-
Wed Dec 12 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.7.el7uek]
- xfs: enhance dinode verifier (Eric Sandeen) [Orabug: 28997653] {CVE-2018-10322}
- xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong) [Orabug: 28997653] {CVE-2018-10322}
- Revert "xfs: move inode fork verifiers to xfs_dinode_verify" (Shan Hai) [Orabug: 28997653]
- Revert "xfs: enhance dinode verifier" (Shan Hai) [Orabug: 28997653]
-
Mon Nov 26 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.6.el7uek]
- hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz) [Orabug: 28896272]
- xfs: enhance dinode verifier (Eric Sandeen) [Orabug: 28943577] {CVE-2018-10322}
- xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong) [Orabug: 28943577] {CVE-2018-10322}
- libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard) [Orabug: 28946203]
- ib/core: Use driver pd ident when comparing pds. (Hans Westgaard Ry) [Orabug: 28947972]
-
Mon Nov 19 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.4.el7uek]
- Btrfs: fix a bug introduced by back porting an upstream commit (Shan Hai) [Orabug: 28825436]
- btrfs: Cleanup existing name_len checks (Qu Wenruo) [Orabug: 28825436]
- net/rds: Fix endless RNR situation (Venkat Venkatsubra) [Orabug: 28856966]
- xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)
- net: Allow pernet_operations to be executed in parallel (Kirill Tkhai) [Orabug: 28924192]
- net: Move mutex_unlock() in cleanup_net() up (Kirill Tkhai) [Orabug: 28924192]
- locking/arch, x86: Add __down_read_killable() (Kirill Tkhai) [Orabug: 28924192]
- locking/x86: Use named operands in rwsem.h (Miguel Bernal Marin) [Orabug: 28924192]
- locking/rwsem: Add down_read_killable() (Kirill Tkhai) [Orabug: 28924192]
- net: Introduce net_sem for protection of pernet_list (Kirill Tkhai) [Orabug: 28924192]
- net: Assign net to net_namespace_list in setup_net() (Kirill Tkhai) [Orabug: 28924192]
- net: Cleanup in copy_net_ns() (Kirill Tkhai) [Orabug: 28924192]
- cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929734] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}
- sched/fair: Use a recently used CPU as an idle candidate and the basis for SIS (Mel Gorman) [Orabug: 28940632]
- sched/fair: Move select_task_rq_fair() slow-path into its own function (Brendan Jackman) [Orabug: 28940632]
- certs: Add Oracle's new X509 cert into .builtin_trusted_keys (Eric Snowberg) [Orabug: 28926199]
-
Tue Nov 13 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.3.el7uek]
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli) [Orabug: 28899788]
- ext4: update i_disksize if direct write past ondisk size (Eryu Guan) [Orabug: 28869435]
- config: disable xfs online scrub in uek5 (Darrick J. Wong) [Orabug: 28874150]
- oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen) [Orabug: 28887242]
- oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen) [Orabug: 28887242]
- vhost: correctly check the iova range when waking virtqueue (Jason Wang) [Orabug: 28892602] {CVE-2018-1118}
- xen/balloon: Support xend-based toolstack (Boris Ostrovsky) [Orabug: 28901016]
- Update the UEFI Secureboot keys in the UEK5 U1 branch (Jack Vogel) [Orabug: 28900807]
-
Mon Nov 05 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.2.el7uek]
- uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy) [Orabug: 28855638]
- bpf: 32-bit RSH verification must truncate input before the ALU op (Jann Horn) [Orabug: 28861778] {CVE-2018-18445}
- x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28849803]
- x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28849803]
- x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky) [Orabug: 28849803]
- x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky) [Orabug: 28849803]
- scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) [Orabug: 28855938]
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz) [Orabug: 28886638]
