-
Fri Dec 15 2017 Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.2.el7uek]
- fuse: Call end_queued_requests() after releasing fc->lock in fuse_dev_release() (Ashish Samant) [Orabug: 26431550]
- rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge) [Orabug: 27097105]
- rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge) [Orabug: 27097105]
- rds: ib: Fix NULL pointer dereference in debug code (Håkon Bugge) [Orabug: 27116566]
- bnx2x: fix slowpath null crash (Zhu Yanjun) [Orabug: 27133587]
- rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon) [Orabug: 27150029]
- USB: serial: console: fix use-after-free after failed setup (Johan Hovold) [Orabug: 27206830] {CVE-2017-16525}
- mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)
- xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)
- xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)
- uwb: properly check kthread_run return value (Andrey Konovalov) [Orabug: 27206880] {CVE-2017-16526}
- ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai) [Orabug: 27206923] {CVE-2017-16529}
- USB: uas: fix bug in handling of alternate settings (Alan Stern) [Orabug: 27206999] {CVE-2017-16530}
- USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman) [Orabug: 27207224] {CVE-2017-16531}
- HID: usbhid: fix out-of-bounds bug (Jaejoong Kim) [Orabug: 27207918] {CVE-2017-16533}
- USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern) [Orabug: 27207970] {CVE-2017-16535}
- [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold) [Orabug: 27208047] {CVE-2017-16536}
- Replace max_t() with sub_positive() in dequeue_entity_load_avg() (Gayatri Vasudevan) [Orabug: 27222316]
- sched/fair: Fix cfs_rq avg tracking underflow (Gayatri Vasudevan) [Orabug: 27222316]
- KVM: nVMX: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Liran Alon) [Orabug: 27250111]
- KVM: VMX: use kvm_event_needs_reinjection (Wanpeng Li) [Orabug: 27250111]
- KVM: nVMX: Fix pending events injection (Wanpeng Li) [Orabug: 27250111]
-
Fri Dec 08 2017 Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.1.el7uek]
- ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Eryu Guan) [Orabug: 27233471]
-
Fri Dec 08 2017 Brian Maly <brian.maly@oracle.com> [4.1.12-112.13.1.el7uek]
- cgroup: make sure a parent css isn't offlined before its children (Tejun Heo) [Orabug: 27179269]
-
Tue Dec 05 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.12.1.el7uek]
- ctf: allow dwarf2ctf to run as root but produce no output (Nick Alcock) [Orabug: 27133094]
- net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork) [Orabug: 27215221] {CVE-2017-16650}
- ctf: fix thinko preventing linking of out-of-tree modules when CTF is off (Nick Alcock) [Orabug: 27215293]
- Revert "firmware: dmi_scan: add SBMIOS entry and DMI tables" (Dan Duval) [Orabug: 27100376]
-
Tue Dec 05 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.11.1.el7uek]
- mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov) [Orabug: 27200880] {CVE-2017-1000405}
- uek-rpm: Update linux firmware package for OL7 (Dhaval Giani) [Orabug: 27210206]
- uek-rpm: Update firmware for OL6 UEK spec file (Dhaval Giani) [Orabug: 27210204]
- scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne) [Orabug: 27187218]
- xen/time: do not decrease steal time after live migration on xen (Dongli Zhang) [Orabug: 26770163]
- ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai) [Orabug: 27148272] {CVE-2017-16527}
- scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call (Quinn Tran) [Orabug: 27149785]
- scsi: qla2xxx: Initialize Work element before requesting IRQs (Himanshu Madhani) [Orabug: 27149785]
- scsi: qla2xxx: Fix uninitialized work element (Quinn Tran) [Orabug: 27149785]
-
Thu Nov 23 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.10.1.el7uek]
- Revert "Improves clear_huge_page() using work queues" (Jack Vogel) [Orabug: 27055693]
- packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn) [Orabug: 27069060] {CVE-2017-15649}
- packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn) [Orabug: 27069060] {CVE-2017-15649}
- net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena) [Orabug: 27069060] {CVE-2017-15649}
- packet: fix races in fanout_add() (Eric Dumazet) [Orabug: 27069060] {CVE-2017-15649}
- refcount_t: Introduce a special purpose refcount type (Peter Zijlstra) [Orabug: 27069060] {CVE-2017-15649}
- locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon) [Orabug: 27069060] {CVE-2017-15649}
- scsi: qla2xxx: Fix slow mem alloc behind lock (Quinn Tran) [Orabug: 27100873]
-
Thu Nov 16 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.9.1.el7uek]
- xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Jan Kara) [Orabug: 26862911]
- xfs: Fix missed holes in SEEK_HOLE implementation (Jan Kara) [Orabug: 26862911]
- ext4: fix off-by-in in loop termination in ext4_find_unwritten_pgoff() (Jan Kara) [Orabug: 26862911]
- ext4: fix SEEK_HOLE (Jan Kara) [Orabug: 26862911]
- rtc: cmos: century support (Sylvain Chouleur) [Orabug: 27025943]
- ocfs2: code clean up for direct io (Ryan Ding) [Orabug: 27117733]
- scsi: Don't abort scsi_scan due to unexpected response (John Sobecki) [Orabug: 27119610]
- ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant) [Orabug: 26326914]
-
Thu Nov 09 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.8.1.el7uek]
- uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard) [Orabug: 26798697]
- uek-rpm: Add more missing modules to OL7 ueknano (Somasundaram Krishnasamy) [Orabug: 27028326]
- fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh) [Orabug: 27069034] {CVE-2017-12190}
- more bio_map_user_iov() leak fixes (Al Viro) [Orabug: 27069034] {CVE-2017-12190}
