# changelog

author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.2.el7uek]
changelog:
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31526089]  
  - thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564727]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564727]  
  - dtrace: ensure that fatal signals trigger signal-handle probes (Kris Van Hees)  [Orabug: 31398827] [Orabug: 31562416]  
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515070]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515070]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515070]  
  - KVM: arm/arm64: Fixup the kvm_exit tracepoint (Christoffer Dall)  [Orabug: 31510089]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493186]  
  - tcp: implement coalescing on backlog queue (Eric Dumazet)  [Orabug: 31419400]  
  - tcp: drop dst in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31419400]  
  - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann)  [Orabug: 31419400]  
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351670]  {CVE-2019-19054} 
  - dtrace: recursion in dtrace_dynvar() can lead to out-of-stack crash (Kris Van Hees)  [Orabug: 31481801]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.3.el7uek]
changelog:
  - psi: Fix double free (Tom Hromatka)  [Orabug: 31595120]  
  - tools/power turbostat: Support Ice Lake server (Thomas Tai)  [Orabug: 31543222]  
  - uek-rpm: config updates for SDK-10.3.3.0-PR6 kernel patches (Dave Kleikamp)  [Orabug: 31590716]  
  - uek-rpm: Update aarch64 UEK5 config files with "make olddefconfig" (Dave Kleikamp)  [Orabug: 31590716]  
  - octeontx2-af: Add CUSTOM0 to flow keyx algo (Kiran Kumar K)  [Orabug: 31590716]  
  - octeontx2-pf: Stop tx queues in case of subsequent calls failure (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Increase mbox response timeout to 3 seconds (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Fix nix_inline_ipsec_cfg mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Update CPT_LF_ALLOC mbox (Srujana Challa)  [Orabug: 31590716]  
  - drivers: cpt - remove notify_group_change (Srujana Challa)  [Orabug: 31590716]  
  - octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla)  [Orabug: 31590716]  
  - octeontx2-af: Do not change maximum NPC interfaces (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Calculate LBK link correctly (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Display NIX1 also in debugfs (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Add NIX1 interfaces to NPC (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Get block address from slot number (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Mbox changes for 98xx (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Assign NIX block addresses (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Add new REE blocks to AF (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2: gti: Fix task stack pointer corruption (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-af: Fix cpt_rd_wr_register mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Fix TCP/UDP checksum offload for IPv6 pkts (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-pf: Add ntuple filter support for FDSA (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Add flow steering support for FDSA tag (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla)  [Orabug: 31590716]  
  - octeontx2: gti: restore gpr x29 for kernel context (Bharat Bhushan)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: Add 95MM LOKI 98xx in supported SUBSID (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: Use rcvd_present instead of MIDR check (Suneel Garapati)  [Orabug: 31590716]  
  - octeontx2: gti: fix return to ATF after handling nmi (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-af: Fix MSIX handler mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Setup MCE context for assigned NIX (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Map NIX block from CGX connection (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Return assigned NIX/CPT block address (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Initialize NIX1 block (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Add support for NIX1, CPT1 and NDC_NIX1 (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Update get_rsrc_map for new blocks (Subbaraya Sundeep)  [Orabug: 31590716]  
  - drivers: marvell: otx2-sdei-ghes: Set GHES block_status correctly. (Rick Farrington)  [Orabug: 31590716]  
  - drivers: marvell: otx2-sdei-ghes: Add misc documentation. (Rick Farrington)  [Orabug: 31590716]  
  - crypto: cpt - fixed build issue with cpt driver as module (Srujana Challa)  [Orabug: 31590716]  
  - arm64: enable workaround for Marvell erratum 37119 in Kconfig (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-rm: remove unused cpt_cur (Stefan Chulski)  [Orabug: 31590716]  
  - octeontx2-af: Reduce dependency on firmware command interface version (Linu Cherian)  [Orabug: 31590716]  
  - octeontx2-af: Synchronize mcam rule list ops (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Add XDP support to RVU PF driver (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Disable default NPC entries properly (Subbaraya Sundeep)  [Orabug: 31590716]  
  - crypto:cpt - get HW capabilities using LOAD_FVC op (SrujanaChalla)  [Orabug: 31590716]  
  - octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 31590716]  
  - gpio: thunderx: Configure pin function at probe (Michal Mazur)  [Orabug: 31590716]  
  - gpio: thunderx: avoid potential deadlock (Peter Swain)  [Orabug: 31590716]  
  - fs: pstore: ram: WriteBack cache before reset (Lukasz Majczak)  [Orabug: 31590716]  
  - crypto:cpt - rename ucode tarfile names as per cpt revision (SrujanaChalla)  [Orabug: 31590716]  
  - crypto: cpt - remove verification of PCI subsystem ID (SrujanaChalla)  [Orabug: 31590716]  
  - crypto:cpt - fixed DMA fault with kernel crypto tests (SrujanaChalla)  [Orabug: 31590716]  
  - crypto:cpt - fixed cleanup for inline IPsec RX LF cfg (SrujanaChalla)  [Orabug: 31590716]  
  - marvell/zip : OcteonTX and OcteonTX2 ZIP Virtual Function driver (Akash Saxena)  [Orabug: 31590716]  
  - pci: octeontx2: Limit config space writes errata workaround to older silicons (Sunil Goutham)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: Add fix for hw issue (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: use read after write for MPI_CFG (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: set tritx in config register (Suneel Garapati)  [Orabug: 31590716]  
  - spi-nor: Enable 4B opcodes for various flashes (Guo Yi)  [Orabug: 31590716]  
  - drivers: mtd: spi-nor: update 4B_OPCODES flag for n25q00 and mx66l1g45g (Suneel Garapati)  [Orabug: 31590716]  
  - octeontx2-af: add parser support for Forward DSA (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: wait for tx link idle for credits change (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: clear sw xoff before flush (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: enable tx shaping feature for 96xx C0 (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: Disable SMQ sticky mode to avoid NIX PSE deadlock (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Setup edge used for GPIO timing (Michal Mazur)  [Orabug: 31590716]  
  - octeontx2-af: Update NIX_TXSCHQ_CONFIG mbox to handle read request (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-pf: Fix memory double free in otx2_aura_pool_free (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Update dmac field in vf vlan rule (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-pf: Remove unnecessary mbox request in unbind (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Simplify npc_set_pkind mbox handler (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Reset HW config done to parse switch headers in FLR (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: modify default cpt limits (SrujanaChalla)  [Orabug: 31590716]  
  - octeontx2-af: Update tx parse nibble config (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: fix compilation warning (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: add support for custom KPU entries (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: prepare for custom KPU profiles (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: fix memory leaks on probe failure (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: fix LD CUSTOM LTYPE aliasing (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-pf: Don't configure RSS context when interface is down (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Set SMQ MAXLEN to max hardware supported value (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: fix detection of IP layer (Michal Mazur)  [Orabug: 31590716]  
  - octeontx2-pf: Fix flow control support for LBK devices (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Implement cgx stat rst (Revital Regev)  [Orabug: 31590716]  
  - octeontx2-af: Allow to configure flow tag LSB byte as RSS adder (Jerin Jacob)  [Orabug: 31590716]  
  - octeontx2-af: fix missing blocks quota validation (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: Fix rvu_reg_poll() to poll reg atleast twice (Sunil Goutham)  [Orabug: 31590716]  
  - crypto: cpt - allow cpt_af_lfx_ctl2 register access to vf (Tejasree Kondoj)  [Orabug: 31590716]  
  - octeontx2-af: Cleanup nixlf and blkaddr retrieval logic (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Restore RSS and pause frame config settings (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Fix netdev watchdog timeout value (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-af: extend RSS supported offload types (Kiran Kumar K)  [Orabug: 31590716]  
  - octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Put CGX LMAC also in Higig2 mode (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Reset HW config for HIGIG/EDSA in driver unbind (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Remove multisegment RX_SG processing logic (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Allocate receive buffers of MTU size (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-af: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-pf: Do not set num_msgs in mbox header (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Use mutex for mbox locking (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: update vlan offload rule (hariprasad)  [Orabug: 31590716]  
  - octeontx2-af: Handle pfvf mac address changes (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Set default RR_QUANTUM for transmit scheduling levels (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Adjust pause frame time and interval (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Use likely and unlikely (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Process CQE_TX first and then CQE_RX (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Discover NIX block address from RVUM (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Flush pending SQE on teardown (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-pf: Remove warning messages in fast path (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Undo PTP NPC config in FLR (Harman Kalra)  [Orabug: 31590716]  
  - octeontx2-rm: remove CPT LF resource management (Vidya Velumuri)  [Orabug: 31590716]  
  - octeontx2-serdes: Add gserr and gserc eye display (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-serdes: Add CONFIG_OCTEONTX_SERDES (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-dpi: Add MRRS and MPS configuration to dpi driver. (Subrahmanyam Nilla)  [Orabug: 31590716]  
  - octeontx2: gti: Enable GTI wdog for non-VHE Linux (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-serdes: Check SVC UUID on module init (Tomasz Michalec)  [Orabug: 31590716]  
  - edac: octeontx2: RAS error-injection (Rick Farrington)  [Orabug: 31590716]  
  - drivers: marvell: octeontx2: add support for GHES (Rick Farrington)  [Orabug: 31590716]  
  - octeontx2-serdes: Implement PRBS command (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-dpi: fix compilation warnings (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-rm: fix compilation warning (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-serdes: Handle not implemented SMC (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2: PCI Console driver: fix initialization WARNing (Rick Farrington)  [Orabug: 31590716]  
  - octeontx2-serdes: Fix settings write return code (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2: fixup PCI Remote Console driver shutdown function (Dave Aldridge)  [Orabug: 31590716]  
  - octeontx2: add OcteonTX2 PCI Console driver (Rick Farrington)  [Orabug: 31590716]  
  - Revert "octeontx2: add OcteonTX2 PCI Remote Console driver" (Dave Kleikamp)  [Orabug: 31590716]  
  - Revert "octeontx2: fixup PCI Remote Console driver shutdown function" (Dave Kleikamp)  [Orabug: 31590716]  
  - octeontx2: gti: Start wdog timer on online cpus (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-serdes: Add serdes diagnostic commands (Tomasz Michalec)  [Orabug: 31590716]  
  - proc: publish no of macs in octeontx_info node (Sujeet Baranwal)  [Orabug: 31590716]  
  - arm64: Disable UNMAP_KERNEL_AT_EL0 when enable GTI WDOG (Bharat Bhushan)  [Orabug: 31590716]  
  - arm64: Add workaround for Marvell erratum 37119 (Andrew Pinski)  [Orabug: 31590716]  
  - x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557901]  {CVE-2020-10768}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2022.uek]
changelog:
  - Linux 4.14.182 (Greg Kroah-Hartman)   
  - iio: adc: stm32-adc: fix device used to request dma (Fabrice Gasnier)   
  - iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi)   
  - x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks (Josh Poimboeuf)   
  - rxrpc: Fix a memory leak in rxkad_verify_response() (Qiushi Wu)   
  - rapidio: fix an error in get_user_pages_fast() error handling (John Hubbard)   
  - mei: release me_cl object reference (Alexander Usyskin)   
  - iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()' (Christophe JAILLET)   
  - iio: sca3000: Remove an erroneous 'get_device()' (Christophe JAILLET)   
  - staging: greybus: Fix uninitialized scalar variable (Oscar Carter)   
  - staging: iio: ad2s1210: Fix SPI reading (Dragos Bogdan)   
  - Revert "gfs2: Don't demote a glock until its revokes are written" (Bob Peterson)   
  - cxgb4/cxgb4vf: Fix mac_hlist initialization and free (Arjun Vynipadath)   
  - cxgb4: free mac_hlist properly (Arjun Vynipadath)   
  - media: fdp1: Fix R-Car M3-N naming in debug message (Geert Uytterhoeven)   
  - ubsan: build ubsan.c more conservatively (Arnd Bergmann)   
  - x86/uaccess, ubsan: Fix UBSAN vs. SMAP (Peter Zijlstra)   
  - powerpc/64s: Disable STRICT_KERNEL_RWX (Michael Ellerman)   
  - powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE (Russell Currey)   
  - powerpc: restore alphabetic order in Kconfig (Christophe Leroy)   
  - dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()' (Christophe JAILLET)   
  - apparmor: Fix aa_label refcnt leak in policy_update (Xiyu Yang)   
  - ALSA: pcm: fix incorrect hw_base increase (Brent Lu)   
  - ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option (Scott Bahling)   
  - l2tp: initialise PPP sessions before registering them (Guillaume Nault)   
  - l2tp: protect sock pointer of struct pppol2tp_session with RCU (Guillaume Nault)   
  - l2tp: initialise l2tp_eth sessions before registering them (Guillaume Nault)   
  - l2tp: don't register sessions in l2tp_session_create() (Guillaume Nault)   
  - arm64: fix the flush_icache_range arguments in machine_kexec (Christoph Hellwig)   
  - padata: purge get_cpu and reorder_via_wq from padata_do_serial (Daniel Jordan)   
  - padata: initialize pd->cpu with effective cpumask (Daniel Jordan)   
  - padata: Replace delayed timer with immediate workqueue in padata_reorder (Herbert Xu)   
  - padata: set cpu_index of unused CPUs to -1 (Mathias Krause)   
  - ARM: futex: Address build warning (Thomas Gleixner)   
  - platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA (Hans de Goede)   
  - USB: core: Fix misleading driver bug report (Alan Stern)   
  - ceph: fix double unlock in handle_cap_export() (Wu Bo)   
  - gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp() (Yoshiyuki Kurauchi)   
  - x86/apic: Move TSC deadline timer debug printk (Thomas Gleixner)   
  - scsi: ibmvscsi: Fix WARN_ON during event pool release (Tyrel Datwyler)   
  - component: Silence bind error on -EPROBE_DEFER (James Hilliard)   
  - vhost/vsock: fix packet delivery order to monitoring devices (Stefano Garzarella)   
  - configfs: fix config_item refcnt leak in configfs_rmdir() (Xiyu Yang)   
  - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (Arun Easi)   
  - HID: multitouch: add eGalaxTouch P80H84 support (Sebastian Reichel)   
  - gcc-common.h: Update for GCC 10 (Frédéric Pierret (fepitre))   
  - ubi: Fix seq_file usage in detailed_erase_block_info debugfs file (Richard Weinberger)   
  - i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()' (Christophe JAILLET)   
  - iommu/amd: Fix over-read of ACPI UID from IVRS table (Alexander Monakov)   
  - fix multiplication overflow in copy_fdtable() (Al Viro)   
  - ima: Fix return value of ima_write_policy() (Roberto Sassu)   
  - evm: Check also if *tfm is an error pointer in init_desc() (Roberto Sassu)   
  - ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash() (Roberto Sassu)   
  - padata: ensure padata_do_serial() runs on the correct CPU (Mathias Krause)   
  - padata: ensure the reorder timer callback runs on the correct CPU (Mathias Krause)   
  - i2c: dev: Fix the race between the release of i2c_dev and cdev (Kevin Hao)   
  - watchdog: Fix the race between the release of watchdog_core_data and cdev (Kevin Hao)   
  - ext4: add cond_resched() to ext4_protect_reserved_inode (Shijie Luo)   
  - Linux 4.14.181 (Greg Kroah-Hartman)   
  - Makefile: disallow data races on gcc-10 as well (Sergei Trofimovich)   
  - KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (Jim Mattson)   
  - ARM: dts: r8a7740: Add missing extal2 to CPG node (Geert Uytterhoeven)   
  - ARM: dts: r8a73a4: Add missing CMT1 interrupts (Geert Uytterhoeven)   
  - arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy (Chen-Yu Tsai)   
  - arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards (Chen-Yu Tsai)   
  - Revert "ALSA: hda/realtek: Fix pop noise on ALC225" (Kai-Heng Feng)   
  - usb: gadget: legacy: fix error return code in cdc_bind() (Wei Yongjun)   
  - usb: gadget: legacy: fix error return code in gncm_bind() (Wei Yongjun)   
  - usb: gadget: audio: Fix a missing error return value in audio_bind() (Christophe JAILLET)   
  - usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()' (Christophe JAILLET)   
  - clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks (Justin Swartz)   
  - exec: Move would_dump into flush_old_exec (Eric W. Biederman)   
  - x86/unwind/orc: Fix error handling in __unwind_start() (Josh Poimboeuf)   
  - usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list (Sriharsha Allenki)   
  - USB: gadget: fix illegal array access in binding with UDC (Kyungtae Kim)   
  - usb: host: xhci-plat: keep runtime active when removing host (Li Jun)   
  - usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B (Eugeniu Rosca)   
  - ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset (Jesus Ramos)   
  - x86: Fix early boot crash on gcc-10, third try (Borislav Petkov)   
  - ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries (Fabio Estevam)   
  - ARM: dts: dra7: Fix bus_dma_limit for PCIe (Kishon Vijay Abraham I)   
  - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (Takashi Iwai)   
  - ALSA: rawmidi: Initialize allocated buffers (Takashi Iwai)   
  - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 (Takashi Iwai)   
  - net: tcp: fix rx timestamp behavior for tcp_recvmsg (Kelly Littlepage)   
  - netprio_cgroup: Fix unlimited memory leak of v2 cgroups (Zefan Li)   
  - net: ipv4: really enforce backoff for redirects (Paolo Abeni)   
  - net: dsa: loop: Add module soft dependency (Florian Fainelli)   
  - hinic: fix a bug of ndo_stop (Luo bin)   
  - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" (Maciej Żenczykowski)   
  - net: phy: fix aneg restart in phy_ethtool_set_eee (Heiner Kallweit)   
  - netlabel: cope with NULL catmap (Paolo Abeni)   
  - net: fix a potential recursive NETDEV_FEAT_CHANGE (Cong Wang)   
  - net: phy: micrel: Use strlcpy() for ethtool::get_strings (Florian Fainelli)   
  - x86/asm: Add instruction suffixes to bitops (Jan Beulich)   
  - gcc-10: avoid shadowing standard library 'free()' in crypto (Linus Torvalds)   
  - gcc-10: disable 'restrict' warning for now (Linus Torvalds)   
  - gcc-10: disable 'stringop-overflow' warning for now (Linus Torvalds)   
  - gcc-10: disable 'array-bounds' warning for now (Linus Torvalds)   
  - gcc-10: disable 'zero-length-bounds' warning for now (Linus Torvalds)   
  - Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds)   
  - kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig (Masahiro Yamada)   
  - pnp: Use list_for_each_entry() instead of open coding (Jason Gunthorpe)   
  - hwmon: (da9052) Synchronize access with mfd (Samu Nuutamo)   
  - IB/mlx4: Test return value of calls to ib_get_cached_pkey (Jack Morgenstein)   
  - netfilter: conntrack: avoid gcc-10 zero-length-bounds warning (Arnd Bergmann)   
  - i40iw: Fix error handling in i40iw_manage_arp_cache() (Dan Carpenter)   
  - pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler (Grace Kao)   
  - pinctrl: baytrail: Enable pin configuration setting for GPIO chip (Andy Shevchenko)   
  - x86/entry/64: Fix unwind hints in register clearing code (Josh Poimboeuf)   
  - ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse (Kai-Heng Feng)   
  - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index (Vasily Averin)   
  - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper() (Vasily Averin)   
  - ALSA: hda/hdmi: fix race in monitor detection during probe (Kai Vehmanen)   
  - cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once (Chris Wilson)   
  - dmaengine: mmp_tdma: Reset channel error on release (Lubomir Rintel)   
  - dmaengine: pch_dma.c: Avoid data race between probe and irq handler (Madhuparna Bhowmik)   
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)   
  - virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi)   
  - drop_monitor: work around gcc-10 stringop-overflow warning (Arnd Bergmann)   
  - net: moxa: Fix a potential double 'free_irq()' (Christophe JAILLET)   
  - net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()' (Christophe JAILLET)   
  - shmem: fix possible deadlocks on shmlock_user_lock (Hugh Dickins)   
  - net: stmmac: Use mutex instead of spinlock (Thierry Reding)   
  - f2fs: fix to avoid memory leakage in f2fs_listxattr (Randall Huang)   
  - f2fs: fix to avoid accessing xattr across the boundary (Randall Huang)   
  - f2fs: sanity check of xattr entry size (Jaegeuk Kim)   
  - f2fs: introduce read_xattr_block (Chao Yu)   
  - f2fs: introduce read_inline_xattr (Chao Yu)   
  - blktrace: fix dereference after null check (Cengiz Can)   
  - blktrace: fix trace mutex deadlock (Jens Axboe)   
  - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (Sabrina Dubroca)   
  - net: ipv6: add net argument to ip6_dst_lookup_flow (Sabrina Dubroca)   
  - scripts/decodecode: fix trapping instruction formatting (Ivan Delalande)   
  - objtool: Fix stack offset tracking for indirect CFAs (Josh Poimboeuf)   
  - netfilter: nat: never update the UDP checksum when it's 0 (Guillaume Nault)   
  - x86/unwind/orc: Fix error path for bad ORC entry type (Josh Poimboeuf)   
  - x86/unwind/orc: Prevent unwinding before ORC initialization (Josh Poimboeuf)   
  - x86/unwind/orc: Don't skip the first frame for inactive tasks (Miroslav Benes)   
  - x86/entry/64: Fix unwind hints in rewind_stack_do_exit() (Jann Horn)   
  - x86/entry/64: Fix unwind hints in kernel exit path (Josh Poimboeuf)   
  - batman-adv: Fix refcnt leak in batadv_v_ogm_process (Xiyu Yang)   
  - batman-adv: Fix refcnt leak in batadv_store_throughput_override (Xiyu Yang)   
  - batman-adv: Fix refcnt leak in batadv_show_throughput_override (Xiyu Yang)   
  - batman-adv: fix batadv_nc_random_weight_tq (George Spelvin)   
  - coredump: fix crash when umh is disabled (Luis Chamberlain)   
  - mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() (David Hildenbrand)   
  - KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER (Marc Zyngier)   
  - tracing: Add a vmalloc_sync_mappings() for safe measure (Steven Rostedt (VMware))   
  - USB: serial: garmin_gps: add sanity checking for data length (Oliver Neukum)   
  - USB: uas: add quirk for LaCie 2Big Quadra (Oliver Neukum)   
  - HID: usbhid: Fix race between usbhid_close() and usbhid_stop() (Alan Stern)   
  - geneve: only configure or fill UDP_ZERO_CSUM6_RX/TX info when CONFIG_IPV6 (Hangbin Liu)   
  - HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices (Jason Gerecke)   
  - ipv6: fix cleanup ordering for ip6_mr failure (Sabrina Dubroca)   
  - net: stricter validation of untrusted gso packets (Willem de Bruijn)   
  - bnxt_en: Fix VF anti-spoof filter setup. (Michael Chan)   
  - bnxt_en: Improve AER slot reset. (Michael Chan)   
  - net/mlx5: Fix command entry leak in Internal Error State (Moshe Shemesh)   
  - net/mlx5: Fix forced completion access non initialized command entry (Moshe Shemesh)   
  - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). (Michael Chan)   
  - sch_sfq: validate silly quantum values (Eric Dumazet)   
  - sch_choke: avoid potential panic in choke_reset() (Eric Dumazet)   
  - net: usb: qmi_wwan: add support for DW5816e (Matt Jolly)   
  - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() (Tariq Toukan)   
  - net: macsec: preserve ingress frame ordering (Scott Dial)   
  - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks (Eric Dumazet)   
  - dp83640: reverse arguments to list_add_tail (Julia Lawall)   
  - USB: serial: qcserial: Add DW5816e support (Matt Jolly)   
  - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin)  [Orabug: 31350921]  {CVE-2020-12655} 
  - rds: Do not cancel RDMAs that have been posted to the HCA (Håkon Bugge)  [Orabug: 31412731]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31412731]  
  - bnxt_en: Fix accumulation of bp->net_stats_prev. (Vijayendra Suman)  [Orabug: 31390688]  
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380493]  
  - nfs: initiate returning delegation when reclaiming one that's been recalled (Jeff Layton)  [Orabug: 31378833]  
  - NFS: More excessive attribute revalidation in nfs_execute_ok() (Trond Myklebust)  [Orabug: 31378833]  
  - uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp)  [Orabug: 31373693]  
  - uek-rpm: Add config-mips64-embedded-kdump (Henry Willard)  [Orabug: 31373693]  
  - uek-rpm: Don't build kernel-uek-tools or perf packages for mips64 (Dave Kleikamp)  [Orabug: 31373693]  
  - A/A Bonding: No need to call flush rdmaip_wq in rdmaip_cleanup() (Ka-Cheong Poon)  [Orabug: 30862932]  
  - net/rds: suppress memory allocation failure reports (Manjunath Patil)  [Orabug: 31398438]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2024.uek]
changelog:
  - scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Chandrakanth Patil)  [Orabug: 31454512]  
  - scsi: megaraid_sas: TM command refire leads to controller firmware crash (Sumit Saxena)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Shivasharan S)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Remove IO buffer hole detection logic (Sumit Saxena)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Limit device queue depth to controller queue depth (Kashyap Desai)  [Orabug: 31454512]  
  - scsi: megaraid: make two symbols static in megaraid_sas_base.c (Jason Yan)  [Orabug: 31454512]  
  - scsi: megaraid: make some symbols static in megaraid_sas_fusion.c (Jason Yan)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31454512]  
  - scsi: megaraid_sas: silence a warning (Tomas Henzl)  [Orabug: 31454512]  
  - scsi: megaraid_sas: fix indentation issue (Colin Ian King)  [Orabug: 31454512]  
  - scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Hannes Reinecke)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Update driver version to 07.713.01.00-rc1 (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Limit the number of retries for the IOCTLs causing firmware fault (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Re-Define enum DCMD_RETURN_STATUS (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Do not set HBA Operational if FW is not in operational state (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Do not kill HBA if JBOD Seqence map or RAID map is disabled (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Do not kill host bus adapter, if adapter is already dead (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Update optimal queue depth for SAS and NVMe devices (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Set no_write_same only for Virtual Disk (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Reset adapter if FW is not in READY state after device resume (Anand Lodnoor)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Make poll_aen_lock static (YueHaibing)  [Orabug: 31454512]  
  - scsi: megaraid_sas: remove unused variables 'debugBlk','fusion' (zhengbin)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Unique names for MSI-X vectors (Chandrakanth Patil)  [Orabug: 31454512]  
  - scsi: megaraid_sas: Make some functions static (YueHaibing)  [Orabug: 31454512]  
  - scsi: megaraid_sas: fix spelling mistake "megarid_sas" -> "megaraid_sas" (Colin Ian King)  [Orabug: 31454512]  
  - mm: change return type to vm_fault_t (Souptick Joarder)  [Orabug: 30651584]  
  - Revert "mm: change return type to vm_fault_t" (John Donnelly)  [Orabug: 30651584]  
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31473001]  
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352780]  {CVE-2020-0543} 
  - netdev, octeon3-ethernet: move timecounter init to network driver probe() (Dave Aldridge)  [Orabug: 31439218]  
  - rds: Three cancel fixes (Håkon Bugge)  [Orabug: 31463013]  
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31454845]  
  - Fix KABI breakage (Thomas Tai)  [Orabug: 31318631]  
  - uek-rpm: Enable CONFIG_PCIE_DPC and CONFIG_PCIE_EDR (Thomas Tai)  [Orabug: 31318631]  
  - PCI/DPC: Add Error Disconnect Recover (EDR) support (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/ERR: Return status of pcie_do_recovery() (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/ERR: Remove service dependency in pcie_do_recovery() (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/ERR: Simplify broadcast callouts (Keith Busch)  [Orabug: 31318631]  
  - PCI/ERR: Run error recovery callbacks for all affected devices (Keith Busch)  [Orabug: 31318631]  
  - ACPICA: ACPI 6.3: add Error Disconnect Recover Notification value (Erik Schmauss)  [Orabug: 31318631]  
  - PCI/DPC: Expose dpc_process_error(), dpc_reset_link() for use by EDR (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/AER: Add pci_aer_raw_clear_status() to unconditionally clear Error Status (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/AER: Save AER Capability for suspend/resume (Patel, Mayurkumar)  [Orabug: 31318631]  
  - PCI/AER: Refactor error injection fallbacks (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Abstract AER interrupt handling (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Reuse existing pcie_port_find_device() interface (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Cache DPC capabilities in pci_init_capabilities() (Kuppuswamy Sathyanarayanan)  [Orabug: 31318631]  
  - PCI/DPC: Move DPC data into struct pci_dev (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Add "pcie_ports=dpc-native" to allow DPC without AER control (Olof Johansson)  [Orabug: 31318631]  
  - PCI/DPC: Log messages with pci_dev, not pcie_device (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/DPC: Fix print AER status in DPC event handling (Dongdong Liu)  [Orabug: 31318631]  
  - PCI: Make link active reporting detection generic (Keith Busch)  [Orabug: 31318631]  
  - PCI/ERR: Handle fatal error recovery (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use managed resource allocations (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use threaded IRQ for bottom half (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use kfifo_in_spinlocked() to insert locked elements (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use kfifo for tracking events instead of reimplementing it (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove error source from AER struct aer_rpc (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove unused aer_error_resume() (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove duplicate PCI_EXP_AER_FLAGS definition (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Work around use-after-free in pcie_do_fatal_recovery() (Thomas Tai)  [Orabug: 31318631]  
  - PCI: Simplify disconnected marking (Lukas Wunner)  [Orabug: 31318631]  
  - PCI: hotplug: Drop checking of PCI_BRIDGE_CONTROL in *_unconfigure_device() (Mika Westerberg)  [Orabug: 31318631]  
  - PCI: pciehp: Fix race condition handling surprise link down (Mika Westerberg)  [Orabug: 31318631]  
  - PCI: Add for_each_pci_bridge() helper (Andy Shevchenko)  [Orabug: 31318631]  
  - PCI/ERR: Use slot reset if available (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Don't read upstream ports below fatal errors (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Take reference on error devices (Keith Busch)  [Orabug: 31318631]  
  - PCI: Hide pci_reset_bridge_secondary_bus() from drivers (Sinan Kaya)  [Orabug: 31318631]  
  - PCI: Handle error return from pci_reset_bridge_secondary_bus() (Sinan Kaya)  [Orabug: 31318631]  
  - PCI: Add a return type for pci_reset_bridge_secondary_bus() (Sinan Kaya)  [Orabug: 31318631]  
  - PCI: pciehp: Convert timers to use timer_setup() (Kees Cook)  [Orabug: 31318631]  
  - PCI/portdrv: Remove pcie_portdrv_err_handler.slot_reset (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Don't clear AER bits if error handling is Firmware-First (Alexandru Gagniuc)  [Orabug: 31318631]  
  - PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Clear device status bits during ERR_COR handling (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Factor out ERR_NONFATAL status bit clearing (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Save and restore config state (Keith Busch)  [Orabug: 31318631]  
  - PCI: Restore resized BAR state on resume (Christian König)  [Orabug: 31318631]  
  - PCI: portdrv: Initialize service drivers directly (Keith Busch)  [Orabug: 31318631]  
  - PCI: Add resizable BAR infrastructure (Christian König)  [Orabug: 31318631]  
  - PCI/AER: Honor "pcie_ports=native" even if HEST sets FIRMWARE_FIRST (Alexandru Gagniuc)  [Orabug: 31318631]  
  - PCI/AER: Add sysfs attributes for rootport cumulative stats (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Add sysfs attributes to provide AER stats and breakdown (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Define aer_stats structure for AER capable devices (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Adopt lspci names for AER error decoding (Tyler Baicar)  [Orabug: 31318631]  
  - PCI/AER: Move internal declarations to drivers/pci/pci.h (Rajat Jain)  [Orabug: 31318631]  
  - PCI/AER: Expose internal API for obtaining AER information (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Remove indirection waiting for inactive link (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Use threaded IRQ for bottom half handling (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Print AER status in DPC event handling (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Remove rp_pio_status from dpc struct (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Defer event handling to work queue (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Leave interrupts enabled while handling event (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Use "PCI Express" consistently in Kconfig text (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Hoist aerdrv.c, aer_inject.c up to drivers/pci/pcie/ (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash Kconfig.debug into Kconfig (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Move private AER things to aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Move aer_irq() declaration to portdrv.h (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Remove duplicate pcie_port_bus_type declaration (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash ecrc.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash aerdrv_acpi.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash aerdrv_errprint.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Squash aerdrv_core.c into aerdrv.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Reorder code to group probe/remove stuff together (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Remove forward declarations (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Remove aer_recover_work_func() forward declaration (Borislav Petkov)  [Orabug: 31318631]  
  - PCI/AER: Decode Error Source Requester ID (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Move pcie_aer_get_firmware_first() to portdrv.h (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Use the generic pcie_do_fatal_recovery() path (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Pass service type to pcie_do_fatal_recovery() (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/portdrv: Add generic pcie_port_find_device() (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/portdrv: Add generic pcie_port_find_service() (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Factor out error reporting to drivers/pci/pcie/err.c (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Rename error recovery interfaces to generic PCI naming (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Handle ERR_FATAL with removal and re-enumeration of devices (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/AER: Add TLP header information to tracepoint (Thomas Tai)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unused pcie_port_acpi_setup() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Unify error bit printing for native and CPER reporting (Alexandru Gagniuc)  [Orabug: 31318631]  
  - PCI: Add wrappers for dev_printk() (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/AER: Replace struct pcie_device with pci_dev (Keith Busch)  [Orabug: 31318631]  
  - PCI/AER: Remove unused parameters (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Disable ERR_NONFATAL handling by DPC (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI: Add generic pcie_wait_for_link() interface (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/ASPM: Unexport internal ASPM interfaces (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Clear interrupt status in interrupt handler top half (Oza Pawandeep)  [Orabug: 31318631]  
