (Zhong Jinghua)
- loop: Check for overflow while configuring loop (Siddh Raman Pant)
- loop: Factor out configuring loop from status (Martijn Coenen)
- loop: Refactor loop_set_status() size calculation (Martijn Coenen)
- loop: Factor out setting loop device size (Martijn Coenen)
- loop: Remove sector_t truncation checks (Martijn Coenen)
- loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)
- Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)
- btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)
- printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)
- xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [Orabug: 36530408] {CVE-2024-26687}
- vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [Orabug: 36642392] {CVE-2024-35823}
- tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)
- usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)
- usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [Orabug: 36642399] {CVE-2024-35825}
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [Orabug: 36598219] {CVE-2024-27059}
- ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)
- xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)
- netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)
- netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [Orabug: 36530110] {CVE-2024-26642}
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso) [Orabug: 36530115] {CVE-2024-26643}
- comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)
- dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [Orabug: 36642240] {CVE-2024-35805}
- x86/CPU/AMD: Update the Zenbleed microcode revisions (Borislav Petkov (AMD))
- nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [Orabug: 36596792] {CVE-2024-26955}
- nilfs2: use a more common logging style (Joe Perches)
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [Orabug: 36596799] {CVE-2024-26956}
- memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)
- drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)
- drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)
- drm/exynos: do not return negative values from .get_modes() (Jani Nikula)
- s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [Orabug: 36596823] {CVE-2024-26957}
- soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [Orabug: 36642373] {CVE-2024-35819}
- soc: fsl: qbman: Add CGR update function (Sean Anderson)
- soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [Orabug: 36642246] {CVE-2024-35806}
- vfio/platform: Disable virqfds on cleanup (Alex Williamson)
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)
- speakup: Fix 8bit characters from direct synth (Samuel Thibault)
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)
- nvmem: meson-efuse: fix function pointer type mismatch (Jerome Brunet)
- firmware: meson_sm: Rework driver as a proper platform driver (Carlo Caione)
- hwmon: (amc6821) add of_match table (Josua Mayer)
- dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)
- PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [Orabug: 36642261] {CVE-2024-35809}
- PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (Filipe Manana)
- fuse: don't unhash root (Miklos Szeredi)
- mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)
- PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)
- USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)
- USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)
- USB: serial: add device ID for VeriFone adapter (Cameron Williams)
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)
- powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596857] {CVE-2024-26965}
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596862] {CVE-2024-26966}
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36597857] {CVE-2024-26969}
- PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)
- parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)
- parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)
- parisc: Fix ip_fast_csum (Guenter Roeck)
- parisc: Do not hardcode registers in checksum functions (Helge Deller)
- mtd: rawnand: meson: fix scrambling mode value in command macro (Arseniy Krasnov)
- ubi: correct the calculation of fastmap size (Zhang Yi)
- ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [Orabug: 36356635] {CVE-2024-25739}
- ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))
- fat: fix uninitialized field in nostale filehandles (Jan Kara) [Orabug: 36597868] {CVE-2024-26973}
- ext4: correct best extent lstart adjustment logic (Baokun Li)
- selftests/mqueue: Set timeout to 180 seconds (SeongJae Park)
- crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [Orabug: 36597873] {CVE-2024-26974}
- crypto: qat - fix double free during reset (Svyatoslav Pankratov)
- sparc: vDSO: fix return value of __setup handler (Randy Dunlap)
- sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [Orabug: 36597882] {CVE-2024-26976}
- media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)
- arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)
- ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (Amit Pundir)
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (Hidenori Kobayashi)
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) [Orabug: 36647651] {CVE-2023-47233} {CVE-2024-35811}
- timers: Use del_timer_sync() even on UP (Thomas Gleixner)
- timers: Update kernel-doc for various functions (Thomas Gleixner)
- amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [Orabug: 36531118] {CVE-2024-26817}