-
Wed Jan 15 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el8uek]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge) [Orabug: 37475726]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475726]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475726]
- uek-misc: Define a prefix for uek module messages (Alejandro Jimenez) [Orabug: 37459411]
- uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez) [Orabug: 37459411]
- uek-misc: Add identification for OCI platform (Alejandro Jimenez) [Orabug: 37459411]
- Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar) [Orabug: 37454162]
- cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada) [Orabug: 37426908]
- x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada) [Orabug: 37426908]
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki) [Orabug: 37426908]
- uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi) [Orabug: 37400483]
- uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang) [Orabug: 37399094]
-
Wed Jan 08 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el8uek]
- octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan) [Orabug: 37445471]
- perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp) [Orabug: 37409090]
- perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim) [Orabug: 37409090]
- perf/arm-cmn: Improve format attr printing (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Support CMN S3 (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Make cycle counts less surprising (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Improve build-time assertion (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix CCLA register offset (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy) [Orabug: 37409090]
- perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 37409090]
- perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Rework DTC counters (again) (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix DTC domain detection (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Remove spurious event aliases (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add sysfs identifier (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Revamp model detection (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Validate cycles events fully (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen) [Orabug: 37409090]
- Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix filter_sel lookup (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-700 support (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-650 support (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Update watchpoint format (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add debugfs topology info (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CI-700 Support (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Support new IP features (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Move group validation data off-stack (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Optimise DTM counter reads (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor DTM handling (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Streamline node iteration (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor node ID handling (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Drop compile-test restriction (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Account for NUMA affinity (Robin Murphy) [Orabug: 37409090]
- Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan) [Orabug: 37405595]
- Fix issues seen with mail thread patches. (Imran Khan) [Orabug: 37405595]
- mm: lru: use lruvec lock to serialize memcg changes (Muchun Song) [Orabug: 37405595]
- mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: introduce memcg_reparent_ops (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song) [Orabug: 37405595]
- mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song) [Orabug: 37405595]
- mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song) [Orabug: 37405595]
- mm: vmscan: rework move_pages_to_lru() (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song) [Orabug: 37405595]
- mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song) [Orabug: 37405595]
- Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar) [Orabug: 37390881]
- sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET) [Orabug: 37384497]
- sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper) [Orabug: 37384497]
- sfc: replace function name in string with __func__ (Jonathan Cooper) [Orabug: 37384497]
- sfc: Unsplit literal string. (Jonathan Cooper) [Orabug: 37384497]
- sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper) [Orabug: 37384497]
- sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper) [Orabug: 37384497]
- sfc: Encapsulate access to netdev_priv() (Jonathan Cooper) [Orabug: 37384497]
- sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper) [Orabug: 37384497]
- ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young) [Orabug: 37311726]
- ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein) [Orabug: 37311726]
- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips) [Orabug: 37311726]
- arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips) [Orabug: 37311726]
- seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere)) [Orabug: 37311726]
- uek-rpm: Enable new config options for Ampere (Dave Kleikamp) [Orabug: 37311726]
- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS) [Orabug: 37311726]
- NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie) [Orabug: 37311726]
- mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi) [Orabug: 37311726]
- crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie) [Orabug: 37311726]
- PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips) [Orabug: 37311726]
- PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson) [Orabug: 37311726]
- PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips) [Orabug: 37311726]
- mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi) [Orabug: 37311726]
- arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel) [Orabug: 37311726]
- arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel) [Orabug: 37311726]
- RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch) [Orabug: 37234285]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan) [Orabug: 37055939]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger) [Orabug: 37029766]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger) [Orabug: 37029766]
- net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi) [Orabug: 36948578] {CVE-2024-43864}
- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu) [Orabug: 36948578]
- net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh) [Orabug: 36948578] {CVE-2024-42268}
- net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch) [Orabug: 36948578]
- mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-42138}
- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu) [Orabug: 36948578]
- net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi) [Orabug: 36948578]
- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel) [Orabug: 36948578] {CVE-2024-42073}
- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas) [Orabug: 36948578]
- RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [Orabug: 36948578]
- RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe) [Orabug: 36948578]
- RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe) [Orabug: 36948578]
- net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-40939}
- net/mlx5: Always stop health timer during driver removal (Shay Drory) [Orabug: 36948578] {CVE-2024-40906}
- net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman) [Orabug: 36948578]
- net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu) [Orabug: 36948578]
- mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36948578]
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory) [Orabug: 36948578]
- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu) [Orabug: 36948578]
- RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [Orabug: 36948578]
- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov) [Orabug: 36948578]
- mlx5: avoid truncating error message (Arnd Bergmann) [Orabug: 36948578]
- net/mlx5: Check capability for fw_reset (Moshe Shemesh) [Orabug: 36948578]
- net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh) [Orabug: 36948578]
- netlink: Correct offload_xstats size (Christoph Paasch) [Orabug: 36948578]
- net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet) [Orabug: 36948578]
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov) [Orabug: 36948578]
- net: macsec: fix double free of percpu stats (Fedor Pchelkin) [Orabug: 36948578]
- tcp: gso: really support BIG TCP (Eric Dumazet) [Orabug: 36948578]
- RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe) [Orabug: 36948578]
- nfp: flower: fix ingress police using matchall filter (Tianyu Yuan) [Orabug: 36948578]
- lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin) [Orabug: 36948578]
- RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky) [Orabug: 36948578]
- rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata) [Orabug: 36948578]
- tun: annotate access to queue->trans_start (Antoine Tenart) [Orabug: 36948578]
- xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson) [Orabug: 36948578]
- net/sched: fix incorrect vlan_push_eth dest field (Louis Peens) [Orabug: 36948578]
- RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter) [Orabug: 36948578]
- net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu) [Orabug: 36948578]
- net: add missing include in include/net/gro.h (Eric Dumazet) [Orabug: 36948578]
- IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro) [Orabug: 36948578]
- xsk: Initialise xskb free_list_node (Ciara Loftus) [Orabug: 36948578]
- xsk: Fix crash on double free in buffer pool (Magnus Karlsson) [Orabug: 36948578]
- KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson) [Orabug: 36815282]
- KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson) [Orabug: 36815282]
-
Tue Dec 24 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.el8uek]
- Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 37434606] {CVE-2024-53206}
- lib/buildid: Fix build ID parsing logic (Jiri Olsa)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331938] {CVE-2024-53097}
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)
- usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros) [Orabug: 37304834] {CVE-2024-53070}
- ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang) [Orabug: 37434622] {CVE-2024-53226}
- mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
- ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
- scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304753] {CVE-2024-53060}
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393531]
- vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang) [Orabug: 37393531]
-
Wed Dec 18 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.3.el8uek]
- build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock) [Orabug: 37381702]
- mtd: fix use-after-free in mtd release (Alexander Usyskin) [Orabug: 37371929]
- mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal) [Orabug: 37371929]
- mtd: call external _get and _put in right order (Alexander Usyskin) [Orabug: 37371929]
- nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko) [Orabug: 37371929]
- Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang) [Orabug: 37364544]
- x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna) [Orabug: 37361290]
- x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna) [Orabug: 37361290]
- cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma) [Orabug: 37347419]
- mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna) [Orabug: 37306542]
-
Wed Dec 04 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.2.el8uek]
- uek-rpm: Add mstflint_access module to the core list (Thomas Tai) [Orabug: 37345530]
- uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai) [Orabug: 37345530]
- sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay) [Orabug: 37329531]
- Partial revert "rds: Add inc/frag cache statistics" (Hans Westgaard Ry) [Orabug: 37232315]
-
Wed Nov 27 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.1.el8uek]
- kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski) [Orabug: 37295980]
- kexec: update start address for LPI table data (Joe Dobosenski) [Orabug: 37295980]
- kpcimgr: fix flush_icache_range arguments (Joe Dobosenski) [Orabug: 37295980]
- embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski) [Orabug: 37295980]
- embedded2: Support booting an encrypted root filesystem (Joe Dobosenski) [Orabug: 37295980]
- Update embedded2 config for UEK7 (Joe Dobosenski) [Orabug: 37295980]
- Pensando: kernel config changes for kdump (Rob Gardner) [Orabug: 34091165] [Orabug: 37295980]
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski) [Orabug: 37295980]
- arm64: kexec: add support for kexec with spin-table (Henry Willard) [Orabug: 32549965] [Orabug: 37295980]
- drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear) [Orabug: 37295980]
- drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear) [Orabug: 37295980]
- mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson) [Orabug: 37295980]
- Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni) [Orabug: 37280567]
- selftests: connector: Fix input argument error paths to skip (Shuah Khan) [Orabug: 37280567]
- connector/cn_proc: Selftest for proc connector (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Allow non-root users access (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Performance improvements (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni) [Orabug: 37280567]
- netlink: Add new netlink_release function (Anjali Kulkarni) [Orabug: 37280567]
- ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [Orabug: 37214589] {CVE-2024-46770}
-
Fri Nov 22 2024 Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.el8uek]
- intel_idle: fix ACPI _CST matching for newer Xeon platforms (Artem Bityutskiy) [Orabug: 37249457]
- x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (Peter Zijlstra) [Orabug: 37249457]
- perf/tests: Add AMX instructions to x86 instruction decoder test (Adrian Hunter) [Orabug: 37249457]
- x86/insn: Add AMX instructions to the x86 instruction decoder (Adrian Hunter) [Orabug: 37249457]
