-
Fri Mar 04 2022 Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.304.4.4.el8uek]
- arm64: Use the clearbhb instruction in mitigations (James Morse) [Orabug: 33921646]
- arm64: add ID_AA64ISAR2_EL1 sys register (Joey Gouly) [Orabug: 33921646]
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (James Morse) [Orabug: 33921646]
- arm64: Mitigate spectre style branch history side channels (James Morse) [Orabug: 33921646]
- KVM: arm64: Add templates for BHB mitigation sequences (James Morse) [Orabug: 33921646]
- arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual) [Orabug: 33921646]
- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose) [Orabug: 33921646]
- arm64: Add part number for Arm Cortex-A77 (Rob Herring) [Orabug: 33921646]
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (James Morse) [Orabug: 33921646]
- arm64: Add percpu vectors for EL1 (James Morse) [Orabug: 33921646]
- arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse) [Orabug: 33921646]
- arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse) [Orabug: 33921646]
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse) [Orabug: 33921646]
- arm64: entry: Allow the trampoline text to occupy multiple pages (James Morse) [Orabug: 33921646]
- arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse) [Orabug: 33921646]
- arm64: entry: Move trampoline macros out of ifdef'd section (James Morse) [Orabug: 33921646]
- arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse) [Orabug: 33921646]
- arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (James Morse) [Orabug: 33921646]
- arm64: entry: Move the trampoline data page before the text page (James Morse) [Orabug: 33921646]
- arm64: entry: Free up another register on kpti's tramp_exit path (James Morse) [Orabug: 33921646]
- arm64: entry: Make the trampoline cleanup optional (James Morse) [Orabug: 33921646]
- arm64: entry.S: Add ventry overflow sanity checks (James Morse) [Orabug: 33921646]
- Revert "BACKPORT: VARIANT 2: arm64: Add initial retpoline support" (Russell King) [Orabug: 33921646]
- Revert "BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br." (Russell King) [Orabug: 33921646]
- Revert "BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA." (Russell King) [Orabug: 33921646]
- Revert "BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr." (Russell King) [Orabug: 33921646]
- Revert "BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block." (Russell King) [Orabug: 33921646]
- Revert "BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline." (Russell King) [Orabug: 33921646]
- Revert "Arm64: add retpoline to cpu_show_spectre_v2" (Russell King) [Orabug: 33921646]
- Revert "arm64: retpoline: Don't use retpoline in KVM's HYP part." (Russell King) [Orabug: 33921646]
- Revert "uek-rpm: aarch64 config enable RETPOLINE" (Russell King) [Orabug: 33921646]
- Revert "uek-rpm: aarch64 config enable RETPOLINE OL8" (Russell King) [Orabug: 33921646]
- x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Use generic retpoline by default on AMD (Kim Phillips) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf) [Orabug: 33922121] {CVE-2021-26341}
- Documentation/hw-vuln: Update spectre doc (Peter Zijlstra) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel)) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp) [Orabug: 33922121] {CVE-2021-26341}
- x86/speculation: Fix bug in retpoline mode on AMD with `spectre_v2=none` (Patrick Colp) [Orabug: 33922121] {CVE-2021-26341}
- bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann) [Orabug: 33926314]
-
Wed Mar 02 2022 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.3.el8uek]
- x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp) [Orabug: 33890091]
-
Fri Feb 25 2022 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.2.el8uek]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Pablo Neira Ayuso) [Orabug: 33899500] {CVE-2022-25636}
-
Tue Feb 08 2022 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.4.1.el8uek]
- Revert "rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info" (Rohit Nair) [Orabug: 33832625]
- cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832582] {CVE-2022-0492}
-
Tue Feb 01 2022 Brian Maly <brian.maly@oracle.com> [5.4.17-2136.304.4.el8uek]
- scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie) [Orabug: 33794250]
- scsi: libiscsi: Drop taskqueuelock (Mike Christie) [Orabug: 33794250]
- ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang) [Orabug: 33495339]
- KVM: SVM: Don't intercept #GP for SEV guests (Sean Christopherson) [Orabug: 33446920]
- Revert "KVM: SVM: avoid infinite loop on NPF from bad address" (Sean Christopherson) [Orabug: 33446920]
- KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson) [Orabug: 33446920]
- rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33660929]
- tee: handle lookup of shm with reference count 0 (Jens Wiklander) [Orabug: 33739582] {CVE-2021-44733}
- smp: always continue to process IRQ work (Stephen Brennan) [Orabug: 33802464]
-
Tue Jan 18 2022 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.304.3.el8uek]
- vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel) [Orabug: 33766454] {CVE-2022-0185}
- LTS tag: v5.4.161 (Sherry Yang)
- erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang)
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu)
- PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier)
- PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier)
- PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)
- parisc/entry: fix trace test in syscall exit path (Sven Schnelle)
