# changelog

author: Khalid Aziz <khalid.aziz@oracle.com> - 1.3.0-1
changelog:
  - New upstream release. Various enhancements to reduce system
    resource usage by the daemon. Fix to correct the sense of
    aggressiveness level and documentation update [Orabug: 32497157]


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.4.0-1
changelog:
  - Various algorithm updates to reduce the possibility of OOM
    killer being invoked because of memoptimizer's actions
  - Local patch with code cleanup [Orabug: 32563799]


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.4.2-1
changelog:
  - New upstream release
  - Fix crash on systems with less than 4G memory [Orabug: 32884653]
  - Remove patch "Make-code-more-robust.patch" since it has been 
    merged into upstream


author: Khalid Aziz <khalid.aziz@oracle.com> - 1.5.0-1
changelog:
  - Update to new upstream release [Orabug: 33322490]
  - Add support for one time initializations at start up
  - Add support for tunables value updates upon change
    in number of hugepages on the system
  - Add tuning of negative dentries cap on kernels that support it


author: Khalid Aziz <khalid.aziz@oracle.com> - 2.0.0-1
changelog:
  - Update to new upstream release [Orabug: 33820334]
  - Changing name to adaptivemmd from memoptimizer
  - Add Obsoletes keyword to spec file to ensure updates happen
    correctly
  - Change a config option name to stop systemd from complaining
    about the characters used in name
  - Ensure only one instance of daemon is running by using lock file


author: Khalid Aziz <khalid.aziz@oracle.com> - 2.0.0-2
changelog:
  - Minor update to comments in increase-verbosity.patch to update
    memoptimizer references to adaptivemm


author: Khalid Aziz <khalid.aziz@oracle.com> - 2.0.1-1
changelog:
  - Fix total memory calculation for ARM since it is slightly
    different from x86
  - Remove restriction to not build package on aarch64


author: Anand Jain <anand.jain@oracle.com> - 4.15.1-1.el7
changelog:
  - BUILDINFO: commit=5cf0257768947f9cfd279b38b9556517e7b4fc16
  - btrfs-progs: do not enable skinny_metadata feature by default for mkfs


author: Jeff Moyer <jmoyer@redhat.com> - 53.1-4
changelog:
  - Fix up duplicate "-v" documentation in man page
  - Fix bogus test in invalidate_namespace_options
  - Resolves: bz#1350404 bz#1271425


author: Jeff Moyer <jmoyer@redhat.com> - 56-1
changelog:
  - Rebase to upstream version 56
  - Default to 4k alignment for device dax
  - Resolves: bz#1384873 bz#1384642 bz#1349233 bz#1357451


author: Jeff Moyer <jmoyer@redhat.com> - 56-2
changelog:
  - Update documentation to reflect 4k alignment
  - Add support for the MSFT family of DSM functions
  - Resolves: bz#1440902 bz#1446689


author: Jingdong Lu <jingdong.lu@oracle.com> 62-1.0.1.el7
changelog:
  - BUILDINFO: commit=4474c9ca05e4b7804789ca176a74af4224070240
  - BUILDINFO: commit=241216a18a95a00eab2b143b37b75d73f053e175
  - Update to 62


author: Alan Steinberg <alan.steinberg@oracle.com> 64-1.0.1
changelog:
  - BUILDINFO: commit=ebf5f023a949d017ef0c4d5039d88dcc2e5808a4
  - missing paths added to spec %files sections


author: Joao Martins <joao.m.martins@oracle.com> 69-1.0.2
changelog:
  - BUILDINFO: commit=d3b53f1ced3ebaf03c0cbf7832a3c78c1c45b718
  - Add support for Soft-Reserved regions subdivision


author: Joao Martins <joao.m.martins@oracle.com> 70.1-1.0.3
changelog:
  - BUILDINFO: commit=cd71a0e6d588ded910f9f67b8ba0ce4c232ffb87
  - libdaxctl: Dont assume device align to be always available


author: - <nick.alcock@oracle.com> - 1.0.0-3
changelog:
  - Internal development release.
  - New tests and test fixes (Kris Van Hees, Nicolas Droux)
    [Orabug: 27194352, 27282243]


author: - <nick.alcock@oracle.com> - 1.0.0-4
changelog:
  - Internal development release.
  - Eliminate new symbol at address 0 on KPTI-enabled kernels
    [Orabug: 27364377]
  - Boost some test timeouts


author: - <nick.alcock@oracle.com> - 1.0.0-6
changelog:
  - Internal development release.
  - ARM64 support [Orabug: 27438960, 27438993, 27438977]
  - Include correct procfs.h (Tomas Jedlicka) [Orabug: 27266725]


author: - <nick.alcock@oracle.com> - 1.0.0-7
changelog:
  - Internal development release.
  - Several latent porting bugs fixed (Kris Van Hees)
  - Make tests used in smoke testsuite rely on sdt less
    (Kris Van Hees)


author: - <nick.alcock@oracle.com> - 1.0.0-8
changelog:
  - Change dtrace_proc_*() public interfaces to take a struct dtrace_proc,
    avoiding lifecycle issues that can cause access to freed memory when
    victims are exec()ing rapidly [Orabug: 27501199]
  - Bump library soname to libdtrace.so.1 [Orabug: 27501199]
  - Improve handling of symbol name->address and address->name lookup
    (Eugene Loh) [Orabug: 27214992]
  - Check array bounds at compile time [Orabug: 27382268]
  - Fix dtrace -S not printing actions other than the first (Tomas Jedlicka)
    [Orabug: 27565023]
  - Drop expensive, unnecessary bad page state checking from testsuite
    [Orabug: 27577555]
  - Handle interruptions in the testsuite runner better [Orabug: 27577593]
  - Consider erratically failing tests in some directories to be passes
  - Test fixes [Orabug: 27583002, 27651838]


author: - <tomas.jedlicka@oracle.com> - 1.0.0-9
changelog:
  - Updated translators to match new kernel redesign of per-task and
    per-process data. [Orabug: 27731759]
  - Enhanced build system to support multiple kernels [Orabug: 27731756]
  - Added pid provider support (Kris Van Hees) [Orabug: 27609459]
  - Adjusted the interpretation of /proc/kallmodsyms for aarch64
    (Eugene Loh) [Orabug: 27214992]


author: - <nick.alcock@oracle.com> - 1.0.1-1
changelog:
  - ARM64 USDT and pid probe support (Kris Van Hees) [Orabug: 27847969]
  - Fix -c option on ARM64 (Kris Van Hees) [Orabug: 27847946]
  - Disable pid provider tests on UEK4.
  - Testsuite fixes [Orabug: 27921244, 27919918]


author: - <nick.alcock@oracle.com> - 1.0.3-1
changelog:
  - Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
  - Fix process-termination-related crash and deadlock bugs
   (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
  - Fix deadlock on creation of new threads in -c/-p processes
    [Orabug: 28210986]
  - Speed up aggmod tests (Eugene Loh, Tomas Jedlicka)
    [Orabug: 28007146, 28119700]


author: - <nick.alcock@oracle.com> - 1.0.4-1
changelog:
  - Properly handle breakpoints tripped while DTrace is exiting
    [Orabug: 28473826]
  - Do not crash on self-grabs and on races with dtrace termination
    [Orabug: 28361373]
  - Test fixes (boost timeouts, kernel 4.17 compatibility,
    unskip a forgotten test).


author: - <nick.alcock@oracle.com> - 1.0.3-1
changelog:
  - Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
  - Fix process-termination-related crash and deadlock bugs
   (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
  - Fix deadlock on creation of new threads in -c/-p processes
    [Orabug: 28210986]
  - Speed up aggmod tests (Eugene Loh, Tomas Jedlicka)
    [Orabug: 28007146, 28119700]

  Thu May 10 2018 - <nick.alcock@oracle.com> - 1.0.2-1
  - Testsuite fixes [Orabug: 27995907]


author: - <nick.alcock@oracle.com> - 1.1.0-1
changelog:
  - Add more DTRACE_PROBE definitions to sdt.h, for SystemTap
    compatibility, and test them (Tomas Jedlicka) [Orabug: 27721525]
  - New ctfpath option, allowing explicit specification of ctf archives
    to use for the running kernel (Tomas Jedlicka) [Orabug: 28178265]
  - Fix memory leaks and minor uninitialized-data bugs [Orabug: 28247636]
  - Add test for SDT argument retrieval from stack, in UEK4QU7
    (Kris Van Hees) [Orabug: 25949088]
  - Remove preallocation from the buffering testsuite (Tomas Jedlicka)
    [Orabug: 27998779]
  - Include the smoketests in make check [Orabug: 28128338]
  - Improve testsuite temporary file creation (Eugene Loh)
    [Orabug: 28142056]
  - Clean up compiler warnings (Eugene Loh) [Orabug: 27934422, 27998779]


author: - <nick.alcock@oracle.com> - 1.1.1-1
changelog:
  - Skip unstable tests, as this is a release branch
  - Boost timeouts on a few tests for VMs on which fork() is slow
  - Mark a few more tests unstable
  - Do not run noresolve tests on UEK4 (Vincent Lim)


author: - <nick.alcock@oracle.com> - 1.2.0-1
changelog:
  - Add pcap(skb, proto) action to support libpcap-based packet capture, with
    formatted output when tshark is installed (Alan Maguire, Nick Alcock)
    [Orabug: 28953618]
  - Fix memory leaks [Orabug: 29036502] [Orabug: 28990529]
  - Translator changes for kernel 4.19 and 4.20-pre compatibility
  - Improve resilience of signal.d generation in later glibc releases
    (Eugene Loh) [Orabug: 28951289]
  - Testsuite: handle systems on which ping6 is in /usr/bin (Eugene Loh)
    [Orabug: 28958357]
  - Testsuite: allow for increased SDT arg count (Kris Van Hees)
    [Orabug: 28217266]


author: - <nick.alcock@oracle.com> - 1.2.1-1
changelog:
  - Fix bug causing DTrace to fail to terminate if a subprocess grabbed with -c
    dies when the pid or usdt providers, ustack() or similar actions are in use
    [Orabug: 29195206]
  - Fix compilation failure with glibc 2.28+ due to makedev() [Orabug: 29196221]
  - Fix testsuite to work with GNU Awk 4.2+'s new plugin system (Eugene Loh)
    [Orabug: 29056323]


author: - <nick.alcock@oracle.com> - 1.2.2-1
changelog:
  - Fix problems with programs compiled with -z separate-code and with recent
    glibc versions [Orabug: 29589029]
  - Support recent Linux kernels (adapt to kallsyms changes in kernel 5.2,
    translator changes for kernels up to 5.6: all later kernels until 5.9 work
    fine with these changes) (Eugene Loh, Nick Alcock) [Orabug: 30149066] 
  - Correct overruns in printf code (David Mc Lean) [Orabug: 30404549]
  - Do not require yum [Orabug: 32196194]


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Darrick J. Wong <darrick.wong@oracle.com> 1.45.4-3.0.1
changelog:
  - Integrate patches from the "upstream" 1.45.4 package.
  - Fix the version number to match Oracle standards.
  - Re-integrate the multiarch build kludge from RH.
  - Enable e2scrub package for OL8 only
  - Start building newer package for UEK6


author: Darrick J. Wong <darrick.wong@oracle.com> 1.45.4-3.0.3
changelog:
  - Fix build scripts to generate i386 builds
  - Re-integrate ext2_types.h multiarch compatibility fixes.


author: Srivathsa Dara <srivathsa.d.dara@oracle.com> - 1.45.4-3.0.7.el7
changelog:
  - libext2fs: add sanity check to extent manipulation (Srivathsa Dara)  [Orabug:
    37095032]  {CVE-2022-1304}


author: EL Errata <el-errata_ww@oracle.com> 02.00.00.3814-1
changelog:
  - BUILDINFO: commit=11e3144b1e32979c131e2bf700afb1471f6dd43e
  - BUILDINFO: commit=70914d11ab2214559dfe5a2d054bd09a1bd370fb
  - Update to 02.00.00.3814


author: Lans Hung <lans.hung@oracle.com> - 4.14.1.5.0.1
changelog:
  - Use the standard, prebuilt package kernel-uek-devel and simulate
    the include paths to replace with need of using kernel-uek-header.
    The purpose is not to build a manual kernel-uek-header hack. [Orabug: 27728602]


author: Lans Hung <lans.hung@oracle.com> - 4.14.1-5.0.2
changelog:
  - Build with kernel-uek-headers to provide __NR_bpf in order to pass BPF selftests [Orabug: 27728602]


author: Lans Hung <lans.hung@oracle.com> - 4.16.0-1.0.5
changelog:
  - Fix rdma: Ignore unknown netlink attributes [Orabug: 29890190]
  - Fix rdma: Fix incorrectly handled NLA validation. (also fixes upstream 74bd75c)


