-
Tue May 18 2021 Kevin Lyons <kevin.x.lyons@oracle.com> [4.18.0-305.el8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5.el8
-
Thu Apr 29 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-305.el8]
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 (Michael Petlan) [1950388]
-
Tue Apr 06 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-304.el8]
- mm: Revert "remove the account_page_dirtied export" (Waiman Long) [1941257]
- Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" (Jonathan Toppins) [1940842]
-
Wed Mar 31 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-303.el8]
- redhat: switch secureboot kernel image signing to release keys (Jan Stancek)
- Revert "[md] md/raid5: add a new member of offset into r5dev" (Nigel Croxon) [1936903]
- Revert "[md] md/raid5: make async_copy_data() to support different page offset" (Nigel Croxon) [1936903]
- Revert "[crypto] md/raid5: add new xor function to support different page offset" (Nigel Croxon) [1936903]
- Revert "[md] md/raid5: convert to new xor compution interface" (Nigel Croxon) [1936903]
- Revert "[crypto] md/raid6: let syndrome computor support different page offset" (Nigel Croxon) [1936903]
- Revert "[crypto] md/raid6: let async recovery function support different page offset" (Nigel Croxon) [1936903]
- Revert "[md] md/raid5: let multiple devices of stripe_head share page" (Nigel Croxon) [1936903]
- Revert "[md] md/raid5: resize stripe_head when reshape array" (Nigel Croxon) [1936903]
- Revert "[md] md/raid5: reallocate page array after setting new stripe_size" (Nigel Croxon) [1936903]
- ACPI: PNP: compare the string length in the matching_id() (Mark Langsdorf) [1933702]
- ceph: add missing break when parsing "nowsync" mount option (Jeff Layton) [1932753]
- get_maintainer.conf: Update with new location of RHMAINTAINERS (Prarit Bhargava)
- redhat: make pathspec exclusion compatible with old git versions (Herton R. Krzesinski)
- redhat/scripts: Update merge-subtrees.sh with new subtree location (Prarit Bhargava)
- tree: Add RHMAINTAINERS soft link in 8.4 (Prarit Bhargava)
- tree: remove existing redhat/rhdocs subtree in 8.4 (Prarit Bhargava)
-
Sun Mar 28 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-302.el8]
- PCI: rpadlpar: Fix potential drc_name corruption in store functions (Gustavo Luiz Duarte) [1938116]
- selftests: kvm: Add basic Hyper-V clocksources tests (Vitaly Kuznetsov) [1931782]
- KVM: x86: hyper-v: Don't touch TSC page values when guest opted for re-enlightenment (Vitaly Kuznetsov) [1931782]
- KVM: x86: hyper-v: Track Hyper-V TSC page status (Vitaly Kuznetsov) [1931782]
- KVM: x86: hyper-v: Prevent using not-yet-updated TSC page by secondary CPUs (Vitaly Kuznetsov) [1931782]
- KVM: x86: hyper-v: Limit guest to writing zero to HV_X64_MSR_TSC_EMULATION_STATUS (Vitaly Kuznetsov) [1931782]
- drm/i915/guc: Update to use firmware v49.0.1 (Dave Airlie) [1935281] {CVE-2020-12362}
- time: Enable __kernel_timespec for 32-bit vdso build (Waiman Long) [1936282]
- lib/idr.c: document calling context for IDA APIs mustn't use locks (Chris von Recklinghausen) [1917764]
- ida: Free allocated bitmap in error path (Chris von Recklinghausen) [1917764]
- radix tree test suite: Fix compilation (Chris von Recklinghausen) [1917764]
- vmalloc: convert to XArray (Chris von Recklinghausen) [1917764]
- mm: pass addr as unsigned long to vb_free (Chris von Recklinghausen) [1917764]
- radix tree: Remove multiorder support (Chris von Recklinghausen) [1917764]
- radix tree test: Convert multiorder tests to XArray (Chris von Recklinghausen) [1917764]
- radix tree tests: Convert item_delete_rcu to XArray (Chris von Recklinghausen) [1917764]
- radix tree tests: Convert item_kill_tree to XArray (Chris von Recklinghausen) [1917764]
- radix tree tests: Move item_insert_order (Chris von Recklinghausen) [1917764]