- intel_idle: add Granite Rapids Xeon support (Artem Bityutskiy) [Orabug: 37249457]
- cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* (Peter Zijlstra) [Orabug: 37249457]
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long) [Orabug: 37249457]
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Peter Zijlstra) [Orabug: 37249457]
- intel_idle: Add a new flag to initialize the AMX state (Chang S. Bae) [Orabug: 37249457]
- x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (Chang S. Bae) [Orabug: 37249457]
- intel_idle: enable interrupts before C1 on Xeons (Artem Bityutskiy) [Orabug: 37249457]
-
Tue Nov 19 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.4.el8uek]
- rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski) [Orabug: 37265126]
- rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski) [Orabug: 37265124]
- rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski) [Orabug: 37265122]
- rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski) [Orabug: 37265120]
- rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski) [Orabug: 37265116]
- rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski) [Orabug: 37265114]
- Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang) [Orabug: 37285222]
- Revert "net/mlx5: pretend 'fast unload' succeeded on Exadata systems" (Qing Huang) [Orabug: 37285222]
- RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood) [Orabug: 31688618] [Orabug: 37279176]
- blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai) [Orabug: 37228086]
- rds: Add rds stuck shutdown timeout (Rohit Nair) [Orabug: 37214078]
- KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson) [Orabug: 37273739]
- KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Sean Christopherson) [Orabug: 37273739]
- KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson) [Orabug: 37273739]
- mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle)) [Orabug: 37270260]
- LTS version: v5.15.171 (Vijayendra Suman)
- mac80211: always have ieee80211_sta_restart() (Johannes Berg)
- vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)
- drm/i915: Fix potential context UAFs (Rob Clark)
- Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" (Jason-JH.Lin)
- mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268580] {CVE-2024-50228}
- wifi: iwlwifi: mvm: fix 6 GHz scan construction (Johannes Berg) [Orabug: 37304734] {CVE-2024-53055}
- nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268588] {CVE-2024-50230}
- x86/bugs: Use code segment selector for VERW operand (Pawan Gupta) [Orabug: 37227383] {CVE-2024-50072}
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268563] {CVE-2024-50218}
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Matt Fleming) [Orabug: 37268568] {CVE-2024-50219}
- mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves (Mel Gorman)
- mm/page_alloc: explicitly define what alloc flags deplete min reserves (Mel Gorman)
- mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags (Mel Gorman)
- mm/page_alloc: treat RT tasks similar to __GFP_HIGH (Mel Gorman)
- mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE (Mel Gorman)
- mm/page_alloc: split out buddy removal code from rmqueue into separate helper (Mel Gorman)
- mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() (Wonhyuk Yang)
- mm/page_alloc: call check_new_pages() while zone spinlock is not held (Eric Dumazet)
- riscv: Remove duplicated GET_RM (Chunyan Zhang)
- riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
- riscv: Use '%u' to format the output of 'cpu' (WangYuli)
- riscv: efi: Set NX compat flag in PE/COFF header (Heinrich Schuchardt)
- riscv: vdso: Prevent the compiler from inserting calls to memset() (Alexandre Ghiti)
- nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268584] {CVE-2024-50229}
- iio: light: veml6030: fix microlux value calculation (Javier Carrasco)
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Zicheng Qu) [Orabug: 37268595] {CVE-2024-50232}
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268597] {CVE-2024-50233}
- wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [Orabug: 37268602] {CVE-2024-50234}
- wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268610] {CVE-2024-50236}
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268613] {CVE-2024-50237}
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Basavaraj Natikar)
- xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Javier Carrasco)
- usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
- usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
- misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)
- net: amd: mvme147: Fix probe banner message (Daniel Palmer)
- scsi: scsi_transport_fc: Allow setting rport state to current state (Benjamin Marzinski)
- fs/ntfs3: Additional check in ni_clear() (Konstantin Komarov) [Orabug: 37268638] {CVE-2024-50244}
- fs/ntfs3: Fix possible deadlock in mi_read (Konstantin Komarov) [Orabug: 37268644] {CVE-2024-50245}
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state (Konstantin Komarov)
- fs/ntfs3: Check if more than chunk-size bytes are written (Andrew Ballance) [Orabug: 37268655] {CVE-2024-50247}
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
- netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268670] {CVE-2024-50251}
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)
- netfilter: Fix use-after-free in get_info() (Dong Chenchen) [Orabug: 37268689] {CVE-2024-50257}
- bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268702] {CVE-2024-50262}
- netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie) [Orabug: 37268697] {CVE-2024-50259}
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304740] {CVE-2024-53057}
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [Orabug: 37304745] {CVE-2024-53058}
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304749] {CVE-2024-53059}
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)
- mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)
- mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)
- RDMA/bnxt_re: synchronize the qp-handle table array (Selvin Xavier)
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (Patrisious Haddad)
- RDMA/cxgb4: Dump vendor specific QP details (Leon Romanovsky)
- wifi: brcm80211: BRCM_TRACING should depend on TRACING (Geert Uytterhoeven)
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Geert Uytterhoeven)
- cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Koba Ko) [Orabug: 37264072] {CVE-2024-50141}
- ACPI: PRM: Change handler_addr type to void pointer (Sudeep Holla)
- ACPI: PRM: Remove unnecessary blank lines (Aubrey Li)
- ksmbd: fix user-after-free from session log off (Namjae Jeon) [Orabug: 37227413] {CVE-2024-50086}
- selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test (Donet Tom)
- LTS version: v5.15.170 (Vijayendra Suman)
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264074] {CVE-2024-50142}
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Zichen Xie) [Orabug: 37252324] {CVE-2024-50103}
- net: phy: dp83822: Fix reset pin definitions (Michel Alex)
- serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE))
- selinux: improve error checking in sel_write_load() (Paul Moore)