  - PCI/DPC: Rename from pcie-dpc.c to dpc.c (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Do not enable DPC if AER control is not allowed by the BIOS (Mika Westerberg)  [Orabug: 31318631]  
  - PCI/AER: Use cached AER Capability offset (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/portdrv: Rename and reverse sense of pcie_ports_auto (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Encapsulate pcie_ports_auto inside the port driver (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unnecessary "pcie_ports=auto" parameter (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove "pcie_hp=nomsi" kernel parameter (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unnecessary include of <linux/pci-aspm.h> (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Simplify PCIe feature permission checking (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove unused PCIE_PORT_SERVICE_VC (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Remove pcie_port_bus_type link order dependency (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Merge pcieport_if.h into portdrv.h (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Disable port driver in compat mode (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/PM: Move pcie_clear_root_pme_status() to core (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Move pcieport_if.h to drivers/pci/pcie/ (Frederick Lawler)  [Orabug: 31318631]  
  - PCI/AER: Move pci_uevent_ers() out of pci.h (Michael Ellerman)  [Orabug: 31318631]  
  - PCI: Add SPDX GPL-2.0 to replace COPYING boilerplate (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Squash dpc_rp_pio_get_info() into dpc_process_rp_pio_error() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Remove unnecessary RP PIO register structs (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Push dpc->rp_pio_status assignment into dpc_rp_pio_get_info() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Squash dpc_rp_pio_print_error() into dpc_rp_pio_get_info() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Make RP PIO log size check more generic (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Rename local "status" to "dpc_status" (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Squash dpc_rp_pio_print_tlp_header() into dpc_rp_pio_print_error() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Process RP PIO details only if RP PIO extensions supported (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Read RP PIO Log Size once at probe (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Rename struct dpc_dev.rp to rp_extensions (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Add local variable for DPC capability offset (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Rename interrupt_event_handler() to dpc_work() (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Enable DPC only if AER is available (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Fix interrupt message number print (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Reformat DPC register definitions (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/DPC: Add and use DPC Status register field definitions (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/AER: Add uevents in AER and EEH error/resume (Bryant G. Ly)  [Orabug: 31318631]  
  - PCI/AER: Return error if AER is not supported (Keith Busch)  [Orabug: 31318631]  
  - PCI/DPC: Fix shared interrupt handling (Alex Williamson)  [Orabug: 31318631]  
  - PCI/portdrv: Turn off PCIe services during shutdown (Sinan Kaya)  [Orabug: 31318631]  
  - PCI/portdrv: Compute MSI/MSI-X IRQ vectors after final allocation (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Factor out Interrupt Message Number lookup (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Consolidate comments (Bjorn Helgaas)  [Orabug: 31318631]  
  - PCI/portdrv: Add #defines for AER and DPC Interrupt Message Number masks (Dongdong Liu)  [Orabug: 31318631]  
  - PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Tyler Baicar)  [Orabug: 31318631]  
  - uek-rpm: use expand macro with kernel_reqprovconf (Dave Kleikamp)  [Orabug: 31454071]  
  - scsi: mpt3sas: Introduce module parameter to override queue depth (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix memset() in non-RDPQ mode (Suganath Prabu S)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix reply queue count in non RDPQ mode (Suganath Prabu S)  [Orabug: 31434583]  
  - scsi: mpt3sas: Remove unused including <linux/version.h> (Samuel Zou)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix double free warnings (Suganath Prabu S)  [Orabug: 31434583]  
  - scsi: mpt3sas: Disable DIF when prot_mask set to zero (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Capture IOC data for debugging purposes (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Use true, false for ioc->use_32bit_dma (Jason Yan)  [Orabug: 31434583]  
  - scsi: mpt3sas: Remove NULL check before freeing function (Jason Yan)  [Orabug: 31434583]  
  - scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Separate out RDPQ allocation to new function (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Rename function name is_MSB_are_same (Suganath Prabu)  [Orabug: 31434583]  
  - scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Christoph Hellwig)  [Orabug: 31434583]  
  - scsi: mpt3sas: use true,false for bool variables (Jason Yan)  [Orabug: 31434583]  
  - scsi: mpt3sas: Update drive version to 33.100.00.00 (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Remove usage of device_busy counter (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Print function name in which cmd timed out (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Optimize mpt3sas driver logging (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: print in which path firmware fault occurred (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Handle CoreDump state from watchdog thread (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Add support IOCs new state named COREDUMP (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: renamed _base_after_reset_handler function (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Add support for NVMe shutdown (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Update MPI Headers to v02.00.57 (Sreekanth Reddy)  [Orabug: 31434583]  
  - scsi: mpt3sas: Fix double free in attach error handling (Dan Carpenter)  [Orabug: 31434583]  
  - scsi: mpt3sas: change allocation option (Tomas Henzl)  [Orabug: 31434583]  
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430851]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.1.el7uek]
changelog:
  - Linux 4.14.184 (Greg Kroah-Hartman)   
  - uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned (Oleg Nesterov)   
  - iio: vcnl4000: Fix i2c swapped word reading. (Mathieu Othacehe)   
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)   
  - nvmem: qfprom: remove incorrect write support (Srinivas Kandagatla)   
  - CDC-ACM: heed quirk also in error handling (Oliver Neukum)   
  - staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK (Pascal Terjan)   
  - tty: hvc_console, fix crashes on parallel open/close (Jiri Slaby)   
  - vt: keyboard: avoid signed integer overflow in k_ascii (Dmitry Torokhov)   
  - usb: musb: Fix runtime PM imbalance on error (Dinghao Liu)   
  - usb: musb: start session in resume for host port (Bin Liu)   
  - USB: serial: option: add Telit LE910C1-EUX compositions (Daniele Palmas)   
  - USB: serial: usb_wwan: do not resubmit rx urb on fatal errors (Bin Liu)   
  - USB: serial: qcserial: add DW5816e QDL support (Matt Jolly)   
  - l2tp: add sk_family checks to l2tp_validate_socket (Eric Dumazet)   
  - net: check untrusted gso_size at kernel entry (Willem de Bruijn)   
  - vsock: fix timeout in vsock_accept() (Stefano Garzarella)   
  - NFC: st21nfca: add missed kfree_skb() in an error path (Chuhong Yuan)   
  - net: usb: qmi_wwan: add Telit LE910C1-EUX composition (Daniele Palmas)   
  - l2tp: do not use inet_hash()/inet_unhash() (Eric Dumazet)   
  - devinet: fix memleak in inetdev_init() (Yang Yingliang)   
  - airo: Fix read overflows sending packets (Dan Carpenter)   
  - scsi: ufs: Release clock if DMA map fails (Can Guo)   
  - mmc: fix compilation of user API (Jérôme Pouiller)   
  - kernel/relay.c: handle alloc_percpu returning NULL in relay_open (Daniel Axtens)   
  - p54usb: add AirVasT USB stick device-id (Giuseppe Marco Randazzo)   
  - HID: i2c-hid: add Schneider SCL142ALM to descriptor override (Julian Sax)   
  - HID: sony: Fix for broken buttons on DS3 USB dongles (Scott Shumate)   
  - net: smsc911x: Fix runtime PM imbalance on error (Dinghao Liu)   
  - net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x (Jonathan McDowell)   
  - net/ethernet/freescale: rework quiesce/activate for ucc_geth (Valentin Longchamp)   
  - net: bmac: Fix read of MAC address from ROM (Jeremy Kerr)   
  - x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables (Nathan Chancellor)   
  - i2c: altera: Fix race between xfer_msg and isr thread (Atsushi Nemoto)   
  - ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT (Vineet Gupta)   
  - ARC: Fix ICCM & DCCM runtime size checks (Eugeniy Paltsev)   
  - pppoe: only process PADT targeted at local interfaces (Guillaume Nault)   
  - s390/ftrace: save traced function caller (Vasily Gorbik)   
  - spi: dw: use "smp_mb()" to avoid sending spi data error (Xinwei Kong)   
  - scsi: hisi_sas: Check sas_port before using it (Xiang Chen)   
  - libnvdimm: Fix endian conversion issues  (Aneesh Kumar K.V)   
  - scsi: scsi_devinfo: fixup string compare (Hannes Reinecke)   
  - Linux 4.14.183 (Greg Kroah-Hartman)   
  - scsi: zfcp: fix request object use-after-free in send path causing wrong traces (Benjamin Block)   
  - genirq/generic_pending: Do not lose pending affinity update (Thomas Gleixner)   
  - net: hns: Fixes the missing put_device in positive leg for roce reset (Salil Mehta)   
  - net: hns: fix unsigned comparison to less than zero (Colin Ian King)   
  - rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket (David Howells)   
  - sc16is7xx: move label 'err_spi' to correct section (Guoqing Jiang)   
  - mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap() (Liviu Dudau)   
  - netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build (Pablo Neira Ayuso)   
  - bonding: Fix reference count leak in bond_sysfs_slave_add. (Qiushi Wu)   
  - qlcnic: fix missing release in qlcnic_83xx_interrupt_test. (Qiushi Wu)   
  - esp6: get the right proto for transport mode in esp6_gso_encap (Xin Long)   
  - netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code (Pablo Neira Ayuso)   
  - netfilter: nfnetlink_cthelper: unbreak userspace helper support (Pablo Neira Ayuso)   
  - netfilter: ipset: Fix subcounter update skip (Phil Sutter)   
  - netfilter: nft_reject_bridge: enable reject with bridge vlan (Michael Braun)   
  - ip_vti: receive ipip packet by calling ip_tunnel_rcv (Xin Long)   
  - vti4: eliminated some duplicate code. (Jeremy Sowden)   
  - xfrm: fix error in comment (Antony Antony)   
  - xfrm: fix a NULL-ptr deref in xfrm_local_error (Xin Long)   
  - xfrm: fix a warning in xfrm_policy_insert_list (Xin Long)   
  - xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output (Xin Long)   
  - xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input (Xin Long)   
  - copy_xstate_to_kernel(): don't leave parts of destination uninitialized (Al Viro)   
  - x86/dma: Fix max PFN arithmetic overflow on 32 bit systems (Alexander Dahl)   
  - mac80211: mesh: fix discovery timer re-arming issue / crash (Linus Lüssing)   
  - parisc: Fix kernel panic in mem_init() (Helge Deller)   
  - iommu: Fix reference count leak in iommu_group_alloc. (Qiushi Wu)   
  - include/asm-generic/topology.h: guard cpumask_of_node() macro argument (Arnd Bergmann)   
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)   
  - mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() (Konstantin Khlebnikov)   
  - libceph: ignore pool overlay and cache logic on redirects (Jerry Lee)   
  - ALSA: hda/realtek - Add new codec supported for ALC287 (Kailang Yang)   
  - exec: Always set cap_ambient in cap_bprm_set_creds (Eric W. Biederman)   
  - ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC (Chris Chiu)   
  - ALSA: hwdep: fix a left shifting 1 by 31 UB bug (Changming Liu)   
  - RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() (Qiushi Wu)   
  - mmc: block: Fix use-after-free issue for rpmb (Peng Hao)   
  - ARM: dts: bcm2835-rpi-zero-w: Fix led polarity (Vincent Stehlé)   
  - ARM: dts/imx6q-bx50v3: Set display interface clock parents (Robert Beckett)   
  - ARM: dts: imx6q-bx50v3: Add internal switch (Sebastian Reichel)   
  - IB/qib: Call kobject_put() when kobject_init_and_add() fails (Kaike Wan)   
  - gpio: exar: Fix bad handling for ida_simple_get error path (Takashi Iwai)   
  - ARM: uaccess: fix DACR mismatch with nested exceptions (Russell King)   
  - ARM: uaccess: integrate uaccess_save and uaccess_restore (Russell King)   
  - ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h (Russell King)   
  - ARM: 8843/1: use unified assembler in headers (Stefan Agner)   
  - Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() (Wei Yongjun)   
  - Input: synaptics-rmi4 - really fix attn_data use-after-free (Evan Green)   
  - Input: i8042 - add ThinkPad S230u to i8042 reset list (Kevin Locke)   
  - Input: dlink-dir685-touchkeys - fix a typo in driver name (Christophe JAILLET)   
  - Input: xpad - add custom init packet for Xbox One S controllers (Łukasz Patron)   
  - Input: evdev - call input_flush_device() on release(), not flush() (Brendan Shanks)   
  - Input: usbtouchscreen - add support for BonXeon TP (James Hilliard)   
  - samples: bpf: Fix build error (Matteo Croce)   
  - cifs: Fix null pointer check in cifs_read (Steve French)   
  - net: freescale: select CONFIG_FIXED_PHY where needed (Arnd Bergmann)   
  - usb: gadget: legacy: fix redundant initialization warnings (Masahiro Yamada)   
  - cachefiles: Fix race between read_waiter and read_copier involving op->to_do (Lei Xue)   
  - gfs2: move privileged user check to gfs2_quota_lock_check (Bob Peterson)   
  - net: microchip: encx24j600: add missed kthread_stop (Chuhong Yuan)   
  - gpio: tegra: mask GPIO IRQs during IRQ shutdown (Stephen Warren)   
  - ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi (Johan Jonker)   
  - arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node (Johan Jonker)   
  - ARM: dts: rockchip: fix phy nodename for rk3228-evb (Johan Jonker)   
  - net/mlx4_core: fix a memory leak bug. (Qiushi Wu)   
  - net: sun: fix missing release regions in cas_init_one(). (Qiushi Wu)   
  - net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() (Manivannan Sadhasivam)   
  - net/mlx5e: Update netdev txq on completions during closure (Moshe Shemesh)   
  - sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed (Jere Leppänen)   
  - r8152: support additional Microsoft Surface Ethernet Adapter variant (Marc Payne)   
  - net sched: fix reporting the first-time use timestamp (Roman Mashak)   
  - net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" (Yuqi Jin)   
  - net/mlx5: Add command entry handling completion (Moshe Shemesh)   
  - net: ipip: fix wrong address family in init error path (Vadim Fedorenko)   
  - ax25: fix setsockopt(SO_BINDTODEVICE) (Eric Dumazet)   
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504053]  
  - mm: Fix mremap not considering huge pmd devmap (Fan Yang)  [Orabug: 31452397]  {CVE-2020-10757} {CVE-2020-10757} 
  - PCI/DPC: Add missing pci_dpc_init() to pci probe function (Thomas Tai)  [Orabug: 31511974]  
  - selftests/bpf: do not run test_kmod.sh for UEK5 (Alan Maguire)  [Orabug: 31357234]  
  - bpf: do not allow root to mangle valid pointers (Alexei Starovoitov)  [Orabug: 31357234]  
  - selftests/bpf: fix invalid bit operation to verify tcpbpf events (Alan Maguire)  [Orabug: 31357234]  
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 31501437]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31323839]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31323839]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31323839]  
  - KVM: VMX: check descriptor table exits on instruction emulation (Oliver Upton)  [Orabug: 31481335]  
  - Revert "rds: Introduce rds_conn_to_path helper" (Håkon Bugge)  [Orabug: 31476448]  
  - Revert "rds: Do not cancel RDMAs that have been posted to the HCA" (Håkon Bugge)  [Orabug: 31476448]  
  - Revert "rds: Three cancel fixes" (Håkon Bugge)  [Orabug: 31476448]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.4.el7uek]
changelog:
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480604]  
  - dm cache: submit writethrough writes in parallel to origin and cache (Mike Snitzer)  [Orabug: 31397438]  
  - nvme: Assign subsys instance from first ctrl (Keith Busch)  [Orabug: 31315361]  
  - kvm/vmx: Add dy_apicv_has_pending_interrupt op. (Boris Ostrovsky)  [Orabug: 31602225]  
  - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31606253]  
  - qla2xxx: Pick up missing hunk from original patch (Quinn Tran)  [Orabug: 31607567]  
  - byteorder: Move {cpu_to_be32, be32_to_cpu}_array() from Thunderbolt to core (Mika Westerberg)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter)  [Orabug: 31607567]  
  - scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove an unused function (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix regression warnings (Nilesh Javali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove non functional code (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RDP respond data format (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: add more FW debug information (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez)  [Orabug: 31607567]  
  - scsi: qla2xxx: fix FW resource count values (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RDP response size (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix fw options handle eh_bus_reset() (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use correct number of vectors for online CPUs (Ming Lei)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stalled relogin (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix kernel crash due to late workqueue allocation (himanshu.madhani@cavium.com)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix issue with adapter's stopping state (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne)  [Orabug: 31607567]  
  - scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck)  [Orabug: 31607567]  
  - scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck)  [Orabug: 31607567]  
  - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RIDA Format-2 (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Consolidate fabric scan (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Correct fcport flags handling (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran)  [Orabug: 31607567]  
