-
Tue Mar 31 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.301.1.el7uek]
- vhost: Check docket sk_family instead of call getname (Eugenio Pérez) [Orabug: 31085991] {CVE-2020-10942}
- uek-rpm: config-mips64-embedded misc pruning (Eric Saint-Etienne) [Orabug: 31079017]
- ubifs: Check for name being NULL while mounting (Richard Weinberger) [Orabug: 29410897]
- team: avoid complex list operations in team_nl_cmd_options_set() (Cong Wang) [Orabug: 30886420]
- Revert "oled: give panic handler chance to run before kexec" (Wengang Wang) [Orabug: 31098796]
- Revert "oled: Limit panic routine change x86 only" (Wengang Wang) [Orabug: 31098796]
- net/mlx5: Add pci AtomicOps request (Michael Guralnik) [Orabug: 30750027]
- PCI: Add pci_enable_atomic_ops_to_root() (Jay Cornwall) [Orabug: 30750027]
- locking/rwsem: Prevent decrement of reader count before increment (Waiman Long) [Orabug: 31087349]
- net: core: another layer of lists, around PF_MEMALLOC skb handling (Sasha Levin) [Orabug: 31087349]
- locking/rwsem: Fix (possible) missed wakeup (Xie Yongji) [Orabug: 31087349]
- swiotlb: clean up reporting (Kees Cook) [Orabug: 31085014] {CVE-2018-5953}
- nfs: optimise readdir cache page invalidation (Dai Ngo) [Orabug: 31015775]
- NFS: Directory page cache pages need to be locked when read (Trond Myklebust) [Orabug: 31015775]
- ppp: remove the PPPIOCDETACH ioctl (Eric Biggers) [Orabug: 31061772]
- batman-adv: Avoid WARN on net_device without parent in netns (Sven Eckelmann) [Orabug: 30857690]
- net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost) [Orabug: 31055325] {CVE-2019-18806}
- net_sched: fix datalen for ematch (Cong Wang) [Orabug: 30877993]
- net/xfrm: fix out-of-bounds packet access (Alexei Starovoitov) [Orabug: 30885434]
- RDMA/nldev: Provide MR statistics (Erez Alfasi) [Orabug: 30729404]
- RDMA/mlx5: Return ODP type per MR (Erez Alfasi) [Orabug: 30729404]
- RDMA/nldev: Allow different fill function per resource (Erez Alfasi) [Orabug: 30729404]
- IB/mlx5: Introduce ODP diagnostic counters (Erez Alfasi) [Orabug: 30729404]
- RDMA/mlx5: Use odp instead of mr->umem in pagefault_mr (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/mlx5: Use ib_umem_start instead of umem.address (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Use kvcalloc for the dma_list and page_list (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Check for overflow when computing the umem_odp end (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Provide ib_umem_odp_release() to undo the allocs (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Split creating a umem_odp from ib_umem_get (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Make the three ways to create a umem_odp clear (Jason Gunthorpe) [Orabug: 30729404]
- RMDA/odp: Consolidate umem_odp initialization (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Make it clearer when a umem is an implicit ODP umem (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Iterate over the whole rbtree directly (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/odp: Use the common interval tree library instead of generic (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/mlx5: Fix MR npages calculation for IB_ACCESS_HUGETLB (Jason Gunthorpe) [Orabug: 30729404]
- IB/mlx5: Fix implicit MR release flow (Yishai Hadas) [Orabug: 30729404]
- RDMA/netlink: Implement counter dumpit calback (Mark Zhang) [Orabug: 30729404]
- RDMA/nldev: Allow counter auto mode configration through RDMA netlink (Mark Zhang) [Orabug: 30729404]
- RDMA/odp: Fix missed unlock in non-blocking invalidate_start (Jason Gunthorpe) [Orabug: 30729404]
- RDMA: Report available cdevs through RDMA_NLDEV_CMD_GET_CHARDEV (Jason Gunthorpe) [Orabug: 30729404]