-
Fri Oct 26 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.1.el7uek]
- bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly) [Orabug: 28651669]
- ctf: really link CTF into out-of-tree modules (Nick Alcock) [Orabug: 28343862]
- vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh) [Orabug: 28300570]
- vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh) [Orabug: 28300570]
- vhost/scsi: Respond to control queue operations (Bijan Mottahedeh) [Orabug: 28300570]
- cgroup: css_set_lock should nest inside tasklist_lock (chris hyser) [Orabug: 28796554]
- cgroup: export list of cgroups v2 features using sysfs (chris hyser) [Orabug: 28796554]
- cgroup: export list of delegatable control files using sysfs (chris hyser) [Orabug: 28796554]
- cgroup, sched: Move basic cpu stats from cgroup.stat to cpu.stat (chris hyser) [Orabug: 28796554]
- sched: Implement interface for cgroup unified hierarchy (chris hyser) [Orabug: 28796554]
- sched: Misc preps for cgroup unified hierarchy interface (chris hyser) [Orabug: 28796554]
- cgroup: statically initialize init_css_set->dfl_cgrp (chris hyser) [Orabug: 28796554]
- cgroup: Implement cgroup2 basic CPU usage accounting (chris hyser) [Orabug: 28796554]
- cpuacct: Introduce cgroup_account_cputime[_field]() (chris hyser) [Orabug: 28796554]
- sched/cputime: Expose cputime_adjust() (chris hyser) [Orabug: 28796554]
- dtrace: FBT return probe support for arm64 (Kris Van Hees) [Orabug: 28826056]
- rds: MPRDS messages delivered out of order (Ka-Cheong Poon) [Orabug: 28838065]
- nvme: Skip checking heads without namespaces (Keith Busch) [Orabug: 28682185]
- hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz) [Orabug: 28776533]
- KVM: arm/arm64: Introduce vcpu_el1_is_32bit (Christoffer Dall) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Move CPU ID reg trap setup off the world switch path (Dave Martin) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Sanitize PSTATE.M when being set from userspace (Marc Zyngier) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Tighten guest core register access from userspace (Dave Martin) [Orabug: 28762162] {CVE-2018-18021}
- kvm/arm: use PSR_AA32 definitions (Mark Rutland) [Orabug: 28762162] {CVE-2018-18021}
- arm64: add PSR_AA32_* definitions (Mark Rutland) [Orabug: 28762162] {CVE-2018-18021}
- dtrace: exclude init and exit sections for sdtinfo (Kris Van Hees) [Orabug: 28808083]
- bnxt_en: Fix TX timeout during netpoll. (Michael Chan) [Orabug: 28797053]
- bnxt_en: don't try to offload VLAN 'modify' action (Davide Caratti) [Orabug: 28797053]
- net: bnxt: Fix a uninitialized variable warning. (zhong jiang) [Orabug: 28797053]
- bnxt_en: remove set but not used variable 'addr_type' (YueHaibing) [Orabug: 28797053]
- bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Clean up unused functions. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Fix firmware signaled resource change logic in open. (Michael Chan) [Orabug: 28797053]
- bnxt_en: remove set but not used variable 'rx_stats' (YueHaibing) [Orabug: 28797053]
- bnxt_en: take coredump_record structure off stack (Arnd Bergmann) [Orabug: 28797053]
- bnxt_en: avoid string overflow for record->system_name (Arnd Bergmann) [Orabug: 28797053]
- bnxt_en: Fix strcpy() warnings in bnxt_ethtool.c (Vasundhara Volam) [Orabug: 28797053]
- bnxt_en: Do not use the CNP CoS queue for networking traffic. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add DCBNL DSCP application protocol support. (Michael Chan) [Orabug: 28797053]
- config: enable BNXT_HWMON (Brian Maly) [Orabug: 28797053]
- bnxt_en: Add hwmon sysfs support to read temperature (Vasundhara Volam) [Orabug: 28797053]