author: Lans Hung <lans.hung@oracle.com> - 5.4.0-1.0.1
changelog:
  - Import rdma: Add "stat show mr" support [Orabug: 30511768]
  - Import rdma: Document MR statistics [Orabug: 30511768]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.304.4.el7uek]
changelog:
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504054]  
  - cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM (Josh Poimboeuf)  [Orabug: 31421904]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31483289]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31483289]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31483289]  
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 31501438]  
  - scsi: mpt3sas: Introduce module parameter to override queue depth (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Fix memset() in non-RDPQ mode (Suganath Prabu S)  [Orabug: 31486216]  
  - scsi: mpt3sas: Fix reply queue count in non RDPQ mode (Suganath Prabu S)  [Orabug: 31486216]  
  - scsi: mpt3sas: Remove unused including <linux/version.h> (Samuel Zou)  [Orabug: 31486216]  
  - scsi: mpt3sas: Fix double free warnings (Suganath Prabu S)  [Orabug: 31486216]  
  - scsi: mpt3sas: Disable DIF when prot_mask set to zero (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Capture IOC data for debugging purposes (Suganath Prabu)  [Orabug: 31486216]  
  - scsi: mpt3sas: Use true, false for ioc->use_32bit_dma (Jason Yan)  [Orabug: 31486216]  
  - scsi: mpt3sas: Remove NULL check before freeing function (Jason Yan)  [Orabug: 31486216]  
  - scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (Suganath Prabu)  [Orabug: 31486216]  
  - scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Suganath Prabu)  [Orabug: 31486216]  
  - scsi: mpt3sas: Separate out RDPQ allocation to new function (Suganath Prabu)  [Orabug: 31486216]  
  - scsi: mpt3sas: Rename function name is_MSB_are_same (Suganath Prabu)  [Orabug: 31486216]  
  - scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Christoph Hellwig)  [Orabug: 31486216]  
  - scsi: mpt3sas: use true,false for bool variables (Jason Yan)  [Orabug: 31486216]  
  - scsi: mpt3sas: Update drive version to 33.100.00.00 (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Remove usage of device_busy counter (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Print function name in which cmd timed out (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Optimize mpt3sas driver logging (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: print in which path firmware fault occurred (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Handle CoreDump state from watchdog thread (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Add support IOCs new state named COREDUMP (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: renamed _base_after_reset_handler function (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Add support for NVMe shutdown (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Update MPI Headers to v02.00.57 (Sreekanth Reddy)  [Orabug: 31486216]  
  - scsi: mpt3sas: Fix double free in attach error handling (Dan Carpenter)  [Orabug: 31486216]  
  - scsi: mpt3sas: change allocation option (Tomas Henzl)  [Orabug: 31486216]  
  - KVM: VMX: check descriptor table exits on instruction emulation (Oliver Upton)  [Orabug: 31397358]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.304.5.el7uek]
changelog:
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493187]  
  - selftests/bpf: do not run test_kmod.sh for UEK5 (Alan Maguire)  [Orabug: 31540213]  
  - bpf: do not allow root to mangle valid pointers (Alexei Starovoitov)  [Orabug: 31540213]  
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515075]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515075]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515075]  
  - p54usb: Fix race between disconnect and firmware loading (Alan Stern)  [Orabug: 31351863]  {CVE-2019-15220} 
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351671]  {CVE-2019-19054} 
  - mm: Fix mremap not considering huge pmd devmap (Fan Yang)  [Orabug: 31452398]  {CVE-2020-10757} {CVE-2020-10757} 
  - tcp: implement coalescing on backlog queue (Eric Dumazet)  [Orabug: 31517079]  
  - tcp: drop dst in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31517079]  
  - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann)  [Orabug: 31517079]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.305.0.el7uek]
changelog:
  - thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564706]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564706]  
  - x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557902]  {CVE-2020-10768} 
  - psi: Fix double free (Tom Hromatka)  [Orabug: 31535640]  
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio/pci: Mask buggy SR-IOV VF INTx support (Alex Williamson)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439670]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Jiang Yi)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio_pci: Enable memory accesses before calling pci_map_rom (Eric Auger)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439670]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439670]  {CVE-2020-12888} 
  - of: unittest: fix memory leak in unittest_data_add (Navid Emamdoost)  [Orabug: 31351701]  {CVE-2019-19049}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.305.1.el7uek]
changelog:
  - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31601132]  
  - libertas: fix a potential NULL pointer dereference (Allen Pais)  [Orabug: 31351822]  {CVE-2019-16232} 
  - ext4: work around deleting a file with i_nlink == 0 safely (Theodore Ts'o)  [Orabug: 31351013]  {CVE-2019-19447}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.305.2.el7uek]
changelog:
  - net-sysfs: call dev_hold if kobject_init_and_add success (YueHaibing)  [Orabug: 31445419]  {CVE-2019-20811} 
  - vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663632]  {CVE-2020-12888} {CVE-2020-12888} 
  - crypto: user - fix memory leak in crypto_report (Navid Emamdoost)  [Orabug: 31351639]  {CVE-2019-19062} 
  - iwlwifi: pcie: fix rb_allocator workqueue allocation (Johannes Berg)  [Orabug: 31351807]  {CVE-2019-16234} 
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666974]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358100]  
  - net: dsa: Do not leave DSA master with NULL netdev_ops (Allen Pais)  [Orabug: 31038233]  
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 30358057]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555628]  
  - CIFS: dump IPC tcon in debug proc file (Aurelien Aptel)  [Orabug: 31500374]  
  - CIFS: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (Aurelien Aptel)  [Orabug: 31500374]  
  - CIFS: make IPC a regular tcon (Aurelien Aptel)  [Orabug: 31500374]  
  - CIFS: don't log STATUS_NOT_FOUND errors for DFS (Aurelien Aptel)  [Orabug: 31500374]  
  - efi: Restrict efivar_ssdt_load when the kernel is locked down (Matthew Garrett)  [Orabug: 31643409]  {CVE-2019-20908} 
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 30646928]  
  - ext4: fix ext4_empty_dir() for directories with holes (Jan Kara)  [Orabug: 31265319]  {CVE-2019-19037} {CVE-2019-19037} 
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631531]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480605]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480605]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480605]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480605]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480605]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.305.3.el7uek]
changelog:
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350638]  {CVE-2020-10732} 
  - PCI: vmd: Filter resource type bits from shadow register (Jon Derrick)  [Orabug: 31674879]  
  - PCI: vmd: Add device id for VMD device 8086:9A0B (Jon Derrick)  [Orabug: 31674879]  
  - PCI: vmd: Fix shadow offsets to reflect spec changes (Jon Derrick)  [Orabug: 31674879]  
  - PCI: vmd: Fix config addressing when using bus offsets (Jon Derrick)  [Orabug: 31674879]  
  - PCI/VMD: Configure MPS settings before adding devices (Jon Derrick)  [Orabug: 31674879]  
  - PCI: vmd: Add an additional VMD device id to driver device id table (Jon Derrick)  [Orabug: 31674879]  
  - PCI: vmd: Add offset to bus numbers if necessary (Jon Derrick)  [Orabug: 31674879]  
  - PCI: vmd: Assign membar addresses from shadow registers (Jon Derrick)  [Orabug: 31674879]  
  - PCI: Add Intel VMD devices to pci ids (Jon Derrick)  [Orabug: 31674879]  
  - misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677099]  
  - kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694369]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.305.4.1.el7uek]
changelog:
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31833178]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31833178]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.304.2.el7uek]
changelog:
  - bpf: fix sanitation of alu op with pointer / scalar type from different paths (Daniel Borkmann)  [Orabug: 31350800]  {CVE-2019-7308} 
  - bpf: prevent out of bounds speculation on pointer arithmetic (Daniel Borkmann)  [Orabug: 31350800]  {CVE-2019-7308} 
  - bpf: restrict unknown scalars of mixed signed bounds for unprivileged (Daniel Borkmann)  [Orabug: 31350800]  {CVE-2019-7308} 
  - bpf: move {prev_,}insn_idx into verifier env (Daniel Borkmann)  [Orabug: 31350800]  {CVE-2019-7308} 
  - bpf: reduce verifier memory consumption (Alexei Starovoitov)  [Orabug: 31350800]  {CVE-2019-7308} 
  - bpf: Prevent memory disambiguation attack (Alexei Starovoitov)  [Orabug: 31350800]  {CVE-2019-7308} 
  - Revert "rds: Do not cancel RDMAs that have been posted to the HCA" (Gerd Rausch)  [Orabug: 31476562]  
  - Revert "rds: Introduce rds_conn_to_path helper" (Gerd Rausch)  [Orabug: 31476562]  
  - Revert "rds: Three cancel fixes" (Gerd Rausch)  [Orabug: 31476551]  
  - scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Chandrakanth Patil)  [Orabug: 31481643]  
  - scsi: megaraid_sas: TM command refire leads to controller firmware crash (Sumit Saxena)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Shivasharan S)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Remove IO buffer hole detection logic (Sumit Saxena)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Limit device queue depth to controller queue depth (Kashyap Desai)  [Orabug: 31481643]  
  - scsi: megaraid: make two symbols static in megaraid_sas_base.c (Jason Yan)  [Orabug: 31481643]  
  - scsi: megaraid: make some symbols static in megaraid_sas_fusion.c (Jason Yan)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31481643]  
  - scsi: megaraid_sas: silence a warning (Tomas Henzl)  [Orabug: 31481643]  
  - scsi: megaraid_sas: fix indentation issue (Colin Ian King)  [Orabug: 31481643]  
  - scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Hannes Reinecke)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Update driver version to 07.713.01.00-rc1 (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Limit the number of retries for the IOCTLs causing firmware fault (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Re-Define enum DCMD_RETURN_STATUS (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Do not set HBA Operational if FW is not in operational state (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Do not kill HBA if JBOD Seqence map or RAID map is disabled (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Do not kill host bus adapter, if adapter is already dead (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Update optimal queue depth for SAS and NVMe devices (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Set no_write_same only for Virtual Disk (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Reset adapter if FW is not in READY state after device resume (Anand Lodnoor)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Make poll_aen_lock static (YueHaibing)  [Orabug: 31481643]  
  - scsi: megaraid_sas: remove unused variables 'debugBlk','fusion' (zhengbin)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Unique names for MSI-X vectors (Chandrakanth Patil)  [Orabug: 31481643]  
  - scsi: megaraid_sas: Make some functions static (YueHaibing)  [Orabug: 31481643]  
  - scsi: megaraid_sas: fix spelling mistake "megarid_sas" -> "megaraid_sas" (Colin Ian King)  [Orabug: 31481643]  
  - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (Tomas Bortoli)  [Orabug: 31351117]  {CVE-2019-19533} 
  - ALSA: core: Fix card races between register and disconnect (Takashi Iwai)  [Orabug: 31351890]  {CVE-2019-15214} 
  - ALSA: info: Fix racy addition/deletion of nodes (Takashi Iwai)  [Orabug: 31351890]  {CVE-2019-15214} 
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31441472]  
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31454846]  
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352781]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352781]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352781]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352781]  {CVE-2020-0543} 
  - netdev, octeon3-ethernet: move timecounter init to network driver probe() (Dave Aldridge)  [Orabug: 31439190]  
  - rds: Three cancel fixes (Håkon Bugge)  [Orabug: 31463014]  
  - can: peak_usb: fix slab info leak (Johan Hovold)  [Orabug: 31351139]  {CVE-2019-19534} 
  - uek-rpm: use expand macro with kernel_reqprovconf (Dave Kleikamp)  [Orabug: 31454052]  
  - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351248]  {CVE-2019-19536} 
  - net/mlx5: Decrease default mr cache size (Artemy Kovalyov)  [Orabug: 31410596]  
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31245660]  
  - netlabel: cope with NULL catmap (Paolo Abeni)  [Orabug: 31350492]  {CVE-2020-10711} 
  - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350516]  {CVE-2020-12654} 
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)  [Orabug: 31350698]  {CVE-2020-12770} 
  - block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Zhiqiang Liu)  [Orabug: 31350912]  {CVE-2020-12657} 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350931]  {CVE-2020-12653} 
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350965]  {CVE-2020-12464}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.0.el7uek]
changelog:
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688622]  
  - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351220]  {CVE-2019-19535} 
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737044]  
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705120]  {CVE-2020-14331} {CVE-2020-14331} 
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31602420]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31602420]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698084]  {CVE-2020-16166} 
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31557804]  {CVE-2020-10767} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31510724]  {CVE-2020-10781} 
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723449]  
  - bonding: Force slave speed check after link state recovery for 802.3ad (Thomas Falcon)  [Orabug: 31730609]  
  - bonding/802.3ad: fix slave link initialization transition states (Jarod Wilson)  [Orabug: 31730609]  
  - bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson)  [Orabug: 31730609]  
  - bonding: speed/duplex update at NETDEV_UP event (Mahesh Bandewar)  [Orabug: 31730609]  
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718164]  
  - net/rds: rds_ib_remove_one() should not call rds_ib_dev_free_dev() (Ka-Cheong Poon)  [Orabug: 31718164]  
  - KVM: nVMX: include conditional controls in /dev/kvm KVM_GET_MSRS (Paolo Bonzini)  [Orabug: 31699256]  
  - KVM: x86: introduce is_pae_paging (Paolo Bonzini)  [Orabug: 31699256]  
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439368]  {CVE-2020-10751} 
  - af_packet: set defaule value for tmo (Mao Wenan)  [Orabug: 31439106]  {CVE-2019-20812} 
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380494]  
  - fix kABI breakage from "netns: provide pure entropy for net_hash_mix()" (Dan Duval)  [Orabug: 31351903]  {CVE-2019-10638} {CVE-2019-10639} 
  - netns: provide pure entropy for net_hash_mix() (Eric Dumazet)  [Orabug: 31351903]  {CVE-2019-10638} {CVE-2019-10639} 
  - media: usb: siano: Fix general protection fault in smsusb (Alan Stern)  [Orabug: 31351873]  {CVE-2019-15218} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 31351799]  {CVE-2019-17133} 
  - can: gs_usb: gs_can_open(): prevent memory leak (Navid Emamdoost)  [Orabug: 31351681]  {CVE-2019-19052} 
  - rtlwifi: prevent memory leak in rtl_usb_probe (Navid Emamdoost)  [Orabug: 31351625]  {CVE-2019-19063} 
  - scsi: bfa: release allocated memory in case of error (Navid Emamdoost)  [Orabug: 31351613]  {CVE-2019-19066} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351571]  {CVE-2019-19073} 
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351558]  {CVE-2019-19074} 
  - ath10k: fix memory leak (Navid Emamdoost)  [Orabug: 31351531]  {CVE-2019-19078} 
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)  [Orabug: 31350645]  {CVE-2020-12771} 
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31513037]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31513037]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.1.el7uek]
changelog:
  - net/mlx5e: Poll event queue upon TX timeout before performing full channels recovery (Eran Ben Elisha)  [Orabug: 31753102]  
  - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers)  [Orabug: 31535528]  {CVE-2020-10769} 
  - mac80211: Do not send Layer 2 Update frame before authorization (Jouni Malinen)  [Orabug: 31473651]  {CVE-2019-5108} 
  - cfg80211/mac80211: make ieee80211_send_layer2_update a public function (Dedy Lansky)  [Orabug: 31473651]  {CVE-2019-5108} 
  - sunrpc: use-after-free in svc_process_common() (Vasily Averin)  [Orabug: 31351994]  {CVE-2018-16884} 
  - sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin)  [Orabug: 31351994]  {CVE-2018-16884} 
  - RDMA/cxgb4: Do not dma memory off of the stack (Greg KH)  [Orabug: 31351782]  {CVE-2019-17075} 
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31351745]  {CVE-2019-18885} 
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 31350975]  {CVE-2020-12114} {CVE-2020-12114} 
  - kernel/sysctl.c: fix out-of-bounds access when setting file-max (Will Deacon)  [Orabug: 31350719]  {CVE-2019-14898} 
  - sysctl: handle overflow for file-max (Christian Brauner)  [Orabug: 31350719]  {CVE-2019-14898} 
  - nl80211: validate beacon head (Johannes Berg)  [Orabug: 30785180]  {CVE-2019-16746} 
  - cfg80211: Use const more consistently in for_each_element macros (Jouni Malinen)  [Orabug: 30785180]  {CVE-2019-16746} 
  - cfg80211: add and use strongly typed element iteration macros (Johannes Berg)  [Orabug: 30785180]  {CVE-2019-16746} 
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755755]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.el7uek]
changelog:
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783150]  
  - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Dave Chiluk)  [Orabug: 31350999]  {CVE-2019-19922} 
  - sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld)  [Orabug: 31350999]  {CVE-2019-19922} 
  - sched/fair: Fix bandwidth timer clock drift condition (Xunlei Pang)  [Orabug: 31350999]  {CVE-2019-19922} 
  - btrfs: tree-checker: Verify block_group_item (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: tree-check: reduce stack consumption in check_dir_item (David Sterba)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: tree-checker: use %zu format string for size_t (Arnd Bergmann)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: tree-checker: Add checker for dir item (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: tree-checker: Fix false panic for sanity test (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: tree-checker: Enhance btrfs_check_node output (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: Move leaf and node validation checker to tree-checker.c (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: Add checker for EXTENT_CSUM (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: Add sanity check for EXTENT_DATA when reading out leaf (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: Check if item pointer overlaps with the item itself (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - btrfs: Refactor check_leaf function for later expansion (Qu Wenruo)  [Orabug: 31351986]  {CVE-2018-14613} 
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784659]  
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779888]  {CVE-2020-24394} 
  - Reverts "rds: avoid unnecessary cong_update in loop transport" (Iraimani Pavadai)  [Orabug: 31741325]  
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31351959]  {CVE-2019-3874} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 31351949]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351949]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351949]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 31351949]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 31351949]  {CVE-2019-3900} 
  - repair kABI breakage from "fs: prevent page refcount overflow in pipe_buf_get" (Dan Duval)  [Orabug: 31351940]  {CVE-2019-11487} 
  - fs: prevent page refcount overflow in pipe_buf_get (Matthew Wilcox)  [Orabug: 31351940]  {CVE-2019-11487} 
  - mm: add 'try_get_page()' helper function (Linus Torvalds)  [Orabug: 31351940]  {CVE-2019-11487} 
  - mm: prevent get_user_pages() from overflowing page refcount (Linus Torvalds)  [Orabug: 31351940]  {CVE-2019-11487} 
  - mm: make page ref count overflow check tighter and more explicit (Linus Torvalds)  [Orabug: 31351940]  {CVE-2019-11487} 
  - tracing: Fix buffer_ref pipe ops (Jann Horn)  [Orabug: 31351940]  {CVE-2019-11487} 
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784892]  
  - net/rds: rds_ib_remove_one() needs to wait (Ka-Cheong Poon)  [Orabug: 31794612]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31793663]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.2.el7uek]
changelog:
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32133619]  
  - IB/ipoib: Arm "send_cq" to process completions in due time (Gerd Rausch)  [Orabug: 31596799]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31682347]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32133646]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32133638]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.3.el7uek]
changelog:
  - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy)  [Orabug: 32754857]  
  - IB/mlx5: Use fragmented QP's buffer for in-kernel users (Guy Levi)  [Orabug: 32753250]  
  - net/mlx5: Refactor fragmented buffer struct fields and init flow (Tariq Toukan)  [Orabug: 32753250]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.4.el7uek]
changelog:
  - IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751655]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.6.el7uek]
changelog:
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32974200]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863586]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863586]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982354]  
  - block-mq: fix kabi error (Junxiao Bi)  [Orabug: 32973915]  
  - blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32973915]  
  - blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 32973915]  
  - blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 32973915]  
  - blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32973915]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.8.el7uek]
changelog:
  - rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Håkon Bugge)  [Orabug: 33092942]  
  - KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins)  [Orabug: 33089241]  
  - KVM: Fix leak vCPU's VMCS value into other pCPU (Wanpeng Li)  [Orabug: 33089241]  
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 33051925]  
  - IB/cma: Introduce rdma_set_min_rnr_timer() (Håkon Bugge)  [Orabug: 33051925]  
  - IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge)  [Orabug: 33051922]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.9.el7uek]
changelog:
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33177345]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33177343]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177351]  
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33177342]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-1902.306.2.10.el7uek]
changelog:
  - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33204887]  
  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi)  [Orabug: 33205375]  
  - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi)  [Orabug: 33205375]  
  - mm: soft-offline: close the race against page allocation (Naoya Horiguchi)  [Orabug: 33205375]  
  - mm: fix race on soft-offlining free huge pages (Naoya Horiguchi)  [Orabug: 33205375]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-1902.306.2.11.el7uek]
changelog:
  - IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33134288]  
  - IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33134288]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-1902.306.2.13.el7uek]
changelog:
  - xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33542388]  
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong)  [Orabug: 33542388]  
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong)  [Orabug: 33542388]  
  - xfs: flush removing page cache in xfs_reflink_remap_prep (Dave Chinner)  [Orabug: 33542388]  
  - xfs: fix shared extent data corruption due to missing cow reservation (Brian Foster)  [Orabug: 33542388]  
  - xfs: fix pagecache truncation prior to reflink (Darrick J. Wong)  [Orabug: 33542388]  
  - xfs: fix fork selection in xfs_find_trim_cow_extent (Christoph Hellwig)  [Orabug: 33542388]  
  - xfs: remove the unused trimmed argument from xfs_reflink_trim_around_shared (Christoph Hellwig)  [Orabug: 33542388]  
  - xfs: skip delalloc COW blocks in xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33542388]  
  - xfs: fix transaction leak in xfs_reflink_allocate_cow() (Dave Chinner)  [Orabug: 33542388]  
  - xfs: cow unwritten conversion uses uninitialized dfops (Brian Foster)  [Orabug: 33542388]  
  - xfs: fix double ijoin in xfs_reflink_clear_inode_flag() (Dave Chinner)  [Orabug: 33542388]  
  - xfs: fix double ijoin in xfs_reflink_cancel_cow_range (Dave Chinner)  [Orabug: 33542388]  
  - xfs: minor cleanup for xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33542388]  
  - xfs: fix transaction allocation deadlock in IO path (Dave Chinner)  [Orabug: 33542388]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-1902.306.2.14.el7uek]
changelog:
  - xfs: force the log offline when log intent item recovery fails (Darrick J. Wong)  [Orabug: 33801132]  
  - xfs: cancel intents immediately if process_intents fails (Darrick J. Wong)  [Orabug: 33801132]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2022.uek]
changelog:
  - Linux 4.14.182 (Greg Kroah-Hartman)   
  - iio: adc: stm32-adc: fix device used to request dma (Fabrice Gasnier)   
  - iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi)   
  - x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (Josh Poimboeuf)   
  - rxrpc: Fix a memory leak in rxkad_verify_response() (Qiushi Wu)   
  - rapidio: fix an error in get_user_pages_fast() error handling (John Hubbard)   
  - mei: release me_cl object reference (Alexander Usyskin)   
  - iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (Christophe JAILLET)   
  - iio: sca3000: Remove an erroneous 'get_device()' (Christophe JAILLET)   
  - staging: greybus: Fix uninitialized scalar variable (Oscar Carter)   
  - staging: iio: ad2s1210: Fix SPI reading (Dragos Bogdan)   
  - Revert "gfs2: Don't demote a glock until its revokes are written" (Bob Peterson)   
  - cxgb4/cxgb4vf: Fix mac_hlist initialization and free (Arjun Vynipadath)   
  - cxgb4: free mac_hlist properly (Arjun Vynipadath)   
  - media: fdp1: Fix R-Car M3-N naming in debug message (Geert Uytterhoeven)   
  - ubsan: build ubsan.c more conservatively (Arnd Bergmann)   
  - x86/uaccess, ubsan: Fix UBSAN vs. SMAP (Peter Zijlstra)   
  - powerpc/64s: Disable STRICT_KERNEL_RWX (Michael Ellerman)   
  - powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE (Russell Currey)   
  - powerpc: restore alphabetic order in Kconfig (Christophe Leroy)   
  - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (Christophe JAILLET)   
  - apparmor: Fix aa_label refcnt leak in policy_update (Xiyu Yang)   
  - ALSA: pcm: fix incorrect hw_base increase (Brent Lu)   
  - ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (Scott Bahling)   
  - l2tp: initialise PPP sessions before registering them (Guillaume Nault)   
  - l2tp: protect sock pointer of struct pppol2tp_session with RCU (Guillaume Nault)   
  - l2tp: initialise l2tp_eth sessions before registering them (Guillaume Nault)   
  - l2tp: don't register sessions in l2tp_session_create() (Guillaume Nault)   
  - arm64: fix the flush_icache_range arguments in machine_kexec (Christoph Hellwig)   
  - padata: purge get_cpu and reorder_via_wq from padata_do_serial (Daniel Jordan)   
  - padata: initialize pd->cpu with effective cpumask (Daniel Jordan)   
  - padata: Replace delayed timer with immediate workqueue in padata_reorder (Herbert Xu)   
  - padata: set cpu_index of unused CPUs to -1 (Mathias Krause)   
  - ARM: futex: Address build warning (Thomas Gleixner)   
  - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (Hans de Goede)   
  - USB: core: Fix misleading driver bug report (Alan Stern)   
  - ceph: fix double unlock in handle_cap_export() (Wu Bo)   
  - gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp() (Yoshiyuki Kurauchi)   
  - x86/apic: Move TSC deadline timer debug printk (Thomas Gleixner)   
  - scsi: ibmvscsi: Fix WARN_ON during event pool release (Tyrel Datwyler)   
  - component: Silence bind error on -EPROBE_DEFER (James Hilliard)   
  - vhost/vsock: fix packet delivery order to monitoring devices (Stefano Garzarella)   
  - configfs: fix config_item refcnt leak in configfs_rmdir() (Xiyu Yang)   
  - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (Arun Easi)   
  - HID: multitouch: add eGalaxTouch P80H84 support (Sebastian Reichel)   
  - gcc-common.h: Update for GCC 10 (Frédéric Pierret (fepitre))   
  - ubi: Fix seq_file usage in detailed_erase_block_info debugfs file (Richard Weinberger)   
  - i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (Christophe JAILLET)   
  - iommu/amd: Fix over-read of ACPI UID from IVRS table (Alexander Monakov)   
  - fix multiplication overflow in copy_fdtable() (Al Viro)   
  - ima: Fix return value of ima_write_policy() (Roberto Sassu)   
  - evm: Check also if *tfm is an error pointer in init_desc() (Roberto Sassu)   
  - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() (Roberto Sassu)   
  - padata: ensure padata_do_serial() runs on the correct CPU (Mathias Krause)   
  - padata: ensure the reorder timer callback runs on the correct CPU (Mathias Krause)   
  - i2c: dev: Fix the race between the release of i2c_dev and cdev (Kevin Hao)   
  - watchdog: Fix the race between the release of watchdog_core_data and cdev (Kevin Hao)   
  - ext4: add cond_resched() to ext4_protect_reserved_inode (Shijie Luo)   
  - Linux 4.14.181 (Greg Kroah-Hartman)   
  - Makefile: disallow data races on gcc-10 as well (Sergei Trofimovich)   
  - KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (Jim Mattson)   
  - ARM: dts: r8a7740: Add missing extal2 to CPG node (Geert Uytterhoeven)   
  - ARM: dts: r8a73a4: Add missing CMT1 interrupts (Geert Uytterhoeven)   
  - arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy (Chen-Yu Tsai)   
  - arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards (Chen-Yu Tsai)   
  - Revert "ALSA: hda/realtek: Fix pop noise on ALC225" (Kai-Heng Feng)   
  - usb: gadget: legacy: fix error return code in cdc_bind() (Wei Yongjun)   
  - usb: gadget: legacy: fix error return code in gncm_bind() (Wei Yongjun)   
  - usb: gadget: audio: Fix a missing error return value in audio_bind() (Christophe JAILLET)   
  - usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (Christophe JAILLET)   
  - clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks (Justin Swartz)   
  - exec: Move would_dump into flush_old_exec (Eric W. Biederman)   
  - x86/unwind/orc: Fix error handling in __unwind_start() (Josh Poimboeuf)   
  - usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (Sriharsha Allenki)   
  - USB: gadget: fix illegal array access in binding with UDC (Kyungtae Kim)   
  - usb: host: xhci-plat: keep runtime active when removing host (Li Jun)   
  - usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B (Eugeniu Rosca)   
  - ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (Jesus Ramos)   
  - x86: Fix early boot crash on gcc-10, third try (Borislav Petkov)   
  - ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries (Fabio Estevam)   
  - ARM: dts: dra7: Fix bus_dma_limit for PCIe (Kishon Vijay Abraham I)   
  - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (Takashi Iwai)   
  - ALSA: rawmidi: Initialize allocated buffers (Takashi Iwai)   
  - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (Takashi Iwai)   
  - net: tcp: fix rx timestamp behavior for tcp_recvmsg (Kelly Littlepage)   
  - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (Zefan Li)   
  - net: ipv4: really enforce backoff for redirects (Paolo Abeni)   
  - net: dsa: loop: Add module soft dependency (Florian Fainelli)   
  - hinic: fix a bug of ndo_stop (Luo bin)   
  - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" (Maciej Żenczykowski)   
  - net: phy: fix aneg restart in phy_ethtool_set_eee (Heiner Kallweit)   
  - netlabel: cope with NULL catmap (Paolo Abeni)   
  - net: fix a potential recursive NETDEV_FEAT_CHANGE (Cong Wang)   
  - net: phy: micrel: Use strlcpy() for ethtool::get_strings (Florian Fainelli)   
  - x86/asm: Add instruction suffixes to bitops (Jan Beulich)   
  - gcc-10: avoid shadowing standard library 'free()' in crypto (Linus Torvalds)   
  - gcc-10: disable 'restrict' warning for now (Linus Torvalds)   
  - gcc-10: disable 'stringop-overflow' warning for now (Linus Torvalds)   
  - gcc-10: disable 'array-bounds' warning for now (Linus Torvalds)   
  - gcc-10: disable 'zero-length-bounds' warning for now (Linus Torvalds)   
  - Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds)   
  - kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig (Masahiro Yamada)   
  - pnp: Use list_for_each_entry() instead of open coding (Jason Gunthorpe)   
  - hwmon: (da9052) Synchronize access with mfd (Samu Nuutamo)   
  - IB/mlx4: Test return value of calls to ib_get_cached_pkey (Jack Morgenstein)   
  - netfilter: conntrack: avoid gcc-10 zero-length-bounds warning (Arnd Bergmann)   
  - i40iw: Fix error handling in i40iw_manage_arp_cache() (Dan Carpenter)   
  - pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (Grace Kao)   
  - pinctrl: baytrail: Enable pin configuration setting for GPIO chip (Andy Shevchenko)   
  - x86/entry/64: Fix unwind hints in register clearing code (Josh Poimboeuf)   
  - ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (Kai-Heng Feng)   
  - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index (Vasily Averin)   
  - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper() (Vasily Averin)   
  - ALSA: hda/hdmi: fix race in monitor detection during probe (Kai Vehmanen)   
  - cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once (Chris Wilson)   
  - dmaengine: mmp_tdma: Reset channel error on release (Lubomir Rintel)   
  - dmaengine: pch_dma.c: Avoid data race between probe and irq handler (Madhuparna Bhowmik)   
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)   
  - virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi)   
  - drop_monitor: work around gcc-10 stringop-overflow warning (Arnd Bergmann)   
  - net: moxa: Fix a potential double 'free_irq()' (Christophe JAILLET)   
  - net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()' (Christophe JAILLET)   
  - shmem: fix possible deadlocks on shmlock_user_lock (Hugh Dickins)   
  - net: stmmac: Use mutex instead of spinlock (Thierry Reding)   
  - f2fs: fix to avoid memory leakage in f2fs_listxattr (Randall Huang)   
  - f2fs: fix to avoid accessing xattr across the boundary (Randall Huang)   
  - f2fs: sanity check of xattr entry size (Jaegeuk Kim)   
  - f2fs: introduce read_xattr_block (Chao Yu)   
  - f2fs: introduce read_inline_xattr (Chao Yu)   
  - blktrace: fix dereference after null check (Cengiz Can)   
  - blktrace: fix trace mutex deadlock (Jens Axboe)   
  - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (Sabrina Dubroca)   
  - net: ipv6: add net argument to ip6_dst_lookup_flow (Sabrina Dubroca)   
  - scripts/decodecode: fix trapping instruction formatting (Ivan Delalande)   
  - objtool: Fix stack offset tracking for indirect CFAs (Josh Poimboeuf)   
  - netfilter: nat: never update the UDP checksum when it's 0 (Guillaume Nault)   
  - x86/unwind/orc: Fix error path for bad ORC entry type (Josh Poimboeuf)   
  - x86/unwind/orc: Prevent unwinding before ORC initialization (Josh Poimboeuf)   
  - x86/unwind/orc: Don't skip the first frame for inactive tasks (Miroslav Benes)   
  - x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (Jann Horn)   
  - x86/entry/64: Fix unwind hints in kernel exit path (Josh Poimboeuf)   
  - batman-adv: Fix refcnt leak in batadv_v_ogm_process (Xiyu Yang)   
  - batman-adv: Fix refcnt leak in batadv_store_throughput_override (Xiyu Yang)   
  - batman-adv: Fix refcnt leak in batadv_show_throughput_override (Xiyu Yang)   
  - batman-adv: fix batadv_nc_random_weight_tq (George Spelvin)   
  - coredump: fix crash when umh is disabled (Luis Chamberlain)   
  - mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (David Hildenbrand)   
  - KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER (Marc Zyngier)   
  - tracing: Add a vmalloc_sync_mappings() for safe measure (Steven Rostedt (VMware))   
  - USB: serial: garmin_gps: add sanity checking for data length (Oliver Neukum)   
  - USB: uas: add quirk for LaCie 2Big Quadra (Oliver Neukum)   
  - HID: usbhid: Fix race between usbhid_close() and usbhid_stop() (Alan Stern)   
  - geneve: only configure or fill UDP_ZERO_CSUM6_RX/TX info when CONFIG_IPV6 (Hangbin Liu)   
  - HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (Jason Gerecke)   
  - ipv6: fix cleanup ordering for ip6_mr failure (Sabrina Dubroca)   
  - net: stricter validation of untrusted gso packets (Willem de Bruijn)   
  - bnxt_en: Fix VF anti-spoof filter setup. (Michael Chan)   
  - bnxt_en: Improve AER slot reset. (Michael Chan)   
  - net/mlx5: Fix command entry leak in Internal Error State (Moshe Shemesh)   
  - net/mlx5: Fix forced completion access non initialized command entry (Moshe Shemesh)   
  - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). (Michael Chan)   
  - sch_sfq: validate silly quantum values (Eric Dumazet)   
  - sch_choke: avoid potential panic in choke_reset() (Eric Dumazet)   
  - net: usb: qmi_wwan: add support for DW5816e (Matt Jolly)   
  - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (Tariq Toukan)   
  - net: macsec: preserve ingress frame ordering (Scott Dial)   
  - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (Eric Dumazet)   
  - dp83640: reverse arguments to list_add_tail (Julia Lawall)   
  - USB: serial: qcserial: Add DW5816e support (Matt Jolly)   
  - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin)  [Orabug: 31350921]  {CVE-2020-12655} 
  - rds: Do not cancel RDMAs that have been posted to the HCA (Håkon Bugge)  [Orabug: 31412731]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31412731]  
  - bnxt_en: Fix accumulation of bp->net_stats_prev. (Vijayendra Suman)  [Orabug: 31390688]  
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380493]  
  - nfs: initiate returning delegation when reclaiming one that's been recalled (Jeff Layton)  [Orabug: 31378833]  
  - NFS: More excessive attribute revalidation in nfs_execute_ok() (Trond Myklebust)  [Orabug: 31378833]  
  - uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp)  [Orabug: 31373693]  
  - uek-rpm: Add config-mips64-embedded-kdump (Henry Willard)  [Orabug: 31373693]  
  - uek-rpm: Don't build kernel-uek-tools or perf packages for mips64 (Dave Kleikamp)  [Orabug: 31373693]  
  - A/A Bonding: No need to call flush rdmaip_wq in rdmaip_cleanup() (Ka-Cheong Poon)  [Orabug: 30862932]  
  - net/rds: suppress memory allocation failure reports (Manjunath Patil)  [Orabug: 31398438]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2024.uek]
changelog:
  - scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Chandrakanth Patil)  [Orabug: 31454512]  
  - scsi: megaraid_sas: TM command refire leads to controller firmware crash (Sumit Saxena)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Shivasharan S)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Remove IO buffer hole detection logic (Sumit Saxena)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Limit device queue depth to controller queue depth (Kashyap Desai)  [Orabug: 31454512]  
  - scsi: megaraid: make two symbols static in megaraid_sas_base.c (Jason Yan)  [Orabug: 31454512]  
  - scsi: megaraid: make some symbols static in megaraid_sas_fusion.c (Jason Yan)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31454512]  
  - scsi: megaraid_sas: silence a warning (Tomas Henzl)  [Orabug: 31454512]  
  - scsi: megaraid_sas: fix indentation issue (Colin Ian King)  [Orabug: 31454512]  
  - scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Hannes Reinecke)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Update driver version to 07.713.01.00-rc1 (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Limit the number of retries for the IOCTLs causing firmware fault (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Re-Define enum DCMD_RETURN_STATUS (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Do not set HBA Operational if FW is not in operational state (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Do not kill HBA if JBOD Seqence map or RAID map is disabled (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Do not kill host bus adapter, if adapter is already dead (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Update optimal queue depth for SAS and NVMe devices (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Set no_write_same only for Virtual Disk (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Reset adapter if FW is not in READY state after device resume (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Make poll_aen_lock static (YueHaibing)  [Orabug: 31454512]  
  - scsi: megaraid_sas: remove unused variables 'debugBlk','fusion' (zhengbin)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Unique names for MSI-X vectors (Chandrakanth Patil)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Make some functions static (YueHaibing)  [Orabug: 31454512]  
  - scsi: megaraid_sas: fix spelling mistake "megarid_sas" -> "megaraid_sas" (Colin Ian King)  [Orabug: 31454512]  
  - mm: change return type to vm_fault_t (Souptick Joarder)  [Orabug: 30651584]  
  - Revert "mm: change return type to vm_fault_t" (John Donnelly)  [Orabug: 30651584]  
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31473001]  
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - netdev, octeon3-ethernet: move timecounter init to network driver probe() (Dave Aldridge)  [Orabug: 31439218]  
  - rds: Three cancel fixes (Håkon Bugge)  [Orabug: 31463013]  
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31454845]  
  - Fix KABI breakage (Thomas Tai)  [Orabug: 31318631]  
  - uek-rpm: Enable CONFIG_PCIE_DPC and CONFIG_PCIE_EDR (Thomas Tai)  [Orabug: 31318631]  
  - PCI/DPC: Add Error Disconnect Recover (EDR) support (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/ERR: Return status of pcie_do_recovery() (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/ERR: Remove service dependency in pcie_do_recovery() (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/ERR: Simplify broadcast callouts (Keith Busch)  [Orabug: 31318631]  
  - PCI/ERR: Run error recovery callbacks for all affected devices (Keith Busch)  [Orabug: 31318631]  
  - ACPICA: ACPI 6.3: add Error Disconnect Recover Notification value (Erik Schmauss)  [Orabug: 31318631]  
  - PCI/DPC: Expose dpc_process_error(), dpc_reset_link() for use by EDR (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/AER: Add pci_aer_raw_clear_status() to unconditionally clear Error Status (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/AER: Save AER Capability for suspend/resume (Patel, Mayurkumar)  [Orabug: 31318631]  
  - PCI/AER: Refactor error injection fallbacks (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Abstract AER interrupt handling (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Reuse existing pcie_port_find_device() interface (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Cache DPC capabilities in pci_init_capabilities() (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/DPC: Move DPC data into struct pci_dev (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Add "pcie_ports=dpc-native" to allow DPC without AER control (Olof Johansson)  [Orabug: 31318631]  