  - qla2xxx: Update driver version to 10.01.00.22.81.1-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use common routine to free fcport struct (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix update_fcport for current_topology (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cleanup unused async_logout_done (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Allow PLOGI in target mode (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Don't defer relogin unconditonally (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Send Notify ACK after N2N PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Configure local loop for N2N target (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use explicit LOGO in target mode (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Initialize free_work before flushing it (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (Roman Bolshakov)  [Orabug: 31607567]  
  - Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails" (Martin K. Petersen)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix memory leak when sending I/O fails (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Modify NVMe include directives (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change a stack variable into a static const variable (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Bill Kuzeja)  [Orabug: 31607567]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.5.el7uek]
changelog:
  - PCI: vmd: Filter resource type bits from shadow register (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add device id for VMD device 8086:9A0B (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Fix shadow offsets to reflect spec changes (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Fix config addressing when using bus offsets (Jon Derrick)  [Orabug: 31688061]  
  - PCI/VMD: Configure MPS settings before adding devices (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add an additional VMD device id to driver device id table (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add offset to bus numbers if necessary (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Assign membar addresses from shadow registers (Jon Derrick)  [Orabug: 31688061]  
  - PCI: Add Intel VMD devices to pci ids (Jon Derrick)  [Orabug: 31688061]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358098]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555616]  
  - net: dsa: Do not leave DSA master with NULL netdev_ops (Allen Pais)  [Orabug: 31658286]  
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 29251777]  
  - vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663630]  {CVE-2020-12888} {CVE-2020-12888} 
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648240]  
  - octeontx2-serdes: Fix compile error (Dave Kleikamp)  [Orabug: 31649691]  
  - uek-rpm: config updates for SDK-10.3.3.0-PR8 kernel patches (Dave Kleikamp)  [Orabug: 31649691]  
  - hwrng: cavium: Check health status while reading random data (Sunil Goutham)  [Orabug: 31649691]  
  - octeontx2-af: Debugfs entry to show mapping btw CGX, NIX and a PF. (Rakesh Babu)  [Orabug: 31649691]  
  - octeontx2-serdes: Fix prbs error reporting (Chandrakala Chavva)  [Orabug: 31649691]  
  - drivers:cpt - add support for CPT1 in VF driver (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Add support for CPT1 in debugfs (Srujana Challa)  [Orabug: 31649691]  
  - drivers: cpt - add support for microcode load on CPT1 (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Mbox changes for 98xx CPT block (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Fix REE error handling (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Update SDP AF driver to handle multiple SDP blocks (Radha Mohan Chintakuntla)  [Orabug: 31649691]  
  - soc: octeontx2: Add SDP PF driver (Radha Mohan Chintakuntla)  [Orabug: 31649691]  
  - octeontx2: marvell: Add driver support for LLC lock and unlock (Bhaskara Budiredla)  [Orabug: 31649691]  
  - octeontx2-af: fix DMAC filter table corruption (Sunil Kumar Kori)  [Orabug: 31649691]  
  - octeontx2-af: Add new Mbox messages and handlers for new REE blocks (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Enable PF BCAST entry for packet replication (Subbaraya Sundeep)  [Orabug: 31649691]  
  - octeontx2-serdes: Update PRBS APIs to start/stop per QLM lane (Chandrakala Chavva)  [Orabug: 31649691]  
  - CIFS: dump IPC tcon in debug proc file (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: make IPC a regular tcon (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: don't log STATUS_NOT_FOUND errors for DFS (Aurelien Aptel)  [Orabug: 31540174]  
  - efi: Restrict efivar_ssdt_load when the kernel is locked down (Matthew Garrett)  [Orabug: 31643407]  {CVE-2019-20908} 
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 30647041]  
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631530]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31644908]  
  - Revert "mm/vmscan.c: prevent useless kswapd loops" (John Donnelly)  [Orabug: 31625172]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.6.el7uek]
changelog:
  - kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694368]  
  - iommu/amd: Fix incorrect PASID decoding from event log (Suthikulpanit, Suravee)  [Orabug: 31693603]  
  - misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677098]  
  - bnxt_en: fix NULL dereference in case SR-IOV configuration fails (Davide Caratti)  [Orabug: 31600665]  
  - bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: clean up VLAN feature bit handling (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add logical RSS indirection table structure. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Set up the chip specific RSS table size. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Store the running firmware version code. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: fix firmware message length endianness (Michael Chan)  [Orabug: 31600665]  
  - net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan)  [Orabug: 31600665]  
  - bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi)  [Orabug: 31600665]  
  - bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Refactor the software ring counters. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return error when allocating zero size context memory. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Free context memory after disabling PCI in probe error path. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Support UDP RSS hashing on 575XX chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Remove the setting of dev_port. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Improve link up detection. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix NTUPLE firmware command failures. (Michael Chan)  [Orabug: 31600665]  
  - bnxt: apply computed clamp value for coalece parameter (Jonathan Lemon)  [Orabug: 31600665]  
  - bnxt_en: Fix MSIX request logic for RDMA driver. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Allow PHY settings on multi-function or NPAR PFs if allowed by FW. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add async. event logic for PHY configuration changes. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Refactor the initialization of the ethtool link settings. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Skip disabling autoneg before PHY loopback when appropriate. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Assign more RSS context resources to the VFs. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Initialize context memory to the value specified by firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix suspend/resume path on 57500 chips (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Send FUNC_RESOURCE_QCAPS command in bnxt_resume() (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Combine 2 functions calling the same HWRM_DRV_RGTR fw command. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do driver unregister cleanup in bnxt_init_one() failure path. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Disable/enable Bus master during suspend/resume. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add chip IDs for 57452 and 57454 chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Improve RX buffer error handling. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware interface spec to 1.10.1.12. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Call bnxt_ulp_stop()/bnxt_ulp_start() during suspend/resume. (Pavan Chebbi)  [Orabug: 31600665]  
  - bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware interface spec. to 1.10.0.100. (Michael Chan)  [Orabug: 31600665]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.7.el7uek]
changelog:
  - Revert "bnxt_en: Remove the setting of dev_port." (Somasundaram Krishnasamy)  [Orabug: 31703319]  
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723448]  
  - x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31710910]  
  - Revert "net/mlx4_core: Add masking for a few queries on HCA caps" (Sharath Srinivasan)  [Orabug: 31620920]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648140]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648140]  
  - delayacct: fix crash in delayacct_blkio_end() after delayacct init failure (Tejun Heo)  [Orabug: 31516715]  
  - x86/speculation: Fix missing enumeration value warnings (Patrick Colp)  [Orabug: 30833548]  
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)  [Orabug: 31350644]  {CVE-2020-12771} 
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351557]  {CVE-2019-19074} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351570]  {CVE-2019-19073} 
  - KVM: nVMX: include conditional controls in /dev/kvm KVM_GET_MSRS (Paolo Bonzini)  [Orabug: 31699255]  
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31703346]  
  - net/rds: rds_ib_remove_one() should not call rds_ib_dev_free_dev() (Ka-Cheong Poon)  [Orabug: 31703346]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.8.el7uek]
changelog:
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737041]  
  - net/rds: rds_ib_remove_one() needs to wait (Ka-Cheong Poon)  [Orabug: 31777364]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784658]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784891]  
  - tcp: add sanity tests in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31780103]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.400.9.el7uek]
changelog:
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31867382]  {CVE-2019-18885} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31867387]  {CVE-2019-3874} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31867403]  {CVE-2020-10781} 
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31867441]  {CVE-2020-10767} 
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31867436]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31867436]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31867433]  {CVE-2020-16166} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31867431]  {CVE-2020-14331} {CVE-2020-14331} 
  - Reverts "rds: avoid unnecessary cong_update in loop transport" (Iraimani Pavadai)  [Orabug: 31867423]  
  - net/mlx5e: Poll event queue upon TX timeout before performing full channels recovery (Eran Ben Elisha)  [Orabug: 31867421]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31867418]  
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31867417]  {CVE-2020-24394} 
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31867413]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31867411]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.0.el7uek]
changelog:
  - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 31821490]  
  - Pensando: Enable iScsi in kernel config (Rob Gardner)  [Orabug: 31821490]  
  - sample-trace-array: Fix timer definition in samples/ftrace/sample-trace-array.c (Aruna Ramakrishna)  [Orabug: 31845460]  
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31621816]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31621816]  
  - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() (Christophe Leroy)  [Orabug: 29623005]  {CVE-2018-20669} 
  - x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() (Will Deacon)  [Orabug: 29623005]  {CVE-2018-20669} 
  - arch/openrisc: Fix issues with access_ok() (Stafford Horne)  [Orabug: 29623005]  {CVE-2018-20669} 
  - Fix 'acccess_ok()' on alpha and SH (Linus Torvalds)  [Orabug: 29623005]  {CVE-2018-20669} 
  - make 'user_access_begin()' do 'access_ok()' (Linus Torvalds)  [Orabug: 29623005]  {CVE-2018-20669} 
  - kabi fix for reparent slab memory on cgroup removal patchset (Tom Hromatka)  [Orabug: 31746022]  
  - mm/memcontrol.c: add missed css_put() (Muchun Song)  [Orabug: 31746022]  
  - mm: memcg/slab: reparent memcg kmem_caches on cgroup removal (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: stop setting page->mem_cgroup pointer for slab pages (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: rework non-root kmem_cache lifecycle management (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: don't check the dying flag on kmem_cache creation (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: unify SLAB and SLUB page accounting (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: introduce __memcg_kmem_uncharge_memcg() (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: generalize postponed non-root kmem_cache deactivation (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: rename slab delayed deactivation functions and fields (Roman Gushchin)  [Orabug: 31746022]  
  - mm: memcg/slab: postpone kmem_cache memcg pointer initialization to memcg_link_cache() (Roman Gushchin)  [Orabug: 31746022]  
  - mm: introduce mem_cgroup_put() helper (Roman Gushchin)  [Orabug: 31746022]  
  - mm/memcontrol.c: export mem_cgroup_is_root() (Kirill Tkhai)  [Orabug: 31746022]  
  - memcg: localize memcg_kmem_enabled() check (Shakeel Butt)  [Orabug: 31746022]  
  - mm: fix race between kmem_cache destroy, create and deactivate (Shakeel Butt)  [Orabug: 31746022]  
  - uek-rpm: Sync up aarch64 config files with latest Marvell patches (Dave Kleikamp)  [Orabug: 31838205]  
  - drivers: marvell: otx2-sdei-ghes: correct issues with crashdump kernel (Rick Farrington)  [Orabug: 31838205]  
  - drivers: mtd: spi-nor: Add MX66L2G45GXRI00 macronix flash (Selvam Venkatachalam)  [Orabug: 31838205]  
  - irqchip/gic-v3: Add workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 31838205]  
  - octeontx2-af: fix Extended DSA and eDSA parsing (Satha Rao)  [Orabug: 31838205]  
  - drivers: gicv3: Adds workaround for Marvell erratum 38545 (Bhaskara Budiredla)  [Orabug: 31838205]  
  - octeontx2-af: reset HWS group mask during FLR (Michal Mazur)  [Orabug: 31838205]  
  - drivers: marvell: otx2: sdei-ghes: add BERT support for RAS errors (Rick Farrington)  [Orabug: 31838205]  
  - ACPI: APEI: BERT: support BERT in non-ACPI systems (Rick Farrington)  [Orabug: 31838205]  
  - Documentation: dt: edac: update sdei-ghes/bed-bert settings (Rick Farrington)  [Orabug: 31838205]  
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31351744]  {CVE-2019-18885} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31351958]  {CVE-2019-3874} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31510723]  {CVE-2020-10781} 
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543030]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543030]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543030]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31543030]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543030]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543030]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543030]  
  - tracing: Kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543030]  
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31557803]  {CVE-2020-10767} 
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682037]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682037]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698082]  {CVE-2020-16166} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705119]  {CVE-2020-14331} {CVE-2020-14331} 
  - KVM: x86: take as_id into account when checking PGD (Vitaly Kuznetsov)  [Orabug: 31722725]  
  - KVM: X86: Fix MSR range of APIC registers in X2APIC mode (Xiaoyao Li)  [Orabug: 31722725]  
  - KVM: nVMX: Report NMIs as allowed when in L2 and Exit-on-NMI is set (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: nVMX: Remove non-functional "support" for CR3 target values (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: x86/mmu: Avoid an extra memslot lookup in try_async_pf() for L2 (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: x86: Adjust counter sample period after a wrmsr (Eric Hankland)  [Orabug: 31722725]  
  - KVM: nVMX: Handle pending #DB when injecting INIT VM-exit (Oliver Upton)  [Orabug: 31722725]  
  - KVM: x86: Fix perfctr WRMSR for running counters (Eric Hankland)  [Orabug: 31722725]  
  - KVM: nVMX: Check GUEST_DR7 on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722725]  
  - perf/core: Provide a kernel-internal interface to recalibrate event period (Like Xu)  [Orabug: 31722725]  
  - KVM: VMX: Consume pending LAPIC INIT event when exit on INIT_SIGNAL (Liran Alon)  [Orabug: 31722725]  
  - KVM: nVMX: cleanup and fix host 64-bit mode checks (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: nVMX: Check Host Address Space Size on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel (Wanpeng Li)  [Orabug: 31722725]  
  - KVM: x86: Fix INIT signal handling in various CPU states (Liran Alon)  [Orabug: 31722725]  
  - KVM: VMX: Introduce exit reason for receiving INIT signal on guest-mode (Liran Alon)  [Orabug: 31722725]  
  - KVM: nVMX: add tracepoint for failed nested VM-Enter (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or GS (Liran Alon)  [Orabug: 31722725]  
  - kvm: LAPIC: write down valid APIC registers (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: LAPIC: ARBPRI is a reserved register for x2APIC (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM nVMX: Check Host Segment Registers and Descriptor Tables on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM/nVMX: Use kvm_vcpu_map for accessing the shadow VMCS (KarimAllah Ahmed)  [Orabug: 31722725]  
  - KVM/nVMX: Use kvm_vcpu_map when mapping the virtual APIC page (KarimAllah Ahmed)  [Orabug: 31722725]  
  - KVM: nVMX: Return -EINVAL when signaling failure in VM-Entry helpers (Sean Christopherson)  [Orabug: 31722725]  
  - KVM: nVMX: Move guest non-reg state checks to VM-Exit path (Sean Christopherson)  [Orabug: 31722725]  
  - kvm: nVMX: Check "load IA32_PAT" VM-entry control on vmentry (Krish Sadhukhan)  [Orabug: 31722725]  
  - kvm: nVMX: Check "load IA32_PAT" VM-exit control on vmentry (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM: x86: optimize check for valid PAT value (Paolo Bonzini)  [Orabug: 31722725]  
  - KVM: nVMX: allow tests to use bad virtual-APIC page address (Paolo Bonzini)  [Orabug: 31722725]  
  - x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (Vitaly Kuznetsov)  [Orabug: 31722725]  
  - kvm: nVMX: Add a vmentry check for HOST_SYSENTER_ESP and HOST_SYSENTER_EIP fields (Krish Sadhukhan)  [Orabug: 31722725]  
  - KVM: nVMX: Apply addr size mask to effective address for VMX instructions (Sean Christopherson)  [Orabug: 31722725]  
  - Reverts "rds: avoid unnecessary cong_update in loop transport" (Iraimani Pavadai)  [Orabug: 31741323]  
  - net/mlx5e: Poll event queue upon TX timeout before performing full channels recovery (Eran Ben Elisha)  [Orabug: 31753101]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755754]  
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779886]  {CVE-2020-24394} 