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
- xfrm: fix one more kernel-infoleak in algo dumping (Petr Vaganov) [Orabug: 37252349] {CVE-2024-50110}
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [Orabug: 37252372] {CVE-2024-50115}
- openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) (Aleksa Sarai)
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252377] {CVE-2024-50116}
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
- drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252383] {CVE-2024-50117}
- btrfs: zoned: fix zone unusable accounting for freed reserved extent (Naohiro Aota)
- ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264274] {CVE-2024-50205}
- bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jiri Olsa)
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37320233] {CVE-2024-50210}
- r8169: avoid unsolicited interrupts (Heiner Kallweit)
- net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252407] {CVE-2024-50127}
- net: wwan: fix global oob in wwan_rtnl_policy (Lin Ma) [Orabug: 37252410] {CVE-2024-50128}
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x (Peter Rashleigh)
- net: plip: fix break; causing plip to never transmit (Jakub Boehm)
- be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264143] {CVE-2024-50167}
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264149] {CVE-2024-50168}
- xfrm: respect ip protocols rules criteria when performing dst lookups (Eyal Birger)
- xfrm: extract dst lookup parameters into a struct (Eyal Birger)
- tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252415] {CVE-2024-50131}
- platform/x86: dell-sysman: add support for alienware products (Crag Wang)
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (Alexey Klimov)
- arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)
- platform/x86: dell-wmi: Ignore suspend notifications (Armin Wolf)
- udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264080] {CVE-2024-50143}
- arm64: Force position-independent veneers (Mark Rutland)
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (Shengjiu Wang)
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (Alexey Klimov)
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252420] {CVE-2024-50134}
- exec: don't WARN for racy path_noexec check (Mateusz Guzik) [Orabug: 37206344] {CVE-2024-50010}
- XHCI: Separate PORT and CAPs macros into dedicated file (Frank Li)
- usb: gadget: Add function wakeup support (Elson Roy Serrao)
- KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)
- KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)
- KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)
- KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)
- arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264236] {CVE-2024-50194}
- arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)
- Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264096] {CVE-2024-50148}
- s390: Initialize psw mask in perf_arch_fetch_caller_regs() (Heiko Carstens)
- usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264102] {CVE-2024-50150}
- smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264107] {CVE-2024-50151}
- scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Wang Hai) [Orabug: 37264112] {CVE-2024-50153}
- genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264114] {CVE-2024-50154}
- net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264156] {CVE-2024-50171}
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() (Wang Hai)
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Li RongQing)
- net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)
- macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)
- net: usb: usbnet: fix race in probe failure (Oliver Neukum)
- drm/msm: Allocate memory for disp snapshot with kvzalloc() (Douglas Anderson)
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Douglas Anderson) [Orabug: 37264122] {CVE-2024-50156}
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Bhargava Chenna Marreddy) [Orabug: 37264280] {CVE-2024-50208}
- RDMA/bnxt_re: Return more meaningful error (Kalesh AP)
- ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)
- RDMA/irdma: Fix misspelling of "accept*" (Alexander Zubkov)
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)
- ALSA: hda/cs8409: Fix possible NULL dereference (Murad Masimov) [Orabug: 37264129] {CVE-2024-50160}
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)
- x86/resctrl: Avoid overflow in MB settings in bw_validate() (Martin Kletzander)
- RDMA/bnxt_re: Add a check for memory allocation (Kalesh AP) [Orabug: 37264285] {CVE-2024-50209}
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)
- bpf: devmap: provide rxq after redirect (Florian Kauer) [Orabug: 37264132] {CVE-2024-50162}
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Toke Høiland-Jørgensen) [Orabug: 37264134] {CVE-2024-50163}
- LTS version: v5.15.169 (Vijayendra Suman)
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (Vasiliy Kovalev)
- powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() (Aneesh Kumar K.V)
- nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264266] {CVE-2024-50202}
- mptcp: prevent MPC handshake on port-based signal endpoints (Paolo Abeni)
- mptcp: fallback when MPTCP opts are dropped after 1st data (Matthieu Baerts (NGI0))
- tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [Orabug: 37227408] {CVE-2024-50083}
- mptcp: handle consistently DSS corruption (Paolo Abeni) [Orabug: 37264210] {CVE-2024-50185}
- mptcp: track and update contiguous data status (Geliang Tang)
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Marc Zyngier) [Orabug: 37264231] {CVE-2024-50192}
- pinctrl: ocelot: fix system hang on level based interrupts (Sergey Matsievskiy) [Orabug: 37264246] {CVE-2024-50196}
- x86/entry_32: Clear CPU buffers after register restore in NMI return (Pawan Gupta) [Orabug: 37264234] {CVE-2024-50193}
- x86/entry_32: Do not clobber user EFLAGS.ZF (Pawan Gupta)
- x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)
- x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)
- USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)
- USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)
- xhci: Mitigate failed set dequeue pointer commands (Mathias Nyman)
- xhci: Fix incorrect stream context type macro (Mathias Nyman)
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
- Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
- iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)
- iio: light: veml6030: fix IIO device retrieval from embedded device (Javier Carrasco) [Orabug: 37264254] {CVE-2024-50198}
- iio: light: veml6030: fix ALS sensor resolution (Javier Carrasco)
- iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
- drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)
- drm/radeon: Fix encoder->possible_clones (Ville Syrjälä) [Orabug: 37264263] {CVE-2024-50201}
- io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227403] {CVE-2024-50082}
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Johannes Wikner)
- x86/bugs: Skip RSB fill at VMEXIT (Johannes Wikner)
- x86/entry: Have entry_ibpb() invalidate return predictions (Johannes Wikner)