- usb: Quiet down false peer failure messages (Don Zickus) [Orabug: 26669801]
- ovl: during copy up, switch to mounter's creds early (Vivek Goyal) [Orabug: 27052885]
- ovl: lookup: do getxattr with mounter's permission (Miklos Szeredi) [Orabug: 27052885]
- ovl: get rid of the dead code left from broken (and disabled) optimizations (Al Viro) [Orabug: 27052885]
- selinux: Implement dentry_create_files_as() hook (Vivek Goyal) [Orabug: 27052885]
- security, overlayfs: Provide hook to correctly label newly created files (Vivek Goyal) [Orabug: 27052885]
- selinux: Pass security pointer to determine_inode_label() (Vivek Goyal) [Orabug: 27052885]
- selinux: Implementation for inode_copy_up_xattr() hook (Vivek Goyal) [Orabug: 27052885]
- security,overlayfs: Provide security hook for copy up of xattrs for overlay file (Vivek Goyal) [Orabug: 27052885]
- selinux: Implementation for inode_copy_up() hook (Vivek Goyal) [Orabug: 27052885]
- security, overlayfs: provide copy up security hook for unioned files (Vivek Goyal) [Orabug: 27052885]
- selinux: delay inode label lookup as long as possible (Paul Moore) [Orabug: 27052885]
- selinux: Add accessor functions for inode->i_security (Andreas Gruenbacher) [Orabug: 27052885]
- selinux: Create a common helper to determine an inode label [ver #3] (David Howells) [Orabug: 27052885]
- KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li) [Orabug: 27056291]
- KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini) [Orabug: 27056291]
- KVM: VMX: require virtual NMI support (Paolo Bonzini) [Orabug: 27056291]
- KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li) [Orabug: 27056291]
- netlink: allow to listen "all" netns (Nicolas Dichtel) [Orabug: 27077793]
- netlink: rename private flags and states (Nicolas Dichtel) [Orabug: 27077793]
- netns: use a spin_lock to protect nsid management (Nicolas Dichtel) [Orabug: 27077793]
- netns: notify new nsid outside __peernet2id() (Nicolas Dichtel) [Orabug: 27077793]
- netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel) [Orabug: 27077793]
- netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel) [Orabug: 27077793]
- netns: returns always an id in __peernet2id() (Nicolas Dichtel) [Orabug: 27077793]
- uek-rpm: add update-el-x86; fix-up ol6/update-el (Chuck Anderson) [Orabug: 26844981]
- xscore: add dma address check (Zhu Yanjun) [Orabug: 26994454]
- qla2xxx: Update driver version to 9.00.00.00.40.0-k (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix delayed response to command for loop mode/direct connect. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Use IOCB interface to submit non-critical MBX. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Add async new target notification (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Allow relogin to proceed if remote login did not finish (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix sess_lock & hardware_lock lock order problem. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix inadequate lock protection for ABTS. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix request queue corruption. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix memory leak for abts processing (Quinn Tran) [Orabug: 26844197]
- scsi: qla2xxx: Fix ql_dump_buffer (Joe Perches) [Orabug: 26844197]
- scsi: qla2xxx: Fix response queue count for Target mode. (Michael Hernandez) [Orabug: 26844197]
- scsi: qla2xxx: Cleaned up queue configuration code. (Michael Hernandez) [Orabug: 26844197]
- qla2xxx: Fix a warning reported by the "smatch" static checker (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Simplify usage of SRB structure in driver (Bart Van Assche) [Orabug: 26844197]
- qla2xxx: Simplify usage of SRB structure in driver (Joe Carnuccio) [Orabug: 26844197]
- qla2xxx: Improve RSCN handling in driver (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Add framework for async fabric discovery (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Track I-T nexus as single fc_port struct (Quinn Tran) [Orabug: 26844197]
- qla2xxx: introduce a private sess_kref (Christoph Hellwig) [Orabug: 26844197]
- qla2xxx: Use d_id instead of s_id for more clarity (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix wrong argument in sp done callback (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Remove SRR code (Himanshu Madhani) [Orabug: 26844197]
- qla2xxx: Cleanup TMF code translation from qla_target (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Disable out-of-order processing by default in firmware (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix erroneous invalid handle message (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Reduce exess wait during chip reset (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Terminate exchange if corrupted (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Fix crash due to null pointer access (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Collect additional information to debug fw dump (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Reset reserved field in firmware options to 0 (Himanshu Madhani) [Orabug: 26844197]
- qla2xxx: Include ATIO queue in firmware dump when in target mode (Himanshu Madhani) [Orabug: 26844197]
- qla2xxx: Fix wrong IOCB type assumption (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Add DebugFS node for target sess list. (Quinn Tran) [Orabug: 26844197]
- tcm_qla2xxx: Convert to target_alloc_session usage (Nicholas Bellinger) [Orabug: 26844197]
- qla2xxx: Use ATIO type to send correct tmr response (Swapnil Nagle) [Orabug: 26844197]