- RDMA: Add NLDEV_GET_CHARDEV to allow char dev discovery and autoload (Jason Gunthorpe) [Orabug: 30729404]
- RDMA: Convert put_page() to put_user_page*() (John Hubbard) [Orabug: 30729404]
- RDMA/umem: Move page_shift from ib_umem to ib_odp_umem (Jason Gunthorpe) [Orabug: 30729404]
- mm: introduce put_user_page*(), placeholder versions (John Hubbard) [Orabug: 30729404]
- RDMA/umem: Remove hugetlb flag (Shiraz Saleem) [Orabug: 30729404]
- RDMA/bnxt_re: Use core helpers to get aligned DMA address (Shiraz Saleem) [Orabug: 30729404]
- RDMA/i40iw: Use core helpers to get aligned DMA address within a supported page size (Shiraz Saleem) [Orabug: 30729404]
- RDMA/verbs: Add a DMA iterator to return aligned contiguous memory blocks (Shiraz Saleem) [Orabug: 30729404]
- RDMA/umem: Add API to find best driver supported page size in an MR (Shiraz Saleem) [Orabug: 30729404]
- RDMA/umem: Handle page combining avoidance correctly in ib_umem_add_sg_table() (Shiraz Saleem) [Orabug: 30729404]
- RDMA/core: Add a netlink command to change net namespace of rdma device (Parav Pandit) [Orabug: 30729404]
- RDMA/umem: Use correct value for SG entries in sg_copy_to_buffer() (Shiraz Saleem) [Orabug: 30729404]
- RDMA/nldev: Return device protocol (Leon Romanovsky) [Orabug: 30729404]
- RDMA/umem: Combine contiguous PAGE_SIZE regions in SGEs (Shiraz Saleem) [Orabug: 30729404]
- RDMA/core: Add interface to read device namespace sharing mode (Parav Pandit) [Orabug: 30729404]
- IB/mlx5: Reset access mask when looping inside page fault handler (Moni Shoua) [Orabug: 30729404]
- IB/core: Ensure an invalidate_range callback on ODP MR (Ira Weiny) [Orabug: 30729404]
- RDMA/umem: Revert broken 'off by one' fix (John Hubbard) [Orabug: 30729404]
- RDMA/umem: minor bug fix in error handling path (John Hubbard) [Orabug: 30729404]
- RDMA/nldev: Provide parent IDs for PD, MR and QP objects (Leon Romanovsky) [Orabug: 30729404]
- RDMA/nldev: Share with user-space object IDs (Leon Romanovsky) [Orabug: 30729404]
- IB/uverbs: Add ib_ucontext to uverbs_attr_bundle sent from ioctl and cmd flows (Shamir Rabinovitch) [Orabug: 30729404]
- RDMA/rdmavt: Adapt to handle non-uniform sizes on umem SGEs (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/rxe: Use for_each_sg_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/ocrdma: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/qedr: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/cxgb3: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/cxgb4: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/i40iw: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/mthca: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- RDMA/bnxt_re: Use for_each_sg_dma_page iterator on umem SGL (Shiraz, Saleem) [Orabug: 30729404]
- lib/scatterlist: Provide a DMA page iterator (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/nldev: Dynamically generate restrack dumpit callbacks (Leon Romanovsky) [Orabug: 30729404]
- IB/{core,hw}: Have ib_umem_get extract the ib_ucontext from ib_udata (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/uverbs: Use uverbs_attr_bundle to pass udata for ioctl() (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/uverbs: Use uverbs_attr_bundle to pass udata for write_ex (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/uverbs: Replace ib_uverbs_file with uverbs_attr_bundle for write (Jason Gunthorpe) [Orabug: 30729404]
- RDMA/core: Refactor ib_register_device() function (Parav Pandit) [Orabug: 30729404]
- RDMA/core: Fix unwinding flow in case of error to register device (Parav Pandit) [Orabug: 30729404]
- RDMA/nldev: Allow IB device rename through RDMA netlink (Leon Romanovsky) [Orabug: 30729404]
- RDMA: Fully setup the device name in ib_register_device (Jason Gunthorpe) [Orabug: 30729404]