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Johannes Wikner)
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weißschuh)
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Lu Baolu) [Orabug: 37252321] {CVE-2024-50101}
- io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)
- io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)
- io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (Wachowski, Karol)
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835836] {CVE-2024-40953}
- dm-crypt, dm-verity: disable tasklets (Mikulas Patocka)
- wifi: mac80211: fix potential key use-after-free (Johannes Berg)
- secretmem: disable memfd_secret() if arch cannot set direct map (Patrick Roy) [Orabug: 37264195] {CVE-2024-50182}
- mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264256] {CVE-2024-50199}
- fat: fix uninitialized variable (OGAWA Hirofumi)
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Nianyao Tang)
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY (Oleksij Rempel)
- arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)
- arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252316] {CVE-2024-50099}
- posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264241] {CVE-2024-50195}
- net: enetc: add missing static descriptor and inline keyword (Wei Fang)
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop() (Wei Fang)
- udf: Fix bogus checksum computation in udf_rename() (Jan Kara) [Orabug: 37320204] {CVE-2024-43845}
- udf: Don't return bh from udf_expand_dir_adinicb() (Jan Kara)
- udf: Handle error when expanding directory (Jan Kara)
- udf: Remove old directory iteration code (Jan Kara)
- udf: Convert udf_link() to new directory iteration code (Jan Kara)
- udf: Convert udf_mkdir() to new directory iteration code (Jan Kara)
- udf: Convert udf_add_nondir() to new directory iteration (Jan Kara)
- udf: Implement adding of dir entries using new iteration code (Jan Kara)
- udf: Convert udf_unlink() to new directory iteration code (Jan Kara)
- udf: Convert udf_rmdir() to new directory iteration code (Jan Kara)
- udf: Convert empty_dir() to new directory iteration code (Jan Kara)
- udf: Convert udf_get_parent() to new directory iteration code (Jan Kara)
- udf: Convert udf_lookup() to use new directory iteration code (Jan Kara)
- udf: Convert udf_readdir() to new directory iteration (Jan Kara)
- udf: Convert udf_rename() to new directory iteration code (Jan Kara)
- udf: Provide function to mark entry as deleted using new directory iteration code (Jan Kara)
- udf: Implement searching for directory entry using new iteration code (Jan Kara)
- udf: Move udf_expand_dir_adinicb() to its callsite (Jan Kara)
- udf: Convert udf_expand_dir_adinicb() to new directory iteration (Jan Kara)
- udf: New directory iteration code (Jan Kara)
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (Vasiliy Kovalev)
-
Wed Nov 13 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.3.el8uek]
- ACPI: CPPC: Make rmw_lock a raw_spin_lock (Pierre Gondois) [Orabug: 37268714] {CVE-2024-50249}
- net: usb: usbnet: fix name regression (Oliver Neukum)
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Matthieu Baerts (NGI0))
- parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227435] {CVE-2024-50074}
- netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso)
- block, bfq: fix procress reference leakage for bfqq in merge chain (Yu Kuai)
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Ido Schimmel) [Orabug: 37304697] {CVE-2024-53042}
- usb: dwc3: core: Fix system suspend on TI AM62 platforms (Roger Quadros)
- Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)
- jfs: Fix sanity check in dbMount (Dave Kleikamp)
- octeontx2-af: Fix potential integer overflows on integer shifts (Colin Ian King)
- gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
- scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Justin Tee) [Orabug: 37070103] {CVE-2024-43816}
- blk-cgroup: Properly propagate the iostat update up the hierarchy (Waiman Long) [Orabug: 37264361]
- blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [Orabug: 37264361] {CVE-2024-38384}
- blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [Orabug: 37264361] {CVE-2024-38663}
- blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei) [Orabug: 37264361]
- blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (Waiman Long) [Orabug: 37264361]
- blk-cgroup: don't update io stat for root cgroup (Ming Lei) [Orabug: 37264361]
- blk-cgroup: Optimize blkcg_rstat_flush() (Waiman Long) [Orabug: 37264361]
- blk-cgroup: Return -ENOMEM directly in blkcg_css_alloc() error path (Waiman Long) [Orabug: 37264361]
- vfio/iommu_type1: replace kfree with kvfree (Jiacheng Shi) [Orabug: 37263362]
- i2c: i801: Add support for Intel Birch Stream SoC (Jarkko Nikula) [Orabug: 37249533]
- nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37244604]
- virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (Dan Williams) [Orabug: 37070016]
- virt: sevguest: Prep for kernel internal get_ext_report() (Dan Williams) [Orabug: 37070016]
- configfs-tsm: Introduce a shared ABI for attestation reports (Dan Williams) [Orabug: 37070016]
- virt: coco: Add a coco/Makefile and coco/Kconfig (Dan Williams) [Orabug: 37070016]
- virt: sevguest: Fix passing a stack buffer as a scatterlist target (Dan Williams) [Orabug: 37070016]
- x86/sev: Change snp_guest_issue_request()'s fw_err argument (Dionna Glaze) [Orabug: 37070016]
- crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Peter Gonda) [Orabug: 37070016]
- virt/coco/sev-guest: Double-buffer messages (Dionna Glaze) [Orabug: 37070016]
- virt/coco/sev-guest: Add throttling awareness (Dionna Glaze) [Orabug: 37070016]
- virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Borislav Petkov (AMD)) [Orabug: 37070016]
- virt/coco/sev-guest: Do some code style cleanups (Borislav Petkov (AMD)) [Orabug: 37070016]
- virt/coco/sev-guest: Carve out the request issuing logic into a helper (Borislav Petkov (AMD)) [Orabug: 37070016]
- virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Borislav Petkov (AMD)) [Orabug: 37070016]
- virt/coco/sev-guest: Simplify extended guest request handling (Borislav Petkov (AMD)) [Orabug: 37070016]
- virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Borislav Petkov (AMD)) [Orabug: 37070016]
- x86/sev: Mark snp_abort() noreturn (Borislav Petkov) [Orabug: 37070016]
- kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra) [Orabug: 37070016]
- apparmor: Free up __cleanup() name (Peter Zijlstra) [Orabug: 37070016]
- fwctl: Expand adaption of code for UEK7 (Liam Merwick) [Orabug: 37070016]
- mm/slab: Add __free() support for kvfree (Dan Williams) [Orabug: 37070016]
- mm: move kvmalloc-related functions to slab.h (Matthew Wilcox (Oracle)) [Orabug: 37070016]
- x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Tom Lendacky) [Orabug: 37070016]
- iommu/amd: Do not identity map v2 capable device when snp is enabled (Vasant Hegde) [Orabug: 37070016]
- virt: sevguest: Add CONFIG_CRYPTO dependency (Arnd Bergmann) [Orabug: 37070016]
- virt/sev-guest: Remove unnecessary free in init_crypto() (Rafael Mendonca) [Orabug: 37070016]
- virt/sev-guest: Add a MODULE_ALIAS (Cole Robinson) [Orabug: 37070016]