- bnxt_en: Notify firmware about IF state changes. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Move firmware related flags to a new fw_cap field in struct bnxt. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add BNXT_NEW_RM() macro. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add support for ethtool get dump. (Vasundhara Volam) [Orabug: 28797053]
- bnxt_en: Update RSS setup and GRO-HW logic according to the latest spec. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add new VF resource allocation strategy mode. (Michael Chan) [Orabug: 28797053]
- kdump/vmcore: support encrypted old memory with SME enabled (Lianbo Jiang) [Orabug: 28503140]
- amd_iommu: remap the device table of IOMMU with the memory encryption mask for kdump (Lianbo Jiang) [Orabug: 28503140]
- kexec: allocate unencrypted control pages for kdump in case SME is enabled (Lianbo Jiang) [Orabug: 28503140]
- x86/ioremap: add a function ioremap_encrypted() to remap kdump old memory (Lianbo Jiang) [Orabug: 28503140]
-
Sun Oct 21 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1843.el7uek]
- Btrfs: do not cache rbio pages if using raid6 recover (Liu Bo) [Orabug: 28563682]
- Btrfs: do not merge rbios if their fail stripe index are not identical (Liu Bo) [Orabug: 28563682]
- iscsi: Capture iscsi debug messages using tracepoints (Fred Herard) [Orabug: 28797169]
- x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre) [Orabug: 28801815]
- hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz) [Orabug: 28813950]
- net/mlx4_core: print firmware version during driver loading (Qing Huang) [Orabug: 28597387]
- scsi: lpfc: Remove set but not used variable 'sgl_size' (YueHaibing) [Orabug: 28796202]
- scsi: lpfc: update driver version to 12.0.0.7 (James Smart) [Orabug: 28796202]
- scsi: lpfc: add support to retrieve firmware logs (James Smart) [Orabug: 28796202]
- scsi: lpfc: reduce locking when updating statistics (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix errors in log messages. (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct irq handling via locks when taking adapter offline (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct soft lockup when running mds diagnostics (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct race with abort on completion path (James Smart) [Orabug: 28796202]
- scsi: lpfc: Raise nvme defaults to support a larger io and more connectivity (James Smart) [Orabug: 28796202]
- scsi: lpfc: raise sg count for nvme to use available sg resources (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN (James Smart) [Orabug: 28796202]
- scsi: lpfc: remove an unnecessary NULL check (Dan Carpenter) [Orabug: 28796202]
- scsi: lpfc: update driver version to 12.0.0.6 (James Smart) [Orabug: 28796202]
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct LCB ACCept payload (James Smart) [Orabug: 28796202]
- scsi: lpfc: Limit tracking of tgt queue depth in fast path (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix driver crash when re-registering NVME rports. (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix list corruption on the completion queue. (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix sysfs Speed value on CNA ports (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart) [Orabug: 28796202]
- scsi: lpfc: remove null check on nvmebuf (Colin Ian King) [Orabug: 28796202]
- Fix error code in nfs_lookup_verify_inode() (Lance Shelton) [Orabug: 28807481]
- kdump/vmcore: support encrypted old memory with SME enabled (Lianbo Jiang) [Orabug: 28503140]
- amd_iommu: remap the device table of IOMMU with the memory encryption mask for kdump (Lianbo Jiang) [Orabug: 28503140]
- kexec: allocate unencrypted control pages for kdump in case SME is enabled (Lianbo Jiang) [Orabug: 28503140]
- x86/ioremap: add a function ioremap_encrypted() to remap kdump old memory (Lianbo Jiang) [Orabug: 28503140]
- Revert "arm64: KVM: Tighten guest core register access from userspace" (Jack Vogel)
- Revert "kvm/arm: use PSR_AA32 definitions" (Jack Vogel)