- mm: Introduce kvcalloc() (Kees Cook) [Orabug: 30729404]
- RDMA/uapi: Fix uapi breakage (Doug Ledford) [Orabug: 30729404]
- RDMA/nldev: helper functions to add driver attributes (Steve Wise) [Orabug: 30729404]
- RDMA/nldev: add driver-specific resource tracking (Steve Wise) [Orabug: 30729404]
- RDMA/nldev: Add explicit pad attribute (Steve Wise) [Orabug: 30729404]
- RDMA/bnxt_re: Add support for MRs with Huge pages (Somnath Kotur) [Orabug: 30729404]
- IB/{rdmavt, hfi1, qib}: Self determine driver name (Michael J. Ruhl) [Orabug: 30729404]
- RDMA/vmw_pvrdma: Do not re-calculate npages (Yuval Shaia) [Orabug: 30729404]
- iw_cxgb4: allocate wait object for each memory object (Steve Wise) [Orabug: 30729404]
- IB/uverbs: clean up INIT_UDATA() macro usage (Arnd Bergmann) [Orabug: 30729404]
- x86/init: Fix kasan gcc8+ type miss match error. (John Donnelly) [Orabug: 31076337]
-
Mon Mar 23 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.301.0.el7uek]
- kernel: cpu.c: fix return in void function cpu_smt_disable (Mihai Carabas) [Orabug: 31049316]
- media: usb: fix memory leak in af9005_identify_state (Navid Emamdoost) [Orabug: 31029908] {CVE-2019-18809}
- nvme: fix possible deadlock when nvme_update_formats fails (Sagi Grimberg) [Orabug: 31002557]
- alarmtimer: Use EOPNOTSUPP instead of ENOTSUPP (Thadeu Lima de Souza Cascardo) [Orabug: 30995760]
- uek-rpm: Make sure perf builds against libnuma and add run-time dependency (Dave Kleikamp) [Orabug: 30896468]
- perf/x86/intel: Add Icelake support (Thomas Tai) [Orabug: 30872256]
- x86/CPU: Add Icelake model number (Rajneesh Bhardwaj) [Orabug: 30872256]
- perf/x86/intel/ds: Handle PEBS overflow for fixed counters (Kan Liang) [Orabug: 30872256]
- perf/x86/intel: Introduce PMU flag for Extended PEBS (Kan Liang) [Orabug: 30872256]
- tty: Don't hold ldisc lock in tty_reopen() if ldisc present (Dmitry Safonov) [Orabug: 30591419]
- tty: Simplify tty->count math in tty_reopen() (Dmitry Safonov) [Orabug: 30591419]
- tty: Hold tty_ldisc_lock() during tty_reopen() (Dmitry Safonov) [Orabug: 30591419]
- tty/ldsem: Wake up readers after timed out down_write() (Dmitry Safonov) [Orabug: 30591419]
- tty: Drop tty->count on tty_reopen() failure (Dmitry Safonov) [Orabug: 30591419]
- rds: transport module should be auto loaded when transport is set (Rao Shoaib) [Orabug: 30328633]
- net: erspan: fix use-after-free (William Tu) [Orabug: 29784424]
- batman-adv: Force mac header to start of data on xmit (Sven Eckelmann) [Orabug: 29784399]
- sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero (Cong Wang) [Orabug: 30886600]
- ptr_ring: wrap back ->producer in __ptr_ring_swap_queue() (Cong Wang) [Orabug: 30884437]
- add extra symbols from UEK5R3 to the kABI whitelist (Dan Duval) [Orabug: 30295161]
- iommu: Force iommu shutdown on panic (John Donnelly) [Orabug: 31043947]
- iommu/amd: Only free resources once on init error (Kevin Mitchell) [Orabug: 31043947]
- iommu/amd: Move gart fallback to amd_iommu_init (Kevin Mitchell) [Orabug: 31043947]
- iommu/amd: Make iommu_disable safer (Kevin Mitchell) [Orabug: 31043947]
- iommu/vt-d: Turn off translations at shutdown (Deepa Dinamani) [Orabug: 31043947]
-
Tue Mar 17 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.11.el7uek]
- uek-rpm: Make sure only embedded kernels lose the dependency on linux-firmware (Dave Kleikamp) [Orabug: 31044760]
-
Tue Mar 10 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.10.el7uek]
- xenbus: req->err should be updated before req->state (Dongli Zhang) [Orabug: 31009584]
- xenbus: req->body should be updated before req->state (Dongli Zhang) [Orabug: 31009584]
- xen: bypass the timer_irq_works() check for HVM (Dongli Zhang) [Orabug: 30998546]