- qla2xxx: Fix TMR ABORT interaction issue between qla2xxx and TCM (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Move atioq to a different lock to reduce lock contention (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Remove dependency on hardware_lock to reduce lock contention. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Replace QLA_TGT_STATE_ABORTED with a bit. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Wait for all conflicts before ack'ing PLOGI (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: Delete session if initiator is gone from FW (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: Added interface to send explicit LOGO. (Himanshu Madhani) [Orabug: 26844197]
- qla2xxx: Add FW resource count in DebugFS. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Enable Target counters in DebugFS. (Himanshu Madhani) [Orabug: 26844197]
- qla2xxx: terminate exchange when command is aborted by LIO (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: drop cmds/tmrs arrived while session is being deleted (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: disable scsi_transport_fc registration in target mode (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: added sess generations to detect RSCN update races (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: delay plogi/prli ack until existing sessions are deleted (Alexei Potashnik) [Orabug: 26844197]
- qla2xxx: cleanup cmd in qla workqueue before processing TMR (Swapnil Nagle) [Orabug: 26844197]
- qla2xxx: Add flush after updating ATIOQ consumer index. (Quinn Tran) [Orabug: 26844197]
- qla2xxx: Enable target mode for ISP27XX (Himanshu Madhani) [Orabug: 26844197]
-
Thu Nov 02 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.7.1.el7uek]
- x86/platform/uv: Fix kdump for UV (Kirtikar Kashyap) [Orabug: 27031280]
- firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk) [Orabug: 27045425]
- KEYS: prevent KEYCTL_READ on negative key (Eric Biggers) [Orabug: 27050237] {CVE-2017-12192}
- NFS: Add static NFS I/O tracepoints (Chuck Lever)
- Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro) [Orabug: 27052680]
- scsi: mpt3sas: Bump mpt3sas driver version to v16.100.00.00 (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Adding support for SAS3616 HBA device (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Fix possibility of using invalid Enclosure Handle for SAS device after host reset (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Display chassis slot information of the drive (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Updated MPI headers to v2.00.48 (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1 volume created on two SATA drive (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Fix removal and addition of vSES device during host reset (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Reduce memory footprint in kdump kernel (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Fixed memory leaks in driver (Sreekanth Reddy) [Orabug: 26894579]
- scsi: mpt3sas: Processing of Cable Exception events (Sreekanth Reddy) [Orabug: 26894579]
- storvsc: don't assume SG list is contiguous (Aruna Ramakrishna) [Orabug: 27044703]
- sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming) [Orabug: 27036905] {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191}
- uek-rpm: Update kernel-ueknano's provides list. (Somasundaram Krishnasamy) [Orabug: 27022769]
- uek-rpm: Add more modules to ueknano for OL7 (Somasundaram Krishnasamy) [Orabug: 27015961]
- selinux: fix off-by-one in setprocattr (Stephen Smalley) [Orabug: 27001687] {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618}
- dtrace: Add CTF archive to the UEK nano package (Tomas Jedlicka) [Orabug: 27039123]
- Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Dhaval Giani) [Orabug: 27037801]
- thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov) [Orabug: 26763484]
-
Thu Oct 26 2017 Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.6.1.el7uek]
- ocfs2: fix posix_acl_create deadlock (Junxiao Bi) [Orabug: 26808507]
- rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon) [Orabug: 26937730]
- rds: Remove .exit from struct rds_transport (Ka-Cheong Poon) [Orabug: 26937730]
- smartpqi: update driver version (Don Brace) [Orabug: 26882397]
- smartpqi: cleanup raid map warning message (Kevin Barnett) [Orabug: 26882397]
- smartpqi: update controller ids (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: remove the smp_handler stub (Christoph Hellwig) [Orabug: 26882397]
- scsi: smartpqi: change driver version to 1.1.2-125 (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: add in new controller ids (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: update kexec and power down support (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: cleanup doorbell register usage. (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: update pqi passthru ioctl (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: enhance BMIC cache flush (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: add pqi reset quiesce support (Kevin Barnett) [Orabug: 26882397]
- scsi: smartpqi: make pdev pointer names consistent (Kevin Barnett) [Orabug: 26882397]
- udp: consistently apply ufo or fragmentation (Willem de Bruijn) [Orabug: 26921314] {CVE-2017-1000112}
- be2net: fix TSO6/GSO issue causing TX-stall on Lancer/BEx (Suresh Reddy) [Orabug: 26928620]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [Orabug: 27011248] {CVE-2017-7542}
- xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster) [Orabug: 27013239]
- nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen) [Orabug: 26929569]