  - PCI/DPC: Log messages with pci_dev, not pcie_device (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/DPC: Fix print AER status in DPC event handling (Dongdong Liu)  [Orabug: 31318631]  
  - PCI: Make link active reporting detection generic (Keith Busch)  [Orabug: 31318631]  
  - PCI/ERR: Handle fatal error recovery (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use managed resource allocations (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use threaded IRQ for bottom half (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use kfifo_in_spinlocked() to insert locked elements (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use kfifo for tracking events instead of reimplementing it (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove error source from AER struct aer_rpc (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove unused aer_error_resume() (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove duplicate PCI_EXP_AER_FLAGS definition (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Work around use-after-free in pcie_do_fatal_recovery() (Thomas Tai)  [Orabug: 31318631]  
  - PCI: Simplify disconnected marking (Lukas Wunner)  [Orabug: 31318631]  
  - PCI: hotplug: Drop checking of PCI_BRIDGE_CONTROL in *_unconfigure_device() (Mika Westerberg)  [Orabug: 31318631]  
  - PCI: pciehp: Fix race condition handling surprise link down (Mika Westerberg)  [Orabug: 31318631]  
  - PCI: Add for_each_pci_bridge() helper (Andy Shevchenko)  [Orabug: 31318631]  
  - PCI/ERR: Use slot reset if available (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Don't read upstream ports below fatal errors (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Take reference on error devices (Keith Busch)  [Orabug: 31318631]  
  - PCI: Hide pci_reset_bridge_secondary_bus() from drivers (Sinan Kaya)  [Orabug: 31318631]  
  - PCI: Handle error return from pci_reset_bridge_secondary_bus() (Sinan Kaya)  [Orabug: 31318631]  
  - PCI: Add a return type for pci_reset_bridge_secondary_bus() (Sinan Kaya)  [Orabug: 31318631]  
  - PCI: pciehp: Convert timers to use timer_setup() (Kees Cook)  [Orabug: 31318631]  
  - PCI/portdrv: Remove pcie_portdrv_err_handler.slot_reset (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Don't clear AER bits if error handling is Firmware-First (Alexandru Gagniuc)  [Orabug: 31318631]  
  - PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Clear device status bits during ERR_COR handling (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Factor out ERR_NONFATAL status bit clearing (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Save and restore config state (Keith Busch)  [Orabug: 31318631]  
  - PCI: Restore resized BAR state on resume (Christian König)  [Orabug: 31318631]  
  - PCI: portdrv: Initialize service drivers directly (Keith Busch)  [Orabug: 31318631]  
  - PCI: Add resizable BAR infrastructure (Christian König)  [Orabug: 31318631]  
  - PCI/AER: Honor "pcie_ports=native" even if HEST sets FIRMWARE_FIRST (Alexandru Gagniuc)  [Orabug: 31318631]  
  - PCI/AER: Add sysfs attributes for rootport cumulative stats (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Add sysfs attributes to provide AER stats and breakdown (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Define aer_stats structure for AER capable devices (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Adopt lspci names for AER error decoding (Tyler Baicar)  [Orabug: 31318631]  
  - PCI/AER: Move internal declarations to drivers/pci/pci.h (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Expose internal API for obtaining AER information (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Remove indirection waiting for inactive link (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Use threaded IRQ for bottom half handling (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Print AER status in DPC event handling (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Remove rp_pio_status from dpc struct (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Defer event handling to work queue (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Leave interrupts enabled while handling event (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use "PCI Express" consistently in Kconfig text (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Hoist aerdrv.c, aer_inject.c up to drivers/pci/pcie/ (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash Kconfig.debug into Kconfig (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Move private AER things to aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Move aer_irq() declaration to portdrv.h (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Remove duplicate pcie_port_bus_type declaration (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash ecrc.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash aerdrv_acpi.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash aerdrv_errprint.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash aerdrv_core.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Reorder code to group probe/remove stuff together (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Remove forward declarations (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Remove aer_recover_work_func() forward declaration (Borislav Petkov)  [Orabug: 31318631]  
  - PCI/AER: Decode Error Source Requester ID (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Move pcie_aer_get_firmware_first() to portdrv.h (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Use the generic pcie_do_fatal_recovery() path (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Pass service type to pcie_do_fatal_recovery() (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/portdrv: Add generic pcie_port_find_device() (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/portdrv: Add generic pcie_port_find_service() (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Factor out error reporting to drivers/pci/pcie/err.c (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Rename error recovery interfaces to generic PCI naming (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Handle ERR_FATAL with removal and re-enumeration of devices (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Add TLP header information to tracepoint (Thomas Tai)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unused pcie_port_acpi_setup() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Unify error bit printing for native and CPER reporting (Alexandru Gagniuc)  [Orabug: 31318631]  
  - PCI: Add wrappers for dev_printk() (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/AER: Replace struct pcie_device with pci_dev (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove unused parameters (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Disable ERR_NONFATAL handling by DPC (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI: Add generic pcie_wait_for_link() interface (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/ASPM: Unexport internal ASPM interfaces (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Clear interrupt status in interrupt handler top half (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/DPC: Rename from pcie-dpc.c to dpc.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Do not enable DPC if AER control is not allowed by the BIOS (Mika Westerberg)  [Orabug: 31318631]  
  - PCI/AER: Use cached AER Capability offset (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/portdrv: Rename and reverse sense of pcie_ports_auto (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Encapsulate pcie_ports_auto inside the port driver (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unnecessary "pcie_ports=auto" parameter (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove "pcie_hp=nomsi" kernel parameter (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unnecessary include of <linux/pci-aspm.h> (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Simplify PCIe feature permission checking (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unused PCIE_PORT_SERVICE_VC (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove pcie_port_bus_type link order dependency (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Merge pcieport_if.h into portdrv.h (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Disable port driver in compat mode (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/PM: Move pcie_clear_root_pme_status() to core (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Move pcieport_if.h to drivers/pci/pcie/ (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/AER: Move pci_uevent_ers() out of pci.h (Michael Ellerman)  [Orabug: 31318631]  
  - PCI: Add SPDX GPL-2.0 to replace COPYING boilerplate (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Squash dpc_rp_pio_get_info() into dpc_process_rp_pio_error() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Remove unnecessary RP PIO register structs (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Push dpc->rp_pio_status assignment into dpc_rp_pio_get_info() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Squash dpc_rp_pio_print_error() into dpc_rp_pio_get_info() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Make RP PIO log size check more generic (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Rename local "status" to "dpc_status" (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Squash dpc_rp_pio_print_tlp_header() into dpc_rp_pio_print_error() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Process RP PIO details only if RP PIO extensions supported (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Read RP PIO Log Size once at probe (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Rename struct dpc_dev.rp to rp_extensions (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Add local variable for DPC capability offset (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Rename interrupt_event_handler() to dpc_work() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Enable DPC only if AER is available (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Fix interrupt message number print (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Reformat DPC register definitions (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Add and use DPC Status register field definitions (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Add uevents in AER and EEH error/resume (Bryant G. Ly)  [Orabug: 31318631]  
  - PCI/AER: Return error if AER is not supported (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Fix shared interrupt handling (Alex Williamson)  [Orabug: 31318631]  
  - PCI/portdrv: Turn off PCIe services during shutdown (Sinan Kaya)  [Orabug: 31318631]  
  - PCI/portdrv: Compute MSI/MSI-X IRQ vectors after final allocation (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Factor out Interrupt Message Number lookup (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Consolidate comments (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (Dongdong Liu)  [Orabug: 31318631]  
  - PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Tyler Baicar)  [Orabug: 31318631]  
  - uek-rpm: use expand macro with kernel_reqprovconf (Dave Kleikamp)  [Orabug: 31454071]  
  - scsi: mpt3sas: Introduce module parameter to override queue depth (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix memset() in non-RDPQ mode (Suganath Prabu S)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix reply queue count in non RDPQ mode (Suganath Prabu S)  [Orabug: 31434583]  
  - scsi: mpt3sas: Remove unused including <linux/version.h> (Samuel Zou)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix double free warnings (Suganath Prabu S)  [Orabug: 31434583]  
  - scsi: mpt3sas: Disable DIF when prot_mask set to zero (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Capture IOC data for debugging purposes (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Use true, false for ioc->use_32bit_dma (Jason Yan)  [Orabug: 31434583]  
  - scsi: mpt3sas: Remove NULL check before freeing function (Jason Yan)  [Orabug: 31434583]  
  - scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Separate out RDPQ allocation to new function (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Rename function name is_MSB_are_same (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Christoph Hellwig)  [Orabug: 31434583]  
  - scsi: mpt3sas: use true,false for bool variables (Jason Yan)  [Orabug: 31434583]  
  - scsi: mpt3sas: Update drive version to 33.100.00.00 (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Remove usage of device_busy counter (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Print function name in which cmd timed out (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Optimize mpt3sas driver logging (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: print in which path firmware fault occurred (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Handle CoreDump state from watchdog thread (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Add support IOCs new state named COREDUMP (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: renamed _base_after_reset_handler function (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Add support for NVMe shutdown (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Update MPI Headers to v02.00.57 (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix double free in attach error handling (Dan Carpenter)  [Orabug: 31434583]  
  - scsi: mpt3sas: change allocation option (Tomas Henzl)  [Orabug: 31434583]  
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430851]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.1.el7uek]
changelog:
  - Linux 4.14.184 (Greg Kroah-Hartman)   
  - uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned (Oleg Nesterov)   
  - iio: vcnl4000: Fix i2c swapped word reading. (Mathieu Othacehe)   
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)   
  - nvmem: qfprom: remove incorrect write support (Srinivas Kandagatla)   
  - CDC-ACM: heed quirk also in error handling (Oliver Neukum)   
  - staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (Pascal Terjan)   
  - tty: hvc_console, fix crashes on parallel open/close (Jiri Slaby)   
  - vt: keyboard: avoid signed integer overflow in k_ascii (Dmitry Torokhov)   
  - usb: musb: Fix runtime PM imbalance on error (Dinghao Liu)   
  - usb: musb: start session in resume for host port (Bin Liu)   
  - USB: serial: option: add Telit LE910C1-EUX compositions (Daniele Palmas)   
  - USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (Bin Liu)   
  - USB: serial: qcserial: add DW5816e QDL support (Matt Jolly)   
  - l2tp: add sk_family checks to l2tp_validate_socket (Eric Dumazet)   
  - net: check untrusted gso_size at kernel entry (Willem de Bruijn)   
  - vsock: fix timeout in vsock_accept() (Stefano Garzarella)   
  - NFC: st21nfca: add missed kfree_skb() in an error path (Chuhong Yuan)   
  - net: usb: qmi_wwan: add Telit LE910C1-EUX composition (Daniele Palmas)   
  - l2tp: do not use inet_hash()/inet_unhash() (Eric Dumazet)   
  - devinet: fix memleak in inetdev_init() (Yang Yingliang)   
  - airo: Fix read overflows sending packets (Dan Carpenter)   
  - scsi: ufs: Release clock if DMA map fails (Can Guo)   
  - mmc: fix compilation of user API (Jérôme Pouiller)   
  - kernel/relay.c: handle alloc_percpu returning NULL in relay_open (Daniel Axtens)   
  - p54usb: add AirVasT USB stick device-id (Giuseppe Marco Randazzo)   
  - HID: i2c-hid: add Schneider SCL142ALM to descriptor override (Julian Sax)   
  - HID: sony: Fix for broken buttons on DS3 USB dongles (Scott Shumate)   
  - net: smsc911x: Fix runtime PM imbalance on error (Dinghao Liu)   
  - net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x (Jonathan McDowell)   
  - net/ethernet/freescale: rework quiesce/activate for ucc_geth (Valentin Longchamp)   
  - net: bmac: Fix read of MAC address from ROM (Jeremy Kerr)   
  - x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables (Nathan Chancellor)   
  - i2c: altera: Fix race between xfer_msg and isr thread (Atsushi Nemoto)   
  - ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT (Vineet Gupta)   
  - ARC: Fix ICCM & DCCM runtime size checks (Eugeniy Paltsev)   
  - pppoe: only process PADT targeted at local interfaces (Guillaume Nault)   
  - s390/ftrace: save traced function caller (Vasily Gorbik)   
  - spi: dw: use "smp_mb()" to avoid sending spi data error (Xinwei Kong)   
  - scsi: hisi_sas: Check sas_port before using it (Xiang Chen)   
  - libnvdimm: Fix endian conversion issues  (Aneesh Kumar K.V)   
  - scsi: scsi_devinfo: fixup string compare (Hannes Reinecke)   
  - Linux 4.14.183 (Greg Kroah-Hartman)   
  - scsi: zfcp: fix request object use-after-free in send path causing wrong traces (Benjamin Block)   
  - genirq/generic_pending: Do not lose pending affinity update (Thomas Gleixner)   
  - net: hns: Fixes the missing put_device in positive leg for roce reset (Salil Mehta)   
  - net: hns: fix unsigned comparison to less than zero (Colin Ian King)   
  - rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (David Howells)   
  - sc16is7xx: move label 'err_spi' to correct section (Guoqing Jiang)   
  - mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() (Liviu Dudau)   
  - netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build (Pablo Neira Ayuso)   
  - bonding: Fix reference count leak in bond_sysfs_slave_add. (Qiushi Wu)   
  - qlcnic: fix missing release in qlcnic_83xx_interrupt_test. (Qiushi Wu)   
  - esp6: get the right proto for transport mode in esp6_gso_encap (Xin Long)   
  - netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code (Pablo Neira Ayuso)   
  - netfilter: nfnetlink_cthelper: unbreak userspace helper support (Pablo Neira Ayuso)   
  - netfilter: ipset: Fix subcounter update skip (Phil Sutter)   
  - netfilter: nft_reject_bridge: enable reject with bridge vlan (Michael Braun)   
  - ip_vti: receive ipip packet by calling ip_tunnel_rcv (Xin Long)   
  - vti4: eliminated some duplicate code. (Jeremy Sowden)   
  - xfrm: fix error in comment (Antony Antony)   
  - xfrm: fix a NULL-ptr deref in xfrm_local_error (Xin Long)   
  - xfrm: fix a warning in xfrm_policy_insert_list (Xin Long)   
  - xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output (Xin Long)   
  - xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input (Xin Long)   
  - copy_xstate_to_kernel(): don't leave parts of destination uninitialized (Al Viro)   
  - x86/dma: Fix max PFN arithmetic overflow on 32 bit systems (Alexander Dahl)   
  - mac80211: mesh: fix discovery timer re-arming issue / crash (Linus Lüssing)   
  - parisc: Fix kernel panic in mem_init() (Helge Deller)   
  - iommu: Fix reference count leak in iommu_group_alloc. (Qiushi Wu)   
  - include/asm-generic/topology.h: guard cpumask_of_node() macro argument (Arnd Bergmann)   
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)   
  - mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (Konstantin Khlebnikov)   
  - libceph: ignore pool overlay and cache logic on redirects (Jerry Lee)   
  - ALSA: hda/realtek - Add new codec supported for ALC287 (Kailang Yang)   
  - exec: Always set cap_ambient in cap_bprm_set_creds (Eric W. Biederman)   
  - ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (Chris Chiu)   
  - ALSA: hwdep: fix a left shifting 1 by 31 UB bug (Changming Liu)   
  - RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (Qiushi Wu)   
  - mmc: block: Fix use-after-free issue for rpmb (Peng Hao)   
  - ARM: dts: bcm2835-rpi-zero-w: Fix led polarity (Vincent Stehlé)   
  - ARM: dts/imx6q-bx50v3: Set display interface clock parents (Robert Beckett)   
  - ARM: dts: imx6q-bx50v3: Add internal switch (Sebastian Reichel)   
  - IB/qib: Call kobject_put() when kobject_init_and_add() fails (Kaike Wan)   
  - gpio: exar: Fix bad handling for ida_simple_get error path (Takashi Iwai)   
  - ARM: uaccess: fix DACR mismatch with nested exceptions (Russell King)   
  - ARM: uaccess: integrate uaccess_save and uaccess_restore (Russell King)   
  - ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h (Russell King)   
  - ARM: 8843/1: use unified assembler in headers (Stefan Agner)   
  - Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (Wei Yongjun)   
  - Input: synaptics-rmi4 - really fix attn_data use-after-free (Evan Green)   
  - Input: i8042 - add ThinkPad S230u to i8042 reset list (Kevin Locke)   
  - Input: dlink-dir685-touchkeys - fix a typo in driver name (Christophe JAILLET)   
  - Input: xpad - add custom init packet for Xbox One S controllers (Łukasz Patron)   
  - Input: evdev - call input_flush_device() on release(), not flush() (Brendan Shanks)   
  - Input: usbtouchscreen - add support for BonXeon TP (James Hilliard)   
  - samples: bpf: Fix build error (Matteo Croce)   
  - cifs: Fix null pointer check in cifs_read (Steve French)   
  - net: freescale: select CONFIG_FIXED_PHY where needed (Arnd Bergmann)   
  - usb: gadget: legacy: fix redundant initialization warnings (Masahiro Yamada)   
  - cachefiles: Fix race between read_waiter and read_copier involving op->to_do (Lei Xue)   
  - gfs2: move privileged user check to gfs2_quota_lock_check (Bob Peterson)   
  - net: microchip: encx24j600: add missed kthread_stop (Chuhong Yuan)   
  - gpio: tegra: mask GPIO IRQs during IRQ shutdown (Stephen Warren)   
  - ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi (Johan Jonker)   
  - arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node (Johan Jonker)   
  - ARM: dts: rockchip: fix phy nodename for rk3228-evb (Johan Jonker)   
  - net/mlx4_core: fix a memory leak bug. (Qiushi Wu)   
  - net: sun: fix missing release regions in cas_init_one(). (Qiushi Wu)   
  - net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (Manivannan Sadhasivam)   
  - net/mlx5e: Update netdev txq on completions during closure (Moshe Shemesh)   
  - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (Jere Leppänen)   
  - r8152: support additional Microsoft Surface Ethernet Adapter variant (Marc Payne)   
  - net sched: fix reporting the first-time use timestamp (Roman Mashak)   
  - net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" (Yuqi Jin)   
  - net/mlx5: Add command entry handling completion (Moshe Shemesh)   
  - net: ipip: fix wrong address family in init error path (Vadim Fedorenko)   
  - ax25: fix setsockopt(SO_BINDTODEVICE) (Eric Dumazet)   
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504053]  
  - mm: Fix mremap not considering huge pmd devmap (Fan Yang)  [Orabug: 31452397]  {CVE-2020-10757} {CVE-2020-10757} 
  - PCI/DPC: Add missing pci_dpc_init() to pci probe function (Thomas Tai)  [Orabug: 31511974]  
  - selftests/bpf: do not run test_kmod.sh for UEK5 (Alan Maguire)  [Orabug: 31357234]  
  - bpf: do not allow root to mangle valid pointers (Alexei Starovoitov)  [Orabug: 31357234]  
  - selftests/bpf: fix invalid bit operation to verify tcpbpf events (Alan Maguire)  [Orabug: 31357234]  
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 31501437]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31323839]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31323839]  
  - KVM: VMX: check descriptor table exits on instruction emulation (Oliver Upton)  [Orabug: 31481335]  
  - Revert "rds: Introduce rds_conn_to_path helper" (Håkon Bugge)  [Orabug: 31476448]  
  - Revert "rds: Do not cancel RDMAs that have been posted to the HCA" (Håkon Bugge)  [Orabug: 31476448]  
  - Revert "rds: Three cancel fixes" (Håkon Bugge)  [Orabug: 31476448]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.2.el7uek]
changelog:
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31526089]  
  - thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564727]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564727]  
  - dtrace: ensure that fatal signals trigger signal-handle probes (Kris Van Hees)  [Orabug: 31398827] [Orabug: 31562416]  
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515070]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515070]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515070]  
  - KVM: arm/arm64: Fixup the kvm_exit tracepoint (Christoffer Dall)  [Orabug: 31510089]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493186]  
  - tcp: implement coalescing on backlog queue (Eric Dumazet)  [Orabug: 31419400]  
  - tcp: drop dst in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31419400]  
  - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann)  [Orabug: 31419400]  
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351670]  {CVE-2019-19054} 
  - dtrace: recursion in dtrace_dynvar() can lead to out-of-stack crash (Kris Van Hees)  [Orabug: 31481801]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.3.el7uek]
changelog:
  - psi: Fix double free (Tom Hromatka)  [Orabug: 31595120]  
  - tools/power turbostat: Support Ice Lake server (Thomas Tai)  [Orabug: 31543222]  
  - uek-rpm: config updates for SDK-10.3.3.0-PR6 kernel patches (Dave Kleikamp)  [Orabug: 31590716]  
  - uek-rpm: Update aarch64 UEK5 config files with "make olddefconfig" (Dave Kleikamp)  [Orabug: 31590716]  
  - octeontx2-af: Add CUSTOM0 to flow keyx algo (Kiran Kumar K)  [Orabug: 31590716]  
  - octeontx2-pf: Stop tx queues in case of subsequent calls failure (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Increase mbox response timeout to 3 seconds (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Fix nix_inline_ipsec_cfg mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Update CPT_LF_ALLOC mbox (Srujana Challa)  [Orabug: 31590716]  
  - drivers: cpt - remove notify_group_change (Srujana Challa)  [Orabug: 31590716]  
  - octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla)  [Orabug: 31590716]  
  - octeontx2-af: Do not change maximum NPC interfaces (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Calculate LBK link correctly (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Display NIX1 also in debugfs (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Add NIX1 interfaces to NPC (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Get block address from slot number (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Mbox changes for 98xx (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Assign NIX block addresses (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Add new REE blocks to AF (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2: gti: Fix task stack pointer corruption (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-af: Fix cpt_rd_wr_register mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Fix TCP/UDP checksum offload for IPv6 pkts (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-pf: Add ntuple filter support for FDSA (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Add flow steering support for FDSA tag (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla)  [Orabug: 31590716]  
  - octeontx2: gti: restore gpr x29 for kernel context (Bharat Bhushan)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: Add 95MM LOKI 98xx in supported SUBSID (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: Use rcvd_present instead of MIDR check (Suneel Garapati)  [Orabug: 31590716]  
  - octeontx2: gti: fix return to ATF after handling nmi (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-af: Fix MSIX handler mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Setup MCE context for assigned NIX (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Map NIX block from CGX connection (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Return assigned NIX/CPT block address (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Initialize NIX1 block (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Add support for NIX1, CPT1 and NDC_NIX1 (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Update get_rsrc_map for new blocks (Subbaraya Sundeep)  [Orabug: 31590716]  
  - drivers: marvell: otx2-sdei-ghes: Set GHES block_status correctly. (Rick Farrington)  [Orabug: 31590716]  
  - drivers: marvell: otx2-sdei-ghes: Add misc documentation. (Rick Farrington)  [Orabug: 31590716]  
  - crypto: cpt - fixed build issue with cpt driver as module (Srujana Challa)  [Orabug: 31590716]  
  - arm64: enable workaround for Marvell erratum 37119 in Kconfig (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-rm: remove unused cpt_cur (Stefan Chulski)  [Orabug: 31590716]  
  - octeontx2-af: Reduce dependency on firmware command interface version (Linu Cherian)  [Orabug: 31590716]  
  - octeontx2-af: Synchronize mcam rule list ops (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Add XDP support to RVU PF driver (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Disable default NPC entries properly (Subbaraya Sundeep)  [Orabug: 31590716]  
  - crypto:cpt - get HW capabilities using LOAD_FVC op (SrujanaChalla)  [Orabug: 31590716]  
  - octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 31590716]  
  - gpio: thunderx: Configure pin function at probe (Michal Mazur)  [Orabug: 31590716]  
  - gpio: thunderx: avoid potential deadlock (Peter Swain)  [Orabug: 31590716]  
  - fs: pstore: ram: WriteBack cache before reset (Lukasz Majczak)  [Orabug: 31590716]  
  - crypto:cpt - rename ucode tarfile names as per cpt revision (SrujanaChalla)  [Orabug: 31590716]  
  - crypto: cpt - remove verification of PCI subsystem ID (SrujanaChalla)  [Orabug: 31590716]  
  - crypto:cpt - fixed DMA fault with kernel crypto tests (SrujanaChalla)  [Orabug: 31590716]  
  - crypto:cpt - fixed cleanup for inline IPsec RX LF cfg (SrujanaChalla)  [Orabug: 31590716]  
  - marvell/zip : OcteonTX and OcteonTX2 ZIP Virtual Function driver (Akash Saxena)  [Orabug: 31590716]  
  - pci: octeontx2: Limit config space writes errata workaround to older silicons (Sunil Goutham)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: Add fix for hw issue (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: use read after write for MPI_CFG (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: set tritx in config register (Suneel Garapati)  [Orabug: 31590716]  
  - spi-nor: Enable 4B opcodes for various flashes (Guo Yi)  [Orabug: 31590716]  
  - drivers: mtd: spi-nor: update 4B_OPCODES flag for n25q00 and mx66l1g45g (Suneel Garapati)  [Orabug: 31590716]  
  - octeontx2-af: add parser support for Forward DSA (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: wait for tx link idle for credits change (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: clear sw xoff before flush (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: enable tx shaping feature for 96xx C0 (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: Disable SMQ sticky mode to avoid NIX PSE deadlock (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Setup edge used for GPIO timing (Michal Mazur)  [Orabug: 31590716]  
  - octeontx2-af: Update NIX_TXSCHQ_CONFIG mbox to handle read request (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-pf: Fix memory double free in otx2_aura_pool_free (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Update dmac field in vf vlan rule (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-pf: Remove unnecessary mbox request in unbind (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Simplify npc_set_pkind mbox handler (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Reset HW config done to parse switch headers in FLR (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: modify default cpt limits (SrujanaChalla)  [Orabug: 31590716]  
  - octeontx2-af: Update tx parse nibble config (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: fix compilation warning (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: add support for custom KPU entries (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: prepare for custom KPU profiles (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: fix memory leaks on probe failure (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: fix LD CUSTOM LTYPE aliasing (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-pf: Don't configure RSS context when interface is down (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Set SMQ MAXLEN to max hardware supported value (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: fix detection of IP layer (Michal Mazur)  [Orabug: 31590716]  
  - octeontx2-pf: Fix flow control support for LBK devices (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Implement cgx stat rst (Revital Regev)  [Orabug: 31590716]  
  - octeontx2-af: Allow to configure flow tag LSB byte as RSS adder (Jerin Jacob)  [Orabug: 31590716]  
  - octeontx2-af: fix missing blocks quota validation (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: Fix rvu_reg_poll() to poll reg atleast twice (Sunil Goutham)  [Orabug: 31590716]  
  - crypto: cpt - allow cpt_af_lfx_ctl2 register access to vf (Tejasree Kondoj)  [Orabug: 31590716]  
  - octeontx2-af: Cleanup nixlf and blkaddr retrieval logic (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Restore RSS and pause frame config settings (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Fix netdev watchdog timeout value (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-af: extend RSS supported offload types (Kiran Kumar K)  [Orabug: 31590716]  
  - octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Put CGX LMAC also in Higig2 mode (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Reset HW config for HIGIG/EDSA in driver unbind (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Remove multisegment RX_SG processing logic (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Allocate receive buffers of MTU size (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-af: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-pf: Do not set num_msgs in mbox header (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Use mutex for mbox locking (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: update vlan offload rule (hariprasad)  [Orabug: 31590716]  
  - octeontx2-af: Handle pfvf mac address changes (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Set default RR_QUANTUM for transmit scheduling levels (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Adjust pause frame time and interval (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Use likely and unlikely (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Process CQE_TX first and then CQE_RX (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Discover NIX block address from RVUM (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Flush pending SQE on teardown (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-pf: Remove warning messages in fast path (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Undo PTP NPC config in FLR (Harman Kalra)  [Orabug: 31590716]  
  - octeontx2-rm: remove CPT LF resource management (Vidya Velumuri)  [Orabug: 31590716]  
  - octeontx2-serdes: Add gserr and gserc eye display (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-serdes: Add CONFIG_OCTEONTX_SERDES (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-dpi: Add MRRS and MPS configuration to dpi driver. (Subrahmanyam Nilla)  [Orabug: 31590716]  
  - octeontx2: gti: Enable GTI wdog for non-VHE Linux (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-serdes: Check SVC UUID on module init (Tomasz Michalec)  [Orabug: 31590716]  
  - edac: octeontx2: RAS error-injection (Rick Farrington)  [Orabug: 31590716]  
  - drivers: marvell: octeontx2: add support for GHES (Rick Farrington)  [Orabug: 31590716]  
  - octeontx2-serdes: Implement PRBS command (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-dpi: fix compilation warnings (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-rm: fix compilation warning (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-serdes: Handle not implemented SMC (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2: PCI Console driver: fix initialization WARNing (Rick Farrington)  [Orabug: 31590716]  
  - octeontx2-serdes: Fix settings write return code (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2: fixup PCI Remote Console driver shutdown function (Dave Aldridge)  [Orabug: 31590716]  
  - octeontx2: add OcteonTX2 PCI Console driver (Rick Farrington)  [Orabug: 31590716]  
  - Revert "octeontx2: add OcteonTX2 PCI Remote Console driver" (Dave Kleikamp)  [Orabug: 31590716]  
  - Revert "octeontx2: fixup PCI Remote Console driver shutdown function" (Dave Kleikamp)  [Orabug: 31590716]  
  - octeontx2: gti: Start wdog timer on online cpus (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-serdes: Add serdes diagnostic commands (Tomasz Michalec)  [Orabug: 31590716]  
  - proc: publish no of macs in octeontx_info node (Sujeet Baranwal)  [Orabug: 31590716]  
  - arm64: Disable UNMAP_KERNEL_AT_EL0 when enable GTI WDOG (Bharat Bhushan)  [Orabug: 31590716]  
  - arm64: Add workaround for Marvell erratum 37119 (Andrew Pinski)  [Orabug: 31590716]  
  - x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557901]  {CVE-2020-10768}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.4.el7uek]
changelog:
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480604]  
  - dm cache: submit writethrough writes in parallel to origin and cache (Mike Snitzer)  [Orabug: 31397438]  
  - nvme: Assign subsys instance from first ctrl (Keith Busch)  [Orabug: 31315361]  
  - kvm/vmx: Add dy_apicv_has_pending_interrupt op. (Boris Ostrovsky)  [Orabug: 31602225]  
  - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31606253]  
  - qla2xxx: Pick up missing hunk from original patch (Quinn Tran)  [Orabug: 31607567]  
  - byteorder: Move {cpu_to_be32, be32_to_cpu}_array() from Thunderbolt to core (Mika Westerberg)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter)  [Orabug: 31607567]  
  - scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove an unused function (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix regression warnings (Nilesh Javali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove non functional code (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RDP respond data format (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: add more FW debug information (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez)  [Orabug: 31607567]  
  - scsi: qla2xxx: fix FW resource count values (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RDP response size (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix fw options handle eh_bus_reset() (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use correct number of vectors for online CPUs (Ming Lei)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stalled relogin (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix kernel crash due to late workqueue allocation (himanshu.madhani@cavium.com)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix issue with adapter's stopping state (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne)  [Orabug: 31607567]  
  - scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck)  [Orabug: 31607567]  
  - scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck)  [Orabug: 31607567]  
  - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RIDA Format-2 (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Consolidate fabric scan (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Correct fcport flags handling (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran)  [Orabug: 31607567]  
  - qla2xxx: Update driver version to 10.01.00.22.81.1-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use common routine to free fcport struct (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix update_fcport for current_topology (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cleanup unused async_logout_done (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Allow PLOGI in target mode (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Don't defer relogin unconditonally (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Send Notify ACK after N2N PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Configure local loop for N2N target (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use explicit LOGO in target mode (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Initialize free_work before flushing it (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (Roman Bolshakov)  [Orabug: 31607567]  
  - Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails" (Martin K. Petersen)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix memory leak when sending I/O fails (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Modify NVMe include directives (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change a stack variable into a static const variable (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Bill Kuzeja)  [Orabug: 31607567]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.5.el7uek]
changelog:
  - PCI: vmd: Filter resource type bits from shadow register (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add device id for VMD device 8086:9A0B (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Fix shadow offsets to reflect spec changes (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Fix config addressing when using bus offsets (Jon Derrick)  [Orabug: 31688061]  
  - PCI/VMD: Configure MPS settings before adding devices (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add an additional VMD device id to driver device id table (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add offset to bus numbers if necessary (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Assign membar addresses from shadow registers (Jon Derrick)  [Orabug: 31688061]  
  - PCI: Add Intel VMD devices to pci ids (Jon Derrick)  [Orabug: 31688061]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358098]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555616]  
  - net: dsa: Do not leave DSA master with NULL netdev_ops (Allen Pais)  [Orabug: 31658286]  
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 29251777]  
  - vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663630]  {CVE-2020-12888} {CVE-2020-12888} 
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648240]  
  - octeontx2-serdes: Fix compile error (Dave Kleikamp)  [Orabug: 31649691]  
  - uek-rpm: config updates for SDK-10.3.3.0-PR8 kernel patches (Dave Kleikamp)  [Orabug: 31649691]  
  - hwrng: cavium: Check health status while reading random data (Sunil Goutham)  [Orabug: 31649691]  
  - octeontx2-af: Debugfs entry to show mapping btw CGX, NIX and a PF. (Rakesh Babu)  [Orabug: 31649691]  
  - octeontx2-serdes: Fix prbs error reporting (Chandrakala Chavva)  [Orabug: 31649691]  
  - drivers:cpt - add support for CPT1 in VF driver (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Add support for CPT1 in debugfs (Srujana Challa)  [Orabug: 31649691]  
  - drivers: cpt - add support for microcode load on CPT1 (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Mbox changes for 98xx CPT block (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Fix REE error handling (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Update SDP AF driver to handle multiple SDP blocks (Radha Mohan Chintakuntla)  [Orabug: 31649691]  
  - soc: octeontx2: Add SDP PF driver (Radha Mohan Chintakuntla)  [Orabug: 31649691]  
  - octeontx2: marvell: Add driver support for LLC lock and unlock (Bhaskara Budiredla)  [Orabug: 31649691]  
  - octeontx2-af: fix DMAC filter table corruption (Sunil Kumar Kori)  [Orabug: 31649691]  
  - octeontx2-af: Add new Mbox messages and handlers for new REE blocks (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Enable PF BCAST entry for packet replication (Subbaraya Sundeep)  [Orabug: 31649691]  
  - octeontx2-serdes: Update PRBS APIs to start/stop per QLM lane (Chandrakala Chavva)  [Orabug: 31649691]  
  - CIFS: dump IPC tcon in debug proc file (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: make IPC a regular tcon (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: don't log STATUS_NOT_FOUND errors for DFS (Aurelien Aptel)  [Orabug: 31540174]  
  - efi: Restrict efivar_ssdt_load when the kernel is locked down (Matthew Garrett)  [Orabug: 31643407]  {CVE-2019-20908} 
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 30647041]  
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631530]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31644908]  
  - Revert "mm/vmscan.c: prevent useless kswapd loops" (John Donnelly)  [Orabug: 31625172]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.6.el7uek]
changelog:
  - kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694368]  
  - iommu/amd: Fix incorrect PASID decoding from event log (Suthikulpanit, Suravee)  [Orabug: 31693603]  
  - misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677098]  
  - bnxt_en: fix NULL dereference in case SR-IOV configuration fails (Davide Caratti)  [Orabug: 31600665]  
  - bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: clean up VLAN feature bit handling (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add logical RSS indirection table structure. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Set up the chip specific RSS table size. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Store the running firmware version code. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: fix firmware message length endianness (Michael Chan)  [Orabug: 31600665]  
  - net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan)  [Orabug: 31600665]  
  - bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi)  [Orabug: 31600665]  
  - bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Refactor the software ring counters. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return error when allocating zero size context memory. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Free context memory after disabling PCI in probe error path. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Support UDP RSS hashing on 575XX chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Remove the setting of dev_port. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Improve link up detection. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix NTUPLE firmware command failures. (Michael Chan)  [Orabug: 31600665]  
  - bnxt: apply computed clamp value for coalece parameter (Jonathan Lemon)  [Orabug: 31600665]  
  - bnxt_en: Fix MSIX request logic for RDMA driver. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Allow PHY settings on multi-function or NPAR PFs if allowed by FW. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add async. event logic for PHY configuration changes. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Refactor the initialization of the ethtool link settings. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Skip disabling autoneg before PHY loopback when appropriate. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Assign more RSS context resources to the VFs. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Initialize context memory to the value specified by firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix suspend/resume path on 57500 chips (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Send FUNC_RESOURCE_QCAPS command in bnxt_resume() (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Combine 2 functions calling the same HWRM_DRV_RGTR fw command. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do driver unregister cleanup in bnxt_init_one() failure path. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Disable/enable Bus master during suspend/resume. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add chip IDs for 57452 and 57454 chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Improve RX buffer error handling. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware interface spec to 1.10.1.12. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Call bnxt_ulp_stop()/bnxt_ulp_start() during suspend/resume. (Pavan Chebbi)  [Orabug: 31600665]  
  - bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware interface spec. to 1.10.0.100. (Michael Chan)  [Orabug: 31600665]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.7.el7uek]
changelog:
  - Revert "bnxt_en: Remove the setting of dev_port." (Somasundaram Krishnasamy)  [Orabug: 31703319]  
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723448]  
  - x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31710910]  
  - Revert "net/mlx4_core: Add masking for a few queries on HCA caps" (Sharath Srinivasan)  [Orabug: 31620920]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648140]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648140]  
  - delayacct: fix crash in delayacct_blkio_end() after delayacct init failure (Tejun Heo)  [Orabug: 31516715]  
  - x86/speculation: Fix missing enumeration value warnings (Patrick Colp)  [Orabug: 30833548]  
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)  [Orabug: 31350644]  {CVE-2020-12771} 
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351557]  {CVE-2019-19074} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351570]  {CVE-2019-19073} 
  - KVM: nVMX: include conditional controls in /dev/kvm KVM_GET_MSRS (Paolo Bonzini)  [Orabug: 31699255]  
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31703346]  
  - net/rds: rds_ib_remove_one() should not call rds_ib_dev_free_dev() (Ka-Cheong Poon)  [Orabug: 31703346]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.8.el7uek]
changelog:
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737041]  
  - net/rds: rds_ib_remove_one() needs to wait (Ka-Cheong Poon)  [Orabug: 31777364]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784658]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784891]  
  - tcp: add sanity tests in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31780103]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.9.el7uek]
changelog:
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31867382]  {CVE-2019-18885} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31867387]  {CVE-2019-3874} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31867403]  {CVE-2020-10781} 
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31867441]  {CVE-2020-10767} 
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31867436]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31867436]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31867433]  {CVE-2020-16166} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31867431]  {CVE-2020-14331} {CVE-2020-14331} 
  - Reverts "rds: avoid unnecessary cong_update in loop transport" (Iraimani Pavadai)  [Orabug: 31867423]  
  - net/mlx5e: Poll event queue upon TX timeout before performing full channels recovery (Eran Ben Elisha)  [Orabug: 31867421]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31867418]  
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31867417]  {CVE-2020-24394} 
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31867413]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31867411]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.0.el7uek]
changelog:
  - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 31821490]  
  - Pensando: Enable iScsi in kernel config (Rob Gardner)  [Orabug: 31821490]  
  - sample-trace-array: Fix timer definition in samples/ftrace/sample-trace-array.c (Aruna Ramakrishna)  [Orabug: 31845460]  
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31621816]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31621816]  
  - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() (Christophe Leroy)  [Orabug: 29623005]  {CVE-2018-20669} 
  - x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() (Will Deacon)  [Orabug: 29623005]  {CVE-2018-20669} 
  - arch/openrisc: Fix issues with access_ok() (Stafford Horne)  [Orabug: 29623005]  {CVE-2018-20669} 
  - Fix 'acccess_ok()' on alpha and SH (Linus Torvalds)  [Orabug: 29623005]  {CVE-2018-20669} 
  - make 'user_access_begin()' do 'access_ok()' (Linus Torvalds)  [Orabug: 29623005]  {CVE-2018-20669} 
  - kabi fix for reparent slab memory on cgroup removal patchset (Tom Hromatka)  [Orabug: 31746022]  
  - mm/memcontrol.c: add missed css_put() (Muchun Song)  [Orabug: 31746022]  
  - mm: memcg/slab: reparent memcg kmem_caches on cgroup removal (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: stop setting page->mem_cgroup pointer for slab pages (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: rework non-root kmem_cache lifecycle management (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: don't check the dying flag on kmem_cache creation (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: unify SLAB and SLUB page accounting (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: introduce __memcg_kmem_uncharge_memcg() (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: generalize postponed non-root kmem_cache deactivation (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: rename slab delayed deactivation functions and fields (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: postpone kmem_cache memcg pointer initialization to memcg_link_cache() (Roman Gushchin)  [Orabug: 31746022]  
  - mm: introduce mem_cgroup_put() helper (Roman Gushchin)  [Orabug: 31746022]  
  - mm/memcontrol.c: export mem_cgroup_is_root() (Kirill Tkhai)  [Orabug: 31746022]  
  - memcg: localize memcg_kmem_enabled() check (Shakeel Butt)  [Orabug: 31746022]  
  - mm: fix race between kmem_cache destroy, create and deactivate (Shakeel Butt)  [Orabug: 31746022]  
  - uek-rpm: Sync up aarch64 config files with latest Marvell patches (Dave Kleikamp)  [Orabug: 31838205]  
  - drivers: marvell: otx2-sdei-ghes: correct issues with crashdump kernel (Rick Farrington)  [Orabug: 31838205]  
  - drivers: mtd: spi-nor: Add MX66L2G45GXRI00 macronix flash (Selvam Venkatachalam)  [Orabug: 31838205]  
  - irqchip/gic-v3: Add workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 31838205]  
  - octeontx2-af: fix Extended DSA and eDSA parsing (Satha Rao)  [Orabug: 31838205]  
  - drivers: gicv3: Adds workaround for Marvell erratum 38545 (Bhaskara Budiredla)  [Orabug: 31838205]  
  - octeontx2-af: reset HWS group mask during FLR (Michal Mazur)  [Orabug: 31838205]  
  - drivers: marvell: otx2: sdei-ghes: add BERT support for RAS errors (Rick Farrington)  [Orabug: 31838205]  
  - ACPI: APEI: BERT: support BERT in non-ACPI systems (Rick Farrington)  [Orabug: 31838205]  
  - Documentation: dt: edac: update sdei-ghes/bed-bert settings (Rick Farrington)  [Orabug: 31838205]  
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31351744]  {CVE-2019-18885} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31351958]  {CVE-2019-3874} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31510723]  {CVE-2020-10781} 
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543030]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543030]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543030]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31543030]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543030]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543030]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543030]  
  - tracing: Kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543030]  
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31557803]  {CVE-2020-10767} 
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682037]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682037]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698082]  {CVE-2020-16166} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705119]  {CVE-2020-14331} {CVE-2020-14331} 
  - KVM: x86: take as_id into account when checking PGD (Vitaly Kuznetsov)  [Orabug: 31722725]  
  - KVM: X86: Fix MSR range of APIC registers in X2APIC mode (Xiaoyao Li)  [Orabug: 31722725]  
  - KVM: nVMX: Report NMIs as allowed when in L2 and Exit-on-NMI is set (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: nVMX: Remove non-functional "support" for CR3 target values (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: x86/mmu: Avoid an extra memslot lookup in try_async_pf() for L2 (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: x86: Adjust counter sample period after a wrmsr (Eric Hankland)  [Orabug: 31722725]  
  - KVM: nVMX: Handle pending #DB when injecting INIT VM-exit (Oliver Upton)  [Orabug: 31722725]  
  - KVM: x86: Fix perfctr WRMSR for running counters (Eric Hankland)  [Orabug: 31722725]  
  - KVM: nVMX: Check GUEST_DR7 on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722725]  
  - perf/core: Provide a kernel-internal interface to recalibrate event period (Like Xu)  [Orabug: 31722725]  
  - KVM: VMX: Consume pending LAPIC INIT event when exit on INIT_SIGNAL (Liran Alon)  [Orabug: 31722725]  
  - KVM: nVMX: cleanup and fix host 64-bit mode checks (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: nVMX: Check Host Address Space Size on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel (Wanpeng Li)  [Orabug: 31722725]  
  - KVM: x86: Fix INIT signal handling in various CPU states (Liran Alon)  [Orabug: 31722725]  
  - KVM: VMX: Introduce exit reason for receiving INIT signal on guest-mode (Liran Alon)  [Orabug: 31722725]  
  - KVM: nVMX: add tracepoint for failed nested VM-Enter (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or GS (Liran Alon)  [Orabug: 31722725]  
  - kvm: LAPIC: write down valid APIC registers (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: LAPIC: ARBPRI is a reserved register for x2APIC (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM nVMX: Check Host Segment Registers and Descriptor Tables on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM/nVMX: Use kvm_vcpu_map for accessing the shadow VMCS (KarimAllah Ahmed)  [Orabug: 31722725]  
  - KVM/nVMX: Use kvm_vcpu_map when mapping the virtual APIC page (KarimAllah Ahmed)  [Orabug: 31722725]  
  - KVM: nVMX: Return -EINVAL when signaling failure in VM-Entry helpers (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: nVMX: Move guest non-reg state checks to VM-Exit path (Sean Christopherson)  [Orabug: 31722725]  
  - kvm: nVMX: Check "load IA32_PAT" VM-entry control on vmentry (Krish Sadhukhan)  [Orabug: 31722725]  
  - kvm: nVMX: Check "load IA32_PAT" VM-exit control on vmentry (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM: x86: optimize check for valid PAT value (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: nVMX: allow tests to use bad virtual-APIC page address (Paolo Bonzini)  [Orabug: 31722725]  
  - x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (Vitaly Kuznetsov)  [Orabug: 31722725]  
  - kvm: nVMX: Add a vmentry check for HOST_SYSENTER_ESP and HOST_SYSENTER_EIP fields (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM: nVMX: Apply addr size mask to effective address for VMX instructions (Sean Christopherson)  [Orabug: 31722725]  
  - Reverts "rds: avoid unnecessary cong_update in loop transport" (Iraimani Pavadai)  [Orabug: 31741323]  
  - net/mlx5e: Poll event queue upon TX timeout before performing full channels recovery (Eran Ben Elisha)  [Orabug: 31753101]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755754]  
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779886]  {CVE-2020-24394} 
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688621]  
  - uek-rpm: aarch64: build embedded kernel for Pensando (Dave Kleikamp)  [Orabug: 31627078]  
  - Make low-speed APB bus accesses single threaded (Dave Kleikamp)  [Orabug: 31627078]  
  - Add /dev/capmem driver for Pensando (David Clear)  [Orabug: 31627078]  
  - Kconfig option to disable outer-cache-allocate for Pensando (David Clear)  [Orabug: 31627078]  
  - Provide for precise control of pgprot for Pensando (David Clear)  [Orabug: 31627078]  
  - Add Pensando Capri board .dts files and default configs (David Clear)  [Orabug: 31627078]  
  - Add /proc/xmaps (David Clear)  [Orabug: 31627078]  
  - mtd/spi-nor/cadence-quadspi.c: Speed up reads. (David Clear)  [Orabug: 31627078]  
  - Add mnic nodes to the Pensando devicetree (David Clear)  [Orabug: 31627078]  
  - Pensando Boot State Machine (BSM) integration. (David Clear)  [Orabug: 31627078]  
  - Pensando crash dump driver (David Clear)  [Orabug: 31627078]  
  - Pensando/Capri PCIE panic handler. (David Clear)  [Orabug: 31627078]  
  - Add uio support for Capri PCIE and Link interrupts (David Clear)  [Orabug: 31627078]  
  - Interrupt domain controllers for Capri ASIC. (David Clear)  [Orabug: 31627078]  
  - Capri SPI driver (David Clear)  [Orabug: 31627078]  
  - Add Capri EMMC phy and instantiate the driver in the dts (David Clear)  [Orabug: 31627078]  
  - Initial Pensando Capri SoC declaration (David Clear)  [Orabug: 31627078]  
  - New quirk for Pensando QSPI controller (David Clear)  [Orabug: 31627078]  
  - Add pensando,cpld device tree compat entry (David Clear)  [Orabug: 31627078]  
  - add support for NXP PCF85363/PCF85263 real-time clock (David Clear)  [Orabug: 31627078]  
  - Support the reset pulse width from the device-tree. (David Clear)  [Orabug: 31627078]  
  - Attempt to recover from a stuck SDA line (David Clear)  [Orabug: 31627078]  
  - Add driver for the TI TPS53659 (David Clear)  [Orabug: 31627078]  
  - support spi-rx-bus-width property on subnodes (David Clear)  [Orabug: 31627078]  
  - Support for SPI_NOR_DUAL_READ on Micron (David Clear)  [Orabug: 31627078]  
  - mtd: spi-nor: cadence-quadspi: fix spelling mistake: "Couldnt't" -> "Couldn't" (Colin Ian King)  [Orabug: 31627078]  
  - mtd: spi-nor: cadence-quadspi: Add support for Octal SPI controller (Vignesh R)  [Orabug: 31627078]  
  - mtd: spi-nor: Add Micron MT25QU02 support (Thor Thayer)  [Orabug: 31627078]  
  - arm64: tlb: Ensure we execute an ISB following walk cache invalidation (Will Deacon)  [Orabug: 31627078]  
  - arm64: mm: Add ISB instruction to set_pgd() (Will Deacon)  [Orabug: 31627078]  
  - mtd: spi-nor: Allow Cadence QSPI support for ARM64 (Thor Thayer)  [Orabug: 31627078]  
  - irqchip/gic-v3: Add workaround for Synquacer pre-ITS (Ard Biesheuvel)  [Orabug: 31627078]  
  - irqchip/gic: Make quirks matching conditional on init return value (Ard Biesheuvel)  [Orabug: 31627078]  
  - irqchip/gic-v3: Probe device ID space before quirks handling (Ard Biesheuvel)  [Orabug: 31627078]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783149]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.1.el7uek]
changelog:
  - PCI: Probe bridge window attributes once at enumeration-time (Bjorn Helgaas)  [Orabug: 31867576]  
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866489]  {CVE-2020-14386} {CVE-2020-14386} 
  - scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31860034]  
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850343]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850343]  
  - block: print offending values when cloned rq limits are exceeded (John Pittman)  [Orabug: 31850343]  
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849532]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.2.el7uek]
changelog:
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884238]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884165]  {CVE-2020-25284} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872904]  {CVE-2020-25212} 
  - IB/mlx5: Fix MR registration flow to use UMR properly (Guy Levi)  [Orabug: 31631231]  
  - IB/mlx5: Prevent concurrent MR updates during invalidation (Moni Shoua)  [Orabug: 31631231]  
  - IB/mlx5: Replace kfree with kvfree (Chuhong Yuan)  [Orabug: 31631231]  
  - RDMA/odp: Do not leak dma maps when working with huge pages (Jason Gunthorpe)  [Orabug: 31631231]  
  - IB/mlx5: Respect new UMR capabilities (Majd Dibbiny)  [Orabug: 31631231]  
  - RDMA/mlx5: Unify error flows in rereg MR failure paths (Leon Romanovsky)  [Orabug: 31631231]  
  - IB/mlx5: Maintain a single emergency page (Ilya Lesokhin)  [Orabug: 31631231]  
  - genirq/irqdomain: Make sure all irq domain flags are distinct (Zenghui Yu)  [Orabug: 31885236]  
  - irq/msi: Direct update affinity if irq is for msix or, maskable (Joe Jin)  [Orabug: 31885236]  
  - x86/apic/msi: Plug non-maskable MSI affinity race (Joe Jin)  [Orabug: 31885236]  
  - mm: memcg: Optimize cgroup traversal in memory.stat read (Tom Hromatka)  [Orabug: 31849182]  
  - SUNRPC: Fix disconnection races (Trond Myklebust)  [Orabug: 31796863]  
  - SUNRPC: Add a helper to wake up a sleeping rpc_task and set its status (Trond Myklebust)  [Orabug: 31796863]  
  - dmaengine: ioatdma: Add Snow Ridge ioatdma device id (Dave Jiang)  [Orabug: 31669166]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.3.el7uek]
changelog:
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931371]  
  - oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31901948]  
  - net: Correct warning: label 'drop' defined but not used. (John Donnelly)  [Orabug: 31916130]  
  - KVM: Corrects build warnings for emulator_get_fpu/emulator_put_fpu (John Donnelly)  [Orabug: 31907286]  
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895330]  {CVE-2020-14314} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880143]  
  - bpf: Fix bpf_event_output re-entry issue (Allan Zhang)  [Orabug: 31865842]  
  - bpf: fix nested bpf tracepoints with per-cpu data (Matt Mullins)  [Orabug: 31865842]  
  - uek-rpm: Turn on module signing for embedded2 kernel (Dave Kleikamp)  [Orabug: 31895264]  
  - uek-rpm: Clean up config-aarch64-embedded2 (Dave Kleikamp)  [Orabug: 31895264]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.0.el7uek]
changelog:
  - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31351789]  {CVE-2019-16089} 
  - efi/x86/Add missing error handling to old_memmap 1:1 mapping code (Gen Zhang)  [Orabug: 31351924]  {CVE-2019-12380} 
  - RDS: add module parameter to allow module unload or not (Hans Westgaard Ry)  [Orabug: 31503865]  
  - rds: Revert "Disable module unload by default" (Hans Westgaard Ry)  [Orabug: 31503865]  
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31521372]  
  - EDAC/i10nm: Update driver to support different bus number config register offsets (Qiuxu Zhuo)  [Orabug: 31645136]  
  - EDAC, {skx,i10nm}: Make some configurations CPU model specific (Qiuxu Zhuo)  [Orabug: 31645136]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31682346]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722765]  
  - KVM: x86: Manually flush collapsible SPTEs only when toggling flags (Sean Christopherson)  [Orabug: 31722765]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722765]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722765]  
  - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)  [Orabug: 31779798]  {CVE-2020-14356} 
  - bpf: ensure helper ids match between UEK5, UEK6 and upstream (Alan Maguire)  [Orabug: 31860453]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872862]  {CVE-2020-25211} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914690]  {CVE-2020-14390} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914690]  {CVE-2020-14390} 
  - KVM: nVMX: do not use dangling shadow VMCS after guest reset (Paolo Bonzini)  [Orabug: 31941096]  
  - Revert "usb: xhci: do not create and register shared_hcd when USB3.0 is disabled" (Thomas Tai)  [Orabug: 31943628]  
  - uek-rpm: Use oracle-armset-1 to build uekemb2 (Dave Kleikamp)  [Orabug: 31950869]  
  - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955141]  {CVE-2020-25641} 
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979628]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.1.el7uek]
changelog:
  - configfs: make ci_type field, some pointers and function arguments const (Bhumika Goyal)  [Orabug: 32022427]  
  - IB/ipoib: Arm "send_cq" to process completions in due time (Gerd Rausch)  [Orabug: 31596798]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989189]  {CVE-2020-25643} 
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010303]  
  - SUNRPC: Remove xprt_connect_status() again (John Donnelly)  [Orabug: 32010341]  
  - geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32014099]  {CVE-2020-25645} 
  - nvme-fc: fix double-free scenarios on hw queues (James Smart)  [Orabug: 32019898]  
  - xfs: fix warning: unused variable 'sb' (John Donnelly)  [Orabug: 32010343]  
  - nvme-pci: remove queue_count_ops for write_queues and poll_queues (Minwoo Im)  [Orabug: 32010357]  
  - nvme: Corrects warning: unused variable 'startka' (John Donnelly)  [Orabug: 32010357]  
  - uek-rpm: config-aarch64-embedded add fast_kexec (Henry Willard)  [Orabug: 32010273]  
  - arm64: kexec: Add optional fast shutdown for kexec (Henry Willard)  [Orabug: 32010273]  
  - ocfs2: remove unused ocfs2_prepare_inode_for_refcount() (John Donnelly)  [Orabug: 32007790]  
  - rds: fixes warning: unused variable 'cache_sz_k' (John Donnelly)  [Orabug: 32008320]  
  - panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 32009003]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961118]  
  - certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961118]  
  - certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961118]  
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961118]  {CVE-2020-26541} 
  - Revert "l2tp: initialise PPP sessions before registering them" (George Kennedy)  [Orabug: 31906205]  
  - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265337]  {CVE-2019-19377} {CVE-2019-19377} {CVE-2019-19377} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 31351023]  {CVE-2019-19448} {CVE-2019-19448} 
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895824]  {CVE-2020-14385} 
  - net: add high_order_alloc_disable sysctl (Eric Dumazet)  [Orabug: 31907603]  
  - mm, page_alloc: double zone's batchsize (Aaron Lu)  [Orabug: 31907603]  
  - mm/free_pcppages_bulk: prefetch buddy while not holding lock (Aaron Lu)  [Orabug: 31907603]  
  - mm/free_pcppages_bulk: do not hold lock when picking pages to free (Aaron Lu)  [Orabug: 31907603]  
  - ghes: Corrects: warning: unused variable 'vaddr' [-Wunused-variable] (John Donnelly)  [Orabug: 31995830]  
  - ACPI: properties: Implement get_match_data() callback (Sinan Kaya)  [Orabug: 31995830]  
  - blk-mq: warning: unused variable 'ctx' (John Donnelly)  [Orabug: 31996284]  
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999336]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.2.el7uek]
changelog:
  - ocfs2: fix remounting needed after setfacl command (Gang He)   
  - Fix multiple variable definition with syzkaller (Hans Westgaard Ry)  [Orabug: 32008770]  
  - drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses (Thomas Hellstrom)  [Orabug: 32010349]  
  - i40e: Corrects i40e_setup_tc and i40e_xdp defined but not used warnings (John Donnelly)  [Orabug: 32034050]  
  - bnxt: Corrects warning: 'struct tc_cls_flower_offload' (John Donnelly)  [Orabug: 32041757]  
  - SCSI: Corrects 'ret' not used warning (John Donnelly)  [Orabug: 32041763]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042520]  
  - qed: Corrects warning: 'qed_iwarp_ll2_slowpath' defined but not used (John Donnelly)  [Orabug: 32052276]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.2.1.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040805]  {CVE-2020-8694} {CVE-2020-8695}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.0.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32138487]  {CVE-2020-8694} {CVE-2020-8695} 
  - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Filipe Manana)  [Orabug: 31864726]  
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864726]  
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864726]  {CVE-2019-19816} 
  - x86/apic: Get rid of multi CPU affinity (Thomas Gleixner)  [Orabug: 31975320]  
  - hv_netvsc: Set probe mode to sync (Haiyang Zhang)  [Orabug: 32132413]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113843]  
  - perf symbols: Check if we read regular file in dso__load() (Jiri Olsa)  [Orabug: 30696035]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 31990095]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 32003081]  
  - dm cache: remove all obsolete writethrough-specific code (Mike Snitzer)  [Orabug: 32010352]  
  - dm cache: pass cache structure to mode functions (Mike Snitzer)  [Orabug: 32010352]  
  - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Ming Lei)  [Orabug: 32010352]  
  - bcache: allocate meta data pages as compound pages (Coly Li)  [Orabug: 32010352]  
  - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (ChangSyun Peng)  [Orabug: 32010352]  
  - bcache: fix super block seq numbers comparision in register_cache_set() (Coly Li)  [Orabug: 32010352]  
  - md-cluster: fix wild pointer of unlock_all_bitmaps() (Zhao Heming)  [Orabug: 32010352]  
  - dm: use noio when sending kobject event (Mikulas Patocka)  [Orabug: 32010352]  
  - dm zoned: assign max_io_len correctly (Hou Tao)  [Orabug: 32010352]  
  - md: add feature flag MD_FEATURE_RAID0_LAYOUT (NeilBrown)  [Orabug: 32010352]  
  - dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone (Hannes Reinecke)  [Orabug: 32010352]  
  - dm mpath: switch paths in dm_blk_ioctl() code path (Martin Wilck)  [Orabug: 32010352]  
  - dm crypt: avoid truncating the logical block size (Eric Biggers)  [Orabug: 32010352]  
  - md: don't flush workqueue unconditionally in md_open (Guoqing Jiang)  [Orabug: 32010352]  
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32010658]  
  - jiffies: add utility function to calculate delta in ms (Matteo Croce)  [Orabug: 32010658]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021288]  {CVE-2020-12352} 
  - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context (WANG Chao)  [Orabug: 32021855]  
  - arm64: Corrects warning: ISO C90 forbids mixed declarations and code (John Donnelly)  [Orabug: 32040061]  
  - hwrng: cavium: Corrects warning: unused variable 'dev_id' (John Donnelly)  [Orabug: 32040066]  
  - Lock down /proc/kcore (redux!) (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - lockdown: Lock down perf when in confidentiality mode (David Howells)  [Orabug: 32053127]  
  - Lock down kprobes (redux!) (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - debugfs: whitelist spectre mitigation when locked down (Eric Snowberg)  [Orabug: 32053127]  
  - debugfs: Return -EPERM when locked down (Eric Snowberg)  [Orabug: 32053127]  
  - debugfs: Restrict debugfs when the kernel is locked down (David Howells)  [Orabug: 32053127]  
  - lockdown: Add __kernel_is_confidentiality_mode to figure out whether .. (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - dtrace: Restrict access when the kernel is locked down in confidentiality mode (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - bpf: Restrict bpf when kernel lockdown is in confidentiality mode (David Howells)  [Orabug: 32053127]  
  - security: Add a static lockdown policy LSM [diet-version] (Matthew Garrett)  [Orabug: 32053127]  
  - net/rds: Check for NULL rid_dev_rem_complete (Ka-Cheong Poon)  [Orabug: 32058618]  
  - scsi: Corrects warning: passing argument 1 of 'wwn_to_u64' mismatch (John Donnelly)  [Orabug: 32059622]  
  - ipvlan: Corrects warning: label 'unregister_netdev' defined but not used (John Donnelly)  [Orabug: 32059740]  
  - mm, compaction: raise compaction priority after it withdrawns (Vlastimil Babka)  [Orabug: 32065218]  
  - mm, reclaim: cleanup should_continue_reclaim() (Vlastimil Babka)  [Orabug: 32065218]  
  - mm, reclaim: make should_continue_reclaim perform dryrun detection (Hillf Danton)  [Orabug: 32065218]  
  - KVM: Drop "const" attribute from old memslot in commit_memory_region() (Sean Christopherson)  [Orabug: 32068898]  
  - octeontx2-pf: Return proper RSS indirection table size always (Sunil Goutham)  [Orabug: 32095651]  
  - octeontx2-af: Free RVU REE irq properly (Smadar Fuks)  [Orabug: 32095651]  
  - octeontx2-af: Free RVU NIX IRQs properly. (Rakesh Babu)  [Orabug: 32095651]  
  - octeontx2-af: Fix the BPID mask (Subbaraya Sundeep)  [Orabug: 32095651]  
  - octeontx2-pf: Fix receive buffer size calculation (Sunil Goutham)  [Orabug: 32095651]  
  - octeontx2-af: Fix updating wrong multicast list index in NIX_RX_ACTION (Naveen Mamindlapalli)  [Orabug: 32095651]  
  - octeontx2-af: Ratelimit prints from AF error interrupt handlers (Naveen Mamindlapalli)  [Orabug: 32095651]  
  - octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 32095651]  
  - octeontx2-af: Check the msix offset return value (Subbaraya Sundeep)  [Orabug: 32095651]  
  - octeontx2-af: make tx nibble fixup is always apply (Stanislaw Kardach)  [Orabug: 32095651]  
  - octeontx2-af: Stop kpu parsing at layer3 for ipv6 fragmented packets. (Abhijit Ayarekar)  [Orabug: 32095651]  
  - octeontx2-pf: Call mbox_reset before incrementing ack (Hariprasad Kelam)  [Orabug: 32095651]  
  - octeontx2-af: Simplify otx2_mbox_reset call (Hariprasad Kelam)  [Orabug: 32095651]  
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095768]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095962]  
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113532]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.1.el7uek]
changelog:
  - lockdown: By default run in integrity mode. (Konrad Rzeszutek Wilk)  [Orabug: 32131561]  
  - Revert "iomap: Fix pipe page leakage during splicing" (George Kennedy)  [Orabug: 32136519]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32138016]  
  - Revert "pci: hardcode enumeration" (Dave Aldridge)  [Orabug: 32152249]  
  - hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152144]  
  - hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152144]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.2.el7uek]
changelog:
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122729]  {CVE-2020-25668} 
  - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122952]  {CVE-2020-25656} {CVE-2020-25656} 
  - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122952]  {CVE-2020-25656} 
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131175]  {CVE-2020-25704} 
  - perf/core: Fix bad use of igrab() (Song Liu)  [Orabug: 32131175]  {CVE-2020-25704} 
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136898]  
  - xen/gntdev: fix up blockable calls to mn_invl_range_start (Michal Hocko)  [Orabug: 32139244]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.3.el7uek]
changelog:
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005117]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005117]  
  - lib/scatterlist: Add SG_CHAIN and SG_END macros for LSB encodings (Anshuman Khandual)  [Orabug: 32005117]  
  - lib/scatterlist: Avoid potential scatterlist entry overflow (Tvrtko Ursulin)  [Orabug: 32005117]  
  - lib/scatterlist: Fix offset type in sg_alloc_table_from_pages (Tvrtko Ursulin)  [Orabug: 32005117]  
  - uek-rpm: Don't build emb2 kernel for mips (Dave Kleikamp)  [Orabug: 32176889]  
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187748]  {CVE-2020-28974} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32201999]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177548]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.4.el7uek]
changelog:
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227961]  {CVE-2020-25705} 
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159055]  
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159975]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159975]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176263]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176263]  {CVE-2020-28915} 
  - block: Fix use-after-free in blkdev_get() (Jason Yan)  [Orabug: 32194608]  {CVE-2020-15436} 
  - serial: 8250: fix null-ptr-deref in serial8250_start_tx() (Yang Yingliang)  [Orabug: 32194712]  {CVE-2020-15437} 
  - staging: rts5208: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218496]  
  - misc: rtsx: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218496]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.5.el7uek]
changelog:
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210463]  
  - mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() (Andrea Arcangeli)  [Orabug: 32212583]  {CVE-2020-29368} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233358]  {CVE-2020-14351}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.404.0.el7uek]
changelog:
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32201584]  
  - vhost/scsi: Use copy_to_iter() to send control queue response (Bijan Mottahedeh)  [Orabug: 32201584]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32201584]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32201584]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32201584]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.404.1.el7uek]
changelog:
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260256]  {CVE-2020-29569}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.405.0.el7uek]
changelog:
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251913]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266681]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266681]  {CVE-2020-29660} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337718]  
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349207]  {CVE-2020-36158} 
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355210]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.405.1.el7uek]
changelog:
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372162]  
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378208]  
  - sysctl: handle overflow in proc_get_long (Christian Brauner)  [Orabug: 32382641]  
  - net/mlx5: Use a single MSIX vector for all control EQs in VFs (Ariel Levkovich)  [Orabug: 31785275]  
  - net/mlx5: Fix available EQs FW used to reserve (Denis Drozdov)  [Orabug: 31785275]  
  - net/mlx5: Use max_num_eqs for calculation of required MSIX vectors (Denis Drozdov)  [Orabug: 31785275]  
  - net/mlx5: Expose DEVX specification (Yishai Hadas)  [Orabug: 31785275]  
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32245085]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248040]  {CVE-2020-28374}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.1.el7uek]
changelog:
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131174]  {CVE-2020-25704} 
  - perf/core: Fix bad use of igrab() (Song Liu)  [Orabug: 32131174]  {CVE-2020-25704} 
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136897]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136897]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136897]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136897]  
  - xen/gntdev: fix up blockable calls to mn_invl_range_start (Michal Hocko)  [Orabug: 32139243]  
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32047440]  
  - platform/x86: ISST: Add new PCI device ids (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Allow additional TRL MSRs (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Use dev_get_drvdata (Chuhong Yuan)  [Orabug: 32047440]  
  - platform/x86: ISST: Restore state on resume (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select mmio interface (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Store per CPU information (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add common API to register and handle ioctls (Srinivas Pandruvada)  [Orabug: 32047440]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.2.el7uek]
changelog:
  - lockdown: make lockdown mode available in securityfs (Alan Maguire)  [Orabug: 32176137]  
  - uek-rpm: Don't build emb2 kernel for mips (Dave Kleikamp)  [Orabug: 32176895]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177989]  
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32195765]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32195765]  
  - lib/scatterlist: Add SG_CHAIN and SG_END macros for LSB encodings (Anshuman Khandual)  [Orabug: 32195765]  
  - lib/scatterlist: Avoid potential scatterlist entry overflow (Tvrtko Ursulin)  [Orabug: 32195765]  
  - lib/scatterlist: Fix offset type in sg_alloc_table_from_pages (Tvrtko Ursulin)  [Orabug: 32195765]  
  - rds: fix out-of-tree build broken by tracepoints (Alan Maguire)  [Orabug: 32185345]  
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177547]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.3.el7uek]
changelog:
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32173883]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32173883]  
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32177802]  
  - scsi: qla2xxx: Update version to 10.02.00.103-k (Nilesh Javali)  [Orabug: 32213922]  
  - qla2xxx: back port upstream patch (Quinn Tran)  [Orabug: 32213922]  
  - scsi: scsi_transport_fc: Add FPIN fc event codes (James Smart)  [Orabug: 32213922]  
  - scsi: scsi_transport_fc: refactor event posting routines (James Smart)  [Orabug: 32213922]  
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)  [Orabug: 32213922]  
  - Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Check if FW supports MQ before enabling (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Reduce noisy debug message (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Reduce duplicate code in reporting speed (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Indicate correct supported speeds for Mezz card (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Flush I/O on zone disable (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Flush all sessions on zone disable (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: remove incorrect sparse #ifdef (Linus Torvalds)  [Orabug: 32213922]  
  - scsi: qla2xxx: Return EBUSY on fcport deletion (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix return of uninitialized value in rval (Colin Ian King)  [Orabug: 32213922]  
  - scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (Tom Rix)  [Orabug: 32213922]  
  - scsi: qla2xxx: Do not consume srb greedily (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Use constant when it is known (Pavel Machek (CIP))  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (Ye Bin)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (Ye Bin)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (Ye Bin)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix crash on session cleanup with unload (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix reset of MPI firmware (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix MPI reset needed message (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix buffer-buffer credit extraction error (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Correct the check for sscanf() return value (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Update version to 10.02.00.102-k (Nilesh Javali)  [Orabug: 32213922]  
  - scsi: qla2xxx: Add SLER and PI control support (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Add rport fields in debugfs (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make tgt_port_database available in initiator mode (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix I/O errors during LIP reset tests (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Performance tweak (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix memory size truncation (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Setup debugfs entries for remote ports (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix I/O failures during remote port toggle testing (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove unneeded variable 'rval' (Jason Yan)  [Orabug: 32213922]  
  - scsi: qla2xxx: Handle incorrect entry_type entries (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix the return value (Xianting Tian)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (Tianjia Zhang)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (Tianjia Zhang)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove redundant variable initialization (Tianjia Zhang)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove superfluous memset() (Li Heng)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix regression on sparc64 (René Rebe)  [Orabug: 32213922]  
  - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (Enzo Matsumiya)  [Orabug: 32213922]  
  - scsi: qla2xxx: Address a set of sparse warnings (Shyam Sundar)  [Orabug: 32213922]  
  - scsi: qla2xxx: SAN congestion management implementation (Shyam Sundar)  [Orabug: 32213922]  
  - scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (Shyam Sundar)  [Orabug: 32213922]  
  - scsi: qla2xxx: Introduce a function for computing the debug message prefix (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove a superfluous cast (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Initialize 'n' before using it (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (James Smart)  [Orabug: 32213922]  
  - scsi: fc: add FPIN ELS definition (James Smart)  [Orabug: 32213922]  
  - staging: rts5208: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218536]  
  - misc: rtsx: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218536]  
  - ACPI: NFIT: Add runtime firmware activate support (Dan Williams)  [Orabug: 32224144]  
  - PM, libnvdimm: Add runtime firmware activation support (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Convert to DEVICE_ATTR_ADMIN_RO() (Dan Williams)  [Orabug: 32224144]  
  - driver-core: Introduce DEVICE_ATTR_ADMIN_{RO,RW} (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Emulate firmware activation commands (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Prepare nfit_ctl_test() for ND_CMD_CALL emulation (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Add command debug messages (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Cleanup dimm index passing (Dan Williams)  [Orabug: 32224144]  
  - ACPI: NFIT: Define runtime firmware activation commands (Dan Williams)  [Orabug: 32224144]  
  - ACPI: NFIT: Move bus_dsm_mask out of generic nvdimm_bus_descriptor (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Validate command family indices (Dan Williams)  [Orabug: 32224144]  
  - PM: hibernate: Incorporate concurrency handling (Domenico Andreoli)  [Orabug: 32224144]  
  - libnvdimm: Move nvdimm_bus_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm/of_pmem: Provide a unique name for bus provider (Aneesh Kumar K.V)  [Orabug: 32224144]  
  - libnvdimm: Move nvdimm_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_mapping_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_region_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_numa_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_device_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move region attribute group definition (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move attribute groups to device type (Dan Williams)  [Orabug: 32224144]  
  - acpi/nfit: improve bounds checking for 'func' (Dan Carpenter)  [Orabug: 32224144]  
  - ACPI/nfit: delete the function to_acpi_nfit_desc (Xiaochun Lee)  [Orabug: 32224144]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.4.el7uek]
changelog:
  - bnxt_en: Release PCI regions when DMA mask setup fails during probe. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: fix error return code in bnxt_init_board() (Zhang Changzhong)  [Orabug: 32223677]  