- xfs: do async inactivation only when fs freezed (Junxiao Bi) [Orabug: 30995324]
- gfs2_meta: ->mount() can get NULL dev_name (Al Viro) [Orabug: 29410674]
- drivers/nvme: provide a module parameter for setting number of I/O queues (Shan Hai) [Orabug: 31002913]
-
Tue Mar 03 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.9.el7uek]
- genirq: Use rcu in kstat_irqs_usr() (Eric Dumazet) [Orabug: 30937708]
- rds: Cancel pending connections on connection request (Dag Moxnes) [Orabug: 30915240]
- driver: mmc: Configure flags for T96 pass B0 (Chandrakala Chavva) [Orabug: 30969935]
- mmc: octeontx2: Use flags for hardware differences (Aaron Williams) [Orabug: 30969935]
- octeontx2: mmc: Add tuning support for HS400 mode (Aaron Williams) [Orabug: 30969935]
- driver: mmc: octeontx2: Fix tuning for T96 C0 (Chandrakala Chavva) [Orabug: 30969935]
- mmc: speed limit for tx2-c0 (Sujeet Baranwal) [Orabug: 30969935]
- ib/core: Cancel fmr delayed_worker when in shutdown phase of reboot system (Hans Westgaard Ry) [Orabug: 30801408]
- Revert "printk: Default console logging level should be set to 4" (Cesar Roque) [Orabug: 30931819]
- Revert "printk: Default console logging level should be set to 4" (Cesar Roque) [Orabug: 30931819]
- xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (kaixuxia) [Orabug: 30902188]
- uek-rpm: mips64: Add missing crypto options to support FIPS (Dave Kleikamp) [Orabug: 30957715]
-
Mon Feb 24 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.8.el7uek]
- cgroup: psi: fix memory leak when freeing a cgroup work function (Tom Hromatka) [Orabug: 30903263]
- xfs: fix deadlock between shrinker and fs freeze (Junxiao Bi) [Orabug: 30898016]
- xfs: increase the default parallelism levels of pwork clients (Darrick J. Wong) [Orabug: 30898016]
- xfs: decide if inode needs inactivation (Darrick J. Wong) [Orabug: 30898016]
- xfs: refactor the predicate part of xfs_free_eofblocks (Darrick J. Wong) [Orabug: 30898016]
- uek-rpm: mips64: enable fips (Dave Kleikamp) [Orabug: 30936795]
- mwifiex: fix unbalanced locking in mwifiex_process_country_ie() (Brian Norris) [Orabug: 30781857] {CVE-2019-14895}
- mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat) [Orabug: 30781857] {CVE-2019-14895} {CVE-2019-14895}
- uio: Fix an Oops on load (Dan Carpenter) [Orabug: 30915439]
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (Darrick J. Wong) [Orabug: 30902117]
- drm/i915: Fix use-after-free when destroying GEM context (Tyler Hicks) [Orabug: 30860456] {CVE-2020-7053}
- crypto: user - prevent operating on larval algorithms (Eric Biggers) [Orabug: 30884006]
- rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan) [Orabug: 30903882]
- slub: extend slub debug to handle multiple slabs (Aaron Tomlin) [Orabug: 30903130]
- rds: If one path needs re-connection, check all and re-connect (Rao Shoaib) [Orabug: 30898501]
- ipmi_ssif: avoid registering duplicate ssif interface (Kamlakant Patel) [Orabug: 30883190]
- ipmi: Fix NULL pointer dereference in ssif_probe (Gustavo A. R. Silva) [Orabug: 30883190]
- CIFS: fix POSIX lock leak and invalid ptr deref (Aurelien Aptel) [Orabug: 30809455]
- rds: call of get_user_pages_longterm with boolean (type int) instead of "gup_flags" (Hans Westgaard Ry) [Orabug: 30806407]
- RAS/CEC: Fix binary search function (Borislav Petkov) [Orabug: 30733613]
-
Fri Feb 14 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.7.el7uek]
- rds: Avoid qp overflow when posting invalidate/register mr with frwr (Hans Westgaard Ry) [Orabug: 30888675]
- IB/mlx5: Disable BME on panic (Håkon Bugge) [Orabug: 30818380]
- IB/mlx5: Remove trailing blanks in main.c (Håkon Bugge) [Orabug: 30818380]
- Revert "IB/mlx5: Disable BME on panic" (Håkon Bugge) [Orabug: 30818380]