- fortify: Explicitly disable Clang support (Kees Cook)
- scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim)
- ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki)
- scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter)
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)
- LTS tag: v5.4.160 (Sherry Yang) [Orabug: 33536399]
- selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko)
- ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann)
- SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust)
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohár)
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde)
- s390/cio: make ccw_device_dma_* more robust (Halil Pasic)
- s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle)
- s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)
- video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut)
- mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin)
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao)
- powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao)
- powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)
- powerpc/bpf: Validate branch ranges (Naveen N. Rao)
- powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)
- ovl: fix deadlock in splice write (Miklos Szeredi)
- 9p/net: fix missing error check in p9_check_errors (Dominique Martinet)
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann)
- f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim)
- irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren)
- parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller)
- parisc: Fix backtrace to always include init funtion names (Helge Deller)
- ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)
- ARM: 9155/1: fix early early_iounmap() (Michał Mirosław)
- selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn)
- cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy)
- net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li)
- vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)
- net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang)
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet)
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend)
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann)
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)
- llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers)
- zram: off by one in read_block_state() (Dan Carpenter)
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)
- net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan)
- net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)
- xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)
- i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' (Christophe JAILLET)
- NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust)
- scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)
- scsi: qla2xxx: Fix gnl list corruption (Quinn Tran)
- ar7: fix kernel builds for compiler test (Jackie Liu)
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)
- m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (Eric W. Biederman)
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (Lars-Peter Clausen)
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal)
- soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (Robert-Ionut Alexa)
- auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven)
- auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven)
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven)
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea)
- mtd: core: don't remove debugfs directory if device is in use (Zev Weiss)
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov)
- fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai)
- NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust)
- opp: Fix return in _opp_add_static_v2() (YueHaibing)
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Pali Rohár)
- PCI: aardvark: Don't spam about PIO Response Status (Marek Behún)
- drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71))
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers)
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen)
- apparmor: fix error check (Tom Rix)
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede)
- mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven)
- powerpc/44x/fsp2: add missing of_node_put (Bixuan Cui)
- HID: u2fzero: properly handle timeouts in usb_submit_urb (Andrej Shadura)
- HID: u2fzero: clarify error check and length calculations (Andrej Shadura)
- serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula)
- phy: qcom-qusb2: Fix a memory leak on probe (Vladimir Zapolskiy)
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald)
- ASoC: cs42l42: Correct some register default values (Richard Fitzgerald)
- ARM: dts: stm32: fix SAI sub nodes register range (Olivier Moysan)
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (Vegard Nossum)
- RDMA/mlx4: Return missed an error if device doesn't support steering (Leon Romanovsky)
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter)
- power: supply: rt5033_battery: Change voltage values to µV (Jakob Hauser)
- usb: gadget: hid: fix error code in do_config() (Dan Carpenter)
- serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko)
- video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy)
- clk: at91: check pmc node status before registering syscore ops (Clément Léger)
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu)
- soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET)
- arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade)
- ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai)
- JFS: fix memleak in jfs_mount (Dongliang Mu)
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu)
- scsi: dc395: Fix error case unwinding (Tong Zhang)
- ARM: dts: at91: tse850: the emac<->phy interface is rmii (Peter Rosin)
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties (Anand Moon)
- RDMA/bnxt_re: Fix query SRQ failure (Selvin Xavier)
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (Marijn Suijten)
- arm64: dts: rockchip: Fix GPU register width for RK3328 (Alex Bee)
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu)
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (Christophe JAILLET)
- RDMA/rxe: Fix wrong port_cap_flags (Junji Wei)
- ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu)
- ibmvnic: don't stop queue in xmit (Sukadev Bhattiprolu)
- udp6: allow SO_MARK ctrl msg to affect routing (Jakub Kicinski)
- selftests/bpf: Fix fclose/pclose mismatch in test_progs (Andrea Righi)
- crypto: pcrypt - Delay write to padata->info (Daniel Jordan)
- net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle))
- net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K)
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (Alex Deucher)
- wcn36xx: add proper DMA memory barriers in rx path (Benjamin Li)
- libertas: Fix possible memory leak in probe and disconnect (Wang Hai)
- libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai)
- KVM: s390: Fix handle_sske page fault handling (Janis Schoetterl-Glausch)
- samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang)
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb() (Jon Maxwell)
- irq: mips: avoid nested irq_enter() (Mark Rutland)
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand)
- libbpf: Fix BTF data layout checks and allow empty BTF (Andrii Nakryiko)
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa)
- drm/msm: Fix potential NULL dereference in DPU SSPP (Jessica Zhang)
- clocksource/drivers/timer-ti-dm: Select TIMER_OF (Kees Cook)
- PM: hibernate: fix sparse warnings (Anders Roxell)
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Max Gurtovoy)
- phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner)
- mwifiex: Send DELBA requests according to spec (Jonas Dreßler)
- rsi: stop thread firstly in rsi_91x_init() error handling (Ziyang Xuan)
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Lorenzo Bianconi)
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor)
- block: ataflop: fix breakage introduced at blk-mq refactoring (Michael Schmitz)
- mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET)
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski)
- drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter)
- ath10k: fix max antenna gain unit (Sven Eckelmann)
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (Zev Weiss)
- hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang)
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Daniel Borkmann)
- memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter)
- memstick: avoid out-of-range warning (Arnd Bergmann)
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Tony Lindgren)
- b43: fix a lower bounds test (Dan Carpenter)
- b43legacy: fix a lower bounds test (Dan Carpenter)
- hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann)
- crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu)
- crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu)
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (Evgeny Novikov)
- netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)
- EDAC/amd64: Handle three rank interleaving mode (Yazen Ghannam)
- ath9k: Fix potential interrupt storm on queue reset (Linus Lüssing)
- media: em28xx: Don't use ops->suspend if it is NULL (Colin Ian King)
- cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva)
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (Arnd Bergmann)
- kprobes: Do not use local variable when creating debugfs file (Punit Agrawal)
- media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King)
- media: tm6000: Avoid card name truncation (Kees Cook)
- media: si470x: Avoid card name truncation (Kees Cook)
- media: radio-wl1273: Avoid card name truncation (Kees Cook)
- media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' (Christophe JAILLET)
- media: TDA1997x: handle short reads of hdmi info frame. (Tom Rix)
- media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin)
- media: cxd2880-spi: Fix a null pointer dereference on error handling path (Colin Ian King)
- media: em28xx: add missing em28xx_close_extension (Pavel Skripkin)
- drm/amdgpu: fix warning for overflow check (Arnd Bergmann)
- ath10k: Fix missing frame timestamp for beacon/probe-resp (Loic Poulain)
- net: dsa: rtl8366rb: Fix off-by-one bug (Linus Walleij)
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Jiasheng Jiang)
- crypto: caam - disable pkc for non-E SoCs (Michael Walle)
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (Dinghao Liu)
- wilc1000: fix possible memory leak in cfg_scan_result() (Ajay Singh)
- cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
- net: net_namespace: Fix undefined member in key_remove_domain() (Yajun Deng)
- virtio-gpu: fix possible memory allocation failure (liuyuntao)
- drm/v3d: fix wait for TMU write combiner flush (Iago Toral Quiroga)
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Neeraj Upadhyay)
- Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi)
- selftests/bpf: Fix strobemeta selftest regression (Andrii Nakryiko)
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Pablo Neira Ayuso)