- virt/sev-guest: Return -EIO if certificate buffer is not large enough (Tom Lendacky) [Orabug: 37070016]
- virt/sev-guest: Prevent IV reuse in the SNP guest driver (Peter Gonda) [Orabug: 37070016]
- x86/compressed/64: Add identity mappings for setup_data entries (Michael Roth) [Orabug: 37070016]
- x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Borislav Petkov (AMD)) [Orabug: 37070016]
- x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Tom Lendacky) [Orabug: 37070016]
- x86/boot: Fix the setup data types max limit (Borislav Petkov) [Orabug: 37070016]
- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Tom Lendacky) [Orabug: 37070016]
- x86/sev: Fix calculation of end address based on number of pages (Tom Lendacky) [Orabug: 37070016]
- x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Ashwin Dayanand Kamat) [Orabug: 37070016]
- x86/sev: Add SEV-SNP guest feature negotiation support (Nikunj A Dadhania) [Orabug: 37070016]
- Revert "x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV" (Borislav Petkov) [Orabug: 37070016]
- x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Michael Roth) [Orabug: 37070016]
- KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Peter Gonda) [Orabug: 37070016]
- KVM: SVM: Dump Virtual Machine Save Area (VMSA) to klog (Jarkko Sakkinen) [Orabug: 37070016]
- KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (Sean Christopherson) [Orabug: 37070016]
- iommu/amd: Add support for AVIC when SNP is enabled (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Do not support IOMMUv2 APIs when SNP is enabled (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Do not support IOMMU_DOMAIN_IDENTITY after SNP is enabled (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Set translation valid bit only when IO page tables are in use (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Introduce function to check and enable SNP (Brijesh Singh) [Orabug: 37070016]
- iommu/amd: Globally detect SNP support (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Process all IVHDs before enabling IOMMU features (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Introduce global variable for storing common EFR and EFR2 (Suravee Suthikulpanit) [Orabug: 37070016]
- iommu/amd: Introduce Support for Extended Feature 2 Register (Suravee Suthikulpanit) [Orabug: 37070016]
- x86/sev: Remove duplicated assignment to variable info (Colin Ian King) [Orabug: 37070016]
- x86/sev: Fix address space sparse warning (Borislav Petkov) [Orabug: 37070016]
- x86/sev: Get the AP jump table address from secrets page (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Add missing __init annotations to SEV init routines (Michael Roth) [Orabug: 37070016]
- crypto: ccp - Log when resetting PSP SEV state (Peter Gonda) [Orabug: 37070016]
- virt: sev-guest: Pass the appropriate argument type to iounmap() (Tom Lendacky) [Orabug: 37070016]
- virt: sevguest: Rename the sevguest dir and files to sev-guest (Tom Lendacky) [Orabug: 37070016]
- virt: sevguest: Change driver name to reflect generic SEV support (Tom Lendacky) [Orabug: 37070016]
- x86/boot: Put globals that are accessed early into the .data section (Michael Roth) [Orabug: 37070016]
- virt: sevguest: Fix bool function returning negative value (Haowen Bai) [Orabug: 37070016]
- virt: sevguest: Fix return value check in alloc_shared_pages() (Yang Yingliang) [Orabug: 37070016]
- x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (Peter Gonda) [Orabug: 37070016]
- virt: sevguest: Add documentation for SEV-SNP CPUID Enforcement (Michael Roth) [Orabug: 37070016]
- virt: sevguest: Add support to get extended report (Brijesh Singh) [Orabug: 37070016]
- virt: sevguest: Add support to derive key (Brijesh Singh) [Orabug: 37070016]
- virt: Add SEV-SNP guest driver (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Register SEV-SNP guest request platform device (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Provide support for SNP guest request NAEs (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Add a sev= cmdline option (Michael Roth) [Orabug: 37070016]
- x86/sev: Use firmware-validated CPUID for SEV-SNP guests (Michael Roth) [Orabug: 37070016]
- x86/sev: Add SEV-SNP feature detection/setup (Michael Roth) [Orabug: 37070016]
- x86/compressed/64: Add identity mapping for Confidential Computing blob (Michael Roth) [Orabug: 37070016]
- x86/compressed: Use firmware-validated CPUID leaves for SEV-SNP guests (Michael Roth) [Orabug: 37070016]
- x86/compressed: Add SEV-SNP feature detection/setup (Michael Roth) [Orabug: 37070016]
- x86/boot: Add a pointer to Confidential Computing blob in bootparams (Michael Roth) [Orabug: 37070016]
- x86/compressed/64: Add support for SEV-SNP CPUID table in #VC handlers (Michael Roth) [Orabug: 37070016]
- x86/sev: Move MSR-based VMGEXITs for CPUID to helper (Michael Roth) [Orabug: 37070016]
- KVM: x86: Move lookup of indexed CPUID leafs to helper (Michael Roth) [Orabug: 37070016]
- x86/boot: Add Confidential Computing type to setup_data (Brijesh Singh) [Orabug: 37070016]
- x86/compressed/acpi: Move EFI kexec handling into common code (Michael Roth) [Orabug: 37070016]
- x86/compressed/acpi: Move EFI vendor table lookup to helper (Michael Roth) [Orabug: 37070016]
- x86/compressed/acpi: Move EFI config table lookup to helper (Michael Roth) [Orabug: 37070016]
- x86/compressed/acpi: Move EFI system table lookup to helper (Michael Roth) [Orabug: 37070016]
- x86/head/64: Re-enable stack protection (Michael Roth) [Orabug: 37070016]
- x86/sev: Use SEV-SNP AP creation to start secondary CPUs (Tom Lendacky) [Orabug: 37070016]
- x86/sev: Remove do_early_exception() forward declarations (Borislav Petkov) [Orabug: 37070016]
- x86/mm: Validate memory when changing the C-bit (Brijesh Singh) [Orabug: 37070016]
- x86/mm/cpa: Generalize __set_memory_enc_pgtable() (Brijesh Singh) [Orabug: 37070016]
- x86/kernel: Validate ROM memory before accessing when SEV-SNP is active (Brijesh Singh) [Orabug: 37070016]
- x86/kernel: Mark the .bss..decrypted section as shared in the RMP table (Brijesh Singh) [Orabug: 37070016]
- x86/head64: Add missing __head annotation to sme_postprocess_startup() (Marco Bonelli) [Orabug: 37070016]
- x86/head64: Carve out the guest encryption postprocessing into a helper (Borislav Petkov) [Orabug: 37070016]
- x86/sev: Add helper for validating pages in early enc attribute changes (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Register GHCB memory when SEV-SNP is active (Brijesh Singh) [Orabug: 37070016]
- x86/compressed: Register GHCB memory when SEV-SNP is active (Brijesh Singh) [Orabug: 37070016]
- x86/compressed: Add helper for validating pages in the decompression stage (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Check the VMPL level (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Add a helper for the PVALIDATE instruction (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Check SEV-SNP features support (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Save the negotiated GHCB version (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Define the Linux-specific guest termination reasons (Brijesh Singh) [Orabug: 37070016]