- iommu/arm-smmu-v3: Prevent any devices access to memory without registration (Zhen Lei) [Orabug: 30879289]
- scsi: lpfc: Update lpfc version to 12.2.0.13 (James Smart) [Orabug: 30890571]
- lpfc: Fix driver intialization failure for sli4 non nvme (Shagun Agrawal) [Orabug: 30890571]
- scsi: lpfc: Fix BFS crash with DIX enabled (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix FDMI fc4type for nvme support (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix fcp_rsp_len checking on lun reset (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix incorrect logical link speed on trunks when links down (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix memory leak in abnormal exit path from lpfc_eq_create (James Smart) [Orabug: 30890571]
- scsi: lpfc: Rework misleading nvme not supported in firmware message (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix hardlockup in scsi_cmd_iocb_cmpl (James Smart) [Orabug: 30890571]
- scsi: lpfc: Prevent 'use after free' memory overwrite in nvmet LS handling (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix PT2PT PLOGI collison stopping discovery (James Smart) [Orabug: 30890571]
- scsi: lpfc: Revert message logging on unsupported topology (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix nvmet target abort cmd matching (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix alloc context on oas lun creations (James Smart) [Orabug: 30890571]
- scsi: lpfc: Update lpfc version to 12.2.0.12 (James Smart) [Orabug: 30890571]
- scsi: lpfc: add check for loss of ndlp when sending RRQ (James Smart) [Orabug: 30890571]
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show (James Smart) [Orabug: 30890571]
- scsi: lpfc: Make lpfc_sli4_oas_verify static (YueHaibing) [Orabug: 30890571]
- scsi: lpfc: Fix a recently introduced compiler warning (Bart Van Assche) [Orabug: 30890571]
- scsi: lpfc: Move trunk_errmsg[] from a header file into a .c file (Bart Van Assche) [Orabug: 30890571]
- scsi: lpfc: Annotate switch/case fall-through (Bart Van Assche) [Orabug: 30890571]
- scsi: lpfc: Fix indentation and balance braces (Bart Van Assche) [Orabug: 30890571]
- scsi: lpfc: avoid uninitialized variable warning (Arnd Bergmann) [Orabug: 30890571]
- scsi: lpfc: Fixup eq_clr_intr references (James Smart) [Orabug: 30890571]
- scsi: lpfc: change snprintf to scnprintf for possible overflow (Shagun Agrawal) [Orabug: 30890571]
- scsi: be2iscsi: lpfc: fix typo (Matteo Croce) [Orabug: 30890571]
- scsi: lpfc: Update Copyright in driver version (James Smart) [Orabug: 30890571]
- scsi: lpfc: Enhance 6072 log string (James Smart) [Orabug: 30890571]
- scsi: lpfc: Add loopback testing to trunking mode (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix link speed reporting for 4-link trunk (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix handling of trunk links state reporting (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix protocol support on G6 and G7 adapters (James Smart) [Orabug: 30890571]
- scsi: lpfc: Correct boot bios information to FDMI registration (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix HDMI2 registration string for symbolic name (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix fc4type information for FDMI (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix FDMI manufacturer attribute value (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix driver crash in target reset handler (James Smart) [Orabug: 30890571]
- scsi: lpfc: Correct localport timeout duration error (James Smart) [Orabug: 30890571]
- scsi: lpfc: Convert bootstrap mbx polling from msleep to udelay (James Smart) [Orabug: 30890571]
- scsi: lpfc: Coordinate adapter error handling with offline handling (James Smart) [Orabug: 30890571]