- radix tree test suite: Remove multiorder benchmarking (Chris von Recklinghausen) [1917764]
- radix tree test suite: Remove __item_insert (Chris von Recklinghausen) [1917764]
- radix tree: Remove radix_tree_clear_tags (Chris von Recklinghausen) [1917764]
- radix tree: Remove split/join code (Chris von Recklinghausen) [1917764]
- radix tree: Remove radix_tree_update_node_t (Chris von Recklinghausen) [1917764]
- mm: Convert truncate to XArray (Chris von Recklinghausen) [1917764]
- copy rh_kabi.h to tools/testing/radix-tree/linux (Chris von Recklinghausen) [1917764]
-
Wed Mar 24 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-301.el8]
- ibmvnic: fix a race between open and reset (Diego Domingos) [1940042]
- ibmvnic: Set to CLOSED state even on error (Diego Domingos) [1940042]
- ibmvnic: device remove has higher precedence over reset (Diego Domingos) [1940042]
- ibmvnic: merge do_change_param_reset into do_reset (Diego Domingos) [1940042]
- ibmvfc: disable MQ channelization by default (Gustavo Luiz Duarte) [1939359]
- pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() (Steve Dickson) [1926945]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930833] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930856] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930809] {CVE-2021-27364}
- futex: Handle faults correctly for PI futexes (Waiman Long) [1924635]
- futex: Simplify fixup_pi_state_owner() (Waiman Long) [1924635]
- futex: Use pi_state_update_owner() in put_pi_state() (Waiman Long) [1924635]
- rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Waiman Long) [1924635]
- futex: Provide and use pi_state_update_owner() (Waiman Long) [1924635]
- futex: Replace pointless printk in fixup_owner() (Waiman Long) [1924635]
- futex: Ensure the correct return value from futex_lock_pi() (Waiman Long) [1924635]
- futex: Don't enable IRQs unconditionally in put_pi_state() (Waiman Long) [1924635]
- futex: Fix incorrect should_fail_futex() handling (Waiman Long) [1924635]
- futex: Consistently use fshared as boolean (Waiman Long) [1924635]
- futex: Remove needless goto's (Waiman Long) [1924635]
- futex: Remove put_futex_key() (Waiman Long) [1924635]
- NFS: Correct size calculation for create reply length (Benjamin Coddington) [1934903]
- SUNRPC: Set memalloc_nofs_save() for sync tasks (Benjamin Coddington) [1934098]
- net/mlx5: CT: Add support for matching on ct_state reply flag (Alaa Hleihel) [1919651]
- net/mlx5e: CT: manage the lifetime of the ct entry object (Alaa Hleihel) [1919651]
- net/mlx5e: CT: Use per flow counter when CT flow accounting is enabled (Alaa Hleihel) [1919651]
- net/mlx5e: Fix a use after free on error in mlx5_tc_ct_shared_counter_get() (Alaa Hleihel) [1919651]
- net/mlx5e: CT: Use the same counter for both directions (Alaa Hleihel) [1919651]
- ethtool: fix the check logic of at least one channel for RX/TX (Ivan Vecera) [1907406]
-
Mon Mar 22 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-300.el8]
- [scsi] scsi: qedi: Correct max length of CHAP secret (Nilesh Javali) [1909180]
- redhat: use tags from git notes for zstream to generate changelog (Frantisek Hrbata)
- redhat: add CI file for kernel-private (Bruno Meneguele)
- CI: Drop unused variable (Bruno Meneguele)
- CI: Enable RT verification (Bruno Meneguele)
- KVM: SVM: Clear the CR4 register on reset (Vitaly Kuznetsov) [1920788]
- net: flow_offload: Add original direction flag to ct_metadata (Marcelo Ricardo Leitner) [1921946]
- net/sched: cls_flower: Add match on the ct_state reply flag (Marcelo Ricardo Leitner) [1921946]
- net/sched: cls_flower add CT_FLAGS_INVALID flag support (Marcelo Ricardo Leitner) [1921946]
- net/sched: cls_flower: Reject invalid ct_state flags rules (Marcelo Ricardo Leitner) [1921946]
- netlink: add mask validation (Marcelo Ricardo Leitner) [1921946]