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle)
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (Sven Schnelle)
- task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller)
- parisc: fix warning in flush_tlb_all (Sven Schnelle)
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (Vitaly Kuznetsov)
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang)
- btrfs: do not take the uuid_mutex in btrfs_rm_device (Josef Bacik)
- net: annotate data-race in neigh_output() (Eric Dumazet)
- vrf: run conntrack only in context of lower/physdev for locally generated packets (Florian Westphal)
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann)
- gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra)
- ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu)
- smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa)
- iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg)
- selftests: kvm: fix mismatched fclose() after popen() (Shuah Khan)
- PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin)
- nvme: drop scan_lock and always kick requeue list when removing namespaces (Hannes Reinecke)
- nvmet-tcp: fix use-after-free when a port is removed (Israel Rukshin)
- nvmet: fix use-after-free when a port is removed (Israel Rukshin)
- block: remove inaccurate requeue check (Jens Axboe)
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma)
- tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh)
- workqueue: make sysfs of unbound kworker cpumask more clever (Menglong Dong)
- lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin)
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin)
- memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma)
- leaking_addresses: Always print a trailing newline (Kees Cook)
- ACPI: battery: Accept charges over the design capacity as full (André Almeida)
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher)
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li)
- tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware))
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart)
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam)
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (Ricardo Ribalda)
- media: ipu3-imgu: imgu_fmt: Handle properly try (Ricardo Ribalda)
- ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki)
- ipmi: Disable some operations during a panic (Corey Minyard)
- media: rcar-csi2: Add checking to rcsi2_start_receiver() (Nadezda Lutovinova)
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Hans de Goede)
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap)
- media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana)
- media: imx: set a media_device bus_info string (Martin Kepplinger)
- media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova)
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li)
- media: uvcvideo: Set unique vdev name based in type (Ricardo Ribalda)
- media: uvcvideo: Return -EIO for control errors (Ricardo Ribalda)
- media: uvcvideo: Set capability in s_param (Ricardo Ribalda)
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (Dmitriy Ulitin)
- media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma)
- media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender)
- ath10k: high latency fixes for beacon buffer (Alagu Sankar)
- mwifiex: Properly initialize private structure on interface type changes (Jonas Dreßler)
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Dreßler)
- x86: Increase exception stack sizes (Peter Zijlstra)
- smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta)
- locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra)
- MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski)
- MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski)
- platform/x86: wmi: do not fail if disabling fails (Barnabás Pőcze)
- drm/panel-orientation-quirks: add Valve Steam Deck (Simon Ser)
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai) {CVE-2021-3640}
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (Hans de Goede)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (Hans de Goede)
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (Hans de Goede)
- dma-buf: WARN on dmabuf release with pending attachments (Charan Teja Reddy)
- USB: chipidea: fix interrupt deadlock (Johan Hovold)
- USB: iowarrior: fix control-message timeouts (Johan Hovold)
- USB: serial: keyspan: fix memleak on probe errors (Wang Hai)
- iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen)
- pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang)
- quota: correct error number in free_dqentry() (Zhang Yi)
- quota: check block number when reading the block in quota file (Zhang Yi)
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behún)
- PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behún)
- PCI: aardvark: Fix reporting Data Link Layer Link Active (Pali Rohár)
- PCI: aardvark: Do not unmask unused interrupts (Pali Rohár)
- PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohár)
- PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohár)
- PCI: pci-bridge-emul: Fix emulation of W1C bits (Marek Behún)
- xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross)
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin)
- ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai)
- serial: core: Fix initializing and restoring termios speed (Pali Rohár)
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni)
- can: j1939: j1939_can_recv(): ignore messages with invalid source address (Zhang Changzhong)
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Zhang Changzhong)