- scsi: lpfc: Stop adapter if pci errors detected (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices (James Smart) [Orabug: 30890571]
- scsi: lpfc: Fix use-after-free mailbox cmd completion (James Smart) [Orabug: 30890571]
- scsi: lpfc: resolve static checker warning in lpfc_sli4_hba_unset (James Smart) [Orabug: 30890571]
- scsi: lpfc: Correct __lpfc_sli_issue_iocb_s4 lockdep check (James Smart) [Orabug: 30890571]
- scsi: lpfc: cleanup: Remove excess check on NVME io submit code path (James Smart) [Orabug: 30890571]
- scsi: lpfc: cleanup: remove nrport from nvme command structure (James Smart) [Orabug: 30890571]
- scsi: lpfc: no need to check return value of debugfs_create functions (Greg Kroah-Hartman) [Orabug: 30890571]
- scsi: lpfc: lpfc_sli: Mark expected switch fall-throughs (Gustavo A. R. Silva) [Orabug: 30890571]
-
Tue Feb 11 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.6.el7uek]
- media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum) [Orabug: 30864531] {CVE-2019-15291}
- KVM: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [Orabug: 30851145]
- KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [Orabug: 30851145]
- KVM: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [Orabug: 30851145]
- KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [Orabug: 30851145]
- KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [Orabug: 30851145]
- rds: Use bitmap to designate dropped connections (Håkon Bugge) [Orabug: 30868398]
- xen/ovmapi: whitelist more caches (Boris Ostrovsky) [Orabug: 30852557]
- rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan) [Orabug: 30865078]
-
Wed Feb 05 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.5.el7uek]
- rds: unlock rs_snd_lock before calling rhashtable_insert_fast (aru kolappan) [Orabug: 30849458]
- mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (qize wang) [Orabug: 30819437] {CVE-2019-14901}
- KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton) [Orabug: 30847135] {CVE-2020-2732}
- KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton) [Orabug: 30847135] {CVE-2020-2732}
- KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini) [Orabug: 30847135] {CVE-2020-2732}
- RDMA/core: Fix locking in ib_uverbs_event_read (Jason Gunthorpe) [Orabug: 30680301]
- RDMA/uverbs: Remove is_closed from ib_uverbs_file (Jason Gunthorpe) [Orabug: 30680301]
- RDMA/uverbs: Atomically flush and mark closed the comp event queue (Steve Wise) [Orabug: 30680301]
- x86/KVM: Clean up host's steal time structure (Boris Ostrovsky) [Orabug: 30758028] {CVE-2019-3016} {CVE-2019-3016}
- x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed (Boris Ostrovsky) [Orabug: 30758028] {CVE-2019-3016} {CVE-2019-3016}
- x86/kvm: Cache gfn to pfn translation (Boris Ostrovsky) [Orabug: 30758028] {CVE-2019-3016} {CVE-2019-3016}
- x86/kvm: Introduce kvm_(un)map_gfn() (Boris Ostrovsky) [Orabug: 30758028] {CVE-2019-3016} {CVE-2019-3016}
- x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit (Boris Ostrovsky) [Orabug: 30758028] {CVE-2019-3016} {CVE-2019-3016}
- KVM: Properly check if "page" is valid in kvm_vcpu_unmap (KarimAllah Ahmed) [Orabug: 30758028] {CVE-2019-3016}
- kvm: fix compile on s390 part 2 (Christian Borntraeger) [Orabug: 30758028] {CVE-2019-3016}
- kvm: fix compilation on s390 (Paolo Bonzini) [Orabug: 30758028] {CVE-2019-3016}
- kvm: fix compilation on aarch64 (Paolo Bonzini) [Orabug: 30758028] {CVE-2019-3016}
- KVM: Introduce a new guest mapping API (KarimAllah Ahmed) [Orabug: 30758028] {CVE-2019-3016}
- drm/i915/gen9: Clear residual context state on context switch (Akeem G Abodunrin) [Orabug: 30773851] {CVE-2019-14615} {CVE-2019-14615}
- uek-rpm: Update linux-firmware dependency to latest. (Somasundaram Krishnasamy) [Orabug: 30816773]