- Revert "arm64: KVM: Sanitize PSTATE.M when being set from userspace" (Jack Vogel)
-
Mon Oct 15 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1842.el7uek]
- nfs: fix a deadlock in nfs client initialization (Scott Mayhew) [Orabug: 28775861]
- arm64: KVM: Sanitize PSTATE.M when being set from userspace (Marc Zyngier) [Orabug: 28762162] {CVE-2018-18021}
- kvm/arm: use PSR_AA32 definitions (Mark Rutland) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Tighten guest core register access from userspace (Dave Martin) [Orabug: 28762162] {CVE-2018-18021}
- iommu/amd: Clear memory encryption mask from physical address (Singh, Brijesh) [Orabug: 28571203]
- uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger) [Orabug: 28549351]
- mm, truncate: remove all exceptional entries from pagevec under one lock (Mel Gorman) [Orabug: 28514617]
- mm, truncate: do not check mapping for every page being truncated (Mel Gorman) [Orabug: 28514617]
- mm: fix exports that inadvertently make put_page() EXPORT_SYMBOL_GPL (Dan Williams) [Orabug: 28514617]
- mm: disallow mappings that conflict for devm_memremap_pages() (Dave Jiang) [Orabug: 28514617]
- x86/asm/memcpy_mcsafe: Fix copy_to_user_mcsafe() exception handling (Dan Williams) [Orabug: 28514617]
- lib/iov_iter: Fix pipe handling in _copy_to_iter_mcsafe() (Dan Williams) [Orabug: 28514617]
- lib/iov_iter: Document _copy_to_iter_flushcache() (Dan Williams) [Orabug: 28514617]
- lib/iov_iter: Document _copy_to_iter_mcsafe() (Dan Williams) [Orabug: 28514617]
- acpi, nfit: Fix scrub idle detection (Dan Williams) [Orabug: 28514617]
- tools/testing/nvdimm: advertise a write cache for nfit_test (Vishal Verma) [Orabug: 28514617]
- libnvdimm, pmem: Fix memcpy_mcsafe() return code handling in nsio_rw_bytes() (Dan Williams) [Orabug: 28514617]
- pmem: only set QUEUE_FLAG_DAX for fsdax mode (Ross Zwisler) [Orabug: 28514617]
- mm: remove page_is_poisoned() from linux/mm.h (Sahara) [Orabug: 28514617]
- fs/dax.c: use new return type vm_fault_t (Souptick Joarder) [Orabug: 28514617]
- dax: pass detailed error code from dax_iomap_fault() (Jan Kara) [Orabug: 28514617]
- mm: change return type to vm_fault_t (Souptick Joarder) [Orabug: 28514617]
- dax: Use dax_write_cache* helpers (Ross Zwisler) [Orabug: 28514617]
- libnvdimm, pmem: Do not flush power-fail protected CPU caches (Ross Zwisler) [Orabug: 28514617]
- libnvdimm, pmem: Unconditionally deep flush on *sync (Ross Zwisler) [Orabug: 28514617]
- libnvdimm, pmem: Complete REQ_FLUSH => REQ_PREFLUSH (Ross Zwisler) [Orabug: 28514617]
- acpi, nfit: Remove ecc_unit_size (Dan Williams) [Orabug: 28514617]
- acpi: nfit: document sysfs interface (Aishwarya Pant) [Orabug: 28514617]
- dax: dax_insert_mapping_entry always succeeds (Matthew Wilcox) [Orabug: 28514617]
- x86, nfit_test: Add unit test for memcpy_mcsafe() (Dan Williams) [Orabug: 28514617]
- libnvdimm, e820: Register all pmem resources (Dan Williams) [Orabug: 28514617]
- libnvdimm: Debug probe times (Dan Williams) [Orabug: 28514617]
- pmem: Switch to copy_to_iter_mcsafe() (Dan Williams) [Orabug: 28514617]
- dax: Report bytes remaining in dax_iomap_actor() (Dan Williams) [Orabug: 28514617]
- dax: Introduce a ->copy_to_iter dax operation (Dan Williams) [Orabug: 28514617]
- uio, lib: Fix CONFIG_ARCH_HAS_UACCESS_MCSAFE compilation (Dan Williams) [Orabug: 28514617]
- x86/asm/memcpy_mcsafe: Define copy_to_iter_mcsafe() (Dan Williams) [Orabug: 28514617]
- x86/asm/memcpy_mcsafe: Add write-protection-fault handling (Dan Williams) [Orabug: 28514617]
- x86/asm/memcpy_mcsafe: Return bytes remaining (Dan Williams) [Orabug: 28514617]
- x86/asm/memcpy_mcsafe: Add labels for __memcpy_mcsafe() write fault handling (Dan Williams) [Orabug: 28514617]
- x86/asm/memcpy_mcsafe: Remove loop unrolling (Dan Williams) [Orabug: 28514617]
- xfs, dax: introduce xfs_break_dax_layouts() (Dan Williams) [Orabug: 28514617]