  - bnxt_en: fix error return code in bnxt_init_one() (Zhang Changzhong)  [Orabug: 32223677]  
  - bnxt_en: Fix counter overflow logic. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: read EEPROM A2h address using page 0 (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Re-write PCI BARs after PCI fatal error. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Set driver default message level. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Enable online self tests for multi-host/NPAR mode. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Eliminate unnecessary RX resets. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Add a software counter for RX ring reset. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Implement RX ring reset in response to buffer errors. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Refactor bnxt_init_one_rx_ring(). (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Refactor bnxt_free_rx_skbs(). (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Update firmware interface spec to 1.10.1.68. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Improve preset max value for ethtool -l. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Handle ethernet link being disabled by firmware. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: add basic infrastructure to support PAM4 link speeds (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: refactor bnxt_get_fw_speed() (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: refactor code to limit speed advertising (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Update firmware interface spec to 1.10.1.65. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Fix wrong flag value passed to HWRM_PORT_QSTATS_EXT fw call. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Fix HWRM_FUNC_QSTATS_EXT firmware call. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Return -EOPNOTSUPP for ETHTOOL_GREGS on VFs. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: return proper error codes in bnxt_show_temp (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Setup default RSS map in all scenarios. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: init RSS table for Minimal-Static VF reservation (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: fix HWRM error when querying VF temperature (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Don't query FW when netif_running() is false. (Pavan Chebbi)  [Orabug: 32223677]  
  - bnxt_en: Add support for 'ethtool -d' (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Switch over to use the 64-bit software accumulated counters. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Accumulate all counters. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Retrieve hardware masks for port counters. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Retrieve hardware counter masks from firmware if available. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Allocate additional memory for all statistics blocks. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Refactor statistics code and structures. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Use macros to define port statistics size and offset. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Update firmware interface to 1.10.1.54. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Remove PCIe non-counters from ethtool statistics (Vasundhara Volam)  [Orabug: 32223677]  
  - net: bnxt: don't complain if TC flower can't be supported (Jakub Kicinski)  [Orabug: 32223677]  
  - bnxt_en: Fix completion ring sizing with TPA enabled. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Init ethtool link settings after reading updated PHY configuration. (Vasundhara Volam)  [Orabug: 32223677]  
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233354]  {CVE-2020-14351} 
  - vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32201608]  
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32201608]  
  - vhost/scsi: Use copy_to_iter() to send control queue response (Bijan Mottahedeh)  [Orabug: 32201608]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32201608]  
  - vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32201608]  
  - vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32201608]  
  - vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32201608]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32201608]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32201608]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210458]  
  - intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32219015]  
  - qla2xxx: Add missing module version banner (John Donnelly)  [Orabug: 32244934]  
  - scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: A small correction in _base_process_reply_queue (Tomas Henzl)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix sync irqs (Tomas Henzl)  [Orabug: 32223781]  
  - scsi: mpt3sas: Detect tampered Aero and Sea adapters (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (Tomas Henzl)  [Orabug: 32223781]  
  - scsi: mpt3sas: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32223781]  
  - scsi: mpt3sas: Remove superfluous memset() (Li Heng)  [Orabug: 32223781]  
  - scsi: mpt3sas: Update driver version to 35.100.00.00 (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Postprocessing of target and LUN reset (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Rename and export interrupt mask/unmask functions (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Cancel the running work during host reset (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Dump system registers for debugging (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix kdoc comments format (Damien Le Moal)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix set but unused variable (Damien Le Moal)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix error returns in BRM_status_show (Johannes Thumshirn)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix unlock imbalance (Damien Le Moal)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix spelling mistake (Flavio Suligoi)  [Orabug: 32223781]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.5.el7uek]
changelog:
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251912]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266679]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266679]  {CVE-2020-29660}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.6.el7uek]
changelog:
  - net/rds: Only yield with a valid "i_connecting_ts" timestamp (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Only increment rdma_resolve_route timeout on error (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Don't block workqueues "cma_wq" and "cm.wq" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Don't drop neighbor loopback connection (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Take the GID offset into account for IB devices (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Leave the neighbor cache alone (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Give each connection its own workqueue (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Disassociate ic and cm_id before rdma_destroy_id (Gerd Rausch)  [Orabug: 31030774]  
  - Revert "rds: ib: Implement proper cm_id compare" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Add a rdma_cm watchdog timer (Gerd Rausch)  [Orabug: 31030774]  
  - Revert "RDS: IB: fix panic with handlers running post teardown" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Release all resources allocated by "rds_ib_setup_qp" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Change the "rds_aux_wq" workqueue to loose order (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Don't sleep inside worker threads (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Fix a few race conditions (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Execute "rdma_destroy_id" in the background (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Delay reconnects from passive side by 3 seconds (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Drop connections when peers perform failover (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Yield to incoming connection requests (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Remove stale comments about random backoff (Gerd Rausch)  [Orabug: 31030774]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.7.el7uek]
changelog:
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32047319]  
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260255]  {CVE-2020-29569} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337717]  
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349205]  {CVE-2020-36158} 
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355208]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.8.el7uek]
changelog:
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32341032]  
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372161]  
  - A/A Bonding: Fix a one-byte-off kmalloc (Håkon Bugge)  [Orabug: 32380826]  
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32245078]  
  - A/A Bonding: Introduce selective interface name inclusion (Håkon Bugge)  [Orabug: 32350976]  
  - net/mlx5: Use a single MSIX vector for all control EQs in VFs (Ariel Levkovich)  [Orabug: 32368440]  
  - net/mlx5: Fix available EQs FW used to reserve (Denis Drozdov)  [Orabug: 32368440]  
  - net/mlx5: Use max_num_eqs for calculation of required MSIX vectors (Denis Drozdov)  [Orabug: 32368440]  
  - net/mlx5: Expose DEVX specification (Yishai Hadas)  [Orabug: 32368440]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248037]  {CVE-2020-28374}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.9.el7uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426612]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 31175013]  
  - net/rds: Incorrect RDS protocol version fall back (Ka-Cheong Poon)  [Orabug: 32376163]  
  - net/rds: Missing RDS/RDMA private data in response to connection request (Ka-Cheong Poon)  [Orabug: 32388407]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.10.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492110]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - tap: fix use-after-free (Michael S. Tsirkin)  [Orabug: 32466083]  
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471695]  
  - Fix double free KASAN warnings and use after free of kmalloc-32 object. (Imran Khan)  [Orabug: 32480357]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.500.9.1.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492110]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.9.2.el7uek]
changelog:
  - Fix double free KASAN warnings and use after free of kmalloc-32 object. (Imran Khan)  [Orabug: 32515995]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.9.3.el7uek]
changelog:
  - net/rds: Reject error code change (Ka-Cheong Poon)  [Orabug: 32577425]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran)  [Orabug: 32577399]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  [Orabug: 32577394]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.501.0.el7uek]
changelog:
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531559]  
  - uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches (Dave Kleikamp)  [Orabug: 32532588]  
  - dts/pensando: Fix compatile -> compatible typeo. (David Clear)  [Orabug: 32532588]  
  - Interrupt domain controllers for Elba ASIC. (David Clear)  [Orabug: 32532588]  
  - elba_defconfig: CONFIG_PTP_1588_CLOCK=y (David Clear)  [Orabug: 32532588]  
  - soc/pensando: pcie driver (David Clear)  [Orabug: 32532588]  
  - pcie: control access to pcie clock domain registers (David Clear)  [Orabug: 32532588]  
  - mmc: sdhci-cadence-elba ADMA and HS200 tuning support (David Clear)  [Orabug: 32532588]  
  - enable rcu callback offloading & adaptive tick mode to reduce jitter (David Clear)  [Orabug: 32532588]  
  - uek-rpm: Enable perf trace support for OL7 kernel builds. (Mridula Shastry)  [Orabug: 32528194]  
  - uek-rpm: update config-aarch-embedded2 for Elba (Dave Kleikamp)  [Orabug: 32361844]  
  - elba: u-boot environment partitions in the device-tree (David Clear)  [Orabug: 32361844]  
  - i2c: Add Elba Ortano Lattice RD1173 I2C controller driver. (David Clear)  [Orabug: 32361844]  
  - elba: one more mnet for elba.dtsi (David Clear)  [Orabug: 32361844]  
  - elba: Add IPv6 support to elba_defconfig (David Clear)  [Orabug: 32361844]  
  - mmc: sdhci-cadence-elba sdhci driver cleanup (David Clear)  [Orabug: 32361844]  
  - spi-dw: custom chip-select handler for elba (David Clear)  [Orabug: 32361844]  
  - arch/arm64: Pensando elba dts and config files (David Clear)  [Orabug: 32361844]  
  - drivers/soc/pensando: crash dump driver. (David Clear)  [Orabug: 32361844]  
  - drivers/pensando/soc: Boot State Machine (BSM) integration. (David Clear)  [Orabug: 32361844]  
  - drivers/soc/pensando: /dev/capmem driver. (David Clear)  [Orabug: 32361844]  
  - drivers/mmc/host: Pensando Elba support in the Cadence EMMC host controller (David Clear)  [Orabug: 32361844]  
  - drivers/gpio: support the Elba SPI chip-selects. (David Clear)  [Orabug: 32361844]  
  - arch/arm64: Pensando Elba SoC declaration. (David Clear)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: fix PHY write (Vladimir Kondratiev)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN for UniPhier (Masahiro Yamada)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: remove unneeded 'inline' marker (Masahiro Yamada)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: use struct_size() helper (Gustavo A. R. Silva)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: fix logically and structurally dead code (Gustavo A. R. Silva)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: send tune request twice to work around errata (Masahiro Yamada)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: use bitfield access macros for cleanup (Masahiro Yamada)  [Orabug: 32361844]  
  - Revert "Support the reset pulse width from the device-tree." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Initial Pensando Capri SoC declaration" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add Capri EMMC phy and instantiate the driver in the dts" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Capri SPI driver" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Interrupt domain controllers for Capri ASIC." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add uio support for Capri PCIE and Link interrupts" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Pensando/Capri PCIE panic handler." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Pensando crash dump driver" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Pensando Boot State Machine (BSM) integration." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add mnic nodes to the Pensando devicetree" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "mtd/spi-nor/cadence-quadspi.c: Speed up reads." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add /proc/xmaps" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add Pensando Capri board .dts files and default configs" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Provide for precise control of pgprot for Pensando" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Kconfig option to disable outer-cache-allocate for Pensando" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add /dev/capmem driver for Pensando" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Make low-speed APB bus accesses single threaded" (Dave Kleikamp)  [Orabug: 32361844]  
  - sched/topology: Assert non-NUMA topology masks don't (partially) overlap (Valentin Schneider)  [Orabug: 32485794]  
  - x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov)  [Orabug: 32409137]  
  - x86/msr: Downgrade unrecognized MSR message (Borislav Petkov)  [Orabug: 32409137]  
  - x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov)  [Orabug: 32409137]  
  - x86/msr: Prevent userspace MSR access from dominating the console (Chris Down)  [Orabug: 32409137]  
  - x86/msr: Filter MSR writes (Borislav Petkov)  [Orabug: 32409137]  
  - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32409137]  
  - tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32409137]  
  - tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32409137]  
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422664]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422664]  
  - ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32435220]  {CVE-2020-16120} 
  - ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32435220]  {CVE-2020-16120} 
  - ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32435220]  
  - l2tp: fix race in pppol2tp_release with session object destroy (James Chapman)  [Orabug: 32435324]  
  - l2tp: fix races with tunnel socket close (James Chapman)  [Orabug: 32435324]  
  - l2tp: don't use inet_shutdown on ppp session destroy (James Chapman)  [Orabug: 32435324]  
  - l2tp: don't use inet_shutdown on tunnel destroy (James Chapman)  [Orabug: 32435324]  
  - l2tp: exit_net cleanup check added (Vasily Averin)  [Orabug: 32435324]  
  - l2tp: remove the .tunnel_sock field from struct pppol2tp_session (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: avoid using ->tunnel_sock for getting session's parent tunnel (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove .tunnel_sock from struct l2tp_eth (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: don't close sessions in l2tp_tunnel_destruct() (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove field 'dev' from struct l2tp_eth (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove l2tp_tunnel_count and l2tp_session_count (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove ->ref() and ->deref() (Guillaume Nault)  [Orabug: 32435324]  
  - net: l2tp: mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 32435324]  
  - l2tp: initialise PPP sessions before registering them (Guillaume Nault)  [Orabug: 32435324]  
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442506]  
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Don't enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447189]  {CVE-2021-3347} 
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447287]  {CVE-2021-3348} 
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32457375]  
  - net/rds: WARNING in rds_conn_drop (Ka-Cheong Poon)  [Orabug: 32481707]  
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490010]  
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490032]  
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492279]  
  - selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492279]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.501.1.el7uek]
changelog:
  - ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy)  [Orabug: 32620381]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.501.2.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.0.el7uek]
changelog:
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32586918]  
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32586918]  
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580944]  
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576073]  
  - vhost: do not try to access device IOTLB when not initialized (Jason Wang)  [Orabug: 31906788]  
  - uek-rpm: config-aarch-embedded2 update for Feb 2021 Elba patches (Dave Kleikamp)  [Orabug: 32544715]  
  - huge page support for device memory (Neel Patel)  [Orabug: 32544715]  
  - mmc: sdhci-cadence-elba.c: Remove SDHCI_QUIRK_BROKEN_TIMEOUT_VAL (David Clear)  [Orabug: 32544715]  
  - KVM: nVMX: use correct clean fields when copying from eVMCS (Vitaly Kuznetsov)  [Orabug: 32544092]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492971]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492971]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran)  [Orabug: 32527186]  
  - net/rds: Reject error code change (Ka-Cheong Poon)  [Orabug: 32565543]  
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 32519917]  
  - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32546040]  
  - x86/kvm/hyper-v: move VMX controls sanitization out of nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 32543800]  
  - x86/kvm/hyper-v: remove stale evmcs_already_enabled check from nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 32543800]  
  - net/rds: Need to check shutdown progress in rds_conn_path_destroy() (Ka-Cheong Poon)  [Orabug: 32536002]  
  - A/A Bonding: In rdmaip synchronize access to ip_config[].rdmaip_dev (Sharath Srinivasan)  [Orabug: 32050122]  
  - net/rds: In rds_send_xmit() use sg_next() to get the next sg entry (Sharath Srinivasan)  [Orabug: 32125836]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  [Orabug: 32551377]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.1.el7uek]
changelog:
  - mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32619973]  
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555678]  
  - ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy)  [Orabug: 32608965]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.2.el7uek]
changelog:
  - EDAC: skx_common: downgrade message importance on missing PCI device (Aristeu Rozanski)  [Orabug: 32651294]  
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651477]  {CVE-2021-28038} 
  - KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32633928]  
  - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640132]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.3.el7uek]
changelog:
  - video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32620797]  
  - video: hyperv_fb: Fix the cache type when mapping the VRAM (Dexuan Cui)  [Orabug: 32620797]  
  - RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32644356]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.4.el7uek]
changelog:
  - Revert "rds: ib: Remove two ib_modify_qp() calls" (Sharath Srinivasan)  [Orabug: 32715567]  
  - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy)  [Orabug: 32532514]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.5.el7uek]
changelog:
  - md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32655105]  
  - IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751642]  
  - IB/mlx5: Use fragmented QP's buffer for in-kernel users (Guy Levi)  [Orabug: 32627473]  
  - net/mlx5: Refactor fragmented buffer struct fields and init flow (Tariq Toukan)  [Orabug: 32627473]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.0.el7uek]
changelog:
  - tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32660047]  
  - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit)  [Orabug: 32640437]  
  - iommu/amd: Increase interrupt remapping table limit to 512 entries (Suravee Suthikulpanit)  [Orabug: 32640437]  
  - rds: ib: move statistics counting from caller to callee in rds_ib_recv_refill (Håkon Bugge)  [Orabug: 32702021]  
  - uek-rpm: Enable IRQ time accounting option for UEK5 (Saeed Mirzamohammadi)  [Orabug: 32733985]  
  - btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669453]  {CVE-2021-28964} 
  - perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669472]  {CVE-2021-28971} 
  - xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697854]  {CVE-2021-28688} 
  - ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32545320]  
  - rds: Add code to debug rds_tcp loopback hang (Rao Shoaib)  [Orabug: 32422982]  
  - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656764]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656764]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656764]  {CVE-2020-27170} {CVE-2020-27171} 
  - netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709123]  {CVE-2021-29650} 
  - netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal)  [Orabug: 32709123]  {CVE-2021-29650}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.1.el7uek]
changelog:
  - bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759961]  {CVE-2021-29154} 
  - uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32781585]  
  - ext4: handle error of ext4_setup_system_zone() on remount (Jan Kara)  [Orabug: 32656590]  {CVE-2021-3428}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.1.1.el7uek]
changelog:
  - net/mlx5e: Rx, Fix checksum calculation for new hardware (Saeed Mahameed)  [Orabug: 32899003]  
  - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (Saeed Mahameed)  [Orabug: 32899003]  
  - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames (Cong Wang)  [Orabug: 32899003]  
  - mlx5: fix get_ip_proto() (Cong Wang)  [Orabug: 32899003]  
  - net/mlx5e: Set ECN for received packets using CQE indication (Natali Shechtman)  [Orabug: 32899003]  
  - net/mlx5e: CHECKSUM_COMPLETE offload for VLAN/QinQ packets (Gal Pressman)  [Orabug: 32899003]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.0.el7uek]
changelog:
  - IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32853000]  
  - x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817187]  
  - net/mlx5e: Rx, Fix checksum calculation for new hardware (Saeed Mahameed)  [Orabug: 32553186]  
  - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (Saeed Mahameed)  [Orabug: 32553186]  
  - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames (Cong Wang)  [Orabug: 32553186]  
  - mlx5: fix get_ip_proto() (Cong Wang)  [Orabug: 32553186]  
  - net/mlx5e: Set ECN for received packets using CQE indication (Natali Shechtman)  [Orabug: 32553186]  
  - net/mlx5e: CHECKSUM_COMPLETE offload for VLAN/QinQ packets (Gal Pressman)  [Orabug: 32553186]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.1.el7uek]
changelog:
  - Linux 4.14.208 (Greg Kroah-Hartman)   
  - ACPI: GED: fix -Wformat (Nick Desaulniers)   
  - can: proc: can_remove_proc(): silence remove_proc_entry warning (Zhang Changzhong)   
  - mac80211: always wind down STA state (Johannes Berg)   
  - Input: sunkbd - avoid use-after-free in teardown paths (Dmitry Torokhov)   
  - powerpc/8xx: Always fault when _PAGE_ACCESSED is not set (Christophe Leroy)   
  - gpio: mockup: fix resource leak in error path (Bartosz Golaszewski)   
  - i2c: imx: Fix external abort on interrupt in exit paths (Krzysztof Kozlowski)   
  - i2c: imx: use clk notifier for rate changes (Lucas Stach)   
  - powerpc/64s: flush L1D after user accesses (Nicholas Piggin)   {CVE-2020-4788} 
  - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed (Nicholas Piggin)   
  - powerpc: Fix __clear_user() with KUAP enabled (Andrew Donnellan)   
  - powerpc: Implement user_access_begin and friends (Christophe Leroy)   
  - powerpc: Add a framework for user access tracking (Christophe Leroy)   
  - powerpc/64s: flush L1D on kernel entry (Nicholas Piggin)   {CVE-2020-4788} 
  - powerpc/64s: move some exception handlers out of line (Daniel Axtens)   
  - powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL (Daniel Axtens)   
  - Linux 4.14.207 (Greg Kroah-Hartman)   
  - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race (Nicholas Piggin)   
  - Convert trailing spaces and periods in path components (Boris Protopopov)   
  - reboot: fix overflow parsing reboot cpu number (Matteo Croce)   
  - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" (Matteo Croce)   
  - perf/core: Fix crash when using HW tracing kernel filters (Mathieu Poirier)   
  - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (Anand K Mistry)   
  - random32: make prandom_u32() output unpredictable (George Spelvin)   
  - net: Update window_clamp if SOCK_RCVBUF is set (Mao Wenan)   
  - r8169: fix potential skb double free in an error path (Heiner Kallweit)   
  - vrf: Fix fast path output packet handling with async Netfilter rules (Martin Willi)   
  - net/x25: Fix null-ptr-deref in x25_connect (Martin Schiller)   
  - net/af_iucv: fix null pointer dereference on shutdown (Ursula Braun)   
  - IPv6: Set SIT tunnel hard_header_len to zero (Oliver Herms)   
  - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" (Stefano Stabellini)   
  - pinctrl: amd: fix incorrect way to disable debounce filter (Coiby Xu)   
  - pinctrl: amd: use higher precision for 512 RtcClk (Coiby Xu)   
  - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (Thomas Zimmermann)   
  - don't dump the threads that had been already exiting when zapped. (Al Viro)   
  - selinux: Fix error return code in sel_ib_pkey_sid_slow() (Chen Zhou)   
  - mei: protect mei_cl_mtu from null dereference (Alexander Usyskin)   
  - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (Chris Brandt)   
  - uio: Fix use-after-free in uio_unregister_device() (Shin'ichiro Kawasaki)   
  - thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (Jing Xiangfeng)   
  - ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (Joseph Qi)   
  - ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA (Kaixu Xia)   
  - perf: Fix get_recursion_context() (Peter Zijlstra)   
  - cosa: Add missing kfree in error path of cosa_write (Wang Hai)   
  - of/address: Fix of_node memory leak in of_dma_is_coherent (Evan Nimmo)   
  - xfs: fix a missing unlock on error in xfs_fs_map_blocks (Christoph Hellwig)   
  - xfs: fix rmap key and record comparison functions (Darrick J. Wong)   
  - xfs: fix flags argument to rmap lookup when converting shared file rmaps (Darrick J. Wong)   
  - nbd: fix a block_device refcount leak in nbd_release (Christoph Hellwig)   
  - pinctrl: aspeed: Fix GPI only function problem. (Billy Tsai)   
  - ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template (Andrew Jeffery)   
  - pinctrl: intel: Set default bias in case no particular value given (Andy Shevchenko)   
  - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (Hannes Reinecke)   
  - cfg80211: regulatory: Fix inconsistent format argument (Ye Bin)   
  - mac80211: fix use of skb payload instead of header (Johannes Berg)   
  - drm/amdgpu: perform srbm soft reset always on SDMA resume (Evan Quan)   
  - scsi: hpsa: Fix memory leak in hpsa_init_one() (Keita Suzuki)   
  - gfs2: check for live vs. read-only file system in gfs2_fitrim (Bob Peterson)   
  - gfs2: Add missing truncate_inode_pages_final for sd_aspace (Bob Peterson)   
  - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free (Bob Peterson)   
  - usb: gadget: goku_udc: fix potential crashes in probe (Evgeny Novikov)   
  - ath9k_htc: Use appropriate rs_datalen type (Masashi Honma)   
  - Btrfs: fix missing error return if writeback for extent buffer never started (Filipe Manana)   
  - xfs: flush new eof page on truncate to avoid post-eof corruption (Brian Foster)   
  - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (Stephane Grosjean)   
  - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (Stephane Grosjean)   
  - can: peak_usb: add range checking in decode operations (Dan Carpenter)   
  - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (Oleksij Rempel)   
  - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (Oliver Hartkopp)   
  - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (Vincent Mailhol)   
  - can: rx-offload: don't call kfree_skb() from IRQ context (Marc Kleine-Budde)   
  - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (Dan Carpenter)   
  - perf tools: Add missing swap for ino_generation (Jiri Olsa)   
  - net: xfrm: fix a race condition during allocing spi (zhuoliang zhang)   
  - hv_balloon: disable warning when floor reached (Olaf Hering)   
  - genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY (Marc Zyngier)   
  - btrfs: reschedule when cloning lots of extents (Johannes Thumshirn)   
  - btrfs: sysfs: init devices outside of the chunk_mutex (Josef Bacik)   
  - nbd: don't update block size after device is started (Ming Lei)   
  - time: Prevent undefined behaviour in timespec64_to_ns() (Zeng Tao)   
  - mm: mempolicy: fix potential pte_unmap_unlock pte error (Shijie Luo)   
  - ring-buffer: Fix recursion protection transitions between interrupt context (Steven Rostedt (VMware))   
  - regulator: defer probe when trying to get voltage from unresolved supply (Michał Mirosław)   
  - rds: Change return code from rds_send_xmit() when lock is taken (Håkon Bugge)  [Orabug: 32852117]  
  - rds: Fix unintended fall-through in rds_send_worker (Håkon Bugge)  [Orabug: 32852117]  
  - tcp: send in-queue bytes in cmsg upon read (Soheil Hassas Yeganeh)  [Orabug: 32871463]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.2.el7uek]
changelog:
  - md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32887159]  
  - video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32856879]  
  - Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32856879]  
  - Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32856879]  
  - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860493]  {CVE-2021-31916} 
  - net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry)  [Orabug: 32559464]  
  - Linux 4.14.210 (Greg Kroah-Hartman)   
  - USB: core: Fix regression in Hercules audio card (Alan Stern)   
  - USB: core: add endpoint-blacklist quirk (Johan Hovold)   
  - x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (Xiaochen Shen)   
  - x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (Xiaochen Shen)   
  - usb: gadget: Fix memleak in gadgetfs_fill_super (Zhang Qilong)   
  - usb: gadget: f_midi: Fix memleak in f_midi_alloc (Zhang Qilong)   
  - USB: core: Change %pK for __user pointers to %px (Alan Stern)   
  - perf probe: Fix to die_entrypc() returns error correctly (Masami Hiramatsu)   
  - can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (Marc Kleine-Budde)   
  - platform/x86: toshiba_acpi: Fix the wrong variable assignment (Kaixu Xia)   
  - can: gs_usb: fix endianess problem with candleLight firmware (Marc Kleine-Budde)   
  - efivarfs: revert "fix memory leak in efivarfs_create()" (Ard Biesheuvel)   
  - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (Lijun Pan)   
  - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (Lijun Pan)   
  - net: ena: set initial DMA width to avoid intel iommu issue (Shay Agroskin)   
  - nfc: s3fwrn5: use signed integer for parsing GPIO numbers (Krzysztof Kozlowski)   
  - IB/mthca: fix return value of error branch in mthca_init_cq() (Xiongfeng Wang)   
  - scsi: ufs: Fix race between shutdown and runtime resume flow (Stanley Chu)   
  - batman-adv: set .owner to THIS_MODULE (Taehee Yoo)   
  - phy: tegra: xusb: Fix dangling pointer on probe failure (Marc Zyngier)   
  - perf/x86: fix sysfs type mismatches (Sami Tolvanen)   
  - scsi: target: iscsi: Fix cmd abort fabric stop race (Mike Christie)   
  - scsi: libiscsi: Fix NOP race condition (Lee Duncan)   
  - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size (Sugar Zhang)   
  - nvme: free sq/cq dbbuf pointers when dbbuf set fails (Minwoo Im)   
  - proc: don't allow async path resolution of /proc/self components (Jens Axboe)   
  - HID: Add Logitech Dinovo Edge battery quirk (Hans de Goede)   
  - x86/xen: don't unbind uninitialized lock_kicker_irq (Brian Masney)   
  - dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant (Marc Ferland)   
  - HID: hid-sensor-hub: Fix issue with devices with no report ID (Pablo Ceballos)   
  - Input: i8042 - allow insmod to succeed on devices without an i8042 controller (Hans de Goede)   
  - HID: cypress: Support Varmilo Keyboards' media hotkeys (Frank Yang)   
  - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (Kai Vehmanen)   
  - ALSA: hda/hdmi: Use single mutex unlock in error paths (Takashi Iwai)   
  - arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (Will Deacon)   
  - arm64: pgtable: Fix pte_accessible() (Will Deacon)   
  - btrfs: adjust return values of btrfs_inode_by_name (Su Yue)   
  - btrfs: tree-checker: Enhance chunk checker to validate chunk profile (Qu Wenruo)   
  - PCI: Add device even if driver attach failed (Rajat Jain)   
  - wireless: Use linux/stddef.h instead of stddef.h (Hauke Mehrtens)   
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana)   
  - mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Gerald Schaefer)   
  - perf event: Check ref_reloc_sym before using it (Igor Lubashev)   
  - Linux 4.14.209 (Greg Kroah-Hartman)   
  - x86/microcode/intel: Check patch signature before saving microcode for early loading (Chen Yu)   
  - s390/dasd: fix null pointer dereference for ERP requests (Stefan Haberland)   
  - s390/cpum_sf.c: fix file permission for cpum_sfb_size (Thomas Richter)   
  - mac80211: free sta in sta_info_insert_finish() on errors (Johannes Berg)   
  - mac80211: minstrel: fix tx status processing corner case (Felix Fietkau)   
  - mac80211: minstrel: remove deferred sampling code (Felix Fietkau)   
  - xtensa: disable preemption around cache alias management calls (Max Filippov)   
  - regulator: workaround self-referent regulators (Michał Mirosław)   
  - regulator: avoid resolve_supply() infinite recursion (Michał Mirosław)   
  - regulator: fix memory leak with repeated set_machine_constraints() (Michał Mirosław)   
  - iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (Hans de Goede)   
  - iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (Hans de Goede)   
  - ext4: fix bogus warning in ext4_update_dx_flag() (Jan Kara)   
  - staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (Brian O'Keefe)   
  - efivarfs: fix memory leak in efivarfs_create() (Vamshi K Sthambamkadi)   
  - tty: serial: imx: keep console clocks always on (Fugang Duan)   
  - ALSA: mixart: Fix mutex deadlock (Takashi Iwai)   
  - ALSA: ctl: fix error path at adding user-defined element set (Takashi Sakamoto)   
  - speakup: Do not let the line discipline be used several times (Samuel Thibault)   
  - powerpc/uaccess-flush: fix missing includes in kup-radix.h (Daniel Axtens)   
  - libfs: fix error cast of negative value in simple_attr_write() (Yicong Yang)   
  - xfs: revert "xfs: fix rmap key and record comparison functions" (Darrick J. Wong)   
  - regulator: ti-abb: Fix array out of bound read access on the first transition (Nishanth Menon)   
  - MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu (Zhang Qilong)   
  - ASoC: qcom: lpass-platform: Fix memory leak (Srinivasa Rao Mandadapu)   
  - can: m_can: m_can_handle_state_change(): fix state change (Wu Bo)   
  - can: peak_usb: fix potential integer overflow on shift of a int (Colin Ian King)   
  - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (Marc Kleine-Budde)   
  - can: ti_hecc: Fix memleak in ti_hecc_probe (Zhang Qilong)   
  - can: dev: can_restart(): post buffer from the right context (Alejandro Concepcion Rodriguez)   
  - can: af_can: prevent potential access of uninitialized member in canfd_rcv() (Anant Thazhemadam)   
  - can: af_can: prevent potential access of uninitialized member in can_rcv() (Anant Thazhemadam)   
  - perf lock: Don't free "lock_seq_stat" if read_count isn't zero (Leo Yan)   
  - ARM: dts: imx50-evk: Fix the chip select 1 IOMUX (Fabio Estevam)   
  - arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy (Sergey Matyukevich)   
  - MIPS: export has_transparent_hugepage() for modules (Randy Dunlap)   
  - Input: adxl34x - clean up a data type in adxl34x_probe() (Dan Carpenter)   
  - vfs: remove lockdep bogosity in __sb_start_write (Darrick J. Wong)   
  - arm64: psci: Avoid printing in cpu_psci_cpu_die() (Will Deacon)   
  - pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq (Jianqun Xu)   
  - net: ftgmac100: Fix crash when removing driver (Joel Stanley)   
  - tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate (Ryan Sharpelletti)   
  - net: usb: qmi_wwan: Set DTR quirk for MR400 (Filip Moc)   
  - net/mlx5: Disable QoS when min_rates on all VFs are zero (Vladyslav Tarasiuk)   
  - sctp: change to hold/put transport for proto_unreach_timer (Xin Long)   
  - qlcnic: fix error return code in qlcnic_83xx_restart_hw() (Zhang Changzhong)   
  - net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request (Xie He)   
  - net/mlx4_core: Fix init_hca fields offset (Aya Levin)   
  - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() (Paul Moore)   
  - netlabel: fix our progress tracking in netlbl_unlabel_staticlist() (Paul Moore)   
  - net: Have netpoll bring-up DSA management interface (Florian Fainelli)   
  - net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (Tobias Waldekranz)   
  - net: bridge: add missing counters to ndo_get_stats64 callback (Heiner Kallweit)   
  - net: b44: fix error return code in b44_init_one() (Zhang Changzhong)   
  - mlxsw: core: Use variable timeout for EMAD retries (Ido Schimmel)   
  - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (Wang Hai)   
  - devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() (Wang Hai)   
  - atm: nicstar: Unmap DMA on send error (Sebastian Andrzej Siewior)   
  - ah6: fix error return code in ah6_input() (Zhang Changzhong)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.2.1.el7uek]
changelog:
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 33038214]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 33038213]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 33038213]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 33038211]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.2.2.el7uek]
changelog:
  - mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan)  [Orabug: 33043264]  
  - block-mq: fix kabi error (Junxiao Bi)  [Orabug: 33043253]  
  - blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 33043253]  
  - blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 33043253]  
  - blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 33043253]  
  - blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 33043253]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.0.el7uek]
changelog:
  - cipso,calipso: resolve a number of problems with the DOI refcounts (Paul Moore)  [Orabug: 32912072]  {CVE-2021-33033} 
  - sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907969]  {CVE-2021-23133} {CVE-2021-23133} 
  - scsi: core: add scsi_host_busy_iter() (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Validate io_req before others (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Set scsi_set_resid() only for underflow (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Fix memleak in vnic_dev_init_devcmd2 (Dinghao Liu)  [Orabug: 32621218]  
  - scsi: fnic: Avoid looping in TRANS ETH on unload (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Change shost_printk() to FNIC_FCS_DBG() (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Simplify the return expression of vnic_wq_copy_alloc() (Liu Shixin)  [Orabug: 32621218]  
  - scsi: fnic: Fix inconsistent format argument type in fnic_debugfs.c (Ye Bin)  [Orabug: 32621218]  
  - scsi: fnic: Do not call 'scsi_done()' for unhandled commands (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Remove unneeded semicolon (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Remove set but not used variable in is_fnic_fip_flogi_reject() (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Remove set but not used 'old_vlan' (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Use eth_broadcast_addr() to assign broadcast address (Miaohe Lin)  [Orabug: 32621218]  
  - scsi: fnic: Use true, false for fnic->internal_reset_inprogress (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: make vnic_wq_get_ctrl and vnic_wq_alloc_ring static (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: make fnic_list and fnic_list_lock static (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: make some symbols static (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 32621218]  
  - scsi: fnic: make array dev_cmd_err static const, makes object smaller (Colin Ian King)  [Orabug: 32621218]  
  - scsi: fnic: print port speed only at driver init or speed change (John Pittman)  [Orabug: 32621218]  
  - scsi: fnic: remove redundant assignment of variable rc (Colin Ian King)  [Orabug: 32621218]  
  - scsi: fnic: Remove set but not used variable 'vdev' (YueHaibing)  [Orabug: 32621218]  
  - scsi: fnic: no need to check return value of debugfs_create functions (Greg Kroah-Hartman)  [Orabug: 32621218]  
  - scsi: fnic: Update fnic driver version to 1.6.0.47 (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Enable fnic devcmd2 interface (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Adding devcmd2 init and posting interfaces (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Add devcmd2 initialization helpers (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: fnic devcmd2 controller definitions (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: fnic devcmd2 interface definitions (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Impose upper limit on max. # of CQs processed per intr (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: RQ enable and then post descriptors (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: delaying vnic dev enable till after req intr (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Warn when calling done for IO not issued to fw (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: fnic stats for max CQs processed and ISR time (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Add port speed stat to fnic debug stats (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: use fnic_lock to guard fnic->state_flags (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: vnic_rq_clean change BUG_ON to WARN_ON (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: change fnic queue depth to 256 (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: support to display 20G port speed (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Use vzalloc (Sabyasachi Gupta)  [Orabug: 32621218]  