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Sean Christopherson)
- power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler)
- power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak)
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman)
- signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman)
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad)
- rsi: Fix module dev_oper_mode parameter description (Marek Vasut)
- rsi: fix rate mask set leading to P2P failure (Martin Fuzzey)
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0 (Martin Fuzzey)
- rsi: fix occasional initialisation failure with BT coex (Martin Fuzzey)
- wcn36xx: handle connection loss indication (Benjamin Li)
- libata: fix checking of DMA state (Reimar Döffinger)
- mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Dreßler)
- wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain)
- evm: mark evm_fixmode as __ro_after_init (Austin Kim)
- rtl8187: fix control-message timeouts (Johan Hovold)
- PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein)
- ath10k: fix division by zero in send path (Johan Hovold)
- ath10k: fix control-message timeout (Johan Hovold)
- ath6kl: fix control-message timeout (Johan Hovold)
- ath6kl: fix division by zero in send path (Johan Hovold)
- mwifiex: fix division by zero in fw download path (Johan Hovold)
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger)
- regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski)
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski)
- hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss)
- ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu)
- btrfs: call btrfs_check_rw_degradable only if there is a missing device (Anand Jain)
- btrfs: fix lost error handling when replaying directory deletes (Filipe Manana)
- btrfs: clear MISSING device status bit in btrfs_close_one_device (Li Zhang)
- net/smc: Correct spelling mistake to TCPF_SYN_RECV (Wen Gu)
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset (Yu Xiao)
- vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang)
- r8169: Add device 10ec:8162 to driver r8169 (Janghyub Seo)
- nvmet-tcp: fix header digest verification (Amit Engel)
- drm: panel-orientation-quirks: Add quirk for GPD Win3 (Mario)
- watchdog: Fix OMAP watchdog early handling (Walter Stoll)
- net: multicast: calculate csum of looped-back and forwarded packets (Cyril Strejc)
- spi: spl022: fix Microwire full duplex mode (Thomas Perrot)
- nvmet-tcp: fix a memory leak when releasing a queue (Maurizio Lombardi)
- bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer)
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (Bryant Mairs)
- mmc: winbond: don't build on M68K (Randy Dunlap)
- reset: socfpga: add empty driver allowing consumers to probe (Paweł Anikiel)
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode (Bastien Roucariès)
- hyperv/vmbus: include linux/bitops.h (Arnd Bergmann)
- sfc: Don't use netif_info before net_device setup (Erik Ekman)
- cavium: Fix return values of the probe function (Zheyu Ma)
- scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov)
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (Zheyu Ma)
- cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma)
- x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson)
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Tom Lendacky)
- fuse: fix page stealing (Miklos Szeredi)
- ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai)
- ALSA: timer: Fix use-after-free problem (Wang Wensheng)
- ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim)
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (Alexander Tsoy)
- ALSA: line6: fix control and interrupt message timeouts (Johan Hovold)
- ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold)
- ALSA: ua101: fix division by zero at probe (Johan Hovold)
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (Kai-Heng Feng)
- ALSA: hda/realtek: Add quirk for ASUS UX550VE (Takashi Iwai)
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (Jaroslav Kysela)
- ALSA: hda/realtek: Add quirk for Clevo PC70HS (Tim Crawford)
- media: v4l2-ioctl: Fix check_ext_ctrls (Ricardo Ribalda)
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Sean Young)
- media: ite-cir: IR receiver stop working after receive overflow (Sean Young)
- crypto: s5p-sss - Add error handling in s5p_aes_probe() (Tang Bin)
- firmware/psci: fix application of sizeof to pointer (jing yangyang)
- tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter)
- parisc: Fix ptrace check on syscall return (Helge Deller)
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Löhle)
- scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (Arun Easi)
- libata: fix read log timeout value (Damien Le Moal)
- Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)
- Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang)
- Input: iforce - fix control-message timeout (Johan Hovold)
- binder: use cred instead of task for getsecid (Todd Kjos)
- binder: use cred instead of task for selinux checks (Todd Kjos)
- binder: use euid from cred instead of using task (Todd Kjos)
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Nehal Bakulchandra Shah)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman)
- LTS tag: v5.4.159 (Sherry Yang)
- rsi: fix control-message timeout (Johan Hovold)
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (Gustavo A. R. Silva)
- staging: rtl8192u: fix control-message timeouts (Johan Hovold)
- staging: r8712u: fix control-message timeout (Johan Hovold)
- comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold)
- comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold)
- comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold)
- comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold)
- comedi: dt9812: fix DMA buffers on stack (Johan Hovold)
- isofs: Fix out of bound access for corrupted isofs image (Jan Kara)
- printk/console: Allow to disable console output by using console="" or console=null (Petr Mladek)
- binder: don't detect sender/target during buffer cleanup (Todd Kjos)
- usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren)
- usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah)
- usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven)
- usb: ehci: handshake CMD_RUN instead of STS_HALT (Neal Liu)
- Revert "x86/kvm: fix vcpu-id indexed array sizes" (Juergen Gross)
- LTS tag: v5.4.158 (Sherry Yang)
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" (Wang Kefeng)
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy" (Greg Kroah-Hartman)
- sfc: Fix reading non-legacy supported link modes (Erik Ekman)
- Revert "usb: core: hcd: Add support for deferring roothub registration" (Greg Kroah-Hartman)
- Revert "xhci: Set HCD flag to defer primary roothub registration" (Greg Kroah-Hartman)
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)
- net: ethernet: microchip: lan743x: Fix skb allocation failure (Yuiko Oshino)
- vrf: Revert "Reset skb conntrack connection..." (Eugene Crosser)
- scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei)
- LTS tag: v5.4.157 (Sherry Yang)
- perf script: Check session->header.env.arch before using it (Song Liu)
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu (Halil Pasic)
- KVM: s390: clear kicked_mask before sleeping again (Halil Pasic)
- cfg80211: correct bridge/4addr mode check (Janusz Dziedzic)
- net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT (Julian Wiedmann)
- sctp: add vtag check in sctp_sf_ootb (Xin Long)
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long)
- sctp: add vtag check in sctp_sf_violation (Xin Long)
- sctp: fix the processing for COOKIE_ECHO chunk (Xin Long)
- sctp: fix the processing for INIT_ACK chunk (Xin Long)
- sctp: use init_tag from inithdr for ABORT chunk (Xin Long)
- phy: phy_start_aneg: Add an unlocked version (Andrew Lunn)
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency (Andrew Lunn)
- net/tls: Fix flipped sign in async_wait.err assignment (Daniel Jordan)
- net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner)
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent (Yuiko Oshino)
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails (Yuiko Oshino)
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck)
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string (Mark Zhang)
- net: Prevent infinite while loop in skb_tx_hash() (Michael Chan)
- net: batman-adv: fix error handling (Pavel Skripkin)
- regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang)
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node (Clément Bœsch)
- RDMA/mlx5: Set user priority for DCT (Patrisious Haddad)
- nvme-tcp: fix data digest pointer calculation (Varun Prakash)
- nvmet-tcp: fix data digest pointer calculation (Varun Prakash)
- IB/hfi1: Fix abba locking issue with sc_disable() (Mike Marciniszyn)
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn)
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function (Liu Jian)
- drm/ttm: fix memleak in ttm_transfered_destroy (Christian König)
- net: lan78xx: fix division by zero in send path (Johan Hovold)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (Johannes Berg)
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen)
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo)
- mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung)
- mmc: cqhci: clear HALT state after CQE enable (Wenbin Mei)
- mmc: vub300: fix control-message timeouts (Johan Hovold)
- net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan)
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register" (Pavel Skripkin)
- nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski)
- ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma)
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode" (Rafał Miłecki)
- usbnet: fix error return code in usbnet_probe() (Wang Hai)
- usbnet: sanity check for maxpacket (Oliver Neukum)
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)
- ipv6: use siphash in rt6_exception_hash() (Eric Dumazet)
- powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao)
- ARM: 9141/1: only warn about XIP address when not compile testing (Arnd Bergmann)
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann)
- ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann)
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)
-
Tue Jan 18 2022 Brian Maly <brian.maly@oracle.com> [5.4.17-2136.304.2.el8uek]
- xfs: only relog deferred intent items if free space in the log gets low (Darrick J. Wong) [Orabug: 33548995]
- xfs: expose the log push threshold (Darrick J. Wong) [Orabug: 33548995]
- xfs: periodically relog deferred intent items (Darrick J. Wong) [Orabug: 33548995]
- xfs: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 33548995]
- xfs: change the order in which child and parent defer ops are finished (Darrick J. Wong) [Orabug: 33548995]
- hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add hugetlb demote page support (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add demote bool to gigantic page routines (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add demote hugetlb page sysfs interfaces (Mike Kravetz) [Orabug: 33652181]
