-
Wed Jan 02 2019 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.3.el7uek]
- net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun) [Orabug: 29003422]
- nfs: don't dirty kernel pages read by direct-io (Dave Kleikamp) [Orabug: 29122062]
- KVM: X86: Fix scan ioapic use-before-initialization (Wanpeng Li) [Orabug: 29026132] {CVE-2018-19407}
- hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz) [Orabug: 28951436]
- mm: migration: fix migration of huge PMD shared pages (Mike Kravetz) [Orabug: 28951436]
- mm/mmu_notifier: avoid double notification when it is useless (Jérôme Glisse) [Orabug: 28951436]
-
Tue Dec 18 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.2.el7uek]
- ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng) [Orabug: 29042979] {CVE-2018-19824}
- arm64/kernel: kaslr: reduce module randomization range to 4 GB (Ard Biesheuvel) [Orabug: 28954789]
- xfs: enhance dinode verifier (Eric Sandeen) [Orabug: 28997653] {CVE-2018-10322}
- xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong) [Orabug: 28997653] {CVE-2018-10322}
- Revert "xfs: move inode fork verifiers to xfs_dinode_verify" (Shan Hai) [Orabug: 28997653]
- Revert "xfs: enhance dinode verifier" (Shan Hai) [Orabug: 28997653]
-
Sun Dec 09 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.1.el7uek]
- arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne) [Orabug: 28961247]
- crypto: ccp - add timeout support in the SEV command (Brijesh Singh) [Orabug: 29029018]
- crypto: ccp - Add GET_ID SEV command (Janakarajan Natarajan) [Orabug: 29029018]
- crypto: ccp - Add DOWNLOAD_FIRMWARE SEV command (Janakarajan Natarajan) [Orabug: 29029018]
- net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun) [Orabug: 27677743] {CVE-2018-8043}
- vti6: remove !skb->ignore_df check from vti6_xmit() (Alexey Kodanev) [Orabug: 28940590]
- A/A failback does not work in concert with ibacm (Håkon Bugge) [Orabug: 28972800]
- ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss) [Orabug: 29019053]
-
Mon Dec 03 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.0.el7uek]
- wil6210: missing length check in wmi_set_ie (Lior David) [Orabug: 28951264] {CVE-2018-5848}
- [PATCH UEK5 u1 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire) [Orabug: 28951771]
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft) {CVE-2018-7755} {CVE-2018-7755}
- [PATCH UEK5 u1 v2] dtrace: fix ip provider inconsistencies between IPv4/IPv6 (Alan Maguire) [Orabug: 28956807]
- x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez) [Orabug: 28992002]
- x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez) [Orabug: 28992002]
- x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez) [Orabug: 28992002]
- Add forward declaration of tlb_flush, required for asm-generic. (Jack Vogel) [Orabug: 28866513]
- x86/mm: Page size aware flush_tlb_mm_range() (Peter Zijlstra) [Orabug: 28866513]
- mm/memory: Move mmu_gather and TLB invalidation code into its own file (Peter Zijlstra) [Orabug: 28866513]
- asm-generic/tlb: Track which levels of the page tables have been cleared (Will Deacon) [Orabug: 28866513]
- asm-generic/tlb: Track freeing of page-table directories in struct mmu_gather (Peter Zijlstra) [Orabug: 28866513]
- mm: mmu_notifier fix for tlb_end_vma (Nicholas Piggin) [Orabug: 28866513]
- mm: update comment describing tlb_gather_mmu (Mike Rapoport) [Orabug: 28866513]
-
Mon Nov 26 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.6.el7uek]
- hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz) [Orabug: 28896272]
- xfs: enhance dinode verifier (Eric Sandeen) [Orabug: 28943577] {CVE-2018-10322}
- xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong) [Orabug: 28943577] {CVE-2018-10322}
- libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard) [Orabug: 28946203]
- ib/core: Use driver pd ident when comparing pds. (Hans Westgaard Ry) [Orabug: 28947972]
-
Mon Nov 19 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.4.el7uek]
- Btrfs: fix a bug introduced by back porting an upstream commit (Shan Hai) [Orabug: 28825436]
- btrfs: Cleanup existing name_len checks (Qu Wenruo) [Orabug: 28825436]
- net/rds: Fix endless RNR situation (Venkat Venkatsubra) [Orabug: 28856966]
- xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)
- net: Allow pernet_operations to be executed in parallel (Kirill Tkhai) [Orabug: 28924192]
- net: Move mutex_unlock() in cleanup_net() up (Kirill Tkhai) [Orabug: 28924192]
- locking/arch, x86: Add __down_read_killable() (Kirill Tkhai) [Orabug: 28924192]
- locking/x86: Use named operands in rwsem.h (Miguel Bernal Marin) [Orabug: 28924192]
- locking/rwsem: Add down_read_killable() (Kirill Tkhai) [Orabug: 28924192]
- net: Introduce net_sem for protection of pernet_list (Kirill Tkhai) [Orabug: 28924192]
- net: Assign net to net_namespace_list in setup_net() (Kirill Tkhai) [Orabug: 28924192]
- net: Cleanup in copy_net_ns() (Kirill Tkhai) [Orabug: 28924192]
- cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929734] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}
- sched/fair: Use a recently used CPU as an idle candidate and the basis for SIS (Mel Gorman) [Orabug: 28940632]
- sched/fair: Move select_task_rq_fair() slow-path into its own function (Brendan Jackman) [Orabug: 28940632]
- certs: Add Oracle's new X509 cert into .builtin_trusted_keys (Eric Snowberg) [Orabug: 28926199]
-
Tue Nov 13 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.3.el7uek]
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli) [Orabug: 28899788]
- ext4: update i_disksize if direct write past ondisk size (Eryu Guan) [Orabug: 28869435]
- config: disable xfs online scrub in uek5 (Darrick J. Wong) [Orabug: 28874150]
- oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen) [Orabug: 28887242]
- oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen) [Orabug: 28887242]
- vhost: correctly check the iova range when waking virtqueue (Jason Wang) [Orabug: 28892602] {CVE-2018-1118}
- xen/balloon: Support xend-based toolstack (Boris Ostrovsky) [Orabug: 28901016]
- Update the UEFI Secureboot keys in the UEK5 U1 branch (Jack Vogel) [Orabug: 28900807]
-
Mon Nov 05 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.2.el7uek]
- uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy) [Orabug: 28855638]
- bpf: 32-bit RSH verification must truncate input before the ALU op (Jann Horn) [Orabug: 28861778] {CVE-2018-18445}
- x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28849803]
- x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28849803]
- x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky) [Orabug: 28849803]
- x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky) [Orabug: 28849803]
- scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) [Orabug: 28855938]
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz) [Orabug: 28886638]
-
Fri Oct 26 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.1.el7uek]
- bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly) [Orabug: 28651669]
- ctf: really link CTF into out-of-tree modules (Nick Alcock) [Orabug: 28343862]
- vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh) [Orabug: 28300570]
- vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh) [Orabug: 28300570]
- vhost/scsi: Respond to control queue operations (Bijan Mottahedeh) [Orabug: 28300570]
- cgroup: css_set_lock should nest inside tasklist_lock (chris hyser) [Orabug: 28796554]
- cgroup: export list of cgroups v2 features using sysfs (chris hyser) [Orabug: 28796554]
- cgroup: export list of delegatable control files using sysfs (chris hyser) [Orabug: 28796554]
- cgroup, sched: Move basic cpu stats from cgroup.stat to cpu.stat (chris hyser) [Orabug: 28796554]
- sched: Implement interface for cgroup unified hierarchy (chris hyser) [Orabug: 28796554]
- sched: Misc preps for cgroup unified hierarchy interface (chris hyser) [Orabug: 28796554]
- cgroup: statically initialize init_css_set->dfl_cgrp (chris hyser) [Orabug: 28796554]
- cgroup: Implement cgroup2 basic CPU usage accounting (chris hyser) [Orabug: 28796554]
- cpuacct: Introduce cgroup_account_cputime[_field]() (chris hyser) [Orabug: 28796554]
- sched/cputime: Expose cputime_adjust() (chris hyser) [Orabug: 28796554]
- dtrace: FBT return probe support for arm64 (Kris Van Hees) [Orabug: 28826056]
- rds: MPRDS messages delivered out of order (Ka-Cheong Poon) [Orabug: 28838065]
- nvme: Skip checking heads without namespaces (Keith Busch) [Orabug: 28682185]
- hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz) [Orabug: 28776533]
- KVM: arm/arm64: Introduce vcpu_el1_is_32bit (Christoffer Dall) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Move CPU ID reg trap setup off the world switch path (Dave Martin) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Sanitize PSTATE.M when being set from userspace (Marc Zyngier) [Orabug: 28762162] {CVE-2018-18021}
- arm64: KVM: Tighten guest core register access from userspace (Dave Martin) [Orabug: 28762162] {CVE-2018-18021}
- kvm/arm: use PSR_AA32 definitions (Mark Rutland) [Orabug: 28762162] {CVE-2018-18021}
- arm64: add PSR_AA32_* definitions (Mark Rutland) [Orabug: 28762162] {CVE-2018-18021}
- dtrace: exclude init and exit sections for sdtinfo (Kris Van Hees) [Orabug: 28808083]
- bnxt_en: Fix TX timeout during netpoll. (Michael Chan) [Orabug: 28797053]
- bnxt_en: don't try to offload VLAN 'modify' action (Davide Caratti) [Orabug: 28797053]
- net: bnxt: Fix a uninitialized variable warning. (zhong jiang) [Orabug: 28797053]
- bnxt_en: remove set but not used variable 'addr_type' (YueHaibing) [Orabug: 28797053]
- bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Clean up unused functions. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Fix firmware signaled resource change logic in open. (Michael Chan) [Orabug: 28797053]