  - fnic: fix fnic_scsi_host_{start,end}_tag (Christoph Hellwig)  [Orabug: 32621218]  
  - scsi: fnic: replace gross legacy tag hack with blk-mq hack (Jens Axboe)  [Orabug: 32621218]  
  - scsi: fnic: switch to generic DMA API (Christoph Hellwig)  [Orabug: 32621218]  
  - scsi: fnic: fix spelling mistake in fnic stats "Abord" -> "Abort" (Colin Ian King)  [Orabug: 32621218]  
  - scsi: fnic: use 64-bit timestamps (Arnd Bergmann)  [Orabug: 32621218]  
  - scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes)  [Orabug: 32621218]  
  - scsi: fnic: add a space after %p in printf format (Nicolas Iooss)  [Orabug: 32621218]  
  - scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych)  [Orabug: 32621218]  
  - scsi: iscsi: Fix iSCSI cls conn state (Gulam Mohamed)  [Orabug: 31669275]  
  - iscsi: Fix race condition between login and sync thread (Gulam Mohamed)  [Orabug: 31669275]  
  - Linux 4.14.213 (Greg Kroah-Hartman)   
  - PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
  - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
  - clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
  - md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
  - iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
  - iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
  - iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
  - iio: buffer: Fix demux update (Nuno Sá)   
  - mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
  - soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
  - spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
  - spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
  - spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
  - spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
  - spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
  - spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
  - drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
  - jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
  - jffs2: Fix GC exit abnormally (Zhe Li)   
  - ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
  - ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
  - powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
  - powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
  - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
  - ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
  - KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
  - ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
  - ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
  - USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
  - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
  - USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
  - USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
  - USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
  - USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
  - USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
  - EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
  - powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
  - staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
  - s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
  - s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
  - s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
  - s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
  - ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
  - ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
  - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
  - ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
  - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
  - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
  - Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
  - media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
  - media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
  - media: gspca: Fix memory leak in probe (Alan Stern)   
  - Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
  - Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
  - fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
  - cfg80211: initialize rekey_data (Sara Sharon)   
  - clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
  - clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
  - qlcnic: Fix error code in probe (Dan Carpenter)   
  - perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
  - pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
  - pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
  - clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
  - watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
  - watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
  - net: korina: fix return value (Vincent Stehlé)   
  - net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
  - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
  - checkpatch: fix unescaped left brace (Dwaipayan Ray)   
  - powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
  - nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
  - um: chan_xterm: Fix fd leak (Anton Ivanov)   
  - watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
  - irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
  - ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
  - extcon: max77693: Fix modalias string (Marek Szyprowski)   
  - clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
  - x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
  - nfs_common: need lock during iterate through the list (Cheng Lin)   
  - nfsd: Fix message level for normal termination (kazuo ito)   
  - speakup: fix uninitialized flush_lock (Yang Yingliang)   
  - usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
  - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
  - powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
  - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
  - scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
  - scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
  - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
  - cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
  - cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
  - cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
  - cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
  - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
  - clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
  - dm ioctl: fix error return code in target_message (Qinglang Miao)   
  - ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
  - net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
  - memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
  - arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
  - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
  - ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
  - clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
  - media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
  - vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
  - NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
  - SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
  - NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
  - ath10k: Release some resources in an error handling path (Christophe JAILLET)   
  - ath10k: Fix an error handling path (Christophe JAILLET)   
  - ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
  - PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
  - genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
  - power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
  - ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
  - HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
  - media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
  - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
  - samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
  - media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
  - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
  - orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
  - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
  - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
  - memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
  - RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
  - Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
  - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
  - soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
  - soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
  - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
  - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
  - Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
  - Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
  - Input: ads7846 - fix race that causes missing releases (David Jander)   
  - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
  - media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
  - scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
  - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
  - staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
  - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
  - RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
  - ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
  - ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
  - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
  - spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
  - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
  - spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
  - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
  - Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
  - arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
  - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
  - ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
  - spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
  - crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
  - sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
  - sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
  - ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
  - x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
  - RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
  - selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
  - RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
  - soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
  - soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
  - drm/gma500: fix double free of gma_connector (Tom Rix)   
  - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
  - md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
  - crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
  - media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
  - quota: Sanity-check quota file headers on load (Jan Kara)   
  - serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
  - HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
  - ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
  - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
  - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
  - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
  - USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
  - USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
  - USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
  - soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
  - dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
  - scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
  - vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
  - vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
  - drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
  - kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
  - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
  - can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
  - scsi: bnx2i: Requires MMU (Randy Dunlap)   
  - gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
  - ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
  - pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
  - pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
  - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)   
  - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
  - ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
  - USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
  - USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
  - xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
  - ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
  - ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
  - USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
  - USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
  - mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
  - net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
  - net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
  - net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
  - tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
  - net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
  - PCI: qcom: Add missing reset for ipq806x (Ansuel Smith)   
  - x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
  - scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
  - kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
  - pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
  - Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
  - Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
  - platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
  - soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
  - scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
  - ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
  - iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
  - arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
  - iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
  - spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe (Nathan Chancellor)   
  - spi: bcm2835aux: Fix use-after-free on unbind (Lukas Wunner)   
  - Linux 4.14.212 (Greg Kroah-Hartman)   
  - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)   
  - Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)   
  - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)   
  - gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)   
  - tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))   
  - spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)   
  - spi: bcm2835: Fix use-after-free on unbind (Lukas Wunner)   
  - spi: bcm-qspi: Fix use-after-free on unbind (Lukas Wunner)   
  - spi: Introduce device-managed SPI controller allocation (Lukas Wunner)   
  - speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)   
  - i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)   
  - i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)   
  - mm/swapfile: do not sleep with a spin lock held (Qian Cai)   
  - cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)   
  - ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)   
  - ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)   
  - ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)   
  - USB: serial: option: fix Quectel BG96 matching (Bjørn Mork)   
  - USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)   
  - USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)   
  - USB: serial: ch341: sort device-id entries (Johan Hovold)   
  - USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)   
  - USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)   
  - usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)   
  - vlan: consolidate VLAN parsing code and limit max parsing depth (Toke Høiland-Jørgensen)   
  - pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)   
  - pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)   
  - Linux 4.14.211 (Greg Kroah-Hartman)   
  - RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)   
  - Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)   
  - Input: xpad - support Ardwiino Controllers (Sanjay Govind)   
  - ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)   
  - dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)   
  - net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)   
  - net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)   
  - cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)   
  - net/x25: prevent a couple of overflows (Dan Carpenter)   
  - ibmvnic: Fix TX completion error handling (Thomas Falcon)   
  - ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)   
  - ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)   
  - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)   
  - bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)   
  - usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)   
  - tun: honor IOCB_NOWAIT flag (Jens Axboe)   
  - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)   
  - sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)   
  - rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)   
  - net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.1.el7uek]
changelog:
  - uek-rpm: config-aarch-embedded2 add missing networking options (Thomas Tai)  [Orabug: 32961737]  
  - uek-rpm: config-aarch-embedded2 update for networking options (Thomas Tai)  [Orabug: 32961737]  
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926881]  
  - net/rds: Passive connections always yield (Gerd Rausch)  [Orabug: 32925131]  
  - mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan)  [Orabug: 32921246]  
  - net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch)  [Orabug: 32908885]  
  - Linux 4.14.216 (Greg Kroah-Hartman)   
  - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
  - block: fix use-after-free in disk_part_iter_next (Ming Lei)   
  - KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
  - wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
  - net/mlx5e: Fix two double free cases (Dinghao Liu)   
  - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
  - iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
  - block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
  - wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
  - dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
  - dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
  - spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
  - cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
  - i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
  - ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
  - iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
  - iio: imu: st_lsm6dsx: flip irq return logic (Sean Nyekjaer)   
  - spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
  - ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
  - drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
  - vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
  - x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
  - x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
  - net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
  - net: ip: always refragment ip defragmented packets (Florian Westphal)   
  - net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
  - net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
  - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
  - Linux 4.14.215 (Greg Kroah-Hartman)   
  - KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
  - x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
  - netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
  - netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
  - Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
  - ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
  - ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
  - x86/mm: Fix leak of pmd ptlock (Dan Williams)   
  - USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
  - usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
  - usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
  - usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
  - USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
  - usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
  - usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
  - usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
  - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
  - USB: usblp: fix DMA to stack (Johan Hovold)   
  - USB: yurex: fix control-URB timeout handling (Johan Hovold)   
  - USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
  - USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
  - USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
  - usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
  - usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
  - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
  - usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
  - usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
  - USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
  - usb: gadget: enable super speed plus (taehyun.cho)   
  - crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
  - net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
  - net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
  - net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
  - net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
  - vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
  - net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
  - CDC-NCM: remove "connected" log message (Roland Dreier)   
  - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
  - net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
  - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
  - net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
  - net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
  - net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
  - net/ncsi: Use real net-device for response handler (John Wang)   
  - virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
  - qede: fix offload for IPIP tunnel packets (Manish Chopra)   
  - atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
  - ethernet: ucc_geth: set dev->max_mtu to 1518 (Rasmus Villemoes)   
  - ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
  - depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
  - lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
  - scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
  - scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() (Adrian Hunter)   
  - workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
  - kbuild: don't hardcode depmod path (Dominique Martinet)   
  - Linux 4.14.214 (Greg Kroah-Hartman)   
  - iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
  - iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
  - kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
  - dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
  - ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
  - module: delay kobject uevent until after module init call (Jessica Yu)   
  - powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
  - quota: Don't overflow quota file offsets (Jan Kara)   
  - module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
  - rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
  - ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
  - media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
  - misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
  - reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
  - of: fix linker-section match-table corruption (Johan Hovold)   
  - uapi: move constants from <linux/kernel.h> to <linux/const.h> (Petr Vorel)   
  - powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
  - USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
  - s390/dasd: fix hanging device offline processing (Stefan Haberland)   
  - vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
  - mm: memcontrol: implement lruvec stat functions on top of each other (Johannes Weiner)   
  - mm: memcontrol: eliminate raw access to stat and event counters (Johannes Weiner)   
  - ALSA: usb-audio: fix sync-ep altsetting sanity check (Johan Hovold)   
  - ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk (Alberto Aguirre)   
  - ALSA: hda/ca0132 - Fix work handling in delayed HP detection (Takashi Iwai)   
  - md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor)   
  - x86/entry/64: Add instruction suffix (Jan Beulich)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.2.el7uek]
changelog:
  - KVM: x86: Consider LAPIC TSC-Deadline timer expired if deadline too short (Liran Alon)  [Orabug: 32992668]  
  - secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly)  [Orabug: 32982947]  
  - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)  [Orabug: 32977843]  
  - ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)  [Orabug: 32977843]  
  - uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi)  [Orabug: 32965746]  
  - {net, IB}/mlx4: Initialize CQ buffers in the driver when possible (Daniel Jurgens)  [Orabug: 32913303]  
  - bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912035]  {CVE-2021-32399} 
  - IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge)  [Orabug: 32816367]  
  - RDMA/mlx4: Enable querying AH for XRC QP types (Avihai Horon)  [Orabug: 32568907]  
  - RDMA/mlx5: Enable querying AH for XRC QP types (Avihai Horon)  [Orabug: 32568907]  
  - uek-rpm: add missing ARM_SPE_PMU for aarch64 (Russell King)  [Orabug: 27825982]  
  - Revert "drivers/perf: arm_spe_pmu does not build as a module" (Tom Saeger)  [Orabug: 27825982]  
  - perf: arm_spe: Enable ACPI/Platform automatic module loading (Jeremy Linton)  [Orabug: 27825982]  
  - arm_pmu: acpi: spe: Add initial MADT/SPE probing (Jeremy Linton)  [Orabug: 27825982]  
  - ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens (Jeremy Linton)  [Orabug: 27825982]  
  - ACPI/PPTT: Modify node flag detection to find last IDENTICAL (Jeremy Linton)  [Orabug: 27825982]  
  - drivers/perf: arm_spe: Don't error on high-order pages for aux buf (Will Deacon)  [Orabug: 27825982]  
  - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags (Erik Schmauss)  [Orabug: 27825982]  
  - ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC (Erik Schmauss)  [Orabug: 27825982]  
  - perf: arm_spe: handle devm_kasprintf() failure (Nicholas Mc Guire)  [Orabug: 27825982]  
  - perf: arm_spe: Enable automatic DT loading (Jeremy Linton)  [Orabug: 27825982]  
  - drivers/perf: Initialise return value in armpmu_request_irqs() (Will Deacon)  [Orabug: 27825982]  
  - ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set (Sudeep Holla)  [Orabug: 27825982]  
  - ACPI / PPTT: fix build when CONFIG_ACPI_PPTT is not enabled (Sudeep Holla)  [Orabug: 27825982]  
  - arm_pmu: Use disable_irq_nosync when disabling SPI in CPU teardown hook (Will Deacon)  [Orabug: 27825982]  
  - ACPICA: Restructure ACPI table files (Erik Schmauss)  [Orabug: 27825982]  
  - arm_pmu: acpi: request IRQs up-front (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: note IRQs and PMUs per-cpu (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: explicitly enable/disable SPIs at hotplug (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: acpi: check for mismatched PPIs (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: add armpmu_alloc_atomic() (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: fold platform helpers into platform code (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: kill arm_pmu_platdata (Mark Rutland)  [Orabug: 27825982]  
  - arm/arm64: pmu: Distinguish percpu irq and percpu_devid irq (Julien Thierry)  [Orabug: 27825982]  
  - irqdesc: Add function to identify percpu_devid irqs (Julien Thierry)  [Orabug: 27825982]  
  - perf/core: Export AUX buffer helpers to modules (Will Deacon)  [Orabug: 27825982]  
  - genirq: export irq_get_percpu_devid_partition to modules (Will Deacon)  [Orabug: 27825982]  
  - Linux 4.14.219 (Greg Kroah-Hartman)   
  - tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN (Pengcheng Yang)   
  - team: protect features update by RCU to avoid deadlock (Ivan Vecera)   
  - NFC: fix possible resource leak (Pan Bian)   
  - NFC: fix resource leak when target index is invalid (Pan Bian)   
  - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)   
  - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)   
  - x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int $0x80" (Andy Lutomirski)   
  - x86/entry/64/compat: Preserve r8-r11 in int $0x80 (Andy Lutomirski)   
  - can: dev: prevent potential information leak in can_fill_info() (Dan Carpenter)   
  - mac80211: pause TX while changing interface type (Johannes Berg)   
  - iwlwifi: pcie: reschedule in long-running memory reads (Johannes Berg)   
  - iwlwifi: pcie: use jiffies for memory read spin time limit (Johannes Berg)   
  - RDMA/cxgb4: Fix the reported max_recv_sge value (Kamal Heib)   
  - xfrm: Fix oops in xfrm_replay_advance_bmp (Shmulik Ladkani)   
  - netfilter: nft_dynset: add timeout extension to template (Pablo Neira Ayuso)   
  - ARM: imx: build suspend-imx6.S with arm instruction set (Max Krummenacher)   
  - xen-blkfront: allow discard-* nodes to be optional (Roger Pau Monne)   
  - mt7601u: fix rx buffer refcounting (Lorenzo Bianconi)   
  - mt7601u: fix kernel crash unplugging the device (Lorenzo Bianconi)   
  - leds: trigger: fix potential deadlock with libata (Andrea Righi)   
  - xen: Fix XenStore initialisation for XS_LOCAL (David Woodhouse)   
  - KVM: x86: get smi pending status correctly (Jay Zhou)   
  - KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (Like Xu)   
  - drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] (Claudiu Beznea)   
  - drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs (Sudeep Holla)   
  - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family (Giacinto Cifelli)   
  - wext: fix NULL-ptr-dereference with cfg80211's lack of commit() (Johannes Berg)   
  - ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming (Koen Vandeputte)   
  - ACPI: sysfs: Prefer "compatible" modalias (Kai-Heng Feng)   
  - Linux 4.14.218 (Greg Kroah-Hartman)   
  - fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
  - writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
  - fs: move I_DIRTY_INODE to fs.h (Christoph Hellwig)   
  - x86/boot/compressed: Disable relocation relaxation (Arvind Sankar)   
  - tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
  - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
  - gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
  - futex: futex_wake_op, fix sign_extend32 sign bits (Jiri Slaby)   
  - net: dsa: b53: fix an off by one in checking "vlan->vid" (Dan Carpenter)   
  - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
  - ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
  - udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
  - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
  - sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
  - sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
  - netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
  - compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
  - xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
  - xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
  - usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
  - usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
  - USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
  - ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
  - stm class: Fix module init return on allocation failure (Wang Hui)   
  - intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
  - irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
  - iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
  - can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
  - can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
  - i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
  - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
  - drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
  - drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
  - xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
  - ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
  - drm/atomic: put state on error path (Pan Bian)   
  - dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
  - mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
  - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
  - ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
  - ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
  - i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
  - Linux 4.14.217 (Greg Kroah-Hartman)   
  - spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
  - net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
  - net: skbuff: disambiguate argument and member for skb_list_walk_safe helper (Jason A. Donenfeld)   
  - net: introduce skb_list_walk_safe for skb segment walking (Jason A. Donenfeld)   
  - net: use skb_list_del_init() to remove from RX sublists (Edward Cree)   
  - tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
  - rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
  - net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
  - net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
  - net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
  - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
  - net: dcb: Validate netlink message in DCB handler (Petr Machata)   
  - esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
  - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
  - netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
  - nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
  - usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
  - netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
  - ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
  - ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
  - dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
  - net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
  - mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
  - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
  - ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
  - NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
  - pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
  - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
  - ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
  - dump_common_audit_data(): fix racy accesses to ->d_name (Al Viro)   
  - ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
  - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
  - net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
  - misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
  - arch/arc: add copy_user_page() to <asm/page.h> to fix build error on ARC (Randy Dunlap)   
  - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
  - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
  - ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
  - ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
  - ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
  - ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
  - r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
  - dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
  - mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
  - ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
  - MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
  - MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
  - ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.3.el7uek]
changelog:
  - uek-rpm: match Pensando config-aarch-embedded2 with the T93's config (Thomas Tai)  [Orabug: 32972392]  
  - quota: Fix memory leak when handling corrupted quota file (Jan Kara)  [Orabug: 33020349]  
  - xen/netback: fix spurious event detection for common event case (Juergen Gross)  [Orabug: 33020349]  
  - Input: i8042 - unbreak Pegatron C15B (Alexey Dobriyan)  [Orabug: 33020349]  
  - ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 32983664]  
  - ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 32983664]  
  - rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Håkon Bugge)  [Orabug: 32981187]  
  - scsi: smartpqi: Remove unused functions (Bart Van Assche)  [Orabug: 32967877]  
  - scsi: smartpqi: Fix device pointer variable reference static checker issue (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Fix blocks_per_row static checker issue (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Update version to 2.1.8-045 (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add new PCI IDs (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct system hangs when resuming from hibernation (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update enclosure identifier in sysfs (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Add additional logging for LUN resets (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update SAS initiator_port_protocols and target_port_protocols (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Add phy ID support for the physical drives (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Convert snprintf() to scnprintf() (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Fix driver synchronization issues (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update device scan operations (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update OFA management (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update RAID bypass handling (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update suspend/resume and shutdown (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Synchronize device resets with mutex (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update soft reset management for OFA (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update event handler (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for wwid (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Remove timeouts from internal cmds (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Disable WRITE SAME for HBA NVMe disks (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add host level stream detection enable (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add stream detection (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Align code with oob driver (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for long firmware version (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for BMIC sense feature cmd and feature bits (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for RAID1 writes (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for RAID5 and RAID6 writes (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Refactor scatterlist code (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Refactor aio submission code (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for new product ids (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct request leakage during reset operations (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Update version to 1.2.16-012 (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct pqi_sas_smp_handler busy condition (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct driver removal with HBA disks (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Update copyright (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Bump version to 1.2.16-010 (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add RAID bypass counter (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Support device deletion via sysfs (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Avoid crashing kernel for controller issues (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update logical volume size after expansion (Mahesh Rajashekhara)  [Orabug: 32967877]  
  - scsi: smartpqi: Add id support for SmartRAID 3152-8i (Mahesh Rajashekhara)  [Orabug: 32967877]  
  - scsi: smartpqi: Identify physical devices without issuing INQUIRY (Kevin Barnett)  [Orabug: 32967877]  
  - remove ioremap_nocache and devm_ioremap_nocache (Christoph Hellwig)  [Orabug: 32967877]  
  - treewide: Use sizeof_field() macro (Pankaj Bharadiya)  [Orabug: 32967877]  
  - block-mq: fix kabi error (Junxiao Bi)  [Orabug: 32957529]  
  - blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957529]  
  - blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 32957529]  
  - blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 32957529]  
  - blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957529]  
  - Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912101]  {CVE-2021-33034} 
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 32762731]  
  - IB/cma: Introduce rdma_set_min_rnr_timer() (Håkon Bugge)  [Orabug: 32762731]  
  - scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed)  [Orabug: 32134986]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.el7uek]
changelog:
  - rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044345]  
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32804265]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982355]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820277]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.1.el7uek]
changelog:
  - KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins)  [Orabug: 33099053]  
  - scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 33099047]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.3.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33142065]  {CVE-2021-33909}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.4.el7uek]
changelog:
  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi)  [Orabug: 33187319]  
  - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi)  [Orabug: 33187319]  
  - mm: soft-offline: close the race against page allocation (Naoya Horiguchi)  [Orabug: 33187319]  
  - mm: fix race on soft-offlining free huge pages (Naoya Horiguchi)  [Orabug: 33187319]  
  - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33187329]  
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33187327]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33187326]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33187321]  
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33187325]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.1.el7uek]
changelog:
  - drivers/uio: Fix incorrect calls to pm_runtime_enable/disable. (David Clear)  [Orabug: 33070176]  
  - dts/pensando: Add board config partitions. (David Clear)  [Orabug: 33070176]  
  - drivers: updates driver version string to 1.15.9.7 (Thomas Tai)  [Orabug: 33065280]  
  - drivers: updates for 1.15.9.7 (Shannon Nelson)  [Orabug: 33065280]  
  - arm64: Stop printing the virtual memory layout (Laura Abbott)  [Orabug: 33059865]  
  - uek-rpm: Fix Pensando's network application error (Thomas Tai)  [Orabug: 33050671]  
  - RDMA/cma: Fix rdma_resolve_route memory leak (Gerd Rausch)  [Orabug: 33048382]  
  - uek-rpm: enable selinux for Pensando (Thomas Tai)  [Orabug: 33032940]  
  - scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 32989009]  
  - xfs: fix lockup issue (Junxiao Bi)  [Orabug: 32880215]  
  - Build Pensando drivers for uek5 kernel (Vijay Kumar)  [Orabug: 32569849]  
  - net/ethernet/pensando: Fix Pensando driver build (Vijay Kumar)  [Orabug: 32569849]  
  - Added mdev, mnet_uio_pdrv and ionic_mnic driver src to UEK5 (Vijay Kumar)  [Orabug: 32569849]  
  - Linux 4.14.227 (Greg Kroah-Hartman)   
  - genirq: Disable interrupts for force threaded handlers (Thomas Gleixner)   
  - ext4: fix potential error in ext4_do_update_inode (Shijie Luo)   
  - ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F))   
  - ext4: find old entry again if failed to rename whiteout (zhangyi (F))   
  - x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov)   
  - x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov)   
  - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov)   
  - x86/ioapic: Ignore IRQ2 again (Thomas Gleixner)   
  - PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler)   
  - iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang)   
  - iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang)   
  - iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang)   
  - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu)   
  - iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter)   
  - iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux)   
  - iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron)   
  - usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin)   
  - USB: replace hardcode maximum usb string length by definition (Macpaul Lin)   
  - usb-storage: Add quirk to defeat Kindle's automatic unload (Alan Stern)   
  - nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg)   
  - scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter)   
  - net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)   
  - sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras)   
  - svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler)   
  - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty)   
  - nvmet: don't check iosqes,iocqes for discovery controllers (Sagi Grimberg)   
  - tools build feature: Check if pthread_barrier_t is available (Arnaldo Carvalho de Melo)   
  - perf: Make perf able to build with latest libbfd (Changbin Du)   
  - tools build: Check if gettid() is available before providing helper (Arnaldo Carvalho de Melo)   
  - tools build feature: Check if eventfd() is available (Arnaldo Carvalho de Melo)   
  - tools build feature: Check if get_current_dir_name() is available (Arnaldo Carvalho de Melo)   
  - perf tools: Use - Revert "PM: runtime: Update device status before letting suppliers suspend" (Rafael J. Wysocki)   
  - net: dsa: b53: Support setting learning on port (Florian Fainelli)   
  - bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)   
  - ext4: check journal inode extents more carefully (Jan Kara)   
  - ext4: don't allow overlapping system zones (Jan Kara)   
  - Linux 4.14.226 (Greg Kroah-Hartman)   
  - xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross)   
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross)   
  - xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross)   
  - iio: imu: adis16400: release allocated memory on failure (Navid Emamdoost)   
  - KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier)   
  - hwmon: (lm90) Fix max6658 sporadic wrong temperature reading (Boyang Yu)   
  - binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak)   
  - powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao)   
  - include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle))   
  - stop_machine: mark helpers __always_inline (Arnd Bergmann)   
  - configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang)   
  - block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai)   
  - NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek)   
  - sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov)   
  - staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott)   
  - staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott)   
  - staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson)   
  - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson)   
  - staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter)   
  - staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter)   
  - staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter)   
  - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() (Dan Carpenter)   
  - staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() (Dan Carpenter)   
  - usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan)   
  - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan)   
  - usbip: fix vudc to check for stream socket (Shuah Khan)   
  - usbip: fix vhci_hcd to check for stream socket (Shuah Khan)   
  - usbip: fix stub_dev to check for stream socket (Shuah Khan)   
  - USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel)   
  - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal)   
  - USB: serial: ch341: add new Product ID (Niv Sardi)   
  - USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin)   
  - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman)   
  - xhci: Improve detection of device initiated wake signal. (Mathias Nyman)   
  - usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda)   
  - usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol)   
  - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol)   
  - USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter)   
  - Goodix Fingerprint device is not a modem (Yorick de Wid)   
  - mmc: core: Fix partition switch time for eMMC (Adrian Hunter)   
  - s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland)   
  - s390/dasd: fix hanging DASD driver unbind (Stefan Haberland)   
  - Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") (Eric W. Biederman)   
  - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar (Takashi Iwai)   
  - ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai)   
  - ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai)   
  - ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai)   
  - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie)   
  - s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens)   
  - PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczyński)   
  - PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser)   
  - powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev)   
  - powerpc: improve handling of unrecoverable system reset (Nicholas Piggin)   
  - mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing)   
  - mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()' (Christophe JAILLET)   
  - udf: fix silent AED tagLocation corruption (Steven J. Magnani)   
  - net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang)   
  - media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy)   
  - s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman)   
  - drm: meson_drv add shutdown function (Artem Lapkin)   
  - drm/compat: Clear bounce structures (Daniel Vetter)   
  - s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing)   
  - perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers)   
  - net: stmmac: stop each tx channel independently (Joakim Zhang)   
  - net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil)   
  - net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil)   
  - net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He)   
  - net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas)   
  - net: sched: avoid duplicates in classes dump (Maximilian Heyne)   
  - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong)   
  - net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang)   
  - sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov)   
  - Revert "mm, slub: consider rest of partial list if acquire_slab() fails" (Linus Torvalds)   
  - cifs: return proper error code in statfs(2) (Paulo Alcantara)   
  - netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin)   
  - can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang)   
  - can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang)   
  - can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel)   
  - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth)   
  - net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann)   
  - ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau)   
  - ethernet: alx: fix order of calls on resume (Jakub Kicinski)   
  - uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin)   
  - Linux 4.14.225 (Greg Kroah-Hartman)   
  - drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno)   
  - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju)   
  - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas)   
  - platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede)   
  - platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede)   
  - platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede)   
  - platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede)   
  - platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede)   
  - platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede)   
  - mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto)   
  - iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin)   
  - dm table: fix iterate_devices based device capability checks (Jeffle Xu)   
  - rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter)   
  - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King)   
  - usbip: tools: fix build error for multiple definition (Antonio Borneo)   
  - PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)   
  - btrfs: fix raid6 qstripe kmap (Ira Weiny)   
  - btrfs: raid56: simplify tracking of Q stripe presence (David Sterba)   
  - Linux 4.14.224 (Greg Kroah-Hartman)   
  - media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)   
  - swap: fix swapfile read/write offset (Jens Axboe)   
  - zsmalloc: account the number of compacted pages correctly (Rokudo Yan)   
  - xen-netback: respect gnttab_map_refs()'s return value (Jan Beulich)   
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)   
  - parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin)   
  - f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim)   
  - media: uvcvideo: Allow entities with no pads (Ricardo Ribalda)   
  - staging: most: sound: add sanity check for function argument (Christian Gromm)   
  - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari)   
  - x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song)   
  - ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan)   
  - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu)   
  - wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren)   
  - vt/consolemap: do font sum unsigned (Jiri Slaby)   
  - x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit)   
  - staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu)   
  - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven)   
  - net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean)   
  - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai)   
  - net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver)   
  - smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov)   
  - xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang)   
  - media: mceusb: sanity check for prescaler value (Sean Young)   
  - JFS: more checks for invalid superblock (Randy Dunlap)   
  - arm64: Use correct ll/sc atomic constraints (Andrew Murray)   
  - arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint (Will Deacon)   
  - arm64: Avoid redundant type conversions in xchg() and cmpxchg() (Will Deacon)   
  - arm64 module: set plt* section addresses to 0x0 (Shaoying Xu)   
  - virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck)   
  - drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky)   
  - hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz)   
  - scripts: set proper OpenSSL include dir also for sign-file (Rolf Eike Beer)   
  - scripts: use pkg-config to locate libcrypto (Rolf Eike Beer)   
  - net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.2.el7uek]
changelog:
  - KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins)  [Orabug: 33089240]  
  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi)  [Orabug: 33042327]  
  - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi)  [Orabug: 33042327]  
  - mm: soft-offline: close the race against page allocation (Naoya Horiguchi)  [Orabug: 33042327]  
  - mm: fix race on soft-offlining free huge pages (Naoya Horiguchi)  [Orabug: 33042327]  
  - Revert "xen/fb: allow xenfb initialization for hvm guests" (Joe Jin)  [Orabug: 33075317]  
  - scsi: qla2xxx: Fix use after free in bsg (Quinn Tran)  [Orabug: 32912131]  
  - block: fix a race between del_gendisk and BLKRRPART (Gulam Mohamed)  [Orabug: 32285697]  
  - block: prevent block device lookups at the beginning of del_gendisk (Christoph Hellwig)  [Orabug: 32285697]  
  - block: take bd_mutex around delete_partitions in del_gendisk (Christoph Hellwig)  [Orabug: 32285697]  
  - Linux 4.14.231 (Greg Kroah-Hartman)   
  - xen/events: fix setting irq affinity (Juergen Gross)   
  - perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)   
  - netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)   
  - net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)   
  - block: only update parent bi_status when bio fail (Yufen Yu)   
  - gfs2: report "already frozen/thawed" errors (Bob Peterson)   
  - drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)   
  - KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)   
  - KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)   
  - Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath." (Greg Kroah-Hartman)   
  - net: ieee802154: stop dump llsec params for monitors (Alexander Aring)   
  - net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)   
  - net: ieee802154: forbid monitor for set llsec params (Alexander Aring)   
  - net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)   
  - net: ieee802154: fix nl802154 add llsec key (Alexander Aring)   
  - net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)   
  - net: ieee802154: fix nl802154 del llsec key (Alexander Aring)   
  - net: ieee802154: nl-mac: fix check on panid (Alexander Aring)   
  - net: mac802154: Fix general protection fault (Pavel Skripkin)   
  - drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)   
  - drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)   
  - net: tun: set tun->dev->addr_len during TUNSETLINK processing (Phillip Potter)   
  - cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)   
  - usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)   
  - net/ncsi: Avoid GFP_KERNEL in response handler (Samuel Mendoza-Jonas)   
  - net/ncsi: Refactor MAC, VLAN filters (Samuel Mendoza-Jonas)   
  - net/ncsi: Add generic netlink family (Samuel Mendoza-Jonas)   
  - net/ncsi: Don't return error on normal response (Samuel Mendoza-Jonas)   
  - net/ncsi: Improve general state logging (Samuel Mendoza-Jonas)   
  - net/ncsi: Make local function ncsi_get_filter() static (Wei Yongjun)   
  - clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)   
  - RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)   
  - net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)   
  - s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)   
  - workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)   
  - clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)   
  - clk: fix invalid usage of list cursor in register (Lukasz Bartosik)   
  - soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)   
  - ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)   
  - net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)   
  - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)   
  - net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)   
  - gianfar: Handle error code at MAC address change (Claudiu Manoil)   
  - sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)   
  - amd-xgbe: Update DMA coherency values (Shyam Sundar S K)   
  - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang)   
  - regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven)   
  - i2c: turn recovery error on init to debug (Wolfram Sang)   
  - usbip: synchronize event handler with sysfs code paths (Shuah Khan)   
  - usbip: stub-dev synchronize sysfs code paths (Shuah Khan)   
  - usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan)   
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov)   
  - net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet)   
  - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field (Tetsuo Handa)   
  - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behún)   
  - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang)   
  - parisc: parisc-agp requires SBA IOMMU driver (Helge Deller)   
  - fs: direct-io: fix missing sdio->boundary (Jack Qiu)   
  - ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich)   
  - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh (Muhammad Usama Anjum)   
  - xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu)   
  - nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni)   
  - nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25672} 
  - nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25671} 
  - nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni)   {CVE-2020-25670} 
  - ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede)   
  - ALSA: aloop: Fix initialization of controls (Jonas Holmberg)   
  - Linux 4.14.230 (Greg Kroah-Hartman)   
  - can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello)   
  - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada)   
  - init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens)   
  - cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch)   
  - cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg)   
  - ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich)   
  - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck)   
  - x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann)   
  - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas)   
  - drm/msm: Ratelimit invalid-fence message (Rob Clark)   
  - mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel)   
  - mISDN: fix crash in fritzpci (Tong Zhang)   
  - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov)   
  - ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard)   
  - Linux 4.14.229 (Greg Kroah-Hartman)   
  - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng)   
  - staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan)   
  - staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan)   
  - usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang)   
  - USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold)   
  - USB: cdc-acm: downgrade message to debug (Oliver Neukum)   
  - USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum)   
  - cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum)   
  - usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun)   
  - usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren)   
  - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)   
  - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan)   
  - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma)   
  - extcon: Fix error handling in extcon_dev_register (Dinghao Liu)   
  - extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski)   
  - pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan)   
  - reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa)   
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao)   
  - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das)   
  - mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy)   
  - tracing: Fix stack trace event size (Steven Rostedt (VMware))   
  - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang)   
  - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang)   
  - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang)   
  - bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer)   
  - net: wan/lmc: unregister device when no matching device is found (Tong Zhang)   
  - appletalk: Fix skb allocation size in loopback case (Doug Brown)   
  - net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi)   
  - brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce)   
  - ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F))   
  - ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar)   
  - staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang)   
  - staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang)   
  - scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan)   
  - scsi: st: Fix a use after free in st_open() (Lv Yunlong)   
  - vhost: Fix vhost_vq_reset() (Laurent Vivier)   
  - powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy)   
  - ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure)   
  - ASoC: cs42l42: Fix mixer volume control (Lucas Tanure)   
  - ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede)   
  - ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood)   
  - ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)   
  - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)   
  - rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields)   
  - ext4: fix bh ref count on error paths (Zhaolong Zhang)   
  - ipv6: weaken the v4mapped source check (Jakub Kicinski)   
  - selinux: vsock: Set SID for socket returned by accept() (David Brazdil)   
  - Linux 4.14.228 (Greg Kroah-Hartman)   
  - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" (Marc Kleine-Budde)   
  - ext4: add reclaim checks to xattr code (Jan Kara)   
  - mac80211: fix double free in ibss_leave (Markus Theil)   
  - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet)   
  - net: sched: validate stab values (Eric Dumazet)   
  - can: dev: Move device back to init netns on owning netns delete (Martin Willi)   
  - locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner)   
  - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai)   
  - scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai)   
  - perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter)   
  - ACPI: scan: Use unique number for instance_no (Andy Shevchenko)   
  - ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki)   
  - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja)   
  - net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin)   
  - arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin)   
  - drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov)   
  - net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe)   
  - net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold)   
  - mac80211: fix rate mask reset (Johannes Berg)   
  - can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun)   
  - can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang)   
  - can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang)   
  - can: peak_usb: add forgotten supported devices (Stephane Grosjean)   
  - ftgmac100: Restart MAC HW once (Dylan Hung)   
  - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong)   
  - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu)   
  - e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits)   
  - net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port (Florian Fainelli)   
  - macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet)   
  - libbpf: Fix INSTALL flag order (Georgi Valkov)   
  - bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko)   
  - ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea)   
  - arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geantă)   
  - arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geantă)   
  - arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geantă)   
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher)   
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer)   
  - ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich)   
  - ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich)   
  - nfs: we don't support removing system.nfs4_acl (J. Bruce Fields)   
  - drm/radeon: fix AGP dependency (Christian König)   
  - u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra)   
  - sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner)   
  - atm: idt77252: fix null-ptr-dereference (Tong Zhang)   
  - atm: uPD98402: fix incorrect allocation (Tong Zhang)   
  - net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai)   
  - net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai)   
  - NFS: Correct size calculation for create reply length (Frank Sorenson)   
  - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler)   
  - gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li)   
  - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov)   
  - net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai)   
  - ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu)   
  - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" (Hayes Wang)   
  - atm: lanai: dont run lanai_dev_close if not open (Tong Zhang)   
  - atm: eni: dont release is never initialized (Tong Zhang)   
  - powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman)   
  - net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.3.el7uek]
changelog:
  - capmem: Mark the pages as non-readonly+dirty. (David Clear)  [Orabug: 33116008]  
  - PCI/ERR: Retain status from error notification (Keith Busch)  [Orabug: 32747989]  
  - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo)  [Orabug: 33106366]  
  - net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk)  [Orabug: 31895299]  {CVE-2020-14304}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.4.el7uek]
changelog:
  - rds/ib: avoid use of trace_printk() (Alan Maguire)  [Orabug: 33120588]  
  - RDMA/cma: Remove unnecessary INIT->INIT transition (Håkon Bugge)  [Orabug: 33114515]  
  - ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan)  [Orabug: 33027709]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.6.el7uek]
changelog:
  - rds: Check for illegal flags when creating an MR (Håkon Bugge)  [Orabug: 33144339]  
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135633]  {CVE-2021-33909}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.7.el7uek]
changelog:
  - scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le)  [Orabug: 33167357]  
  - Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy)  [Orabug: 33167350]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.8.el7uek]
changelog:
  - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33187189]  
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33187192]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33187195]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33187199]  
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33187200]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.9.el7uek]
changelog:
  - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33205367]  {CVE-2021-3656} {CVE-2021-3656} 
  - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33205444]  {CVE-2021-3653} {CVE-2021-3653}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.10.el7uek]
changelog:
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220435]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.0.el7uek]
changelog:
  - Linux 4.14.223 (Greg Kroah-Hartman)   
  - dm era: Update in-core bitset after committing the metadata (Nikos Tsironis)   
  - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld)   
  - ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky)   
  - ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet)   
  - sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld)   
  - gtp: use icmp_ndo_send helper (Jason A. Donenfeld)   
  - icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld)   
  - icmp: introduce helper for nat'd source address in network device context (Jason A. Donenfeld)   
  - dm era: only resize metadata in preresume (Nikos Tsironis)   
  - dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis)   
  - dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis)   
  - dm era: Fix bitset memory leaks (Nikos Tsironis)   
  - dm era: Verify the data block size hasn't changed (Nikos Tsironis)   
  - dm era: Recover committed writeset after crash (Nikos Tsironis)   
  - gfs2: Don't skip dlm unlock if glock has an lvb (Bob Peterson)   
  - sparc32: fix a user-triggerable oops in clear_user() (Al Viro)   
  - f2fs: fix out-of-repair __setattr_copy() (Chao Yu)   
  - printk: fix deadlock when kernel panic (Muchun Song)   
  - gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev)   
  - mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li)   
  - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song)   
  - libnvdimm/dimm: Avoid race between probe and available_slots_show() (Dan Williams)   
  - usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (Yoshihiro Shimoda)   
  - mm: hugetlb: fix a race between freeing and dissolving the page (Muchun Song)   
  - hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz)   
  - fs/affs: release old buffer head on error path (Pan Bian)   
  - mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian)   
  - watchdog: mei_wdt: request stop on unregister (Alexander Usyskin)   
  - arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe)   
  - floppy: reintroduce O_NDELAY fix (Jiri Kosina)   
  - x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)   
  - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser)   
  - drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov)   
  - seccomp: Add missing return in non-void function (Paul Cercueil)   
  - crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe)   
  - crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe)   
  - btrfs: fix extent buffer leak on failure to copy root (Filipe Manana)   
  - btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik)   
  - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik)   
  - KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen)   
  - tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley)   
  - ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou)   
  - usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt (Thinh Nguyen)   
  - usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen)   
  - USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter)   
  - USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter)   
  - usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil)   
  - USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak)   
  - Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza)   
  - Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)   
  - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crête)   
  - Input: raydium_ts_i2c - do not send zero length (jeffrey.lin)   
  - HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke)   
  - ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao)   
  - ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki)   
  - blk-settings: align max_sectors on "logical_block_size" boundary (Mikulas Patocka)   
  - scsi: bnx2fc: Fix Kconfig warning & CNIC build errors (Randy Dunlap)   
  - mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin)   
  - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard)   
  - arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier)   
  - mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin)   
  - mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin)   
  - ocfs2: fix a use after free on error (Dan Carpenter)   
  - net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan)   
  - i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski)   
  - i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba)   
  - ext4: fix potential htree index checksum corruption (Theodore Ts'o)   
  - drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio)   
  - PCI: Align checking of syscall user config accessors (Heiner Kallweit)   
  - VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen)   
  - pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South)   
  - misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju)   
  - misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju)   
  - sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap)   
  - Input: elo - fix an error code in elo_connect() (Dan Carpenter)   
  - perf test: Fix unaligned access in sample parsing test (Namhyung Kim)   
  - perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter)   
  - spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko)   
  - powerpc/8xx: Fix software emulation interrupt (Christophe Leroy)   
  - powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch)   
  - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter)   
  - spi: stm32: properly handle 0 byte transfer (Alain Volmat)   
  - RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson)   
  - perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo)   
  - tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware))   
  - amba: Fix resource leak for drivers without .remove (Uwe Kleine-König)   
  - ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (Vladimir Murzin)   
  - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET)   
  - powerpc/47x: Disable 256k page size (Christophe Leroy)   
  - IB/umad: Return EIO in case of when device disassociated (Shay Drory)   
  - auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven)   
  - isofs: release buffer head before return (Pan Bian)   
  - spi: atmel: Put allocated master before return (Pan Bian)   
  - certs: Fix blacklist flag type confusion (David Howells)   
  - regulator: axp20x: Fix reference cout leak (Pan Bian)   
  - clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix)   
  - rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski)   
  - power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea)   
  - of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat)   
  - fdt: Properly handle "no-map" field in the memory region (KarimAllah Ahmed)   
  - mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda)   
  - dmaengine: hsu: disable spurious interrupt (Ferry Toth)   
  - dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET)   
  - dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET)   
  - HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap)   
  - spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav)   
  - clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl)   
  - capabilities: Don't allow writing ambiguous v3 file capabilities (Eric W. Biederman)   
  - jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix)   
  - fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King)   
  - ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian)   
  - ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian)   
  - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() (Daniele Alessandrelli)   
  - hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock)   
  - btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng)   
  - Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft))   
  - ata: ahci_brcm: Add back regulators management (Florian Fainelli)   
  - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart)   
  - media: pxa_camera: declare variable when DEBUG is defined (Tom Rix)   
  - media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET)   
  - media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng)   
  - media: lmedm04: Fix misuse of comma (Joe Perches)   
  - crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa)   
  - ASoC: cs42l56: fix up error handling in probe (Dan Carpenter)   
  - media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu)   
  - media: media/pci: Fix memleak in empress_init (Dinghao Liu)   
  - media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET)   
  - media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi)   
  - MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor)   
  - MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor)   
  - crypto: sun4i-ss - fix kmap usage (Corentin Labbe)   
  - gma500: clean up error handling in init (Dan Carpenter)   
  - drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang)   
  - fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap)   
  - net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier)   
  - net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K)   
  - net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K)   
  - ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan)   
  - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case (Colin Ian King)   
  - mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King)   
  - bnxt_en: reverse order of TX disable and carrier off (Edwin Peer)   
  - ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lüssing)   
  - bpf_lru_list: Read double-checked variable once without lock (Marco Elver)   
  - ARM: s3c: fix fiq for clang IAS (Arnd Bergmann)   
  - arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht)   
  - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai)   
  - usb: dwc2: Make "trimming xfer length" a debug message (Guenter Roeck)   
  - usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck)   
  - usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck)   
  - ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren)   
  - Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian)   
  - Bluetooth: drop HCI device reference before return (Pan Bian)   
  - usb: gadget: u_audio: Free requests only after callback (Jack Pham)   
  - cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (Christophe JAILLET)   
  - arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski)   
  - arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski)   
  - Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill)   
  - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
  - random: fix the RNDRESEEDCRNG ioctl (Eric Biggers)   
  - MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin)   
  - kdb: Make memory allocations more robust (Sumit Garg)   
  - vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers)   
  - scripts/recordmcount.pl: support big endian for ARCH sh (Rong Chen)   
  - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. (Shyam Prasad N)   
  - NET: usb: qmi_wwan: Adding support for Cinterion MV31 (Christoph Schemmel)   
  - arm64: tegra: Add power-domain for Tegra210 HDA (Sameer Pujar)   
  - ntfs: check for valid standard information attribute (Rustam Kovhaev)   
  - usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable (Stefan Ursella)   
  - HID: make arrays usage and value to be the same (Will McVicker)   
  - Linux 4.14.222 (Greg Kroah-Hartman)   
  - kvm: check tlbs_dirty directly (Lai Jiangshan)   
  - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
  - USB: Gadget Ethernet: Re-enable Jumbo frames. (John Greb)   
  - scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
  - xen/arm: don't ignore return errors from set_phys_to_machine (Stefano Stabellini)   
  - tracing: Avoid calling cc-option -mrecord-mcount for every Makefile (Vasily Gorbik)   
  - tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-mcount (Greg Thelen)   
  - trace: Use -mcount-record for dynamic ftrace (Andi Kleen)   
  - x86/build: Disable CET instrumentation in the kernel for 32-bit too (Borislav Petkov)   
  - h8300: fix PREEMPTION build, TI_PRE_COUNT undefined (Randy Dunlap)   
  - i2c: stm32f7: fix configuration of the digital filter (Alain Volmat)   
  - vsock: fix locking in vsock_shutdown() (Stefano Garzarella)   
  - vsock/virtio: update credit only if socket is not closed (Stefano Garzarella)   
  - net: watchdog: hold device global xmit lock during tx disable (Edwin Peer)   
  - net/vmw_vsock: improve locking in vsock_connect_timeout() (Norbert Slusarek)   
  - usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (Serge Semin)   
  - usb: dwc3: ulpi: fix checkpatch warning (Felipe Balbi)   
  - netfilter: conntrack: skip identical origin tuple in same zone only (Florian Westphal)   
  - netfilter: xt_recent: Fix attempt to update deleted entry (Jozsef Kadlecsik)   
  - bpf: Check for integer overflow when using roundup_pow_of_two() (Bui Quang Minh)   
  - memblock: do not start bottom-up allocations with kernel_end (Roman Gushchin)   
  - ARM: ensure the signal page contains defined contents (Russell King)   
  - ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL (Alexandre Belloni)   
  - ovl: skip getxattr of security labels (Amir Goldstein)   
  - cap: fix conversions on getxattr (Miklos Szeredi)   
  - ovl: perform vfs_getxattr() with mounter creds (Miklos Szeredi)   
  - platform/x86: hp-wmi: Disable tablet-mode reporting by default (Hans de Goede)   
  - arm64: dts: rockchip: Fix PCIe DT properties on rk3399 (Marc Zyngier)   
  - MIPS: BMIPS: Fix section mismatch warning (Jaedon Shin)   
  - arm/xen: Don't probe xenbus as part of an early initcall (Julien Grall)   
  - tracing: Check length before giving out the filter buffer (Steven Rostedt (VMware))   
  - tracing: Do not count ftrace events in top level enable output (Steven Rostedt (VMware))   
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher)   
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher)   
  - squashfs: add more sanity checks in id lookup (Phillip Lougher)   
  - memcg: fix a crash in wb_workfn when a device disappears (Theodore Ts'o)   
  - include/trace/events/writeback.h: fix -Wstringop-truncation warnings (Qian Cai)   
  - lib/string: Add strscpy_pad() function (Tobin C. Harding)   
  - SUNRPC: Handle 0 length opaque XDR object data properly (Dave Wysochanski)   
  - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header (Dave Wysochanski)   
  - iwlwifi: mvm: guard against device removal in reprobe (Johannes Berg)   
  - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (Emmanuel Grumbach)   
  - iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (Johannes Berg)   
  - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() (Trond Myklebust)   
  - af_key: relax availability checks for skb size calculation (Cong Wang)   
  - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar)   
  - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar)   
  - fgraph: Initialize tracing_graph_pause at task creation (Steven Rostedt (VMware))   
  - Linux 4.14.221 (Greg Kroah-Hartman)   
  - net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add (DENG Qingfang)   
  - iommu/vt-d: Do not use flush-queue when caching-mode is on (Nadav Amit)   
  - Input: xpad - sync supported devices with fork on GitHub (Benjamin Valentin)   
  - x86/apic: Add extra serialization for non-serializing MSRs (Dave Hansen)   
  - x86/build: Disable CET instrumentation in the kernel (Josh Poimboeuf)   
  - mm: thp: fix MADV_REMOVE deadlock on shmem THP (Hugh Dickins)   
  - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active (Muchun Song)   
  - mm: hugetlb: fix a race between isolating and freeing page (Muchun Song)   
  - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page (Muchun Song)   
  - ARM: footbridge: fix dc21285 PCI configuration accessors (Russell King)   
  - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs (Thorsten Leemhuis)   
  - mmc: core: Limit retries when analyse of SDIO tuples fails (Fengnan Chang)   
  - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Gustavo A. R. Silva)   
  - cifs: report error instead of invalid when revalidating a dentry fails (Aurelien Aptel)   
  - xhci: fix bounce buffer usage for non-sg list case (Mathias Nyman)   
  - kretprobe: Avoid re-registration of the same kretprobe earlier (Wang ShaoBo)   
  - mac80211: fix station rate table updates on assoc (Felix Fietkau)   
  - ovl: fix dentry leak in ovl_get_redirect (Liangyan)   
  - usb: dwc2: Fix endpoint direction check in ep_from_windex (Heiko Stuebner)   
  - USB: usblp: don't call usb_set_interface if there's a single alt (Jeremy Figgins)   
  - USB: gadget: legacy: fix an error code in eth_bind() (Dan Carpenter)   
  - ipv4: fix race condition between route lookup and invalidation (Wei Wang)   
  - elfcore: fix building with clang (Arnd Bergmann)   
  - objtool: Support Clang non-section symbols in ORC generation (Josh Poimboeuf)   
  - net: lapb: Copy the skb before sending a packet (Xie He)   
  - arm64: dts: ls1046a: fix dcfg address range (Zyta Szpak)   
  - USB: serial: option: Adding support for Cinterion MV31 (Christoph Schemmel)   
  - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 (Chenxin Jin)   
  - USB: serial: cp210x: add pid/vid for WSDA-200-USB (Pho Tran)   
  - Linux 4.14.220 (Greg Kroah-Hartman)   
  - kthread: Extract KTHREAD_IS_PER_CPU (Peter Zijlstra)   
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf)   
  - scsi: ibmvfc: Set default timeout to avoid crash during migration (Brian King)   
  - mac80211: fix fast-rx encryption check (Felix Fietkau)   
  - scsi: libfc: Avoid invoking response handler twice if ep is already completed (Javed Hasan)   
  - scsi: scsi_transport_srp: Don't block target in failfast state (Martin Wilck)   
  - x86: __always_inline __{rd,wr}msr() (Peter Zijlstra)   
  - phy: cpcap-usb: Fix warning for missing regulator_disable (Tony Lindgren)   
  - driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
  - base: core: Remove WARN_ON from link dependencies check (Benjamin Gaignard)   
  - net_sched: gen_estimator: support large ewma log (Eric Dumazet)   
  - net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
  - ACPI: thermal: Do not call acpi_thermal_check() directly (Rafael J. Wysocki)   
  - ibmvnic: Ensure that CRQ entry read are correctly ordered (Lijun Pan)   
  - net: dsa: bcm_sf2: put device node before return (Pan Bian)   
  - rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044345]  
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32804265]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982355]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820277]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.8.1.el7uek]
changelog:
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33221378]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33221378]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33221378]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33221378]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.2.el7uek]
changelog:
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 33186981]  
  - rds: Congestion tracepoints should be enabled by default (Greg Jumper)  [Orabug: 33145670]  
  - Linux 4.14.238 (Sasha Levin)   
  - i2c: robotfuzz-osif: fix control-request directions (Johan Hovold)   
  - nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin)   
  - pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne)   
  - net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal)   
  - net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook)   
  - r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)   
  - sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)   
