-
Tue May 23 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.2.el7uek]
- Revert "net/sched: Retire tcindex classifier" (Saeed Mirzamohammadi) [Orabug: 35415066]
- elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear) [Orabug: 35411611]
- dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp) [Orabug: 35411611]
- dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp) [Orabug: 35411611]
- dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp) [Orabug: 35411611]
- kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257586]
- kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257586]
- kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257586]
- btrfs: scan device in non-exclusive mode (Anand Jain) [Orabug: 35153012]
- btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain) [Orabug: 35153012]
- SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 34640827]
- KVM: nVMX: add CR4_LA57 bit to nested CR4_FIXED1 (Chenyi Qiang) [Orabug: 32715898]
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (Liu Jian)
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" (Zhihao Cheng)
-
Fri May 05 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.1.el7uek]
- mm, compaction: Skip all pinned pages during scan (Khalid Aziz) [Orabug: 35300710]
- LTS version: v4.14.314 (Saeed Mirzamohammadi)
- ASN.1: Fix check for strdup() success (Ekaterina Orlova)
- iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter)
- counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)
- sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)
- dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)
- inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima)
- tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima)
- udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima)
- ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani)
- Revert "ext4: fix use-after-free in ext4_xattr_set_entry" (Tudor Ambarus)
- x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu)
- memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman)
- nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi)
- xen/netback: use same error messages for same errors (Juergen Gross)
- s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens)
- net: dsa: b53: mmap: add phy ops (Álvaro Fernández Rojas)
- scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal)
- scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl)
- selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers)
- f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard)
- e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski)
- mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich)
- i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov)
- i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov)
- virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo)
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)
- ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu)
- LTS version: v4.14.313 (Saeed Mirzamohammadi)
- arm64: KVM: Fix system register enumeration (Marc Zyngier)
- KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (Dave Martin)
- KVM: arm64: Factor out core register ID enumeration (Dave Martin)
- coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger)
- watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian)
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long)
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng)
- verify_pefile: relax wrapper length check (Robbie Harwood)
- efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede)
- i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein)
- net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin)
- qlcnic: check pci_reset_function result (Denis Plotnikov)
- niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli)
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang)
- mtdblock: tolerate corrected bit-flips (Bang Li)
- Bluetooth: Fix race condition in hidp_session_thread (Min Li)
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz)
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen)
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen)
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen)
- ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen)
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang)
- ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian)
- ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping)
- perf/core: Fix the same task check in perf_event_set_output (Kan Liang)
- nilfs2: fix sysfs interface lifetime (Ryusuke Konishi)
- nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi)
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das)
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray)
- USB: serial: option: add Quectel RM500U-CN modem (Bjørn Mork)
- USB: serial: option: add Telit FE990 compositions (Enrico Sau)
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster)
- gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole)
- ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan)
- icmp: guard against too small mtu (Eric Dumazet)
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau)
- pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-König)
- LTS version: v4.14.312 (Saeed Mirzamohammadi)
- ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli)
- net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim)
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin)
- usb: host: ohci-pxa27x: Fix and & vs | typo (Dan Carpenter)
- s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens)
- drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach)
- ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai)
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai)
- pinctrl: at91-pio4: fix domain name assignment (Johan Hovold)
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp)
- Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)
- i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl)
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov)
- scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl)
- fbdev: au1200fb: Fix potential divide by zero (Wei Chen)
- fbdev: lxfb: Fix potential divide by zero (Wei Chen)
- fbdev: intelfb: Fix potential divide by zero (Wei Chen)
- fbdev: nvidia: Fix potential divide by zero (Wei Chen)
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds)
- fbdev: tgafb: Fix potential divide by zero (Wei Chen)
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto)
- ALSA: asihpi: check pao in control_message() (Kuninori Morimoto)
- md: avoid signed overflow in slot_store() (NeilBrown)
- ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel)
- sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot)
- sched/fair: sanitize vruntime of entity being placed (Zhang Qiao)
- dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka)
- dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang)
- i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen)
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi)