- netlink: create helpers for checking type is an int (Marcelo Ricardo Leitner) [1921946]
- netlink: policy: correct validation type check (Marcelo Ricardo Leitner) [1921946]
- netlink: make NLA_BINARY validation more flexible (Marcelo Ricardo Leitner) [1921946]
-
Thu Mar 18 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-299.el8]
- md: Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1901598]
- md: improve variable names in md_flush_request() (Xiao Ni) [1901598]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1925711]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1925711]
- vt: Disable KD_FONT_OP_COPY (Dave Airlie) [1903937] {CVE-2020-28974}
- drm/i915/rkl: Remove require_force_probe protection (Lyude Paul) [1937558]
- drm/i915/tgl/psr: Disable PSR on Tigerlake for now (Lyude Paul) [1924702]
- dm raid: fix discard limits for raid0 and raid10 (Mike Snitzer) [1934274]
- dm: fix __send_changing_extent_only to avoid duplicate dm_target_offset() (Mike Snitzer) [1934274]
- mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Waiman Long) [1934212]
- mm: memcontrol: fix slub memory accounting (Waiman Long) [1934212]
- mm: memcontrol: fix swap undercounting in cgroup2 (Waiman Long) [1934212]
- mm: memcontrol: fix NR_ANON_THPS accounting in charge moving (Waiman Long) [1934212]
- mm, slub: better heuristic for number of cpus when calculating slab order (Waiman Long) [1934212]
- Revert "mm: memcontrol: avoid workload stalls when lowering memory.high" (Waiman Long) [1934212]
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed (Hangbin Liu) [1931732]
- selftests/bpf: No need to drop the packet when there is no geneve opt (Hangbin Liu) [1931732]
-
Mon Mar 15 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-298.el8]
- drm/i915/gen11+: Only load DRAM information from pcode (Lyude Paul) [1934537]
- drm/i915/dg1: Wait for pcode/uncore handshake at startup (Lyude Paul) [1934537]
- powercap/intel_rapl: add support for TigerLake Desktop (David Arcari) [1932457]
- powerpc/perf: Fix handling of privilege level checks in perf interrupt context (Gustavo Luiz Duarte) [1918411]
- NFSv4.2: fix error return on memory allocation failure (Scott Mayhew) [1917689]
- NFSv4.2: improve page handling for GETXATTR (Scott Mayhew) [1917689]
- NFSv4.2: Fix up the get/listxattr calls to rpc_prepare_reply_pages() (Scott Mayhew) [1917689]
- NFS: Fix rpcrdma_inline_fixup() crash with new LISTXATTRS operation (Scott Mayhew) [1917689]
- SUNRPC: Fix up xdr_set_page() (Benjamin Coddington) [1917689]
- NFSv4: Fix open coded xdr_stream_remaining() (Benjamin Coddington) [1917689]
- SUNRPC: Clean up the handling of page padding in rpc_prepare_reply_pages() (Benjamin Coddington) [1917689]
- SUNRPC: Fix up xdr_read_pages() to take arbitrary object lengths (Benjamin Coddington) [1917689]
- SUNRPC: Clean up helpers xdr_set_iov() and xdr_set_page_base() (Benjamin Coddington) [1917689]
- SUNRPC: Split out a function for setting current page (Benjamin Coddington) [1917689]
- SUNRPC: Fix up typo in xdr_init_decode() (Benjamin Coddington) [1917689]
- NFSv4: Fix the alignment of page data in the getdeviceinfo reply (Benjamin Coddington) [1917689]
- net: fix pos incrementment in ipv6_route_seq_next (Lorenzo Bianconi) [1926608]
- ipv6_route_seq_next should increase position index (Lorenzo Bianconi) [1926608]
- bpf: Clear subreg_def for global function return values (Yauheni Kaliuta) [1934062]
- igc: Fix returning wrong statistics (Corinna Vinschen) [1910873]
-
Thu Mar 11 2021 Jan Stancek <jstancek@redhat.com> [4.18.0-297.el8]
- KVM: SVM: Make symbol 'svm_gp_erratum_intercept' static (Paolo Bonzini) [1769283]
- KVM: SVM: Fix #GP handling for doubly-nested virtualization (Paolo Bonzini) [1769283]
- KVM: SVM: Add support for SVM instruction address check change (Paolo Bonzini) [1769283]