- xfs: prepare xfs_break_layouts() for another layout type (Dan Williams) [Orabug: 28514617]
- xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (Dan Williams) [Orabug: 28514617]
- mm, fs, dax: handle layout changes to pinned dax mappings (Dan Williams) [Orabug: 28514617]
- sched/wait: Introduce wait_var_event() (Peter Zijlstra) [Orabug: 28514617]
- mm: introduce MEMORY_DEVICE_FS_DAX and CONFIG_DEV_PAGEMAP_OPS (Dan Williams) [Orabug: 28514617]
- dax: store pfns in the radix (Dan Williams) [Orabug: 28514617]
- memremap: split devm_memremap_pages() and memremap() infrastructure (Dan Williams) [Orabug: 28514617]
-
Mon Oct 08 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1841.el7uek]
- Btrfs: send, fix missing truncate for inode with prealloc extent past eof (Filipe Manana) [Orabug: 28400819]
- Btrfs: fix fsync after hole punching when using no-holes feature (Filipe Manana) [Orabug: 28488054]
- Btrfs: fix send failure when root has deleted files still open (Filipe Manana) [Orabug: 28506155]
- Btrfs: send, do not issue unnecessary truncate operations (Filipe Manana) [Orabug: 28506155]
- btrfs: Remove unused parameters from various functions (Nikolay Borisov) [Orabug: 28506155]
- uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees) [Orabug: 28707614]
- dtrace: FBT entry probes for arm64 (Kris Van Hees) [Orabug: 28643859]
- uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees) [Orabug: 28707604]
- Btrfs: fix mount failure after fsync due to hard link recreation (Filipe Manana) [Orabug: 28518966]
- Btrfs: fix log replay failure after unlink and link combination (Filipe Manana) [Orabug: 28518966]
- Btrfs: sync log after logging new name (Filipe Manana) [Orabug: 28519151]
- btrfs: Remove root arg from btrfs_log_inode_parent (Nikolay Borisov) [Orabug: 28519151]
- btrfs: btrfs_inode_log_parent should use defined inode_only values. (Edmund Nadolski) [Orabug: 28519151]
- Btrfs: avoid losing data raid profile when deleting a device (Liu Bo) [Orabug: 28544306]
- rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon) [Orabug: 28720880]
- rds: tcp: remove register_netdevice_notifier infrastructure. (Ka-Cheong Poon) [Orabug: 28737841]
- bnxt_en: Fix VF mac address regression. (Michael Chan) [Orabug: 28609280]
- Btrfs: reserve space for O_TMPFILE orphan item deletion (Omar Sandoval)
- Btrfs: renumber BTRFS_INODE_ runtime flags and switch to enums (Omar Sandoval) [Orabug: 28512436]
- Btrfs: get rid of unused orphan infrastructure (Omar Sandoval) [Orabug: 28512436]
- Btrfs: fix ENOSPC caused by orphan items reservations (Omar Sandoval) [Orabug: 28512436]
- Btrfs: refactor btrfs_evict_inode() reserve refill dance (Omar Sandoval) [Orabug: 28512436]
- Btrfs: delete dead code in btrfs_orphan_commit_root() (Omar Sandoval) [Orabug: 28512436]
- Btrfs: get rid of BTRFS_INODE_HAS_ORPHAN_ITEM (Omar Sandoval) [Orabug: 28512436]
- Btrfs: stop creating orphan items for truncate (Omar Sandoval) [Orabug: 28512436]
- Btrfs: fix error handling in btrfs_truncate_inode_items() (Omar Sandoval) [Orabug: 28512436]
- Btrfs: update stale comments referencing vmtruncate() (Omar Sandoval) [Orabug: 28512436]
- btrfs: move btrfs_truncate_block out of trans handle (Josef Bacik) [Orabug: 28512436]
- mm: get rid of vmacache_flush_all() entirely (Linus Torvalds) [Orabug: 28693570] {CVE-2018-17182}
- IB/core: Perform modify QP on real one (Parav Pandit) [Orabug: 28673621]
- KVM: arm64: Fixup Don't save the host ELR_EL2 and SPSR_EL2 on VHE systems (Thomas Tai) [Orabug: 28659735]
- protect against overflow when using ifnames_skip core param (Brian Maly) [Orabug: 28579075]