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688621]  
  - uek-rpm: aarch64: build embedded kernel for Pensando (Dave Kleikamp)  [Orabug: 31627078]  
  - Make low-speed APB bus accesses single threaded (Dave Kleikamp)  [Orabug: 31627078]  
  - Add /dev/capmem driver for Pensando (David Clear)  [Orabug: 31627078]  
  - Kconfig option to disable outer-cache-allocate for Pensando (David Clear)  [Orabug: 31627078]  
  - Provide for precise control of pgprot for Pensando (David Clear)  [Orabug: 31627078]  
  - Add Pensando Capri board .dts files and default configs (David Clear)  [Orabug: 31627078]  
  - Add /proc/xmaps (David Clear)  [Orabug: 31627078]  
  - mtd/spi-nor/cadence-quadspi.c: Speed up reads. (David Clear)  [Orabug: 31627078]  
  - Add mnic nodes to the Pensando devicetree (David Clear)  [Orabug: 31627078]  
  - Pensando Boot State Machine (BSM) integration. (David Clear)  [Orabug: 31627078]  
  - Pensando crash dump driver (David Clear)  [Orabug: 31627078]  
  - Pensando/Capri PCIE panic handler. (David Clear)  [Orabug: 31627078]  
  - Add uio support for Capri PCIE and Link interrupts (David Clear)  [Orabug: 31627078]  
  - Interrupt domain controllers for Capri ASIC. (David Clear)  [Orabug: 31627078]  
  - Capri SPI driver (David Clear)  [Orabug: 31627078]  
  - Add Capri EMMC phy and instantiate the driver in the dts (David Clear)  [Orabug: 31627078]  
  - Initial Pensando Capri SoC declaration (David Clear)  [Orabug: 31627078]  
  - New quirk for Pensando QSPI controller (David Clear)  [Orabug: 31627078]  
  - Add pensando,cpld device tree compat entry (David Clear)  [Orabug: 31627078]  
  - add support for NXP PCF85363/PCF85263 real-time clock (David Clear)  [Orabug: 31627078]  
  - Support the reset pulse width from the device-tree. (David Clear)  [Orabug: 31627078]  
  - Attempt to recover from a stuck SDA line (David Clear)  [Orabug: 31627078]  
  - Add driver for the TI TPS53659 (David Clear)  [Orabug: 31627078]  
  - support spi-rx-bus-width property on subnodes (David Clear)  [Orabug: 31627078]  
  - Support for SPI_NOR_DUAL_READ on Micron (David Clear)  [Orabug: 31627078]  
  - mtd: spi-nor: cadence-quadspi: fix spelling mistake: "Couldnt't" -> "Couldn't" (Colin Ian King)  [Orabug: 31627078]  
  - mtd: spi-nor: cadence-quadspi: Add support for Octal SPI controller (Vignesh R)  [Orabug: 31627078]  
  - mtd: spi-nor: Add Micron MT25QU02 support (Thor Thayer)  [Orabug: 31627078]  
  - arm64: tlb: Ensure we execute an ISB following walk cache invalidation (Will Deacon)  [Orabug: 31627078]  
  - arm64: mm: Add ISB instruction to set_pgd() (Will Deacon)  [Orabug: 31627078]  
  - mtd: spi-nor: Allow Cadence QSPI support for ARM64 (Thor Thayer)  [Orabug: 31627078]  
  - irqchip/gic-v3: Add workaround for Synquacer pre-ITS (Ard Biesheuvel)  [Orabug: 31627078]  
  - irqchip/gic: Make quirks matching conditional on init return value (Ard Biesheuvel)  [Orabug: 31627078]  
  - irqchip/gic-v3: Probe device ID space before quirks handling (Ard Biesheuvel)  [Orabug: 31627078]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783149]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.1.el7uek]
changelog:
  - PCI: Probe bridge window attributes once at enumeration-time (Bjorn Helgaas)  [Orabug: 31867576]  
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866489]  {CVE-2020-14386} {CVE-2020-14386} 
  - scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31860034]  
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850343]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850343]  
  - block: print offending values when cloned rq limits are exceeded (John Pittman)  [Orabug: 31850343]  
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849532]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.2.el7uek]
changelog:
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884238]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884165]  {CVE-2020-25284} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872904]  {CVE-2020-25212} 
  - IB/mlx5: Fix MR registration flow to use UMR properly (Guy Levi)  [Orabug: 31631231]  
  - IB/mlx5: Prevent concurrent MR updates during invalidation (Moni Shoua)  [Orabug: 31631231]  
  - IB/mlx5: Replace kfree with kvfree (Chuhong Yuan)  [Orabug: 31631231]  
  - RDMA/odp: Do not leak dma maps when working with huge pages (Jason Gunthorpe)  [Orabug: 31631231]  
  - IB/mlx5: Respect new UMR capabilities (Majd Dibbiny)  [Orabug: 31631231]  
  - RDMA/mlx5: Unify error flows in rereg MR failure paths (Leon Romanovsky)  [Orabug: 31631231]  
  - IB/mlx5: Maintain a single emergency page (Ilya Lesokhin)  [Orabug: 31631231]  
  - genirq/irqdomain: Make sure all irq domain flags are distinct (Zenghui Yu)  [Orabug: 31885236]  
  - irq/msi: Direct update affinity if irq is for msix or, maskable (Joe Jin)  [Orabug: 31885236]  
  - x86/apic/msi: Plug non-maskable MSI affinity race (Joe Jin)  [Orabug: 31885236]  
  - mm: memcg: Optimize cgroup traversal in memory.stat read (Tom Hromatka)  [Orabug: 31849182]  
  - SUNRPC: Fix disconnection races (Trond Myklebust)  [Orabug: 31796863]  
  - SUNRPC: Add a helper to wake up a sleeping rpc_task and set its status (Trond Myklebust)  [Orabug: 31796863]  
  - dmaengine: ioatdma: Add Snow Ridge ioatdma device id (Dave Jiang)  [Orabug: 31669166]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.401.3.el7uek]
changelog:
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931371]  
  - oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31901948]  
  - net: Correct warning: label 'drop' defined but not used. (John Donnelly)  [Orabug: 31916130]  
  - KVM: Corrects build warnings for emulator_get_fpu/emulator_put_fpu (John Donnelly)  [Orabug: 31907286]  
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895330]  {CVE-2020-14314} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880143]  
  - bpf: Fix bpf_event_output re-entry issue (Allan Zhang)  [Orabug: 31865842]  
  - bpf: fix nested bpf tracepoints with per-cpu data (Matt Mullins)  [Orabug: 31865842]  
  - uek-rpm: Turn on module signing for embedded2 kernel (Dave Kleikamp)  [Orabug: 31895264]  
  - uek-rpm: Clean up config-aarch64-embedded2 (Dave Kleikamp)  [Orabug: 31895264]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.0.el7uek]
changelog:
  - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31351789]  {CVE-2019-16089} 
  - efi/x86/Add missing error handling to old_memmap 1:1 mapping code (Gen Zhang)  [Orabug: 31351924]  {CVE-2019-12380} 
  - RDS: add module parameter to allow module unload or not (Hans Westgaard Ry)  [Orabug: 31503865]  
  - rds: Revert "Disable module unload by default" (Hans Westgaard Ry)  [Orabug: 31503865]  
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31521372]  
  - EDAC/i10nm: Update driver to support different bus number config register offsets (Qiuxu Zhuo)  [Orabug: 31645136]  
  - EDAC, {skx,i10nm}: Make some configurations CPU model specific (Qiuxu Zhuo)  [Orabug: 31645136]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31682346]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722765]  
  - KVM: x86: Manually flush collapsible SPTEs only when toggling flags (Sean Christopherson)  [Orabug: 31722765]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722765]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722765]  
  - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)  [Orabug: 31779798]  {CVE-2020-14356} 
  - bpf: ensure helper ids match between UEK5, UEK6 and upstream (Alan Maguire)  [Orabug: 31860453]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872862]  {CVE-2020-25211} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914690]  {CVE-2020-14390} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914690]  {CVE-2020-14390} 
  - KVM: nVMX: do not use dangling shadow VMCS after guest reset (Paolo Bonzini)  [Orabug: 31941096]  
  - Revert "usb: xhci: do not create and register shared_hcd when USB3.0 is disabled" (Thomas Tai)  [Orabug: 31943628]  
  - uek-rpm: Use oracle-armset-1 to build uekemb2 (Dave Kleikamp)  [Orabug: 31950869]  
  - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955141]  {CVE-2020-25641} 
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979628]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.1.el7uek]
changelog:
  - configfs: make ci_type field, some pointers and function arguments const (Bhumika Goyal)  [Orabug: 32022427]  
  - IB/ipoib: Arm "send_cq" to process completions in due time (Gerd Rausch)  [Orabug: 31596798]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989189]  {CVE-2020-25643} 
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010303]  
  - SUNRPC: Remove xprt_connect_status() again (John Donnelly)  [Orabug: 32010341]  
  - geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32014099]  {CVE-2020-25645} 
  - nvme-fc: fix double-free scenarios on hw queues (James Smart)  [Orabug: 32019898]  
  - xfs: fix warning: unused variable 'sb' (John Donnelly)  [Orabug: 32010343]  
  - nvme-pci: remove queue_count_ops for write_queues and poll_queues (Minwoo Im)  [Orabug: 32010357]  
  - nvme: Corrects warning: unused variable 'startka' (John Donnelly)  [Orabug: 32010357]  
  - uek-rpm: config-aarch64-embedded add fast_kexec (Henry Willard)  [Orabug: 32010273]  
  - arm64: kexec: Add optional fast shutdown for kexec (Henry Willard)  [Orabug: 32010273]  
  - ocfs2: remove unused ocfs2_prepare_inode_for_refcount() (John Donnelly)  [Orabug: 32007790]  
  - rds: fixes warning: unused variable 'cache_sz_k' (John Donnelly)  [Orabug: 32008320]  
  - panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 32009003]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961118]  
  - certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961118]  
  - certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961118]  
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961118]  {CVE-2020-26541} 
  - Revert "l2tp: initialise PPP sessions before registering them" (George Kennedy)  [Orabug: 31906205]  
  - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265337]  {CVE-2019-19377} {CVE-2019-19377} {CVE-2019-19377} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 31351023]  {CVE-2019-19448} {CVE-2019-19448} 
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895824]  {CVE-2020-14385} 
  - net: add high_order_alloc_disable sysctl (Eric Dumazet)  [Orabug: 31907603]  
  - mm, page_alloc: double zone's batchsize (Aaron Lu)  [Orabug: 31907603]  
  - mm/free_pcppages_bulk: prefetch buddy while not holding lock (Aaron Lu)  [Orabug: 31907603]  
  - mm/free_pcppages_bulk: do not hold lock when picking pages to free (Aaron Lu)  [Orabug: 31907603]  
  - ghes: Corrects: warning: unused variable 'vaddr' [-Wunused-variable] (John Donnelly)  [Orabug: 31995830]  
  - ACPI: properties: Implement get_match_data() callback (Sinan Kaya)  [Orabug: 31995830]  
  - blk-mq: warning: unused variable 'ctx' (John Donnelly)  [Orabug: 31996284]  
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999336]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.2.el7uek]
changelog:
  - ocfs2: fix remounting needed after setfacl command (Gang He)   
  - Fix multiple variable definition with syzkaller (Hans Westgaard Ry)  [Orabug: 32008770]  
  - drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses (Thomas Hellstrom)  [Orabug: 32010349]  
  - i40e: Corrects i40e_setup_tc and i40e_xdp defined but not used warnings (John Donnelly)  [Orabug: 32034050]  
  - bnxt: Corrects warning: 'struct tc_cls_flower_offload' (John Donnelly)  [Orabug: 32041757]  
  - SCSI: Corrects 'ret' not used warning (John Donnelly)  [Orabug: 32041763]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042520]  
  - qed: Corrects warning: 'qed_iwarp_ll2_slowpath' defined but not used (John Donnelly)  [Orabug: 32052276]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.402.2.1.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040805]  {CVE-2020-8694} {CVE-2020-8695}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.0.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32138487]  {CVE-2020-8694} {CVE-2020-8695} 
  - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Filipe Manana)  [Orabug: 31864726]  
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864726]  
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864726]  {CVE-2019-19816} 
  - x86/apic: Get rid of multi CPU affinity (Thomas Gleixner)  [Orabug: 31975320]  
  - hv_netvsc: Set probe mode to sync (Haiyang Zhang)  [Orabug: 32132413]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113843]  
  - perf symbols: Check if we read regular file in dso__load() (Jiri Olsa)  [Orabug: 30696035]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 31990095]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 32003081]  
  - dm cache: remove all obsolete writethrough-specific code (Mike Snitzer)  [Orabug: 32010352]  
  - dm cache: pass cache structure to mode functions (Mike Snitzer)  [Orabug: 32010352]  
  - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Ming Lei)  [Orabug: 32010352]  
  - bcache: allocate meta data pages as compound pages (Coly Li)  [Orabug: 32010352]  
  - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (ChangSyun Peng)  [Orabug: 32010352]  
  - bcache: fix super block seq numbers comparision in register_cache_set() (Coly Li)  [Orabug: 32010352]  
  - md-cluster: fix wild pointer of unlock_all_bitmaps() (Zhao Heming)  [Orabug: 32010352]  
  - dm: use noio when sending kobject event (Mikulas Patocka)  [Orabug: 32010352]  
  - dm zoned: assign max_io_len correctly (Hou Tao)  [Orabug: 32010352]  
  - md: add feature flag MD_FEATURE_RAID0_LAYOUT (NeilBrown)  [Orabug: 32010352]  
  - dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone (Hannes Reinecke)  [Orabug: 32010352]  
  - dm mpath: switch paths in dm_blk_ioctl() code path (Martin Wilck)  [Orabug: 32010352]  
  - dm crypt: avoid truncating the logical block size (Eric Biggers)  [Orabug: 32010352]  
  - md: don't flush workqueue unconditionally in md_open (Guoqing Jiang)  [Orabug: 32010352]  
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32010658]  
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32010658]  
  - jiffies: add utility function to calculate delta in ms (Matteo Croce)  [Orabug: 32010658]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32014809]  
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021288]  {CVE-2020-12352} 
  - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context (WANG Chao)  [Orabug: 32021855]  
  - arm64: Corrects warning: ISO C90 forbids mixed declarations and code (John Donnelly)  [Orabug: 32040061]  
  - hwrng: cavium: Corrects warning: unused variable 'dev_id' (John Donnelly)  [Orabug: 32040066]  
  - Lock down /proc/kcore (redux!) (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - lockdown: Lock down perf when in confidentiality mode (David Howells)  [Orabug: 32053127]  
  - Lock down kprobes (redux!) (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - debugfs: whitelist spectre mitigation when locked down (Eric Snowberg)  [Orabug: 32053127]  
  - debugfs: Return -EPERM when locked down (Eric Snowberg)  [Orabug: 32053127]  
  - debugfs: Restrict debugfs when the kernel is locked down (David Howells)  [Orabug: 32053127]  
  - lockdown: Add __kernel_is_confidentiality_mode to figure out whether .. (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - dtrace: Restrict access when the kernel is locked down in confidentiality mode (Konrad Rzeszutek Wilk)  [Orabug: 32053127]  
  - bpf: Restrict bpf when kernel lockdown is in confidentiality mode (David Howells)  [Orabug: 32053127]  
  - security: Add a static lockdown policy LSM [diet-version] (Matthew Garrett)  [Orabug: 32053127]  
  - net/rds: Check for NULL rid_dev_rem_complete (Ka-Cheong Poon)  [Orabug: 32058618]  
  - scsi: Corrects warning: passing argument 1 of 'wwn_to_u64' mismatch (John Donnelly)  [Orabug: 32059622]  
  - ipvlan: Corrects warning: label 'unregister_netdev' defined but not used (John Donnelly)  [Orabug: 32059740]  
  - mm, compaction: raise compaction priority after it withdrawns (Vlastimil Babka)  [Orabug: 32065218]  
  - mm, reclaim: cleanup should_continue_reclaim() (Vlastimil Babka)  [Orabug: 32065218]  
  - mm, reclaim: make should_continue_reclaim perform dryrun detection (Hillf Danton)  [Orabug: 32065218]  
  - KVM: Drop "const" attribute from old memslot in commit_memory_region() (Sean Christopherson)  [Orabug: 32068898]  
  - octeontx2-pf: Return proper RSS indirection table size always (Sunil Goutham)  [Orabug: 32095651]  
  - octeontx2-af: Free RVU REE irq properly (Smadar Fuks)  [Orabug: 32095651]  
  - octeontx2-af: Free RVU NIX IRQs properly. (Rakesh Babu)  [Orabug: 32095651]  
  - octeontx2-af: Fix the BPID mask (Subbaraya Sundeep)  [Orabug: 32095651]  
  - octeontx2-pf: Fix receive buffer size calculation (Sunil Goutham)  [Orabug: 32095651]  
  - octeontx2-af: Fix updating wrong multicast list index in NIX_RX_ACTION (Naveen Mamindlapalli)  [Orabug: 32095651]  
  - octeontx2-af: Ratelimit prints from AF error interrupt handlers (Naveen Mamindlapalli)  [Orabug: 32095651]  
  - octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 32095651]  
  - octeontx2-af: Check the msix offset return value (Subbaraya Sundeep)  [Orabug: 32095651]  
  - octeontx2-af: make tx nibble fixup is always apply (Stanislaw Kardach)  [Orabug: 32095651]  
  - octeontx2-af: Stop kpu parsing at layer3 for ipv6 fragmented packets. (Abhijit Ayarekar)  [Orabug: 32095651]  
  - octeontx2-pf: Call mbox_reset before incrementing ack (Hariprasad Kelam)  [Orabug: 32095651]  
  - octeontx2-af: Simplify otx2_mbox_reset call (Hariprasad Kelam)  [Orabug: 32095651]  
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095768]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095962]  
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113532]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.1.el7uek]
changelog:
  - lockdown: By default run in integrity mode. (Konrad Rzeszutek Wilk)  [Orabug: 32131561]  
  - Revert "iomap: Fix pipe page leakage during splicing" (George Kennedy)  [Orabug: 32136519]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32138016]  
  - Revert "pci: hardcode enumeration" (Dave Aldridge)  [Orabug: 32152249]  
  - hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152144]  
  - hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152144]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.2.el7uek]
changelog:
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122729]  {CVE-2020-25668} 
  - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122952]  {CVE-2020-25656} {CVE-2020-25656} 
  - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122952]  {CVE-2020-25656} 
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131175]  {CVE-2020-25704} 
  - perf/core: Fix bad use of igrab() (Song Liu)  [Orabug: 32131175]  {CVE-2020-25704} 
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136898]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136898]  
  - xen/gntdev: fix up blockable calls to mn_invl_range_start (Michal Hocko)  [Orabug: 32139244]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.3.el7uek]
changelog:
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005117]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005117]  
  - lib/scatterlist: Add SG_CHAIN and SG_END macros for LSB encodings (Anshuman Khandual)  [Orabug: 32005117]  
  - lib/scatterlist: Avoid potential scatterlist entry overflow (Tvrtko Ursulin)  [Orabug: 32005117]  