- KVM: SVM: Add emulation support for #GP triggered by SVM instructions (Paolo Bonzini) [1769283]
- KVM: x86: Factor out x86 instruction emulation with decoding (Paolo Bonzini) [1769283]
- gfs2: In gfs2_ail1_start_one unplug the IO when needed (Bob Peterson) [1648446]
- gfs2: Free rd_bits later in gfs2_clear-rgrpd to fix use-after-free (Bob Peterson) [1648446]
- gfs2: Only access gl_delete for iopen glocks (Bob Peterson) [1648446]
- gfs2: Fix case in which ail writes are done to jdata holes (Bob Peterson) [1648446]
- gfs2: simplify gfs2_block_map (Bob Peterson) [1648446]
- gfs2: Only set PageChecked if we have a transaction (Bob Peterson) [1648446]
- gfs2: don't lock sd_ail_lock in gfs2_releasepage (Bob Peterson) [1648446]
- gfs2: make gfs2_ail1_empty_one return the count of active items (Bob Peterson) [1648446]
- gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe (Bob Peterson) [1648446]
- gfs2: enhance log_blocks trace point to show log blocks free (Bob Peterson) [1648446]
- gfs2: rename gfs2_write_full_page to gfs2_write_jdata_page, remove parm (Bob Peterson) [1648446]
- PM: hibernate: flush swap writer after marking (Lenny Szubowicz) [1898677]
- cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown (Lenny Szubowicz) [1898677]
- PM / hibernate: memory_bm_find_bit(): Tighten node optimisation (Lenny Szubowicz) [1898677]
- bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation (Jiri Benc) [1882215]
- ice, xsk: clear the status bits for the next_to_use descriptor (Jiri Benc) [1906820]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925690]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925690]
- blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue (Ming Lei) [1922013]
- blk-mq: Improve performance of non-mq IO schedulers with multiple HW queues (Ming Lei) [1922013]
- Revert "blk-mq, elevator: Count requests per hctx to improve performance" (Ming Lei) [1922013]
- bpftool: Disable CAP_BPF check for feature command (Jiri Olsa) [1921542]
- RDMA/siw: Fix calculation of tx_valid_cpus size (Kamal Heib) [1919502]
- net/mlx5e: Disable performance optimization for IPv4/IPv6 ethertype (Alaa Hleihel) [1928671 1919807]
- IB/mlx5: Return appropriate error code instead of ENOMEM (Alaa Hleihel) [1928671]
- net/mlx5: Disable devlink reload for lag devices (Alaa Hleihel) [1928671 1929166]
- net/mlx5: Disable devlink reload for multi port slave device (Alaa Hleihel) [1928671 1929166]
- net/mlx5: Disallow RoCE on lag device (Alaa Hleihel) [1928671 1929166]
- net/mlx5: Disallow RoCE on multi port slave device (Alaa Hleihel) [1928671 1929166]
- net/mlx5: Fix health error state handling (Alaa Hleihel) [1928671]
- net/mlx5e: Change interrupt moderation channel params also when channels are closed (Alaa Hleihel) [1928671]
- net/mlx5e: Don't change interrupt moderation params when DIM is enabled (Alaa Hleihel) [1928671]
- net/mlx5e: E-switch, Fix rate calculation for overflow (Alaa Hleihel) [1928671]
- net/mlx5e: Release skb in case of failure in tc update skb (Alaa Hleihel) [1928671 1929119]
- net/mlx5e: Check tunnel offload is required before setting SWP (Alaa Hleihel) [1928671 1925439]
- net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context (Alaa Hleihel) [1928671 1928706]
- net/mlx5e: Fix CQ params of ICOSQ and async ICOSQ (Alaa Hleihel) [1928671 1928706]
- net/mlx5e: Replace synchronize_rcu with synchronize_net (Alaa Hleihel) [1928671 1913616]
- net/mlx5e: Enable XDP for Connect-X IPsec capable devices (Alaa Hleihel) [1928671 1856795]
- net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices (Alaa Hleihel) [1928671 1926120]
- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [1920776] {CVE-2020-0466}
- do_epoll_ctl(): clean the failure exits up a bit (Carlos Maiolino) [1920776] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [1920776] {CVE-2020-0466}