- rtlwifi: Fix potential overflow on P2P code (Laura Abbott) [Orabug: 30807746] {CVE-2019-17666}
- rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu) [Orabug: 30770960] {CVE-2016-5244}
- rds: Handle unsupported rdma request to fs dax memory (Hans Westgaard Ry) [Orabug: 30731396]
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini) [Orabug: 30770834] {CVE-2019-19332}
-
Sun Jan 26 2020 Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.300.4.el7uek]
- IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil)
- IB/mlx4: Fix leak in id_map_find_del (Håkon Bugge) [Orabug: 30805809]
- RDMA/cma: Relax device check in cma_match_net_dev() (Håkon Bugge)
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c (Peter Oskolkov) [Orabug: 30651077]
- net: IP6 defrag: use rbtrees for IPv6 defrag (Peter Oskolkov) [Orabug: 30651077]
- ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module (Florian Westphal) [Orabug: 30651077]
- net: IP defrag: encapsulate rbtree defrag code into callable functions (Peter Oskolkov) [Orabug: 30651077]
- ipv6: frags: fix a lockdep false positive (Eric Dumazet) [Orabug: 30651077]
- drm/i915/cmdparser: Fix jump whitelist clearing (Ben Hutchings) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/gen8+: Add RC6 CTX corruption WA (Imre Deak) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Lower RM timeout to avoid DSI hard hangs (Uma Shankar) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/cmdparser: Ignore Length operands during command matching (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/cmdparser: Add support for backward jumps (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/cmdparser: Use explicit goto for error paths (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Add gen9 BCS cmdparsing (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Allow parsing of unsized batches (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Add support for mandatory cmdparsing (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Remove Master tables from cmdparser (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Disable Secure Batches for gen6+ (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Rename gen7 cmdparser tables (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Move engine->needs_cmd_parser to engine->flags (Tvrtko Ursulin) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Don't use GPU relocations prior to cmdparser stalls (Chris Wilson) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Silence smatch for cmdparser (Chris Wilson) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/cmdparser: Do not check past the cmd length. (Michal Srb) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/cmdparser: Check reg_table_count before derefencing. (Michal Srb) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (Chris Wilson) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/gtt: Disable read-only support under GVT (Chris Wilson) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/gtt: Read-only pages for insert_entries on bdw+ (Vivi, Rodrigo) [Orabug: 30735723] {CVE-2019-0154}
- drm/i915/gtt: Add read only pages to gen8_pte_encode (Jon Bloomfield) [Orabug: 30735723] {CVE-2019-0154}
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait (Anchal Agarwal) [Orabug: 30795005]
- IB/mlx5: Disable BME on panic (Håkon Bugge) [Orabug: 30291203]
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (YueHaibing) [Orabug: 30754946] {CVE-2019-20054}
- mwifiex: Fix mem leak in mwifiex_tm_cmd (YueHaibing) [Orabug: 30755102] {CVE-2019-20095}
- fjes: Handle workqueue allocation failure (Will Deacon) [Orabug: 30771874] {CVE-2019-16231}
- octeontx2: fixup PCI Remote Console driver shutdown function (Dave Aldridge) [Orabug: 30777274]