  - lib/scatterlist: Fix offset type in sg_alloc_table_from_pages (Tvrtko Ursulin)  [Orabug: 32005117]  
  - uek-rpm: Don't build emb2 kernel for mips (Dave Kleikamp)  [Orabug: 32176889]  
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187748]  {CVE-2020-28974} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32201999]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177538]  {CVE-2020-27673} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177548]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.4.el7uek]
changelog:
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227961]  {CVE-2020-25705} 
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159055]  
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159975]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159975]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176263]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176263]  {CVE-2020-28915} 
  - block: Fix use-after-free in blkdev_get() (Jason Yan)  [Orabug: 32194608]  {CVE-2020-15436} 
  - serial: 8250: fix null-ptr-deref in serial8250_start_tx() (Yang Yingliang)  [Orabug: 32194712]  {CVE-2020-15437} 
  - staging: rts5208: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218496]  
  - misc: rtsx: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218496]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.403.5.el7uek]
changelog:
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210463]  
  - mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() (Andrea Arcangeli)  [Orabug: 32212583]  {CVE-2020-29368} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233358]  {CVE-2020-14351}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.404.0.el7uek]
changelog:
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32201584]  
  - vhost/scsi: Use copy_to_iter() to send control queue response (Bijan Mottahedeh)  [Orabug: 32201584]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32201584]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32201584]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32201584]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.404.1.el7uek]
changelog:
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253412]  {CVE-2020-29568} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260256]  {CVE-2020-29569}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.405.0.el7uek]
changelog:
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251913]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266681]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266681]  {CVE-2020-29660} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337718]  
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349207]  {CVE-2020-36158} 
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355210]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2025.405.1.el7uek]
changelog:
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372162]  
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378208]  
  - sysctl: handle overflow in proc_get_long (Christian Brauner)  [Orabug: 32382641]  
  - net/mlx5: Use a single MSIX vector for all control EQs in VFs (Ariel Levkovich)  [Orabug: 31785275]  
  - net/mlx5: Fix available EQs FW used to reserve (Denis Drozdov)  [Orabug: 31785275]  
  - net/mlx5: Use max_num_eqs for calculation of required MSIX vectors (Denis Drozdov)  [Orabug: 31785275]  
  - net/mlx5: Expose DEVX specification (Yishai Hadas)  [Orabug: 31785275]  
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32245085]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248040]  {CVE-2020-28374}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2028.el7uek]
changelog:
  - psi: Fix double free (Tom Hromatka)  [Orabug: 31595120]  
  - tools/power turbostat: Support Ice Lake server (Thomas Tai)  [Orabug: 31543222]  
  - uek-rpm: config updates for SDK-10.3.3.0-PR6 kernel patches (Dave Kleikamp)  [Orabug: 31590716]  
  - uek-rpm: Update aarch64 UEK5 config files with "make olddefconfig" (Dave Kleikamp)  [Orabug: 31590716]  
  - octeontx2-af: Add CUSTOM0 to flow keyx algo (Kiran Kumar K)  [Orabug: 31590716]  
  - octeontx2-pf: Stop tx queues in case of subsequent calls failure (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Increase mbox response timeout to 3 seconds (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Fix nix_inline_ipsec_cfg mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Update CPT_LF_ALLOC mbox (Srujana Challa)  [Orabug: 31590716]  
  - drivers: cpt - remove notify_group_change (Srujana Challa)  [Orabug: 31590716]  
  - octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla)  [Orabug: 31590716]  
  - octeontx2-af: Do not change maximum NPC interfaces (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Calculate LBK link correctly (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Display NIX1 also in debugfs (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Add NIX1 interfaces to NPC (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Get block address from slot number (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Mbox changes for 98xx (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Assign NIX block addresses (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Add new REE blocks to AF (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2: gti: Fix task stack pointer corruption (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-af: Fix cpt_rd_wr_register mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Fix TCP/UDP checksum offload for IPv6 pkts (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-pf: Add ntuple filter support for FDSA (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Add flow steering support for FDSA tag (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla)  [Orabug: 31590716]  
  - octeontx2: gti: restore gpr x29 for kernel context (Bharat Bhushan)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: Add 95MM LOKI 98xx in supported SUBSID (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: Use rcvd_present instead of MIDR check (Suneel Garapati)  [Orabug: 31590716]  
  - octeontx2: gti: fix return to ATF after handling nmi (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-af: Fix MSIX handler mailbox (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Setup MCE context for assigned NIX (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Map NIX block from CGX connection (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Return assigned NIX/CPT block address (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Initialize NIX1 block (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Add support for NIX1, CPT1 and NDC_NIX1 (Rakesh Babu)  [Orabug: 31590716]  
  - octeontx2-af: Update get_rsrc_map for new blocks (Subbaraya Sundeep)  [Orabug: 31590716]  
  - drivers: marvell: otx2-sdei-ghes: Set GHES block_status correctly. (Rick Farrington)  [Orabug: 31590716]  
  - drivers: marvell: otx2-sdei-ghes: Add misc documentation. (Rick Farrington)  [Orabug: 31590716]  
  - crypto: cpt - fixed build issue with cpt driver as module (Srujana Challa)  [Orabug: 31590716]  
  - arm64: enable workaround for Marvell erratum 37119 in Kconfig (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-rm: remove unused cpt_cur (Stefan Chulski)  [Orabug: 31590716]  
  - octeontx2-af: Reduce dependency on firmware command interface version (Linu Cherian)  [Orabug: 31590716]  
  - octeontx2-af: Synchronize mcam rule list ops (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Add XDP support to RVU PF driver (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Disable default NPC entries properly (Subbaraya Sundeep)  [Orabug: 31590716]  
  - crypto:cpt - get HW capabilities using LOAD_FVC op (SrujanaChalla)  [Orabug: 31590716]  
  - octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 31590716]  
  - gpio: thunderx: Configure pin function at probe (Michal Mazur)  [Orabug: 31590716]  
  - gpio: thunderx: avoid potential deadlock (Peter Swain)  [Orabug: 31590716]  
  - fs: pstore: ram: WriteBack cache before reset (Lukasz Majczak)  [Orabug: 31590716]  
  - crypto:cpt - rename ucode tarfile names as per cpt revision (SrujanaChalla)  [Orabug: 31590716]  
  - crypto: cpt - remove verification of PCI subsystem ID (SrujanaChalla)  [Orabug: 31590716]  
  - crypto:cpt - fixed DMA fault with kernel crypto tests (SrujanaChalla)  [Orabug: 31590716]  
  - crypto:cpt - fixed cleanup for inline IPsec RX LF cfg (SrujanaChalla)  [Orabug: 31590716]  
  - marvell/zip : OcteonTX and OcteonTX2 ZIP Virtual Function driver (Akash Saxena)  [Orabug: 31590716]  
  - pci: octeontx2: Limit config space writes errata workaround to older silicons (Sunil Goutham)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: Add fix for hw issue (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: use read after write for MPI_CFG (Suneel Garapati)  [Orabug: 31590716]  
  - drivers: spi: octeontx2: set tritx in config register (Suneel Garapati)  [Orabug: 31590716]  
  - spi-nor: Enable 4B opcodes for various flashes (Guo Yi)  [Orabug: 31590716]  
  - drivers: mtd: spi-nor: update 4B_OPCODES flag for n25q00 and mx66l1g45g (Suneel Garapati)  [Orabug: 31590716]  
  - octeontx2-af: add parser support for Forward DSA (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: wait for tx link idle for credits change (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: clear sw xoff before flush (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: enable tx shaping feature for 96xx C0 (Nithin Dabilpuram)  [Orabug: 31590716]  
  - octeontx2-af: Disable SMQ sticky mode to avoid NIX PSE deadlock (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Setup edge used for GPIO timing (Michal Mazur)  [Orabug: 31590716]  
  - octeontx2-af: Update NIX_TXSCHQ_CONFIG mbox to handle read request (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-pf: Fix memory double free in otx2_aura_pool_free (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-af: Update dmac field in vf vlan rule (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-pf: Remove unnecessary mbox request in unbind (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Simplify npc_set_pkind mbox handler (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: Reset HW config done to parse switch headers in FLR (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: modify default cpt limits (SrujanaChalla)  [Orabug: 31590716]  
  - octeontx2-af: Update tx parse nibble config (Hariprasad Kelam)  [Orabug: 31590716]  
  - octeontx2-af: fix compilation warning (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: add support for custom KPU entries (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: prepare for custom KPU profiles (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: fix memory leaks on probe failure (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: fix LD CUSTOM LTYPE aliasing (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-pf: Don't configure RSS context when interface is down (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Set SMQ MAXLEN to max hardware supported value (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: fix detection of IP layer (Michal Mazur)  [Orabug: 31590716]  
  - octeontx2-pf: Fix flow control support for LBK devices (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Implement cgx stat rst (Revital Regev)  [Orabug: 31590716]  
  - octeontx2-af: Allow to configure flow tag LSB byte as RSS adder (Jerin Jacob)  [Orabug: 31590716]  
  - octeontx2-af: fix missing blocks quota validation (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-af: Fix rvu_reg_poll() to poll reg atleast twice (Sunil Goutham)  [Orabug: 31590716]  
  - crypto: cpt - allow cpt_af_lfx_ctl2 register access to vf (Tejasree Kondoj)  [Orabug: 31590716]  
  - octeontx2-af: Cleanup nixlf and blkaddr retrieval logic (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Restore RSS and pause frame config settings (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Fix netdev watchdog timeout value (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-af: extend RSS supported offload types (Kiran Kumar K)  [Orabug: 31590716]  
  - octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Put CGX LMAC also in Higig2 mode (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Reset HW config for HIGIG/EDSA in driver unbind (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Remove multisegment RX_SG processing logic (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Allocate receive buffers of MTU size (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-af: Add support for VF VLAN configuration via PF (Naveen Mamindlapalli)  [Orabug: 31590716]  
  - octeontx2-pf: Do not set num_msgs in mbox header (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Use mutex for mbox locking (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: update vlan offload rule (hariprasad)  [Orabug: 31590716]  
  - octeontx2-af: Handle pfvf mac address changes (hariprasad)  [Orabug: 31590716]  
  - octeontx2-pf: Set default RR_QUANTUM for transmit scheduling levels (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Adjust pause frame time and interval (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Use likely and unlikely (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Process CQE_TX first and then CQE_RX (Sunil Goutham)  [Orabug: 31590716]  
  - octeontx2-pf: Discover NIX block address from RVUM (Subbaraya Sundeep)  [Orabug: 31590716]  
  - octeontx2-pf: Flush pending SQE on teardown (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-pf: Remove warning messages in fast path (Geetha sowjanya)  [Orabug: 31590716]  
  - octeontx2-af: Undo PTP NPC config in FLR (Harman Kalra)  [Orabug: 31590716]  
  - octeontx2-rm: remove CPT LF resource management (Vidya Velumuri)  [Orabug: 31590716]  
  - octeontx2-serdes: Add gserr and gserc eye display (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-serdes: Add CONFIG_OCTEONTX_SERDES (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-dpi: Add MRRS and MPS configuration to dpi driver. (Subrahmanyam Nilla)  [Orabug: 31590716]  
  - octeontx2: gti: Enable GTI wdog for non-VHE Linux (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-serdes: Check SVC UUID on module init (Tomasz Michalec)  [Orabug: 31590716]  
  - edac: octeontx2: RAS error-injection (Rick Farrington)  [Orabug: 31590716]  
  - drivers: marvell: octeontx2: add support for GHES (Rick Farrington)  [Orabug: 31590716]  
  - octeontx2-serdes: Implement PRBS command (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2-dpi: fix compilation warnings (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-rm: fix compilation warning (Stanislaw Kardach)  [Orabug: 31590716]  
  - octeontx2-serdes: Handle not implemented SMC (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2: PCI Console driver: fix initialization WARNing (Rick Farrington)  [Orabug: 31590716]  
  - octeontx2-serdes: Fix settings write return code (Tomasz Michalec)  [Orabug: 31590716]  
  - octeontx2: fixup PCI Remote Console driver shutdown function (Dave Aldridge)  [Orabug: 31590716]  
  - octeontx2: add OcteonTX2 PCI Console driver (Rick Farrington)  [Orabug: 31590716]  
  - Revert "octeontx2: add OcteonTX2 PCI Remote Console driver" (Dave Kleikamp)  [Orabug: 31590716]  
  - Revert "octeontx2: fixup PCI Remote Console driver shutdown function" (Dave Kleikamp)  [Orabug: 31590716]  
  - octeontx2: gti: Start wdog timer on online cpus (Bharat Bhushan)  [Orabug: 31590716]  
  - octeontx2-serdes: Add serdes diagnostic commands (Tomasz Michalec)  [Orabug: 31590716]  
  - proc: publish no of macs in octeontx_info node (Sujeet Baranwal)  [Orabug: 31590716]  
  - arm64: Disable UNMAP_KERNEL_AT_EL0 when enable GTI WDOG (Bharat Bhushan)  [Orabug: 31590716]  
  - arm64: Add workaround for Marvell erratum 37119 (Andrew Pinski)  [Orabug: 31590716]  
  - x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557901]  {CVE-2020-10768} 
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439669]  {CVE-2020-12888} 
  - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31526089]  
  - thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564727]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 31564727]  
  - dtrace: ensure that fatal signals trigger signal-handle probes (Kris Van Hees)  [Orabug: 31398827] [Orabug: 31562416]  
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515070]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515070]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515070]  
  - KVM: arm/arm64: Fixup the kvm_exit tracepoint (Christoffer Dall)  [Orabug: 31510089]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493186]  
  - tcp: implement coalescing on backlog queue (Eric Dumazet)  [Orabug: 31419400]  
  - tcp: drop dst in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31419400]  
  - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann)  [Orabug: 31419400]  
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351670]  {CVE-2019-19054} 
  - dtrace: recursion in dtrace_dynvar() can lead to out-of-stack crash (Kris Van Hees)  [Orabug: 31481801]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2031.el7uek]
changelog:
  - kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694368]  
  - iommu/amd: Fix incorrect PASID decoding from event log (Suthikulpanit, Suravee)  [Orabug: 31693603]  
  - misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677098]  
  - bnxt_en: fix NULL dereference in case SR-IOV configuration fails (Davide Caratti)  [Orabug: 31600665]  
  - bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: clean up VLAN feature bit handling (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add logical RSS indirection table structure. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Set up the chip specific RSS table size. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Store the running firmware version code. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: fix firmware message length endianness (Michael Chan)  [Orabug: 31600665]  
  - net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan)  [Orabug: 31600665]  
  - bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi)  [Orabug: 31600665]  
  - bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Refactor the software ring counters. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return error when allocating zero size context memory. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Free context memory after disabling PCI in probe error path. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Support UDP RSS hashing on 575XX chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Remove the setting of dev_port. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Improve link up detection. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix NTUPLE firmware command failures. (Michael Chan)  [Orabug: 31600665]  
  - bnxt: apply computed clamp value for coalece parameter (Jonathan Lemon)  [Orabug: 31600665]  
  - bnxt_en: Fix MSIX request logic for RDMA driver. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Allow PHY settings on multi-function or NPAR PFs if allowed by FW. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add async. event logic for PHY configuration changes. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Refactor the initialization of the ethtool link settings. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Skip disabling autoneg before PHY loopback when appropriate. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Assign more RSS context resources to the VFs. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Initialize context memory to the value specified by firmware. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Fix suspend/resume path on 57500 chips (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Send FUNC_RESOURCE_QCAPS command in bnxt_resume() (Vasundhara Volam)  [Orabug: 31600665]  