  - r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)   
  - net/packet: annotate accesses to po->ifindex (Eric Dumazet)   
  - net/packet: annotate accesses to po->bind (Eric Dumazet)   
  - net: caif: fix memory leak in ldisc_open (Pavel Skripkin)   
  - inet: annotate date races around sk->sk_txhash (Eric Dumazet)   
  - ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun)   
  - mac80211: drop multicast fragments (Johannes Berg)   
  - cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng)   
  - mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)   
  - Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki)   
  - arm64: perf: Disable PMU while processing counter overflows (Suzuki K Poulose)   
  - MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor)   
  - Makefile: Move -Wno-unused-but-set-variable out of GCC only block (Nathan Chancellor)   
  - ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann)   
  - drm/radeon: wait for moving fence after pinning (Christian König)   
  - drm/nouveau: wait for moving fence after pinning v2 (Christian König)   
  - x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)   
  - unfuck sysfs_mount() (Al Viro)   
  - kernfs: deal with kernfs_fill_super() failures (Al Viro)   
  - usb: dwc3: core: fix kernel panic when do reboot (Peter Chen)   
  - inet: use bigger hash table for IP ID generation (Eric Dumazet)   
  - can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)   
  - net: fec_ptp: add clock rate zero check (Fugang Duan)   
  - mm/slub.c: include swab.h (Andrew Morton)   
  - net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)   
  - net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)   
  - dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)   
  - ARCv2: save ABI registers across signal handling (Vineet Gupta)   
  - PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)   
  - PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)   
  - PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)   
  - PCI: Mark TI C667X to avoid bus reset (Antti Järvinen)   
  - tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))   
  - tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))   
  - tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))   
  - usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)   
  - can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)   
  - hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)   
  - radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)   
  - net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)   
  - icmp: don't send out ICMP messages with a source address of 0.0.0.0 (Toke Høiland-Jørgensen)   
  - net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)   
  - net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)   
  - be2net: Fix an error handling path in 'be_probe()' (Christophe JAILLET)   
  - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)   
  - net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)   
  - net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)   
  - net: cdc_ncm: switch to eth%d interface naming (Maciej Żenczykowski)   
  - netxen_nic: Fix an error handling path in 'netxen_nic_probe()' (Christophe JAILLET)   
  - qlcnic: Fix an error handling path in 'qlcnic_probe()' (Christophe JAILLET)   
  - net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)   
  - alx: Fix an error handling path in 'alx_probe()' (Christophe JAILLET)   
  - netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)   
  - rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)   
  - udp: fix race between close() and udp_abort() (Paolo Abeni)   
  - net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)   
  - net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)   
  - batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)   
  - mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)   
  - dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)   
  - dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)   
  - dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)   
  - fib: Return the correct errno code (Zheng Yongjun)   
  - net: Return the correct errno code (Zheng Yongjun)   
  - net/x25: Return the correct errno code (Zheng Yongjun)   
  - rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)   
  - net: ipconfig: Don't override command-line hostnames or domains (Josh Triplett)   
  - nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)   
  - nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)   
  - nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)   
  - ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)   
  - scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)   
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)   
  - HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)   
  - ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)   
  - HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)   
  - HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)   
  - HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)   
  - net: ieee802154: fix null deref in parse dev addr (Dan Robertson)   
  - Linux 4.14.237 (Greg Kroah-Hartman)   
  - proc: only require mm_struct for writing (Linus Torvalds)   
  - tracing: Correct the length check which causes memory corruption (Liangyan)   
  - ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))   
  - scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)   
  - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)   
  - scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)   
  - NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)   
  - kvm: fix previous commit for 32-bit builds (Paolo Bonzini)   
  - perf session: Correct buffer copying when peeking events (Leo Yan)   
  - NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)   
  - perf: Fix data race between pin_count increment/decrement (Marco Elver)   
  - regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)   
  - regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)   
  - usb: fix various gadget panics on 10gbps cabling (Maciej Żenczykowski)   
  - usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej Żenczykowski)   
  - usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)   
  - USB: serial: quatech2: fix control-request directions (Johan Hovold)   
  - USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)   
  - USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)   
  - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)   
  - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)   
  - usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)   
  - USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej Żenczykowski)   
  - cgroup1: don't allow '
  ' in renaming (Alexander Kuznetsov)   
  - btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)   
  - staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)   
  - kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)   
  - drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)   
  - drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)   
  - i2c: mpc: implement erratum A-004447 workaround (Chris Packham)   
  - i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)   
  - powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)   
  - powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)   
  - bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)   
  - MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)   
  - net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)   
  - net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)   
  - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)   
  - scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)   
  - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)   
  - wq: handle VM suspension in stall detection (Sergey Senozhatsky)   
  - cgroup: disable controllers at parse time (Shakeel Butt)   
  - net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)   
  - netlink: disable IRQs for netlink_lock_table() (Johannes Berg)   
  - bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)   
  - isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)   
  - ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - net/nfc/rawsock.c: fix a permission check bug (Jeimon)   
  - proc: Track /proc/$pid/attr/ opener mm_struct (Kees Cook)   
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150437]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150414]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177350]  
  - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114648]  {CVE-2021-3609}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.3.el7uek]
changelog:
  - drivers: updates for 1.15.9.21 (Shannon Nelson)  [Orabug: 33220300]  
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220435]  
  - NFS: Don't call generic_error_remove_page() while holding locks (Trond Myklebust)  [Orabug: 33213898]  
  - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods (aloktiw)  [Orabug: 33179252]  
  - ifb: fix packets checksum (Jon Maxwell)  [Orabug: 33145562]  
  - Linux 4.14.239 (Greg Kroah-Hartman)   
  - xen/events: reset active flag for lateeoi events later (Juergen Gross)   
  - kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)   
  - kthread_worker: split code for canceling the delayed work timer (Petr Mladek)   
  - kfifo: DECLARE_KIFO_PTR(fifo, u64) does not work on arm 32 bit (Sean Young)   
  - drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König)   
  - scsi: sr: Return appropriate error code when disk is ejected (ManYi Li)   
  - mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins)   
  - mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins)   
  - mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi)   
  - mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang)   
  - mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins)   
  - mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins)   
  - mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin)   
  - mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin)   
  - mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi)   
  - include/linux/mmdebug.h: make VM_WARN* non-rvals (Michal Hocko)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.4.el7uek]
changelog:
  - drivers: updated for 1.15.9.26 (Shannon Nelson)  [Orabug: 33235357]  
  - XFS: code enhancement to help debug (Wengang Wang)  [Orabug: 33186644]  
  - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33234941]  {CVE-2021-3656} {CVE-2021-3656} 
  - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33234967]  {CVE-2021-3653} {CVE-2021-3653}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.5.el7uek]
changelog:
  - rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243560]  
  - KVM: SVM: use vmsave/vmload for saving/restoring additional host state (Michael Roth)  [Orabug: 33225761]  
  - KVM: SVM: Use asm goto to handle unexpected #UD on SVM instructions (Sean Christopherson)  [Orabug: 33225761]  
  - kvm: svm/avic: Do not send AVIC doorbell to self (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - svm/avic: Fix invalidate logical APIC id entry (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - svm: Fix improper check when deactivate AVIC (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - svm: Fix AVIC DFR and LDR handling (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - scsi: qla2xxx: Add heartbeat check (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (Baokun Li)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove duplicate declarations (Shaokun Zhang)  [Orabug: 33116624]  
  - scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (Daniel Wagner)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove redundant assignment to rval (Jiapeng Chong)  [Orabug: 33116624]  
  - scsi: qla2xxx: Prevent PRLI in target mode (Anastasia Kovaleva)  [Orabug: 33116624]  
  - scsi: qla2xxx: Add marginal path handling support (Bikash Hazarika)  [Orabug: 33116624]  
  - scsi: qla2xxx: Reserve extra IRQ vectors (Roman Bolshakov)  [Orabug: 33116624]  
  - scsi: qla2xxx: Reuse existing error handling path (Christophe JAILLET)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove unneeded if-null-free check (Qiheng Lin)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update version to 10.02.00.106-k (Nilesh Javali)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update default AER debug mask (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix mailbox recovery during PCIe error (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix crash in PCIe error handling (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix RISC RESET completion polling (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix stuck session (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Add H:C:T info in the log message for fc ports (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix IOPS drop seen in some adapters (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Check kzalloc() return value (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Simplify qla8044_minidump_process_control() (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Suppress Coverity complaints about dseg_r* (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix endianness annotations (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Constify struct qla_tgt_func_tmpl (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Use dma_pool_zalloc() (Wang Qing)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix a couple of misdocumented functions (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix incorrectly named function qla8044_check_temp() (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix a couple of misnamed functions (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix some incorrect formatting/spelling issues (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Replace __qla2x00_marker()'s missing underscores (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Simplify if statement (Jiapeng Chong)  [Orabug: 33116624]  
  - scsi: qla2xxx: Simplify the calculation of variables (Jiapeng Zhong)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix some memory corruption (Dan Carpenter)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove redundant NULL check (Yang Li)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove unnecessary NULL check (Dan Carpenter)  [Orabug: 33116624]  
  - scsi: qla2xxx: Assign boolean values to a bool variable (Jiapeng Zhong)  [Orabug: 33116624]  
  - scsi: qla2xxx: fc_remote_port_chkready() returns a SCSI result value (Hannes Reinecke)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (Enzo Matsumiya)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update version to 10.02.00.105-k (Nilesh Javali)  [Orabug: 33116624]  
  - scsi: qla2xxx: Enable NVMe CONF (BIT_7) when enabling SLER (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix mailbox Ch erroneous error (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Wait for ABTS response on I/O timeouts for NVMe (Bikash Hazarika)  [Orabug: 33116624]  
  - scsi: qla2xxx: Move some messages from debug to normal log level (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Add error counters to debugfs node (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Implementation to get and manage host, target stats and initiator port (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update version to 10.02.00.104-k (Nilesh Javali)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix device loss on 4G and older HBAs (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix the call trace for flush workqueue (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix N2N and NVMe connect retry failure (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix FW initialization error on big endian machines (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix compilation issue in PPC systems (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Don't check for fw_started while posting NVMe command (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Tear down session if FW say it is down (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Limit interrupt vectors to number of CPUs (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Change post del message from debug level to log level (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove trailing semicolon in macro definition (Tom Rix)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (Ahmed S. Darwish)  [Orabug: 33116624]  
  - scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (Ahmed S. Darwish)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (Ahmed S. Darwish)  [Orabug: 33116624]  
  - scsi: Remove unneeded break statements (Tom Rix)  [Orabug: 33116624]  
  - scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (Muneendra Kumar)  [Orabug: 33116624]  
  - scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (Muneendra Kumar)  [Orabug: 33116624]  
  - scsi: core: No retries on abort success (Muneendra Kumar)  [Orabug: 33116624]  
  - scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (Muneendra Kumar)  [Orabug: 33116624]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.6.el7uek]
changelog:
  - xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang)  [Orabug: 33277336]  
  - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33253068]  
  - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33246581]  
  - scsi: lpfc: Fix crash due to port reset racing vs adapter error handling (James Smart)  [Orabug: 33213341]  
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 33141334]  
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 33141334]  
  - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)  [Orabug: 33114988]  {CVE-2021-3612} 
  - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372381]  
  - dsc-drivers: update for 1.15.9-C-32 (Shannon Nelson)  [Orabug: 33281086]  
  - dts/pensando: creating reserved dma memory pool for mnet devices (Neel Patel)  [Orabug: 33281086]  
  - pcie: rm pcie register access message (#256) (Brad Smith)  [Orabug: 33281086]  
  - drivers: updates for 1.15.9-C-28 (Shannon Nelson)  [Orabug: 33281086]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.el7uek]
changelog:
  - xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  [Orabug: 33296813]  
  - Revert "mm: memcontrol: eliminate raw access to stat and event counters" (Ritika Srivastava)  [Orabug: 33254727]  
  - Revert "mm: memcontrol: implement lruvec stat functions on top of each other" (Ritika Srivastava)  [Orabug: 33254727]  
  - KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin)  [Orabug: 33054089]  {CVE-2021-22543} {CVE-2021-22543} 
  - ocfs2: issue zeroout to EOF blocks (Junxiao Bi)  [Orabug: 32974988]  
  - ocfs2: fix zero out valid data (Junxiao Bi)  [Orabug: 32974988]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.1.el7uek]
changelog:
  - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306519]  
  - Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy)  [Orabug: 33323390]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.2.el7uek]
changelog:
  - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter)  [Orabug: 33337449]  
  - ip: Manual backport of pskb_inet_may_pull() (Håkon Bugge)  [Orabug: 33337449]  
  - Revert "Revert "net: geneve: check skb is large enough for IPv4/IPv6 header"" (Håkon Bugge)  [Orabug: 33337449]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.3.el7uek]
changelog:
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp)  [Orabug: 33354710]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.5.el7uek]
changelog:
  - Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)  [Orabug: 33369947]  {CVE-2021-3573} 
  - Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  [Orabug: 33369947]  
  - Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33369947]  {CVE-2021-3564} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33369956]  {CVE-2021-40490} 
  - fuse: fix bad inode (Miklos Szeredi)  [Orabug: 33369955]  {CVE-2020-36322} 
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33369954]  {CVE-2021-3679} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33369953]  {CVE-2021-38160} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33369952]  {CVE-2021-3655}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.6.el7uek]
changelog:
  - fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33406810]  {CVE-2021-28950} 
  - block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33406819]  
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33406814]  
  - net/mlx5: Rate limit errors in command interface (Leon Romanovsky)  [Orabug: 33406805]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.0.el7uek]
changelog:
  - Linux 4.14.241 (Greg Kroah-Hartman)   
  - xhci: add xhci_get_virt_ep() helper (Mathias Nyman)   
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - btrfs: compression: don't try to compress if we don't have enough pages (David Sterba)   
  - iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold)   
  - iio: accel: bma180: Use explicit member assignment (Linus Walleij)   
  - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger)   
  - drm: Return -ENOTTY for non-drm ioctls (Charles Baylis)   
  - selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne)   
  - ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme)   
  - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva)   
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33198436]  {CVE-2021-3679} 
  - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan)   
  - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping)   
  - USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray)   
  - USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco)   
  - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda)   
  - usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson)   
  - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski)   
  - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman)   
  - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin)   
  - xhci: Fix lost USB 2 remote wake (Mathias Nyman)   
  - ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai)   
  - s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik)   
  - Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei)   
  - proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri)   
  - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin)   
  - spi: cadence: Correct initialisation of runtime PM again (Marek Vasut)   
  - scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov)   
  - scsi: iscsi: Fix iface sysfs attr detection (Mike Christie)   
  - netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi)   
  - net: decnet: Fix sleeping inside in af_decnet (Yajun Deng)   
  - net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan)   
  - s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King)   
  - liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King)   
  - spi: mediatek: fix fifo rx mode (Peter Hess)   
  - perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini)   
  - perf test bpf: Free obj_buf (Riccardo Mancini)   
  - perf lzma: Close lzma stream on exit (Riccardo Mancini)   
  - perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini)   
  - perf map: Fix dso->nsinfo refcounting (Riccardo Mancini)   
  - igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov)   
  - iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET)   
  - e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET)   
  - fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET)   
  - igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET)   
  - ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET)   
  - igb: Fix use-after-free error during reset (Vinicius Costa Gomes)   
  - ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet)   
  - tcp: annotate data races around tp->mtu_info (Eric Dumazet)   
  - dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand)   
  - net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)   
  - net: send SYNACK packet with accepted fwmark (Alexander Ovechkin)   
  - net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)   
  - net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin)   
  - net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin)   
  - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli)   
  - net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller)   
  - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin)   
  - net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko)   
  - sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal)   
  - scsi: libfc: Fix array index out of bound exception (Javed Hasan)   
  - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King)   
  - rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)   
  - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich)   
  - thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang)   
  - arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab)   
  - arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla)   
  - ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue)   
  - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer)   
  - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser)   
  - ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki)   
  - ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki)   
  - ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki)   
  - ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki)   
  - reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel)   
  - arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang)   
  - ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang)   
  - ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia)   
  - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker)   
  - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker)   
  - ARM: dts: gemini: add device_type on pci (Corentin Labbe)   
  - Linux 4.14.240 (Greg Kroah-Hartman)   
  - net: bridge: multicast: fix PIM hello router port marking race (Nikolay Aleksandrov)   
  - MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz)   
  - mips: disable branch profiling in boot/decompress.o (Randy Dunlap)   
  - mips: always link byteswap helpers into decompressor (Arnd Bergmann)   
  - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET)   
  - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)   
  - memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski)   
  - memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski)   
  - reset: bail if try_module_get() fails (Philipp Zabel)   
  - ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki)   
  - ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven)   
  - rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter)   
  - memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski)   
  - reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski)   
  - hexagon: use common DISCARDS macro (Nathan Chancellor)   
  - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust)   
  - ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei)   
  - x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner)   
  - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng)   
  - nfs: fix acl memory leak of posix_acl_create() (Gao Xiang)   
  - watchdog: aspeed: fix hardware timeout calculation (Tao Ren)   
  - um: fix error return code in winch_tramp() (Zhen Lei)   
  - um: fix error return code in slip_open() (Zhen Lei)   
  - power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold)   
  - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński)   
  - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu)   
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33209273]  {CVE-2021-38160} 
  - virtio_net: Fix error handling in virtnet_restore() (Xie Yongji)   
  - virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji)   
  - ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede)   
  - ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang)   
  - pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König)   
  - power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - NFS: nfs_find_open_context() may only select open files (Trond Myklebust)   
  - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton)   
  - orangefs: fix orangefs df output. (Mike Marshall)   
  - x86/fpu: Return proper error codes from user access functions (Thomas Gleixner)   
  - watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka)   
  - watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei)   
  - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei)   
  - watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei)   
  - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers)   
  - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui)   
  - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)   
  - power: supply: ab8500: Avoid NULL pointers (Linus Walleij)   
  - pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König)   
  - lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov)   
  - i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov)   
  - intel_th: Wait until port is in reset before programming it (Alexander Shishkin)   
  - staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto)   
  - ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao)   
  - backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König)   
  - powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt)   
  - usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang)   
  - usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol)   
  - ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto)   
  - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei)   
  - selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev)   
  - ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang)   
  - gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli)   
  - powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand)   
  - ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai)   
  - s390/sclp_vt220: fix console name to match device (Valentin Vidic)   
  - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei)   
  - scsi: qedi: Fix null ref during abort handling (Mike Christie)   
  - scsi: iscsi: Fix shost->max_id use (Mike Christie)   
  - scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)   
  - fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong)   
  - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET)   
  - scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry)   
  - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart)   
  - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart)   
  - w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio)   
  - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto)   
  - misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong)   
  - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun)   
  - PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohár)   
  - PCI: aardvark: Don't rely on jiffies while holding spinlock (Remi Pommarel)   
  - tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware))   
  - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler)   
  - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan)   
  - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson)   
  - smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa)   
  - jfs: fix GPF in diFree (Pavel Skripkin)   
  - media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung)   
  - media: gspca/sunplus: fix zero-length control requests (Johan Hovold)   
  - media: gspca/sq905: fix control-request direction (Johan Hovold)   
  - media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin)   
  - media: dtv5100: fix control-request directions (Johan Hovold)   
  - dm btree remove: assign new_root only when removal succeeds (Hou Tao)   
  - ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong)   
  - tracing: Simplify & fix saved_tgids logic (Paul Burton)   
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)   
  - power: supply: ab8500: Fix an old bug (Linus Walleij)   
  - ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu)   
  - qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor)   
  - ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko)   
  - cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner)   
  - ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson)   
  - mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle)   
  - mmc: core: clear flags before allowing to retune (Wolfram Sang)   
  - mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper)   
  - pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz)   
  - drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng)   
  - usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov)   
  - powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor)   
  - mac80211: fix memory corruption in EAPOL handling (Davis Mosenkovs)   
  - fuse: reject internal errno (Miklos Szeredi)   
  - bdi: Do not use freezable workqueue (Mika Westerberg)   
  - fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers)   
  - sctp: add size validation when walking chunks (Marcelo Ricardo Leitner)   
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33198408]  {CVE-2021-3655} 
  - Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang)   
  - Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng)   
  - Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu)   
  - wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva)   
  - sfc: error code if SRIOV cannot be disabled (Íñigo Huguet)   
  - sfc: avoid double pci_remove of VFs (Íñigo Huguet)   
  - iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg)   
  - RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang)   
  - vsock: notify server to shutdown when client has pending signal (Longpeng(Mike))   
  - atm: nicstar: register the interrupt handler in the right place (Zheyu Ma)   
  - atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma)   
  - MIPS: add PMD table accounting into MIPS'pmd_alloc_one (Huang Pei)   
  - cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson)   
  - wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren)   
  - xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert)   
  - selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim)   
  - fjes: check return value after calling platform_get_resource() (Yang Yingliang)   
  - net: micrel: check return value after calling platform_get_resource() (Yang Yingliang)   
  - net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang)   
  - virtio_net: Remove BUG() to avoid machine dead (Xianting Tian)   
  - dm space maps: don't reset space map allocation cursor when committing (Joe Thornber)   
  - RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong)   
  - ipv6: use prandom_u32() for ID generation (Willy Tarreau)   
  - clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko)   
  - clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto)   
  - e100: handle eeprom as little endian (Jesse Brandeburg)   
  - udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)   
  - drm/virtio: Fix double free on probe failure (Xie Yongji)   
  - reiserfs: add check for invalid 1st journal block (Pavel Skripkin)   
  - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior)   
  - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei)   
  - mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)   
  - atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei)   
  - hugetlb: clear huge pte during flush function on mips platform (Bibo Mao)   
  - net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko)   
  - drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang)   
  - drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)   
  - drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)   
  - mmc: vub3000: fix control-request direction (Johan Hovold)   
  - selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen)   
  - mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin)   
  - leds: ktd2692: Fix an error handling path (Christophe JAILLET)   
  - leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei)   
  - configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng)   
  - extcon: max8997: Add missing modalias string (Marek Szyprowski)   
  - extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold)   
  - phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET)   
  - scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei)   
  - of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven)   
  - ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald)   
  - staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter)   
  - staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter)   
  - iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko)   
  - s390: appldata depends on PROC_SYSCTL (Randy Dunlap)   
  - scsi: FlashPoint: Rename si_flags field (Randy Dunlap)   
  - tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET)   
  - char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai)   
  - Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei)   
  - ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang)   
  - iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: adis_buffer: do not return ints in irq handlers (Nuno Sa)   
  - mwifiex: re-fix for unaligned accesses (Arnd Bergmann)   
  - tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET)   
  - net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin)   
  - writeback: fix obtain a reference to a freeing memcg css (Muchun Song)   
  - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)   
  - Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden)   
  - i40e: Fix error handling in i40e_vsi_open (Dinghao Liu)   
  - net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan)   
  - vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet)   
  - pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet)   
  - net: ethernet: ezchip: fix error handling (Pavel Skripkin)   
  - net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin)   
  - net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin)   
  - samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai)   
  - netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso)   
  - netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin)   
  - ath10k: Fix an error code in ath10k_add_interface() (Yang Li)   
  - brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap)   
  - drm: qxl: ensure surf.data is ininitialized (Colin Ian King)   
  - RDMA/rxe: Fix failure during driver load (Kamal Heib)   
  - ehea: fix error return code in ehea_restart_qps() (Zhen Lei)   
  - drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang)   
  - net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko)   
  - ocfs2: fix snprintf() checking (Dan Carpenter)   
  - ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński)   
  - crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu)   
  - spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt)   
  - btrfs: clear log tree recovering status if starting transaction fails (David Sterba)   
  - hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck)   
  - hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck)   
  - media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min)   
  - mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei)   
  - media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva)   
  - media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei)   
  - media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong)   
  - pata_ep93xx: fix deferred probing (Sergey Shtylyov)   
  - crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET)   
  - pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov)   
  - media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap)   
  - pata_rb532_cf: fix deferred probing (Sergey Shtylyov)   
  - sata_highbank: fix deferred probing (Sergey Shtylyov)   
  - crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei)   
  - crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe)   
  - media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab)   
  - ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann)   
  - HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke)   
  - ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald)   
  - platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong)   
  - ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo)   
  - ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda)   
  - fs: dlm: fix memory leak when fenced (Alexander Aring)   
  - random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald)   
  - fs: dlm: cancel work sync othercon (Alexander Aring)   
  - block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F))   
  - ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu)   
  - lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald)   
  - hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing)   
  - ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello)   
  - HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov)   
  - regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin)   
  - btrfs: disable build on platforms having page size 256K (Christophe Leroy)   
  - btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik)   
  - btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik)   
  - media: siano: fix device register error path (Mauro Carvalho Chehab)   
  - media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab)   
  - crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel)   
  - mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma)   
  - media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu)   
  - media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov)   
  - media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma)   
  - media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong)   
  - media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente)   
  - crypto: qat - remove unused macro in FW loader (Jack Xu)   
  - crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu)   
  - media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam)   
  - media: cobalt: fix race condition in setting HPD (Hans Verkuil)   
  - media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin)   
  - crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui)   
  - spi: omap-100k: Fix the length judgment problem (Tian Tao)   
  - spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang)   
  - spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang)   
  - spi: Make of_register_spi_device also set the fwnode (Charles Keepax)   
  - fuse: check connected before queueing on fpq->io (Miklos Szeredi)   
  - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou)   
  - rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut)   
  - ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch)   
  - ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár)   
  - serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary)   
  - serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary)   
  - serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda)   
  - iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang)   
  - iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang)   
  - iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde)   
  - rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey)   
  - s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan)   
  - SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu)   
  - SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu)   
  - can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean)   
  - can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp)   
  - ext4: fix avefreec in find_group_orlov (Pan Dong)   
  - ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi)   
  - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi)   
  - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)   
  - ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi)   
  - btrfs: clear defrag status of a root if starting transaction fails (David Sterba)   
  - btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana)   
  - ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches)   
  - iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro)   
  - ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi)   
  - USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen)   
  - usb: gadget: eem: fix echo command packet response issue (Linyu Yuan)   
  - net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin)   
  - Input: usbtouchscreen - fix control-request directions (Johan Hovold)   
  - media: dvb-usb: fix wrong definition (Pavel Skripkin)   
  - ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung)   
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp)  [Orabug: 33309109]  
  - Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy)  [Orabug: 33307212]