- kvm: fix possible spectre gadgets in virt/kvm/kvm_main.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/x86.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/mtrr.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/mmu.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/cpuid.c (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in include/linux/kvm_host.h (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/pmu.h (Darren Kenny) [Orabug: 28713077]
- kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny) [Orabug: 28713077]
-
Sun Sep 30 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1840.el7uek]
- net: enable RPS on vlan devices (Shannon Nelson) [Orabug: 28703786]
- ixgbe: fix the return value for unsupported VF offload (Shannon Nelson) [Orabug: 28696833]
- ixgbe: disallow IPsec Tx offload when in SR-IOV mode (Shannon Nelson) [Orabug: 28696833]
- ixgbevf: enable VF IPsec offload operations (Shannon Nelson) [Orabug: 28696833]
- ixgbevf: add VF IPsec offload code (Shannon Nelson) [Orabug: 28696833]
- ixgbevf: add defines for IPsec offload request (Shannon Nelson) [Orabug: 28696833]
- ixgbe: add VF IPsec offload request message handling (Shannon Nelson) [Orabug: 28696833]
- ixgbe: add VF IPsec offload enable flag (Shannon Nelson) [Orabug: 28696833]
- ixgbe: add VF IPsec management (Shannon Nelson) [Orabug: 28696833]
- ixgbe: prep IPsec constants for later use (Shannon Nelson) [Orabug: 28696833]
- ixgbe: reload IPsec IP table after sa tables (Shannon Nelson) [Orabug: 28696833]
- ixgbe: don't clear IPsec sa counters on HW clearing (Shannon Nelson) [Orabug: 28696833]
- ixgbe: fix broken ipsec Rx with proper cast on spi (Shannon Nelson) [Orabug: 28696814]
- ixgbe: check ipsec ip addr against mgmt filters (Shannon Nelson) [Orabug: 28696814]
- ixgbe: cleanup sparse warnings (Cathy Zhou) [Orabug: 28696814]
- ixgbe: Use CONFIG_XFRM_OFFLOAD instead of CONFIG_XFRM (Alexander Duyck) [Orabug: 28696814]
- ixgbe: Move ipsec init function to before reset call (Alexander Duyck) [Orabug: 28696814]
- ixgbe: Avoid loopback and fix boolean logic in ipsec_stop_data (Alexander Duyck) [Orabug: 28696814]
- ixgbe: Fix bit definitions and add support for testing for ipsec support (Alexander Duyck) [Orabug: 28696814]
- ixgbe: Off by one in ixgbe_ipsec_tx() (Dan Carpenter) [Orabug: 28696814]
- ixgbe: add ipsec security registers into ethtool register dump (Shannon Nelson) [Orabug: 28696814]
- xfrm: don't check offload_handle for nonzero (Shannon Nelson) [Orabug: 28696814]
- net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge) [Orabug: 28720018]
- net: rds: Fix blank at eol in af_rds.c (Håkon Bugge) [Orabug: 28720018]
- irq/softirqs: Use lockdep to assert IRQs are disabled/enabled (Frederic Weisbecker) [Orabug: 28209660]
- locking/lockdep: Add IRQs disabled/enabled assertion APIs: lockdep_assert_irqs_enabled()/disabled() (Frederic Weisbecker) [Orabug: 28209660]
- bnxt_re: Implement the shutdown hook of the L2-RoCE driver interface (Somnath Kotur) [Orabug: 28369671]
- RDMA/core: Acquire and release mmap_sem on each page range (Parav Pandit) [Orabug: 28564777]
- KVM: arm/arm64: Enable adaptative WFE trapping (Marc Zyngier) [Orabug: 28129411]
- arm64/kernel: rename module_emit_adrp_veneer->module_emit_veneer_for_adrp (Kim Phillips) [Orabug: 28660031]
- arm64/kernel: don't ban ADRP to work around Cortex-A53 erratum #843419 (Ard Biesheuvel) [Orabug: 28660031]
- btrfs: Check that each block group has corresponding chunk at mount time (Qu Wenruo) [Orabug: 28693486] {CVE-2018-14610}
- btrfs: validate type when reading a chunk (Gu Jinxiang) [Orabug: 28693490] {CVE-2018-14611}
- e1000e: Fix link check race condition (Benjamin Poirier) [Orabug: 28528928]
- Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier) [Orabug: 28528928]
- e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier) [Orabug: 28528928]
- e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier) [Orabug: 28528928]
- Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier) [Orabug: 28528928]
- e1000e: Remove Other from EIAC (Benjamin Poirier) [Orabug: 28528928]