  - bnxt_en: Combine 2 functions calling the same HWRM_DRV_RGTR fw command. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Do driver unregister cleanup in bnxt_init_one() failure path. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Disable/enable Bus master during suspend/resume. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Add chip IDs for 57452 and 57454 chips. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Improve RX buffer error handling. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware interface spec to 1.10.1.12. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Call bnxt_ulp_stop()/bnxt_ulp_start() during suspend/resume. (Pavan Chebbi)  [Orabug: 31600665]  
  - bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence. (Michael Chan)  [Orabug: 31600665]  
  - bnxt_en: Update firmware interface spec. to 1.10.0.100. (Michael Chan)  [Orabug: 31600665]  
  - PCI: vmd: Filter resource type bits from shadow register (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add device id for VMD device 8086:9A0B (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Fix shadow offsets to reflect spec changes (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Fix config addressing when using bus offsets (Jon Derrick)  [Orabug: 31688061]  
  - PCI/VMD: Configure MPS settings before adding devices (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add an additional VMD device id to driver device id table (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Add offset to bus numbers if necessary (Jon Derrick)  [Orabug: 31688061]  
  - PCI: vmd: Assign membar addresses from shadow registers (Jon Derrick)  [Orabug: 31688061]  
  - PCI: Add Intel VMD devices to pci ids (Jon Derrick)  [Orabug: 31688061]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358098]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555616]  
  - net: dsa: Do not leave DSA master with NULL netdev_ops (Allen Pais)  [Orabug: 31658286]  
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 29251777]  
  - vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663630]  {CVE-2020-12888} {CVE-2020-12888} 
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648240]  
  - octeontx2-serdes: Fix compile error (Dave Kleikamp)  [Orabug: 31649691]  
  - uek-rpm: config updates for SDK-10.3.3.0-PR8 kernel patches (Dave Kleikamp)  [Orabug: 31649691]  
  - hwrng: cavium: Check health status while reading random data (Sunil Goutham)  [Orabug: 31649691]  
  - octeontx2-af: Debugfs entry to show mapping btw CGX, NIX and a PF. (Rakesh Babu)  [Orabug: 31649691]  
  - octeontx2-serdes: Fix prbs error reporting (Chandrakala Chavva)  [Orabug: 31649691]  
  - drivers:cpt - add support for CPT1 in VF driver (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Add support for CPT1 in debugfs (Srujana Challa)  [Orabug: 31649691]  
  - drivers: cpt - add support for microcode load on CPT1 (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Mbox changes for 98xx CPT block (Srujana Challa)  [Orabug: 31649691]  
  - octeontx2-af: Fix REE error handling (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Update SDP AF driver to handle multiple SDP blocks (Radha Mohan Chintakuntla)  [Orabug: 31649691]  
  - soc: octeontx2: Add SDP PF driver (Radha Mohan Chintakuntla)  [Orabug: 31649691]  
  - octeontx2: marvell: Add driver support for LLC lock and unlock (Bhaskara Budiredla)  [Orabug: 31649691]  
  - octeontx2-af: fix DMAC filter table corruption (Sunil Kumar Kori)  [Orabug: 31649691]  
  - octeontx2-af: Add new Mbox messages and handlers for new REE blocks (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 31649691]  
  - octeontx2-af: Enable PF BCAST entry for packet replication (Subbaraya Sundeep)  [Orabug: 31649691]  
  - octeontx2-serdes: Update PRBS APIs to start/stop per QLM lane (Chandrakala Chavva)  [Orabug: 31649691]  
  - CIFS: dump IPC tcon in debug proc file (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: use tcon_ipc instead of use_ipc parameter of SMB2_ioctl (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: make IPC a regular tcon (Aurelien Aptel)  [Orabug: 31540174]  
  - CIFS: don't log STATUS_NOT_FOUND errors for DFS (Aurelien Aptel)  [Orabug: 31540174]  
  - efi: Restrict efivar_ssdt_load when the kernel is locked down (Matthew Garrett)  [Orabug: 31643407]  {CVE-2019-20908} 
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 30647041]  
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631530]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31644908]  
  - Revert "mm/vmscan.c: prevent useless kswapd loops" (John Donnelly)  [Orabug: 31625172]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480604]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480604]  
  - dm cache: submit writethrough writes in parallel to origin and cache (Mike Snitzer)  [Orabug: 31397438]  
  - nvme: Assign subsys instance from first ctrl (Keith Busch)  [Orabug: 31315361]  
  - kvm/vmx: Add dy_apicv_has_pending_interrupt op. (Boris Ostrovsky)  [Orabug: 31602225]  
  - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31606253]  
  - qla2xxx: Pick up missing hunk from original patch (Quinn Tran)  [Orabug: 31607567]  
  - byteorder: Move {cpu_to_be32, be32_to_cpu}_array() from Thunderbolt to core (Mika Westerberg)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter)  [Orabug: 31607567]  
  - scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove an unused function (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix regression warnings (Nilesh Javali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove non functional code (Daniel Wagner)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RDP respond data format (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: add more FW debug information (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez)  [Orabug: 31607567]  
  - scsi: qla2xxx: fix FW resource count values (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RDP response size (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix fw options handle eh_bus_reset() (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use correct number of vectors for online CPUs (Ming Lei)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stalled relogin (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix kernel crash due to late workqueue allocation (himanshu.madhani@cavium.com)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix issue with adapter's stopping state (Viacheslav Dubeyko)  [Orabug: 31607567]  
  - scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne)  [Orabug: 31607567]  
  - scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck)  [Orabug: 31607567]  
  - scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck)  [Orabug: 31607567]  
  - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use get_unaligned_*() instead of open-coding these functions (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Improve readability of the code that handles qla_flt_header (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix RIDA Format-2 (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Consolidate fabric scan (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Correct fcport flags handling (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix stuck login session using prli_pend_timer (Quinn Tran)  [Orabug: 31607567]  
  - qla2xxx: Update driver version to 10.01.00.22.81.1-k (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use common routine to free fcport struct (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs (Joe Carnuccio)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix update_fcport for current_topology (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Cleanup unused async_logout_done (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport (Shyam Sundar)  [Orabug: 31607567]  
  - scsi: qla2xxx: Add debug dump of LOGO payload and ELS IOCB (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Allow PLOGI in target mode (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Don't defer relogin unconditonally (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Send Notify ACK after N2N PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Configure local loop for N2N target (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Use explicit LOGO in target mode (Quinn Tran)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change discovery state before PLOGI (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Initialize free_work before flushing it (Roman Bolshakov)  [Orabug: 31607567]  
  - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd (Roman Bolshakov)  [Orabug: 31607567]  
  - Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails" (Martin K. Petersen)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix memory leak when sending I/O fails (Arun Easi)  [Orabug: 31607567]  
  - scsi: qla2xxx: Modify NVMe include directives (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Reduce the scope of three local variables in qla2xxx_queuecommand() (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Change a stack variable into a static const variable (Bart Van Assche)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix NULL pointer crash due to stale CPUID (Himanshu Madhani)  [Orabug: 31607567]  
  - scsi: qla2xxx: Fix panic from use after free in qla2x00_async_tm_cmd (Bill Kuzeja)  [Orabug: 31607567]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2034.el7uek]
changelog:
  - bpf: add a test case to test single tp multiple bpf attachment (Yonghong Song)  [Orabug: 31667601]  
  - bpf: permit multiple bpf attachments for a single perf event (Yonghong Song)  [Orabug: 31667601]  
  - bpf: use the same condition in perf event set/free bpf handler (Yonghong Song)  [Orabug: 31667601]  
  - bpf: allow access to skb->len from offloads (Jakub Kicinski)  [Orabug: 31667601]  
  - bpf: move knowledge about post-translation offsets out of verifier (Jakub Kicinski)  [Orabug: 31667601]  
  - bpf: remove the verifier ops from program structure (Alan Maguire)  [Orabug: 31667601]  
  - bpf: split verifier and program ops (Jakub Kicinski)  [Orabug: 31667601]  
  - bpf: verifier: set reg_type on context accesses in second pass (Jakub Kicinski)  [Orabug: 31667601]  
  - libbpf: sync bpf.h (Alexei Starovoitov)  [Orabug: 31667601]  
  - bpf: introduce BPF_PROG_QUERY command (Alexei Starovoitov)  [Orabug: 31667601]  
  - bpf: multi program support for cgroup+bpf (Alexei Starovoitov)  [Orabug: 31667601]  
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779885]  {CVE-2020-24394} 
  - efi/x86/Add missing error handling to old_memmap 1:1 mapping code (Gen Zhang)  [Orabug: 31765890]  {CVE-2019-12380} 
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31764618]  {CVE-2019-18885} 
  - net/mlx5e: Poll event queue upon TX timeout before performing full channels recovery (Eran Ben Elisha)  [Orabug: 31753100]  
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31753070]  {CVE-2019-3874} 
  - mm/page_alloc: increase default min_free_kbytes bound (Joel Savitz)  [Orabug: 31735858]  
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31726827]  {CVE-2020-10781} 
  - KVM: x86: take as_id into account when checking PGD (Vitaly Kuznetsov)  [Orabug: 31722724]  
  - KVM: X86: Fix MSR range of APIC registers in X2APIC mode (Xiaoyao Li)  [Orabug: 31722724]  
  - KVM: nVMX: Report NMIs as allowed when in L2 and Exit-on-NMI is set (Sean Christopherson)  [Orabug: 31722724]  
  - KVM: nVMX: Remove non-functional "support" for CR3 target values (Sean Christopherson)  [Orabug: 31722724]  
  - KVM: x86/mmu: Avoid an extra memslot lookup in try_async_pf() for L2 (Paolo Bonzini)  [Orabug: 31722724]  
  - KVM: x86: Adjust counter sample period after a wrmsr (Eric Hankland)  [Orabug: 31722724]  
  - KVM: nVMX: Handle pending #DB when injecting INIT VM-exit (Oliver Upton)  [Orabug: 31722724]  
  - KVM: x86: Fix perfctr WRMSR for running counters (Eric Hankland)  [Orabug: 31722724]  
  - KVM: nVMX: Check GUEST_DR7 on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722724]  
  - perf/core: Provide a kernel-internal interface to recalibrate event period (Like Xu)  [Orabug: 31722724]  
  - KVM: VMX: Consume pending LAPIC INIT event when exit on INIT_SIGNAL (Liran Alon)  [Orabug: 31722724]  
  - KVM: nVMX: cleanup and fix host 64-bit mode checks (Paolo Bonzini)  [Orabug: 31722724]  
  - KVM: nVMX: Check Host Address Space Size on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722724]  
  - KVM: hyperv: Fix Direct Synthetic timers assert an interrupt w/o lapic_in_kernel (Wanpeng Li)  [Orabug: 31722724]  
  - KVM: x86: Fix INIT signal handling in various CPU states (Liran Alon)  [Orabug: 31722724]  
  - KVM: VMX: Introduce exit reason for receiving INIT signal on guest-mode (Liran Alon)  [Orabug: 31722724]  
  - KVM: nVMX: add tracepoint for failed nested VM-Enter (Sean Christopherson)  [Orabug: 31722724]  
  - KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or GS (Liran Alon)  [Orabug: 31722724]  
  - kvm: LAPIC: write down valid APIC registers (Paolo Bonzini)  [Orabug: 31722724]  
  - KVM: LAPIC: ARBPRI is a reserved register for x2APIC (Paolo Bonzini)  [Orabug: 31722724]  
  - KVM nVMX: Check Host Segment Registers and Descriptor Tables on vmentry of nested guests (Krish Sadhukhan)  [Orabug: 31722724]  
  - KVM/nVMX: Use kvm_vcpu_map for accessing the shadow VMCS (KarimAllah Ahmed)  [Orabug: 31722724]  
  - KVM/nVMX: Use kvm_vcpu_map when mapping the virtual APIC page (KarimAllah Ahmed)  [Orabug: 31722724]  
  - KVM: nVMX: Return -EINVAL when signaling failure in VM-Entry helpers (Sean Christopherson)  [Orabug: 31722724]  
  - KVM: nVMX: Move guest non-reg state checks to VM-Exit path (Sean Christopherson)  [Orabug: 31722724]  
  - kvm: nVMX: Check "load IA32_PAT" VM-entry control on vmentry (Krish Sadhukhan)  [Orabug: 31722724]  
  - kvm: nVMX: Check "load IA32_PAT" VM-exit control on vmentry (Krish Sadhukhan)  [Orabug: 31722724]  
  - KVM: x86: optimize check for valid PAT value (Paolo Bonzini)  [Orabug: 31722724]  
  - KVM: nVMX: allow tests to use bad virtual-APIC page address (Paolo Bonzini)  [Orabug: 31722724]  
  - x86/kvm/hyper-v: avoid spurious pending stimer on vCPU init (Vitaly Kuznetsov)  [Orabug: 31722724]  
  - kvm: nVMX: Add a vmentry check for HOST_SYSENTER_ESP and HOST_SYSENTER_EIP fields (Krish Sadhukhan)  [Orabug: 31722724]  
  - KVM: nVMX: Apply addr size mask to effective address for VMX instructions (Sean Christopherson)  [Orabug: 31722724]  
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31711412]  {CVE-2020-10767} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705118]  {CVE-2020-14331} {CVE-2020-14331} 
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698081]  {CVE-2020-16166} 
  - uek-rpm: aarch64: build embedded kernel for Pensando (Dave Kleikamp)  [Orabug: 31627088]  
  - Make low-speed APB bus accesses single threaded (Dave Kleikamp)  [Orabug: 31627088]  
  - Add /dev/capmem driver for Pensando (David Clear)  [Orabug: 31627088]  
  - Kconfig option to disable outer-cache-allocate for Pensando (David Clear)  [Orabug: 31627088]  
  - Provide for precise control of pgprot for Pensando (David Clear)  [Orabug: 31627088]  
  - Add Pensando Capri board .dts files and default configs (David Clear)  [Orabug: 31627088]  
  - Add /proc/xmaps (David Clear)  [Orabug: 31627088]  
  - mtd/spi-nor/cadence-quadspi.c: Speed up reads. (David Clear)  [Orabug: 31627088]  
  - Add mnic nodes to the Pensando devicetree (David Clear)  [Orabug: 31627088]  
  - Pensando Boot State Machine (BSM) integration. (David Clear)  [Orabug: 31627088]  
  - Pensando crash dump driver (David Clear)  [Orabug: 31627088]  
  - Pensando/Capri PCIE panic handler. (David Clear)  [Orabug: 31627088]  
  - Add uio support for Capri PCIE and Link interrupts (David Clear)  [Orabug: 31627088]  
  - Interrupt domain controllers for Capri ASIC. (David Clear)  [Orabug: 31627088]  
  - Capri SPI driver (David Clear)  [Orabug: 31627088]  
  - Add Capri EMMC phy and instantiate the driver in the dts (David Clear)  [Orabug: 31627088]  
  - Initial Pensando Capri SoC declaration (David Clear)  [Orabug: 31627088]  
  - New quirk for Pensando QSPI controller (David Clear)  [Orabug: 31627088]  
  - Add pensando,cpld device tree compat entry (David Clear)  [Orabug: 31627088]  
  - add support for NXP PCF85363/PCF85263 real-time clock (David Clear)  [Orabug: 31627088]  
  - Support the reset pulse width from the device-tree. (David Clear)  [Orabug: 31627088]  
  - Attempt to recover from a stuck SDA line (David Clear)  [Orabug: 31627088]  
  - Add driver for the TI TPS53659 (David Clear)  [Orabug: 31627088]  
  - support spi-rx-bus-width property on subnodes (David Clear)  [Orabug: 31627088]  
  - Support for SPI_NOR_DUAL_READ on Micron (David Clear)  [Orabug: 31627088]  
  - mtd: spi-nor: cadence-quadspi: fix spelling mistake: "Couldnt't" -> "Couldn't" (Colin Ian King)  [Orabug: 31627088]  
  - mtd: spi-nor: cadence-quadspi: Add support for Octal SPI controller (Vignesh R)  [Orabug: 31627088]  
  - mtd: spi-nor: Add Micron MT25QU02 support (Thor Thayer)  [Orabug: 31627088]  
  - arm64: tlb: Ensure we execute an ISB following walk cache invalidation (Will Deacon)  [Orabug: 31627088]  
  - arm64: mm: Add ISB instruction to set_pgd() (Will Deacon)  [Orabug: 31627088]  
  - mtd: spi-nor: Allow Cadence QSPI support for ARM64 (Thor Thayer)  [Orabug: 31627088]  
  - irqchip/gic-v3: Add workaround for Synquacer pre-ITS (Ard Biesheuvel)  [Orabug: 31627088]  
  - irqchip/gic: Make quirks matching conditional on init return value (Ard Biesheuvel)  [Orabug: 31627088]  
  - irqchip/gic-v3: Probe device ID space before quirks handling (Ard Biesheuvel)  [Orabug: 31627088]  
  - Reverts "rds: avoid unnecessary cong_update in loop transport" (Iraimani Pavadai)  [Orabug: 30740609]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755753]  
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737040]  
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31504415]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2035.el7uek]
changelog:
  - Revert "efi/x86/Add missing error handling to old_memmap 1:1 mapping code" (Dave Kleikamp)  [Orabug: 31815626]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783147]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784657]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682035]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682035]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784890]  
  - net/rds: rds_ib_remove_one() needs to wait (Ka-Cheong Poon)  [Orabug: 31794611]  
  - tcp: add sanity tests in tcp_add_backlog() (Eric Dumazet)  [Orabug: 31786543]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2036.el7uek]
changelog:
  - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 31848637]  
  - Pensando: Enable iScsi in kernel config (Rob Gardner)  [Orabug: 31848637]  
  - sample-trace-array: Fix timer definition in samples/ftrace/sample-trace-array.c (Aruna Ramakrishna)  [Orabug: 31845459]  