- bnxt_en: remove set but not used variable 'rx_stats' (YueHaibing) [Orabug: 28797053]
- bnxt_en: take coredump_record structure off stack (Arnd Bergmann) [Orabug: 28797053]
- bnxt_en: avoid string overflow for record->system_name (Arnd Bergmann) [Orabug: 28797053]
- bnxt_en: Fix strcpy() warnings in bnxt_ethtool.c (Vasundhara Volam) [Orabug: 28797053]
- bnxt_en: Do not use the CNP CoS queue for networking traffic. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add DCBNL DSCP application protocol support. (Michael Chan) [Orabug: 28797053]
- config: enable BNXT_HWMON (Brian Maly) [Orabug: 28797053]
- bnxt_en: Add hwmon sysfs support to read temperature (Vasundhara Volam) [Orabug: 28797053]
- bnxt_en: Notify firmware about IF state changes. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Move firmware related flags to a new fw_cap field in struct bnxt. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add BNXT_NEW_RM() macro. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add support for ethtool get dump. (Vasundhara Volam) [Orabug: 28797053]
- bnxt_en: Update RSS setup and GRO-HW logic according to the latest spec. (Michael Chan) [Orabug: 28797053]
- bnxt_en: Add new VF resource allocation strategy mode. (Michael Chan) [Orabug: 28797053]
- kdump/vmcore: support encrypted old memory with SME enabled (Lianbo Jiang) [Orabug: 28503140]
- amd_iommu: remap the device table of IOMMU with the memory encryption mask for kdump (Lianbo Jiang) [Orabug: 28503140]
- kexec: allocate unencrypted control pages for kdump in case SME is enabled (Lianbo Jiang) [Orabug: 28503140]
- x86/ioremap: add a function ioremap_encrypted() to remap kdump old memory (Lianbo Jiang) [Orabug: 28503140]
-
Sun Oct 21 2018 Jack Vogel <jack.vogel@oracle.com> [4.14.35-1843.el7uek]
- Btrfs: do not cache rbio pages if using raid6 recover (Liu Bo) [Orabug: 28563682]
- Btrfs: do not merge rbios if their fail stripe index are not identical (Liu Bo) [Orabug: 28563682]
- iscsi: Capture iscsi debug messages using tracepoints (Fred Herard) [Orabug: 28797169]
- x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre) [Orabug: 28801815]
- hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz) [Orabug: 28813950]
- net/mlx4_core: print firmware version during driver loading (Qing Huang) [Orabug: 28597387]
- scsi: lpfc: Remove set but not used variable 'sgl_size' (YueHaibing) [Orabug: 28796202]
- scsi: lpfc: update driver version to 12.0.0.7 (James Smart) [Orabug: 28796202]
- scsi: lpfc: add support to retrieve firmware logs (James Smart) [Orabug: 28796202]
- scsi: lpfc: reduce locking when updating statistics (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix errors in log messages. (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct irq handling via locks when taking adapter offline (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct soft lockup when running mds diagnostics (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct race with abort on completion path (James Smart) [Orabug: 28796202]
- scsi: lpfc: Raise nvme defaults to support a larger io and more connectivity (James Smart) [Orabug: 28796202]
- scsi: lpfc: raise sg count for nvme to use available sg resources (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN (James Smart) [Orabug: 28796202]
- scsi: lpfc: remove an unnecessary NULL check (Dan Carpenter) [Orabug: 28796202]
- scsi: lpfc: update driver version to 12.0.0.6 (James Smart) [Orabug: 28796202]
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart) [Orabug: 28796202]
- scsi: lpfc: Correct LCB ACCept payload (James Smart) [Orabug: 28796202]
- scsi: lpfc: Limit tracking of tgt queue depth in fast path (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix driver crash when re-registering NVME rports. (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix list corruption on the completion queue. (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix sysfs Speed value on CNA ports (James Smart) [Orabug: 28796202]
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart) [Orabug: 28796202]
- scsi: lpfc: remove null check on nvmebuf (Colin Ian King) [Orabug: 28796202]
- Fix error code in nfs_lookup_verify_inode() (Lance Shelton) [Orabug: 28807481]
- kdump/vmcore: support encrypted old memory with SME enabled (Lianbo Jiang) [Orabug: 28503140]
- amd_iommu: remap the device table of IOMMU with the memory encryption mask for kdump (Lianbo Jiang) [Orabug: 28503140]
- kexec: allocate unencrypted control pages for kdump in case SME is enabled (Lianbo Jiang) [Orabug: 28503140]
- x86/ioremap: add a function ioremap_encrypted() to remap kdump old memory (Lianbo Jiang) [Orabug: 28503140]
- Revert "arm64: KVM: Tighten guest core register access from userspace" (Jack Vogel)
- Revert "kvm/arm: use PSR_AA32 definitions" (Jack Vogel)
- Revert "arm64: KVM: Sanitize PSTATE.M when being set from userspace" (Jack Vogel)