- usb: chipidea: core: fix possible concurrent when switch role (Xu Yang)
- usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang)
- igb: revert rtnl_lock() that causes deadlock (Lin Ma)
- usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Šipraga)
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj)
- sh: sanitize the flags on sigreturn (Al Viro)
- net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau)
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau)
- scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry)
- scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi)
- m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz)
- ca8210: fix mac_len negative array access (Alexander Aring)
- riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti)
- thunderbolt: Use const qualifier for `ring_interrupt_index` (Mario Limonciello)
- uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman)
- hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford)
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang)
- Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold)
- net: mdio: thunder: Add missing fwnode_handle_put() (Liang He)
- hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne)
- atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao)
- net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla)
- bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann)
- net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand)
- net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand)
- net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang)
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin)
- net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich)
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai)
- i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein)
- igbvf: Regard vf reset nack as success (Akihiko Odaki)
- intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui)
- iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin)
- power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang)
- LTS version: v4.14.311 (Saeed Mirzamohammadi)
- HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones)
- HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones)
- serial: 8250_em: Fix UART port type (Biju Das)
- drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison)
- fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller)
- ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin)
- sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher)
- ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li)
- ext4: fail ext4_iget if special inode unallocated (Baokun Li)
- mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm)
- media: m5mols: fix off-by-one loop termination error (Linus Torvalds)
- hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang)
- hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien)
- hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien)
- ethernet: sun: add check for the mdesc_grab() (Liang He)
- net/iucv: Fix size of interrupt data (Alexandra Winter)
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich)
- ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)
- block: sunvdc: add check for mdesc_grab() returning NULL (Liang He)
- nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal)
- net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich)
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang)
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit)
- net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet)
- qed/qed_dev: guard against a possible division by zero (Daniil Tatianin)
- nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin)
- tcp: tcp_make_synack() can be called from process context (Breno Leitao)
- fs: sysfs_emit_at: Remove PAGE_SIZE alignment check (Eric Biggers)
- ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers)
- LTS version: v4.14.310 (Saeed Mirzamohammadi)
- drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison)
- tipc: improve function tipc_wait_for_cond() (Tung Nguyen)
- media: ov5640: Fix analogue gain control (Paul Elder)
- PCI: Add SolidRun vendor ID (Alvaro Karsz)
- macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor)
- alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes)
- MIPS: Fix a compilation issue (xurui)
- net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida)
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet)
- nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen)
- nfc: change order inside nfc_se_io error path (Fedor Pchelkin)
- ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng)
- ext4: fix WARNING in ext4_update_inline_data (Ye Bin)
- ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin)
- ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong)
- ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney)
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper)
- LTS version: v4.14.309 (Saeed Mirzamohammadi)
- staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann)
- staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann)
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" (Hector Martin)
- LTS version: v4.14.308 (Saeed Mirzamohammadi)
- thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada)
- tcp: Fix listen() regression in 4.14.303. (Kuniyuki Iwashima)
- s390/setup: init jump labels before command line parsing (Vasily Gorbik)
- s390/maccess: add no DAT mode to kernel_write (Vasily Gorbik)
- Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi)
- phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong)
- usb: uvc: Enumerate valid values for color matching (Daniel Scally)
- USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)
- usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook)
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli)
- iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli)
- tools/iio/iio_utils:fix memory leak (Yulong Zhang)
- tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun)
- tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle)
- media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda)
- firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh)
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai)
- thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter)
- scsi: ipr: Work around fortify-string warning (Arnd Bergmann)
- tcp: tcp_check_req() can be called from process context (Eric Dumazet)
- ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski)
- nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin)
- 9p/xen: fix connection sequence (Juergen Gross)
- 9p/xen: fix version parsing (Juergen Gross)
- net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet)
- netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua)
- watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun)
- watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie)
- x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi)
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng)