- hugetlb: before freeing hugetlb page set dtor to appropriate value (Mike Kravetz) [Orabug: 33652181]
- hugetlb: drop ref count earlier after page allocation (Mike Kravetz) [Orabug: 33652181]
- hugetlb: simplify prep_compound_gigantic_page ref count racing code (Mike Kravetz) [Orabug: 33652181]
- hugetlb: address ref count racing in prep_compound_gigantic_page (Mike Kravetz) [Orabug: 33652181]
- hugetlb: remove prep_compound_huge_page cleanup (Mike Kravetz) [Orabug: 33652181]
- hugetlb: add lockdep_assert_held() calls for hugetlb_lock (Mike Kravetz) [Orabug: 33652181]
- Revert "Revert "net/mlx4_core: Add masking for a few queries on HCA caps"" (Freddy Carrillo) [Orabug: 33666385]
- uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw) [Orabug: 33730433]
- rds: ib: Incorporate the stat counter "ib_rdma_flush_mr_pool_avoided" in the structure "rds_ib_stat_names" (Praveen Kumar Kannoju) [Orabug: 33742436]
- memcg: fix use-after-free in uncharge_batch (Michal Hocko) [Orabug: 33752722]
- xfs: force the log offline when log intent item recovery fails (Darrick J. Wong) [Orabug: 33757272]
- xfs: cancel intents immediately if process_intents fails (Darrick J. Wong) [Orabug: 33757272]
-
Tue Jan 11 2022 Brian Maly <brian.maly@oracle.com> [5.4.17-2136.304.1.el8uek]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33745420] {CVE-2021-4155}
- Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo) [Orabug: 33406414] {CVE-2021-3752}
- x86/mce: Correct the detection of invalid notifier priorities (Zhen Lei) [Orabug: 33427594]
- x86/mce/dev-mcelog: Do not update kflags on AMD systems (Smita Koralahalli) [Orabug: 33427594]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam) [Orabug: 33427594]
- RAS/CEC: Fix cec_init() prototype (Luca Stefani) [Orabug: 33427594]
- EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam) [Orabug: 33427594]
- x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli) [Orabug: 33427594]
- x86/mce/dev-mcelog: Fix -Wstringop-truncation warning about strncpy() (Tony Luck) [Orabug: 33427594]
- x86/mce: Drop bogus comment about mce.kflags (Tony Luck) [Orabug: 33427594]
- EDAC: Drop the EDAC report status checks (Tony Luck) [Orabug: 33427594]
- x86/mce: Add mce=print_all option (Tony Luck) [Orabug: 33427594]
- x86/mce: Change default MCE logger to check mce->kflags (Tony Luck) [Orabug: 33427594]
- x86/mce: Fix all mce notifiers to update the mce->kflags bitmask (Tony Luck) [Orabug: 33427594]
- x86/mce: Add a struct mce.kflags field (Tony Luck) [Orabug: 33427594]
- x86/mce: Convert the CEC to use the MCE notifier (Tony Luck) [Orabug: 33427594]
- x86/mce: Rename "first" function as "early" (Tony Luck) [Orabug: 33427594]
- x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov) [Orabug: 33427594]
- x86/mce/dev-mcelog: Dynamically allocate space for machine check records (Tony Luck) [Orabug: 33427594]
- EDAC/mc: Determine mci pointer from the error descriptor (Robert Richter) [Orabug: 33427594]
- EDAC: Store error type in struct edac_raw_error_desc (Robert Richter) [Orabug: 33427594]
- x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schönherr) [Orabug: 33427594]
- EDAC: Unify the mc_event tracepoint call (Robert Richter) [Orabug: 33427594]
- EDAC/ghes: Remove intermediate buffer pvt->detail_location (Robert Richter) [Orabug: 33427594]
- xfs: fix an incore inode UAF in xfs_bui_recover (Darrick J. Wong) [Orabug: 33541225]
- xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering (Darrick J. Wong) [Orabug: 33541225]
- xfs: clean up bmap intent item recovery checking (Darrick J. Wong) [Orabug: 33541225]
- x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky) [Orabug: 33547490]
- efi/mokvar: Reserve the table only if it is in boot services data (Borislav Petkov) [Orabug: 33547490]
- efi: mokvar: add missing include of asm/early_ioremap.h (Ard Biesheuvel) [Orabug: 33547490]
- efi: mokvar-table: fix some issues in new code (Ard Biesheuvel) [Orabug: 33547490]
- efi: Support for MOK variable config table (Lenny Szubowicz) [Orabug: 33547490]
- efi: Rename arm-init to efi-init common for all arch (Atish Patra) [Orabug: 33547490]
- uek-rpm: Update ol7 locklist with fnic symbols (John Donnelly) [Orabug: 33590906]
- uek-rpm: Update ol8 locklist with fnic symbols (John Donnelly) [Orabug: 33590906]
- rds_rdma: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33616020]
- net/mlx4: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33616020]
- net/mlx5: fix non-determinism when comp_vector is zero (Håkon Bugge) [Orabug: 33616020]
- IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Håkon Bugge) [Orabug: 33616020]
- Revert "net/mlx{4,5}: Fix signed formal parameter" (Håkon Bugge) [Orabug: 33616020]
- Revert "net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero" (Håkon Bugge) [Orabug: 33616020]
- Revert "rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV" (Håkon Bugge) [Orabug: 33616020]
- mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan) [Orabug: 33646165]
- mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan) [Orabug: 33646165]
- Revert "io_uring: reinforce cancel on flush during exit" (Lee Jones) [Orabug: 33687075]
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy) [Orabug: 33731040]
- ocfs2: fix data corruption on truncate (Jan Kara) [Orabug: 33740343]
-
Mon Dec 20 2021 Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.303.3.el8uek]
- xfs: xfs_defer_capture should absorb remaining transaction reservation (Darrick J. Wong) [Orabug: 33520061]
- xfs: xfs_defer_capture should absorb remaining block reservations (Darrick J. Wong) [Orabug: 33520061]