- x86/mm: Extend cc_attr to include AMD SEV-SNP (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Detect/setup SEV/SME features earlier in boot (Michael Roth) [Orabug: 37070016]
- x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth) [Orabug: 37070016]
- KVM: SVM: Update the SEV-ES save area mapping (Tom Lendacky) [Orabug: 37070016]
- KVM: SVM: Create a separate mapping for the GHCB save area (Tom Lendacky) [Orabug: 37070016] [Orabug: 37070016]
- KVM: SVM: Create a separate mapping for the SEV-ES save area (Tom Lendacky) [Orabug: 37070016]
- KVM: SVM: Define sev_features and VMPL field in the VMSA (Brijesh Singh) [Orabug: 37070016]
- x86/sev: Move common memory encryption code to mem_encrypt.c (Kirill A. Shutemov) [Orabug: 37070016]
- x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c (Kuppuswamy Sathyanarayanan) [Orabug: 37070016]
- x86/sev: Get rid of excessive use of defines (Borislav Petkov) [Orabug: 37070016]
- x86/sev: Shorten GHCB terminate macro names (Brijesh Singh) [Orabug: 37070016]
- x86/coco: Add API to handle encryption mask (Kirill A. Shutemov) [Orabug: 37070016]
- x86/coco: Explicitly declare type of confidential computing platform (Kirill A. Shutemov) [Orabug: 37070016]
- x86/hyperv: Initialize GHCB page in Isolation VM (Tianyu Lan) [Orabug: 37070016]
- x86/cc: Move arch/x86/{kernel/cc_platform.c => coco/core.c} (Kirill A. Shutemov) [Orabug: 37070016]
- x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has() (Tianyu Lan) [Orabug: 37070016]
- crypto: ccp - Add SEV_INIT_EX support (David Rientjes) [Orabug: 37070016]
- crypto: ccp - Add psp_init_on_probe module parameter (Peter Gonda) [Orabug: 37070016]
- crypto: ccp - Add SEV_INIT rc error logging on init (Peter Gonda) [Orabug: 37070016]
- KVM: SVM: Hide SEV migration lockdep goo behind CONFIG_PROVE_LOCKING (Sean Christopherson) [Orabug: 37070016]
- KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL (Sean Christopherson) [Orabug: 37070016]
- KVM: SEV: Init target VMCBs in sev_migrate_from (Peter Gonda) [Orabug: 37070016]
- KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES (Peter Gonda) [Orabug: 37070016]
- KVM: SEV: Mark nested locking of vcpu->lock (Peter Gonda) [Orabug: 37070016]
- KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (Sean Christopherson) [Orabug: 37070016]
- KVM: SEV: Add cond_resched() to loop in sev_clflush_pages() (Peter Gonda) [Orabug: 37070016]
- KVM: SEV: Allow SEV intra-host migration of VM with mirrors (Peter Gonda) [Orabug: 37070016]
- KVM: SVM: improve split between svm_prepare_guest_switch and sev_es_prepare_guest_switch (Paolo Bonzini) [Orabug: 37070016]
- selftests: KVM: sev_migrate_tests: Add mirror command tests (Peter Gonda) [Orabug: 37070016]
- selftests: KVM: sev_migrate_tests: Fix sev_ioctl() (Peter Gonda) [Orabug: 37070016]
- selftests: KVM: sev_migrate_tests: Fix test_sev_mirror() (Peter Gonda) [Orabug: 37070016]
- KVM: SEV: Mark nested locking of kvm->lock (Wanpeng Li) [Orabug: 37070016]
- KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure (Tom Lendacky) [Orabug: 37070016]
- KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary (Sean Christopherson) [Orabug: 37070016]
- KVM: SEV: accept signals in sev_lock_two_vms (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: do not take kvm->lock when destroying (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: Prohibit migration of a VM that has mirrors (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: Do COPY_ENC_CONTEXT_FROM with both VMs locked (Paolo Bonzini) [Orabug: 37070016]
- selftests: sev_migrate_tests: add tests for KVM_CAP_VM_COPY_ENC_CONTEXT_FROM (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: move mirror status to destination of KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: cleanup locking for KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: do not use list_replace_init on an empty list (Paolo Bonzini) [Orabug: 37070016]
- selftests: sev_migrate_tests: free all VMs (Paolo Bonzini) [Orabug: 37070016]
- selftests: fix check for circular KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: Fix typo in and tweak name of cmd_allowed_from_miror() (Sean Christopherson) [Orabug: 37070016]
- KVM: SEV: Drop a redundant setting of sev->asid during initialization (Sean Christopherson) [Orabug: 37070016]
- KVM: SEV: Set sev_info.active after initial checks in sev_guest_init() (Sean Christopherson) [Orabug: 37070016]
- KVM: SEV: unify cgroup cleanup code for svm_vm_migrate_from (Paolo Bonzini) [Orabug: 37070016]
- selftest: KVM: Add intra host migration tests (Peter Gonda) [Orabug: 37070016]
- KVM: selftests: Use pattern matching in .gitignore (Sean Christopherson) [Orabug: 37070016]
- selftest: KVM: Add open sev dev helper (Peter Gonda) [Orabug: 37070016]
- x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra) [Orabug: 37070016]
- EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra) [Orabug: 37070016]
- mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh) [Orabug: 37070016]
- x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh) [Orabug: 37070016]
- KVM: SEV: Add support for SEV-ES intra host migration (Peter Gonda) [Orabug: 37070016]
- KVM: SEV: Add support for SEV intra host migration (Peter Gonda) [Orabug: 37070016]
- KVM: SEV: provide helpers to charge/uncharge misc_cg (Paolo Bonzini) [Orabug: 37070016]
- KVM: SEV: Refactor out sev_es_state struct (Peter Gonda) [Orabug: 37070016]
- x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV (Tianyu Lan) [Orabug: 37070016]
- x86/sev: Allow #VC exceptions on the VC2 stack (Joerg Roedel) [Orabug: 37070016]
- KVM: generalize "bugged" VM to "dead" VM (Paolo Bonzini) [Orabug: 37070016]
- x86/sev: Carve out HV call's return value verification (Borislav Petkov) [Orabug: 37070016]
- KVM: Free new dirty bitmap if creating a new memslot fails (Sean Christopherson) [Orabug: 37070016]
- KVM: Fix comments that refer to the non-existent install_new_memslots() (Jun Miao) [Orabug: 37070016]
- KVM: x86: Retry page fault if MMU reload is pending and root has no sp (Sean Christopherson) [Orabug: 37070016]
- KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs (Sean Christopherson) [Orabug: 37070016]
- KVM: Dynamically allocate "new" memslots from the get-go (Sean Christopherson) [Orabug: 37070016]
- KVM: Wait 'til the bitter end to initialize the "new" memslot (Sean Christopherson) [Orabug: 37070016]
- KVM: Optimize overlapping memslots check (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Optimize gfn lookup in kvm_zap_gfn_range() (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Call kvm_arch_flush_shadow_memslot() on the old slot in kvm_invalidate_memslot() (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Keep memslots in tree-based structures instead of array-based ones (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: s390: Introduce kvm_s390_get_gfn_end() (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: s390: Add a routine for setting userspace CPU state (Eric Farman) [Orabug: 37070016]
- KVM: Use interval tree to do fast hva lookup in memslots (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Resolve memslot ID via a hash table instead of via a static array (Maciej S. Szmigiero) [Orabug: 37070016]