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng)
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng)
- ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng)
- ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng)
- ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang)
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao)
- ubi: Fix use-after-free when volume resizing failed (Li Zetao)
- ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng)
- ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng)
- ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng)
- ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy)
- pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier)
- fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion)
- net/sched: Retire tcindex classifier (Jamal Hadi Salim)
- kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov)
- drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak)
- PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal)
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl)
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl)
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl)
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl)
- scsi: ses: Don't attach if enclosure has no components (James Bottomley)
- scsi: qla2xxx: Fix erroneous link down (Quinn Tran)
- scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran)
- ktest.pl: Fix missing "end_monitor" when machine check fails (Steven Rostedt)
- mips: fix syscall_get_nr (Elvira Khabirova)
- alpha: fix FEN fault handling (Al Viro)
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov)
- ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski)
- ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski)
- dm flakey: don't corrupt the zero page (Mikulas Patocka)
- dm flakey: fix logic when corrupting a bio (Mikulas Patocka)
- wifi: cfg80211: Fix use after free for wext (Alexander Wetzel)
- wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith)
- ext4: refuse to create ea block when umounted (Jun Nie)
- ext4: optimize ea_inode block expansion (Jun Nie)
- ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin)
- irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold)
- irqdomain: Fix disassociation race (Johan Hovold)
- irqdomain: Fix association race (Johan Hovold)
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu)
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh)
- x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD))
- x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD))
- x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD))
- x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong)
- x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong)
- x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson)
- x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson)
- x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson)
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)
- udf: Do not update file length for failed writes to inline files (Jan Kara)
- udf: Do not bother merging very long extents (Jan Kara)
- udf: Truncate added extents on failed expansion (Jan Kara)
- ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel)
- ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel)
- f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers)
- fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu)
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin)
- s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik)
- s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik)
- rtc: pm8xxx: fix set-alarm race (Johan Hovold)
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA)
- spi: bcm63xx-hsspi: Fix multi-bit mode setting (William Zhang)
- dm cache: add cond_resched() to various workqueue loops (Mike Snitzer)
- dm thin: add cond_resched() to various workqueue loops (Mike Snitzer)
- pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea)
- regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook)
- regulator: max77802: Bounds check regulator id against opmode (Kees Cook)
- ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook)
- docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel)
- drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)
- drm/radeon: free iio for atombios when driver shutdown (Liwei Song)
- ACPI: video: Fix Lenovo Ideapad Z570 DMI match (Hans de Goede)
- m68k: Check syscall_trace_enter() return code (Michael Schmitz)
- net: bcmgenet: Add a check for oversized packets (Florian Fainelli)
- ACPI: Don't build ACPICA with '-Os' (Mark Rutland)
- inet: fix fast path in __inet_hash_connect() (Pietro Borrello)
- timers: Prevent union confusion from unexpected restart_syscall() (Jann Horn)
- thermal: intel: Fix unsigned comparison with less than zero (Yang Li)
- rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() (Paul E. McKenney)
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Jisoo Jang)
- ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (Markuss Broks)
- udf: Define EFSCORRUPTED error code (Jan Kara)
- rpmsg: glink: Avoid infinite loop on intent for missing channel (Bjorn Andersson)
- media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou)
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou)
- media: platform: ti: Add missing check for devm_regulator_get (Jiasheng Jiang)
- MIPS: vpe-mt: drop physical_memsize (Randy Dunlap)
- powerpc/pseries/lparcfg: add missing RTAS retry status handling (Nathan Lynch)
- powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (Frederic Barrat)
- Input: ads7846 - don't check penirq immediately for 7845 (Luca Ellero)
- Input: ads7846 - don't report pressure for ads7845 (Luca Ellero)
- mtd: rawnand: sunxi: Fix the size of the last OOB region (Samuel Holland)
- mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (Qiheng Lin)
- dm: remove flush_scheduled_work() during local_exit() (Mike Snitzer)
- scsi: aic94xx: Add missing check for dma_map_single() (Jiasheng Jiang)
- hwmon: (ltc2945) Handle error case in ltc2945_value_store (Jonathan Cormier)
- gpio: vf610: connect GPIO label to dev name (Haibo Chen)
- ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() (Kuninori Morimoto)
- drm/mediatek: Drop unbalanced obj unref (Rob Clark)
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (Daniel Mentz)
- ALSA: hda/ca0132: minor fix for allocation size (Alexey V. Vissarionov)
- pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)
- drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)
- gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (Liang He)
- drm/bridge: megachips: Fix error handling in i2c_register_driver() (Yuan Can)
- drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (Geert Uytterhoeven)
- irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts (Florian Fainelli)
- can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error (Frank Jungclaus)
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (Dan Carpenter)