- xfs: proper replay of deferred ops queued during log recovery (Darrick J. Wong) [Orabug: 33520061]
- xfs: attach inode to dquot in xfs_bui_item_recover (Darrick J. Wong) [Orabug: 33520061]
- xfs: log new intent items created as part of finishing recovered intent items (Darrick J. Wong) [Orabug: 33520061]
- xfs: spell out the parameter name for ->cancel_item (Christoph Hellwig) [Orabug: 33520061]
- xfs: use a xfs_btree_cur for the ->finish_cleanup state (Christoph Hellwig) [Orabug: 33520061]
- xfs: turn dfp_done into a xfs_log_item (Christoph Hellwig) [Orabug: 33520061]
- xfs: refactor xfs_defer_finish_noroll (Christoph Hellwig) [Orabug: 33520061]
- xfs: turn dfp_intent into a xfs_log_item (Christoph Hellwig) [Orabug: 33520061]
- xfs: merge the ->diff_items defer op into ->create_intent (Christoph Hellwig) [Orabug: 33520061]
- xfs: merge the ->log_item defer op into ->create_intent (Christoph Hellwig) [Orabug: 33520061]
- xfs: factor out a xfs_defer_create_intent helper (Christoph Hellwig) [Orabug: 33520061]
- sched: Fix Core-wide rq->lock for uninitialized CPUs (Peter Zijlstra) [Orabug: 33568834]
- admin-guide/hw-vuln: Rephrase a section of core-scheduling.rst (Fabio M. De Francesco) [Orabug: 33568834]
- Documentation: Add usecases, design and interface for core scheduling (Joel Fernandes (Google)) [Orabug: 33568834]
- kselftest: Add test for core sched prctl interface (Chris Hyser) [Orabug: 33568834]
- sched: prctl() core-scheduling interface (Chris Hyser) [Orabug: 33568834]
- sched: Inherit task cookie on fork() (Peter Zijlstra) [Orabug: 33568834]
- sched: Trivial core scheduling cookie management (Peter Zijlstra) [Orabug: 33568834]
- sched: Migration changes for core scheduling (Aubrey Li) [Orabug: 33568834]
- sched: Trivial forced-newidle balancer (Peter Zijlstra) [Orabug: 33568834]
- sched/fair: Snapshot the min_vruntime of CPUs on force idle (Joel Fernandes (Google)) [Orabug: 33568834]
- sched: Fix priority inversion of cookied task with sibling (Joel Fernandes (Google)) [Orabug: 33568834]
- sched/fair: Fix forced idle sibling starvation corner case (Vineeth Pillai) [Orabug: 33568834]
- sched: Add core wide task selection and scheduling (Peter Zijlstra) [Orabug: 33568834]
- sched: Basic tracking of matching tasks (Peter Zijlstra) [Orabug: 33568834]
- sched: Introduce sched_class::pick_task() (Peter Zijlstra) [Orabug: 33568834]
- sched: Allow sched_core_put() from atomic context (Peter Zijlstra) [Orabug: 33568834]
- sched: Optimize rq_lockp() usage (Peter Zijlstra) [Orabug: 33568834]
- sched: Core-wide rq->lock (Peter Zijlstra) [Orabug: 33568834]
- sched: Prepare for Core-wide rq->lock (Peter Zijlstra) [Orabug: 33568834]
- sched: Wrap rq::lock access (Peter Zijlstra) [Orabug: 33568834]
- sched: Provide raw_spin_rq_*lock*() helpers (Peter Zijlstra) [Orabug: 33568834]
- sched/fair: Add a few assertions (Peter Zijlstra) [Orabug: 33568834]
- sched: Extract the task putting code from pick_next_task() (Chen Yu) [Orabug: 33568834]
- rss_stat: add support to detect RSS updates of external mm (Joel Fernandes (Google)) [Orabug: 33568834]
- Revert "sched: Wrap rq::lock access" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Introduce sched_class::pick_task()" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Core-wide rq->lock" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/fair: Add a few assertions" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Basic tracking of matching tasks" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Update core scheduler queue when taking cpu online/offline" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Add core wide task selection and scheduling." (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/fair: wrapper for cfs_rq->min_vruntime" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/fair: core wide vruntime comparison" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Trivial forced-newidle balancer" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: migration changes for core scheduling" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: cgroup tagging interface for core scheduling" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Cleanup kABI" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched: Enable disabling via CONFIG_SCHED_CORE" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/core: remove undesired trace_printk from core scheduling backport" (Kamalesh Babulal) [Orabug: 33568834]
- Revert "sched/core: cleanup kABI for struct rq" (Kamalesh Babulal) [Orabug: 33568834]
- RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib) [Orabug: 33615342]
- xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong) [Orabug: 33676190]
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679803] {CVE-2021-0920}
-
Tue Dec 14 2021 Brian Maly <brian.maly@oracle.com> [5.4.17-2136.303.2.el8uek]
- atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen) [Orabug: 33594983] {CVE-2021-43975}
- RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry) [Orabug: 33620311]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33652503]
- sched: Mitigate increased latencies for sysctl_sched_wakeup_granularity. (chris hyser) [Orabug: 33107207]
- net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan) [Orabug: 33585475]
- proc: allow pid_revalidate() during LOOKUP_RCU (Stephen Brennan) [Orabug: 33647511]
- selinux: slow_avc_audit has become non-blocking (Al Viro) [Orabug: 33647511]
- make dump_common_audit_data() safe to be called from RCU pathwalk (Al Viro) [Orabug: 33647511]
- new helper: d_find_alias_rcu() (Al Viro) [Orabug: 33647511]