- Revert "kvm: fix possible spectre gadgets in include/linux/kvm_host.h" (Liam Merwick) [Orabug: 37070016]
- KVM: Move WARN on invalid memslot index to update_memslots() (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Integrate gfn_to_memslot_approx() into search_memslots() (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: x86: Use nr_memslot_pages to avoid traversing the memslots array (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: x86: Don't call kvm_mmu_change_mmu_pages() if the count hasn't changed (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Don't make a full copy of the old memslot in __kvm_set_memory_region() (Sean Christopherson) [Orabug: 37070016]
- KVM: s390: Skip gfn/size sanity checks on memslot DELETE or FLAGS_ONLY (Sean Christopherson) [Orabug: 37070016]
- KVM: x86: Don't assume old/new memslots are non-NULL at memslot commit (Sean Christopherson) [Orabug: 37070016]
- KVM: Use prepare/commit hooks to handle generic memslot metadata updates (Sean Christopherson) [Orabug: 37070016]
- KVM: Stop passing kvm_userspace_memory_region to arch memslot hooks (Sean Christopherson) [Orabug: 37070016]
- KVM: x86: Use "new" memslot instead of userspace memory region (Sean Christopherson) [Orabug: 37070016]
- KVM: s390: Use "new" memslot instead of userspace memory region (Sean Christopherson) [Orabug: 37070016]
- KVM: PPC: Avoid referencing userspace memory region in memslot updates (Sean Christopherson) [Orabug: 37070016]
- KVM: MIPS: Drop pr_debug from memslot commit to avoid using "mem" (Sean Christopherson) [Orabug: 37070016]
- KVM: arm64: Use "new" memslot instead of userspace memory region (Sean Christopherson) [Orabug: 37070016]
- KVM: Let/force architectures to deal with arch specific memslot data (Sean Christopherson) [Orabug: 37070016]
- KVM: Use "new" memslot's address space ID instead of dedicated param (Sean Christopherson) [Orabug: 37070016]
- KVM: Resync only arch fields when slots_arch_lock gets reacquired (Maciej S. Szmigiero) [Orabug: 37070016]
- KVM: Open code kvm_delete_memslot() into its only caller (Sean Christopherson) [Orabug: 37070016]
- KVM: Require total number of memslot pages to fit in an unsigned long (Sean Christopherson) [Orabug: 37070016]
- KVM: x86/mmu: Extract zapping of rmaps for gfn range to separate helper (Sean Christopherson) [Orabug: 37070016]
- KVM: x86/mmu: Drop a redundant remote TLB flush in kvm_zap_gfn_range() (Sean Christopherson) [Orabug: 37070016]
- KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (Sean Christopherson) [Orabug: 37070016]
- KVM: x86/mmu: Properly dereference rcu-protected TDP MMU sptep iterator (Sean Christopherson) [Orabug: 37070016]
- KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (Hou Wenlong) [Orabug: 37070016]
- KVM: x86/mmu: Avoid memslot lookup in rmap_add (David Matlack) [Orabug: 37070016]
- KVM: MMU: pass struct kvm_page_fault to mmu_set_spte (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: pass kvm_mmu_page struct to make_spte (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: set ad_disabled in TDP MMU role (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: remove unnecessary argument to mmu_set_spte (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: clean up make_spte return value (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: inline set_spte in FNAME(sync_page) (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: inline set_spte in mmu_set_spte (Paolo Bonzini) [Orabug: 37070016]
- KVM: x86/mmu: Avoid memslot lookup in page_fault_handle_page_track (David Matlack) [Orabug: 37070016]
- KVM: x86/mmu: Pass the memslot around via struct kvm_page_fault (David Matlack) [Orabug: 37070016] [Orabug: 37070016]
- KVM: MMU: unify tdp_mmu_map_set_spte_atomic and tdp_mmu_set_spte_atomic_no_dirty_log (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: mark page dirty in make_spte (Paolo Bonzini) [Orabug: 37070016]
- KVM: x86/mmu: Verify shadow walk doesn't terminate early in page faults (Sean Christopherson) [Orabug: 37070016]
- KVM: MMU: change tracepoints arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change disallowed_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change kvm_mmu_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change fast_page_fault() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change tdp_mmu_map_handle_target_level() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change kvm_tdp_mmu_map() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change FNAME(fetch)() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change __direct_map() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change handle_abnormal_pfn() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change kvm_faultin_pfn() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change page_fault_handle_page_track() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change direct_page_fault() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: change mmu->page_fault() arguments to kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: Introduce struct kvm_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: MMU: pass unadulterated gpa to direct_page_fault (Paolo Bonzini) [Orabug: 37070016]
- KVM: X86: Don't unsync pagetables when speculative (Lai Jiangshan) [Orabug: 37070016]
- KVM: X86: Change kvm_sync_page() to return true when remote flush is needed (Lai Jiangshan) [Orabug: 37070016]
- KVM: X86: Remove kvm_mmu_flush_or_zap() (Lai Jiangshan) [Orabug: 37070016]
- KVM: X86: Don't flush current tlb on shadow page modification (Lai Jiangshan) [Orabug: 37070016]
- net: mana: Fix RX buf alloc_size alignment and atomic op panic (Haiyang Zhang) [Orabug: 37029115] {CVE-2024-45001}
- net/mlx5: pretend 'fast unload' succeeded on Exadata systems (Gerd Rausch) [Orabug: 37224000]
- rds: Do not invoke the transport's recv_path() while in atomic context (Håkon Bugge) [Orabug: 36368605]
-
Thu Nov 07 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.2.el8uek]
- Revert "rds: ib: Make sure receives are posted before connection is up" (Gerd Rausch) [Orabug: 37244182]
- uek-rpm/ol9/config-mips64: Align MIPS64 Crypto configs with x86_64 (Vijay Kumar) [Orabug: 37218693]
- rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Håkon Bugge) [Orabug: 37206836]
- spec: Set CONFIG_CRYPTO_FIPS_NAME for standard & embedded kernels (Jonah Palmer) [Orabug: 37137136]
- spec: Set CONFIG_CRYPTO_FIPS_NAME for container kernels (Jonah Palmer) [Orabug: 37137136]
- spec: Add UEK release macros for UEK7 (Jonah Palmer) [Orabug: 37137136]
- uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 Pensando embedded kernels (Jonah Palmer) [Orabug: 37137136]
- uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 T93 embedded kernels (Jonah Palmer) [Orabug: 37137136]
- uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 MIPS64 embedded kernels (Jonah Palmer) [Orabug: 37137136]
- uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8 Bluefield 3 smartnic embedded kernels (Jonah Palmer) [Orabug: 37137136]
- uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 standard kernels (Jonah Palmer) [Orabug: 37137136]
- uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 container kernels (Jonah Palmer) [Orabug: 37137136]