- m68k: /proc/hardware should depend on PROC_FS (Randy Dunlap)
- crypto: rsa-pkcs1pad - Use akcipher_request_complete (Herbert Xu)
- Bluetooth: L2CAP: Fix potential user-after-free (Luiz Augusto von Dentz)
- cpufreq: davinci: Fix clk use after free (Uwe Kleine-König)
- irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe (Miaoqian Lin)
- irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (Miaoqian Lin)
- net/mlx5: Enhance debug print in page allocation failure (Jack Morgenstein)
- crypto: seqiv - Handle EBUSY correctly (Herbert Xu)
- ACPI: battery: Fix missing NUL-termination with large strings (Armin Wolf)
- wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (Minsuk Kang)
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Fedor Pchelkin)
- wifi: orinoco: check return value of hermes_write_wordrec() (Alexey Kodanev)
- ACPICA: nsrepair: handle cases without a return value correctly (Daniil Tatianin)
- lib/mpi: Fix buffer overrun when SG is too long (Herbert Xu)
- genirq: Fix the return type of kstat_cpu_irqs_sum() (Zhen Lei)
- wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (Zhengchao Shao)
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (Zhang Changzhong)
- wifi: ipw2200: fix memory leak in ipw_wdev_init() (Zhengchao Shao)
- wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
- wifi: libertas: fix memory leak in lbs_init_adapter() (Zhengchao Shao)
- arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (Neil Armstrong)
- arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (Neil Armstrong)
- arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (Neil Armstrong)
- ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato (Krzysztof Kozlowski)
- ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (Yang Yingliang)
- arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (Martin Blumenstingl)
- arm64: dts: meson-gx: Fix Ethernet MAC address unit name (Martin Blumenstingl)
- ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Qiheng Lin)
- ARM: OMAP2+: Fix memory leak in realtime_counter_init() (Chen Hui)
- HID: asus: use spinlock to safely schedule workers (Pietro Borrello)
- HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello)
- HID: asus: Remove check for same LED brightness on set (Luke D. Jones)
- USB: core: Don't hold device lock while reading the "descriptors" sysfs file (Alan Stern)
- USB: serial: option: add support for VW/Skoda "Carstick LTE" (Florian Zumbiehl)
- dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size (Jiasheng Jiang)
- bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)
- bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)
- bpf: fix subprog verifier bypass by div/mod by 0 exception (Daniel Borkmann)
- bpf: Do not use ax register in interpreter on div/mod (Daniel Borkmann)
- net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima)
- IB/hfi1: Assign npages earlier (Dean Luick)
- btrfs: send: limit number of clones and allocated memory size (David Sterba)
- ARM: dts: rockchip: add power-domains property to dp node on rk3288 (Johan Jonker)
- LTS version: v4.14.307 (Saeed Mirzamohammadi)
- wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)
- uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)
- alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)
- powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)
- random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)
- wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)
-
Wed Apr 19 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.525.1.el7uek]
- net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35279328]
- net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35278125]
- netfilter: ebtables: fix table blob use-after-free (Florian Westphal) [Orabug: 35256192]
- net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan) [Orabug: 35254380]
- x86/cpu: Fix LFENCE serialization check in init_amd() (Rhythm Mahajan) [Orabug: 35225921]
- taskstats: Fix memory leak due to taskstats_counts objects. (Imran Khan) [Orabug: 34768713]
-
Wed Mar 29 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.5.el7uek]
- rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728]
-
Thu Mar 23 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.4.el7uek]
- xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792]
- x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [Orabug: 35181414]
- x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [Orabug: 35181414]
-
Fri Mar 17 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.3.el7uek]
- KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) [Orabug: 35182018]
- KVM: x86: Prevent set vCPU into INIT/SIPI_RECEIVED state when INIT are latched (Liran Alon) [Orabug: 35146837]
- KVM: x86: Evaluate latched_init in KVM_SET_VCPU_EVENTS when vCPU not in SMM (Liran Alon) [Orabug: 35146837]
- mm: use ktask for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054623]
- mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054623]
- hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) [Orabug: 34951483] {CVE-2022-3107}
- block: fix handling for BIO_NO_PAGE_REF (Ming Lei) [Orabug: 34602747]
- block: add BIO_NO_PAGE_REF flag (Jens Axboe) [Orabug: 34602747]
- block: implement bio helper to add iter bvec pages to bio (Jens Axboe) [Orabug: 34602747]
- block: introduce mp_bvec_for_each_page() for iterating over page (Ming Lei) [Orabug: 34602747]
-
Fri Mar 10 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.2.el7uek]
- x86/kdump: Fall back to reserve high crashkernel memory (Dave Young) [Orabug: 35158700]
- NFS: If the VFS sets LOOKUP_REVAL then force a lookup of the dentry (Trond Myklebust) [Orabug: 35136066]
- nfsd: Do not refuse to serve out of cache (Trond Myklebust) [Orabug: 35136066]
-
Fri Mar 03 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.1.el7uek]
- Revert "Change mincore() to count "mapped" pages rather than "cached" pages" (Linus Torvalds) [Orabug: 35124753]
- Revert "XFS: code enhancement to help debug" (Stephen Brennan) [Orabug: 35070084]
- NFSv4: Fix OPEN / CLOSE race (Trond Myklebust) [Orabug: 34998974]
- LTS version: v4.14.306 (Saeed Mirzamohammadi)
- nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi)
- kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)
- i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova)
- ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault)
- ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault)
- net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)
- net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea)
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson)
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima)
- net: bgmac: fix BCM5358 support by setting correct flags (Rafał Miłecki)
- i40e: add double of VLAN header when computing the max MTU (Jason Xing)
- revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" (Andrew Morton)
- hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz)
- ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu)
- mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang)
- Revert "x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN" (Greg Kroah-Hartman)
- aio: fix mremap after fork null-deref (Seth Jenkins)
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel)
- net/rose: Fix to not accept on connected socket (Hyunwoo Kim)
- tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie)
- migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz)
- usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson)
- net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern)
- pinctrl: single: fix potential NULL dereference (Maxim Korotkov)
- pinctrl: aspeed: Fix confusing types in return value (Joel Stanley)
- ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter)
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev)
- btrfs: limit device extents to the device size (Josef Bacik)
- serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Järvinen)
- serial: 8250_dma: Fix DMA Rx completion race (Ilpo Järvinen)
- Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher)
- mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia)
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz)
- parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller)
- parisc: Fix return code of pdc_iodc_print() (Helge Deller)
- iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade)
- iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang)
- iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov)
- efi: Accept version 2 of memory attributes table (Ard Biesheuvel)
- watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov)
- watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov)
- fbcon: Check font dimension limits (Samuel Thibault)
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami)
- net/x25: Fix to not accept on connected socket (Hyunwoo Kim)
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)
- scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi)
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin)
- sctp: do not check hb_timer.expires when resetting hb_timer (Xin Long)
- squashfs: harden sanity check in squashfs_read_xattr_id_table (Fedor Pchelkin)
- netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim)
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev)
- bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can)
- firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto)
- LTS version: v4.14.305 (Saeed Mirzamohammadi)
- usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen)
- ipv6: ensure sane device mtu in tunnels (Eric Dumazet)
- mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko)
- exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook)
- docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook)
- panic: Expose "warn_count" to sysfs (Kees Cook)
- panic: Introduce warn_limit (Kees Cook)
- panic: Consolidate open-coded panic_on_warn checks (Kees Cook)
- exit: Allow oops_limit to be disabled (Kees Cook)
- exit: Expose "oops_count" to sysfs (Kees Cook)
- exit: Put an upper limit on how often we can oops (Jann Horn)
- ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap)
- h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor)
- hexagon: Fix function name in die() (Nathan Chancellor)
- objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman)
- exit: Add and use make_task_dead. (Eric W. Biederman)
- panic: unset panic_on_warn inside panic() (Tiezhu Yang)
- sysctl: add a new register_sysctl_init() interface (Xiaoming Ni)
- x86/entry/64: Add instruction suffix to SYSRET (Jan Beulich)
- x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka)
- drm/radeon/dp: make radeon_dp_get_dp_link_config static (Alex Deucher)
- wifi: brcmfmac: fix up incorrect 4.14.y backport for brcmf_fw_map_chip_to_name() (Greg Kroah-Hartman)
- x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner)
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" (Dmitry Torokhov)
- net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen)
- net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda)
- sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)
- netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima)
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman)
- netlink: annotate data races around sk_state (Eric Dumazet)
- netlink: annotate data races around dst_portid and dst_group (Eric Dumazet)
- EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam)
- ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti)
- tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google))
- module: Don't wait for GOING modules (Petr Pavlu)
- scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov)
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka)
- fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu)
- comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott)
- w1: fix WARNING after calling w1_process() (Yang Yingliang)
- w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang)
- HID: betop: check shape of output reports (Pietro Borrello)
- dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko)
- net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap)
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami)
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami)
- HID: check empty report_list in hid_validate_values() (Pietro Borrello)
- net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit)
- net: usb: sr9700: Handle negative len (Szymon Heidrich)
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037714] {CVE-2023-23559}
- net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang)
- phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing)
- amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju)
- affs: initialize fsdata in affs_truncate() (Alexander Potapenko)
- IB/hfi1: Reserve user expected TIDs (Dean Luick)
- IB/hfi1: Reject a zero-length user expected buffer (Dean Luick)
- tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada)
- EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin)
- HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang)
- ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam)
-
Thu Feb 23 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.523.4.el7uek]
- rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Håkon Bugge) [Orabug: 34987235]
- rds: ib: Add FRWR related statistics counters (Håkon Bugge) [Orabug: 34987235]
- net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon) [Orabug: 25962452] [Orabug: 31712036]
-
Fri Feb 17 2023 Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.523.3.el7uek]
- driver/soc/pensando: cap_pcie: refactor pciep_regrd32 (David Clear) [Orabug: 35089515]
- mtd: spi-nor: Add support for Winbond w25q02nw flash. (David Clear) [Orabug: 35089515]
- drivers/i2c: Lattice I2C driver update (David Clear) [Orabug: 35089515]
- drivers/soc/pensando: Adding Elba sbus driver (David Clear) [Orabug: 35089515]
- Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert) [Orabug: 35080511]
- scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov) [Orabug: 35040145]