  - kabi fix for reparent slab memory on cgroup removal patchset (Tom Hromatka)  [Orabug: 31746021]  
  - mm/memcontrol.c: add missed css_put() (Muchun Song)  [Orabug: 31746021]  
  - mm: memcg/slab: reparent memcg kmem_caches on cgroup removal (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: stop setting page->mem_cgroup pointer for slab pages (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: rework non-root kmem_cache lifecycle management (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: don't check the dying flag on kmem_cache creation (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: unify SLAB and SLUB page accounting (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: introduce __memcg_kmem_uncharge_memcg() (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: generalize postponed non-root kmem_cache deactivation (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: rename slab delayed deactivation functions and fields (Roman Gushchin)  [Orabug: 31746021]  
  - mm: memcg/slab: postpone kmem_cache memcg pointer initialization to memcg_link_cache() (Roman Gushchin)  [Orabug: 31746021]  
  - mm: introduce mem_cgroup_put() helper (Roman Gushchin)  [Orabug: 31746021]  
  - mm/memcontrol.c: export mem_cgroup_is_root() (Kirill Tkhai)  [Orabug: 31746021]  
  - memcg: localize memcg_kmem_enabled() check (Shakeel Butt)  [Orabug: 31746021]  
  - mm: fix race between kmem_cache destroy, create and deactivate (Shakeel Butt)  [Orabug: 31746021]  
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31621896]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31621896]  
  - uek-rpm: Sync up aarch64 config files with latest Marvell patches (Dave Kleikamp)  [Orabug: 31838252]  
  - drivers: marvell: otx2-sdei-ghes: correct issues with crashdump kernel (Rick Farrington)  [Orabug: 31838252]  
  - drivers: mtd: spi-nor: Add MX66L2G45GXRI00 macronix flash (Selvam Venkatachalam)  [Orabug: 31838252]  
  - irqchip/gic-v3: Add workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 31838252]  
  - octeontx2-af: fix Extended DSA and eDSA parsing (Satha Rao)  [Orabug: 31838252]  
  - drivers: gicv3: Adds workaround for Marvell erratum 38545 (Bhaskara Budiredla)  [Orabug: 31838252]  
  - octeontx2-af: reset HWS group mask during FLR (Michal Mazur)  [Orabug: 31838252]  
  - drivers: marvell: otx2: sdei-ghes: add BERT support for RAS errors (Rick Farrington)  [Orabug: 31838252]  
  - ACPI: APEI: BERT: support BERT in non-ACPI systems (Rick Farrington)  [Orabug: 31838252]  
  - Documentation: dt: edac: update sdei-ghes/bed-bert settings (Rick Farrington)  [Orabug: 31838252]  
  - lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user() (Christophe Leroy)  [Orabug: 31758823]  {CVE-2018-20669} 
  - x86: uaccess: Inhibit speculation past access_ok() in user_access_begin() (Will Deacon)  [Orabug: 31758823]  {CVE-2018-20669} 
  - arch/openrisc: Fix issues with access_ok() (Stafford Horne)  [Orabug: 31758823]  {CVE-2018-20669} 
  - Fix 'acccess_ok()' on alpha and SH (Linus Torvalds)  [Orabug: 31758823]  {CVE-2018-20669} 
  - make 'user_access_begin()' do 'access_ok()' (Linus Torvalds)  [Orabug: 31758823]  {CVE-2018-20669} 
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31712850]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31712850]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31712850]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31712850]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31712850]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31712850]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31712850]  
  - tracing: Kernel access to Ftrace instances (Divya Indi)  [Orabug: 31712850]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2037.el7uek]
changelog:
  - PCI: Probe bridge window attributes once at enumeration-time (Bjorn Helgaas)  [Orabug: 31867569]  
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866488]  {CVE-2020-14386} {CVE-2020-14386} 
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850342]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850342]  
  - block: print offending values when cloned rq limits are exceeded (John Pittman)  [Orabug: 31850342]  
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849531]  
  - efi/x86/Add missing error handling to old_memmap 1:1 mapping code (Gen Zhang)  [Orabug: 31765890]  {CVE-2019-12380} 
  - scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31721022]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2038.el7uek]
changelog:
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895328]  {CVE-2020-14314} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884237]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884161]  {CVE-2020-25284} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872898]  {CVE-2020-25212} 
  - dmaengine: ioatdma: Add Snow Ridge ioatdma device id (Dave Jiang)  [Orabug: 31890616]  
  - genirq/irqdomain: Make sure all irq domain flags are distinct (Zenghui Yu)  [Orabug: 31885296]  
  - irq/msi: Direct update affinity if irq is for msix or, maskable (Joe Jin)  [Orabug: 31885296]  
  - x86/apic/msi: Plug non-maskable MSI affinity race (Joe Jin)  [Orabug: 31885296]  
  - mm: memcg: Optimize cgroup traversal in memory.stat read (Tom Hromatka)  [Orabug: 31849181]  
  - SUNRPC: Fix disconnection races (Trond Myklebust)  [Orabug: 31796862]  
  - SUNRPC: Add a helper to wake up a sleeping rpc_task and set its status (Trond Myklebust)  [Orabug: 31796862]  
  - dlmfs_file_write(): fix the bogosity in handling non-zero *ppos (Al Viro)  [Orabug: 31739591]  
  - ocfs2: roll back the reference count modification of the parent directory if an error occurs (wangjian)  [Orabug: 31739591]  
  - ocfs2: add missing annotations for ocfs2_refcount_cache_lock() and ocfs2_refcount_cache_unlock() (Jules Irenge)  [Orabug: 31739591]  
  - ocfs2: replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 31739591]  
  - ocfs2: use memalloc_nofs_save instead of memalloc_noio_save (Matthew Wilcox (Oracle))  [Orabug: 31739591]  
  - ocfs2: dlm: replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 31739591]  
  - ocfs2: ocfs2_fs.h: replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 31739591]  
  - ocfs2: use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31739591]  
  - ocfs2: cluster: replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 31739591]  
  - scsi: core: Register sysfs for SCSI workqueue (Bob Liu)  [Orabug: 31806722]  
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu)  [Orabug: 31806722]  
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu)  [Orabug: 31806722]  
  - IB/mlx5: Fix MR registration flow to use UMR properly (Guy Levi)  [Orabug: 31631230]  
  - IB/mlx5: Prevent concurrent MR updates during invalidation (Moni Shoua)  [Orabug: 31631230]  
  - IB/mlx5: Replace kfree with kvfree (Chuhong Yuan)  [Orabug: 31631230]  
  - RDMA/odp: Do not leak dma maps when working with huge pages (Jason Gunthorpe)  [Orabug: 31631230]  
  - IB/mlx5: Respect new UMR capabilities (Majd Dibbiny)  [Orabug: 31631230]  
  - RDMA/mlx5: Unify error flows in rereg MR failure paths (Leon Romanovsky)  [Orabug: 31631230]  
  - IB/mlx5: Maintain a single emergency page (Ilya Lesokhin)  [Orabug: 31631230]  
  - Linux 4.14.187 (Sasha Levin)   
  - Revert "tty: hvc: Fix data abort due to race in hvc_open" (Greg Kroah-Hartman)   
  - NFSv4 fix CLOSE not waiting for direct IO compeletion (Olga Kornievskaia)   
  - pNFS/flexfiles: Fix list corruption if the mirror count changes (Trond Myklebust)   
  - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() (Chuck Lever)   
  - sunrpc: fixed rollback in rpc_gssd_dummy_populate() (Vasily Averin)   
  - Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() (Dan Carpenter)   
  - drm/radeon: fix fb_div check in ni_init_smc_spll_table() (Denis Efremov)   
  - tracing: Fix event trigger to accept redundant spaces (Masami Hiramatsu)   
  - arm64: perf: Report the PC value in REGS_ABI_32 mode (Jiping Ma)   
  - mm/slab: use memzero_explicit() in kzfree() (Waiman Long)   
  - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof (Filipe Manana)   
  - KVM: nVMX: Plumb L2 GPA through to PML emulation (Sean Christopherson)   
  - ACPI: sysfs: Fix pm_profile_attr type (Nathan Chancellor)   
  - ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table (Aaron Plattner)   
  - blktrace: break out of blktrace setup on concurrent calls (Luis Chamberlain)   
  - kbuild: improve cc-option to clean up all temporary files (Masahiro Yamada)   
  - s390/ptrace: fix setting syscall number (Sven Schnelle)   
  - net: alx: fix race condition in alx_remove (Zekun Shen)   
  - ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function (Ye Bin)   
  - sched/core: Fix PI boosting between RT and DEADLINE tasks (Juri Lelli)   
  - net: bcmgenet: use hardware padding of runt frames (Doug Berger)   
  - netfilter: ipset: fix unaligned atomic access (Russell King)   
  - usb: gadget: udc: Potential Oops in error handling code (Dan Carpenter)   
  - ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram() (yu kuai)   
  - net: qed: fix excessive QM ILT lines consumption (Alexander Lobakin)   
  - net: qed: fix NVMe login fails over VFs (Alexander Lobakin)   
  - net: qed: fix left elements count calculation (Alexander Lobakin)   
  - RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() (Fan Guo)   
  - ASoC: rockchip: Fix a reference count leak. (Qiushi Wu)   
  - RDMA/cma: Protect bind_list and listen_list while finding matching cm id (Mark Zhang)   
  - rxrpc: Fix handling of rwind from an ACK packet (David Howells)   
  - ARM: dts: NSP: Correct FA2 mailbox node (Matthew Hagan)   
  - efi/esrt: Fix reference count leak in esre_create_sysfs_entry. (Qiushi Wu)   
  - cifs/smb3: Fix data inconsistent when zero file range (Zhang Xiaoxu)   
  - cifs/smb3: Fix data inconsistent when punch hole (Zhang Xiaoxu)   
  - xhci: Poll for U0 after disabling USB2 LPM (Kai-Heng Feng)   
  - ALSA: usb-audio: Fix OOB access of mixer element list (Takashi Iwai)   
  - ALSA: usb-audio: Clean up mixer element list traverse (Takashi Iwai)   
  - ALSA: usb-audio: uac1: Invalidate ctl on interrupt (Julian Scheel)   
  - loop: replace kill_bdev with invalidate_bdev (Zheng Bin)   
  - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip (Joakim Tjernlund)   
  - xhci: Fix enumeration issue when setting max packet size for FS devices. (Al Cooper)   
  - xhci: Fix incorrect EP_STATE_MASK (Mathias Nyman)   
  - ALSA: usb-audio: add quirk for Denon DCD-1500RE (Yick W. Tse)   
  - usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() (Tang Bin)   
  - usb: host: xhci-mtk: avoid runtime suspend when removing hcd (Macpaul Lin)   
  - USB: ehci: reopen solution for Synopsys HC bug (Longfang Liu)   
  - usb: add USB_QUIRK_DELAY_INIT for Logitech C922 (Tomasz Meresiński)   
  - usb: dwc2: Postponed gadget registration to the udc class driver (Minas Harutyunyan)   
  - USB: ohci-sm501: Add missed iounmap() in remove (Chuhong Yuan)   
  - net: core: reduce recursion limit value (Taehee Yoo)   
  - net: Do not clear the sock TX queue in sk_set_socket() (Tariq Toukan)   
  - net: Fix the arp error in some cases (guodeqing)   
  - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() (Taehee Yoo)   
  - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT (Neal Cardwell)   
  - ip_tunnel: fix use-after-free in ip_tunnel_lookup() (Taehee Yoo)   
  - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes (David Christensen)   
  - tcp: grow window for OOO packets only for SACK flows (Eric Dumazet)   
  - sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket (Marcelo Ricardo Leitner)   
  - rxrpc: Fix notification call on completion of discarded calls (David Howells)   
  - rocker: fix incorrect error handling in dma_rings_init (Aditya Pakki)   
  - net: usb: ax88179_178a: fix packet alignment padding (Jeremy Kerr)   
  - net: fix memleak in register_netdevice() (Yang Yingliang)   
  - net: bridge: enfore alignment for ethernet address (Thomas Martitz)   
  - mld: fix memory leak in ipv6_mc_destroy_dev() (Wang Hai)   
  - ibmveth: Fix max MTU limit (Thomas Falcon)   
  - apparmor: don't try to replace stale label in ptraceme check (Jann Horn)   
  - fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()" (Al Viro)   
  - net: sched: export __netdev_watchdog_up() (Valentin Longchamp)   
  - block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed (yu kuai)   
  - net: be more gentle about silly gso requests coming from user (Eric Dumazet)   
  - scsi: scsi_devinfo: handle non-terminated strings (Martin Wilck)   
  - Linux 4.14.186 (Greg Kroah-Hartman)   
  - kvm: x86: Fix reserved bits related calculation errors caused by MKTME (Kai Huang)   
  - md: add feature flag MD_FEATURE_RAID0_LAYOUT (NeilBrown)   
  - net: core: device_rename: Use rwsem instead of a seqcount (Ahmed S. Darwish)   
  - sched/rt, net: Use CONFIG_PREEMPTION.patch (Thomas Gleixner)   
  - kretprobe: Prevent triggering kretprobe from within kprobe_flush_task (Jiri Olsa)   
  - e1000e: Do not wake up the system via WOL if device wakeup is disabled (Chen Yu)   
  - kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex (Masami Hiramatsu)   
  - crypto: algboss - don't wait during notifier callback (Eric Biggers)   
  - crypto: algif_skcipher - Cap recv SG list at ctx->used (Herbert Xu)   
  - mtd: rawnand: tmio: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: mtk: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: plat_nand: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: socrates: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: oxnas: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: oxnas: Add of_node_put() (Nishka Dasgupta)   
  - mtd: rawnand: orion: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: xway: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: sharpsl: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: diskonchip: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: Pass a nand_chip object to nand_release() (Boris Brezillon)   
  - block: nr_sects_write(): Disable preemption on seqcount write (Ahmed S. Darwish)   
  - x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld (Ard Biesheuvel)   
  - drm/dp_mst: Increase ACT retry timeout to 3s (Lyude Paul)   
  - ext4: fix partial cluster initialization when splitting extent (Jeffle Xu)   
  - selinux: fix double free (Tom Rix)   
  - drm/qxl: Use correct notify port address when creating cursor ring (Huacai Chen)   
  - drm/dp_mst: Reformat drm_dp_check_act_status() a bit (Lyude Paul)   
  - drm: encoder_slave: fix refcouting error for modules (Wolfram Sang)   
  - libata: Use per port sync for detach (Kai-Heng Feng)   
  - arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints (Will Deacon)   
  - block: Fix use-after-free in blkdev_get() (Jason Yan)   
  - perf report: Fix NULL pointer dereference in hists__fprintf_nr_sample_events() (Gaurav Singh)   
  - usb/ehci-platform: Set PM runtime as active on resume (Qais Yousef)   
  - usb/xhci-plat: Set PM runtime as active on resume (Qais Yousef)   
  - scsi: acornscsi: Fix an error handling path in acornscsi_probe() (Christophe JAILLET)   
  - drm/sun4i: hdmi ddc clk: Fix size of m divider (Jernej Skrabec)   
  - selftests/net: in timestamping, strncpy needs to preserve null byte (tannerlove)   
  - gfs2: fix use-after-free on transaction ail lists (Bob Peterson)   
  - blktrace: fix endianness for blk_log_remap() (Chaitanya Kulkarni)   
  - blktrace: fix endianness in get_pdu_int() (Chaitanya Kulkarni)   
  - blktrace: use errno instead of bi_status (Chaitanya Kulkarni)   
  - selftests/vm/pkeys: fix alloc_random_pkey() to make it really random (Ram Pai)   
  - elfnote: mark all .note sections SHF_ALLOC (Nick Desaulniers)   
  - include/linux/bitops.h: avoid clang shift-count-overflow warnings (Arnd Bergmann)   
  - lib/zlib: remove outdated and incorrect pre-increment optimization (Jann Horn)   
  - geneve: change from tx_error to tx_dropped on missing metadata (Jiri Benc)   
  - crypto: omap-sham - add proper load balancing support for multicore (Tero Kristo)   
  - pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()' (Christophe JAILLET)   
  - pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()' (Christophe JAILLET)   
  - scsi: ufs: Don't update urgent bkops level when toggling auto bkops (Can Guo)   
  - scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj (Qiushi Wu)   
  - gfs2: Allow lock_nolock mount to specify jid=X (Bob Peterson)   
  - openrisc: Fix issue with argument clobbering for clone/fork (Stafford Horne)   
  - vfio/mdev: Fix reference count leak in add_mdev_supported_type (Qiushi Wu)   
  - ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed (Xiyu Yang)   
  - extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()' (Christophe JAILLET)   
  - powerpc/4xx: Don't unmap NULL mbase (huhai)   
  - NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION (Olga Kornievskaia)   
  - net: sunrpc: Fix off-by-one issues in 'rpc_ntop6' (Fedor Tokarev)   
  - scsi: ufs-qcom: Fix scheduling while atomic issue (Jeffrey Hugo)   
  - clk: bcm2835: Fix return type of bcm2835_register_gate (Nathan Chancellor)   
  - x86/apic: Make TSC deadline timer detection message visible (Borislav Petkov)   
  - usb: gadget: Fix issue with config_ep_by_speed function (Pawel Laszczak)   
  - usb: gadget: fix potential double-free in m66592_probe. (Qiushi Wu)   
  - usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check (Colin Ian King)   
  - USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke (Nathan Chancellor)   
  - usb: dwc2: gadget: move gadget resume after the core is in L0 state (Fabrice Gasnier)   
  - watchdog: da9062: No need to ping manually before setting timeout (Stefan Riedmueller)   
  - IB/cma: Fix ports memory leak in cma_configfs (Maor Gottlieb)   
  - PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port (Bjorn Helgaas)   
  - dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone (Hannes Reinecke)   
  - powerpc/64s/pgtable: fix an undefined behaviour (Qian Cai)   
  - clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1 (Marek Szyprowski)   
  - tty: n_gsm: Fix bogus i++ in gsm_data_kick (Gregory CLEMENT)   
  - USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe() (Tang Bin)   
  - drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation (Roy Spliet)   
  - usb/ohci-platform: Fix a warning when hibernating (Qais Yousef)   
  - vfio-pci: Mask cap zero (Alex Williamson)   
  - powerpc/ps3: Fix kexec shutdown hang (Geoff Levand)   
  - powerpc/pseries/ras: Fix FWNMI_VALID off by one (Nicholas Piggin)   
  - tty: n_gsm: Fix waking up upper tty layer when room available (Gregory CLEMENT)   
  - tty: n_gsm: Fix SOF skipping (Gregory CLEMENT)   
  - PCI: Fix pci_register_host_bridge() device_register() error handling (Rob Herring)   
  - clk: ti: composite: fix memory leak (Tero Kristo)   
  - dlm: remove BUG() before panic() (Arnd Bergmann)   
  - power: supply: smb347-charger: IRQSTAT_D is volatile (Dmitry Osipenko)   
  - power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()' (Christophe JAILLET)   
  - PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges (Kai-Heng Feng)   
  - PCI: rcar: Fix incorrect programming of OB windows (Andrew Murray)   
  - drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish (Kuppuswamy Sathyanarayanan)   
  - serial: amba-pl011: Make sure we initialize the port.lock spinlock (John Stultz)   
  - i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output (Russell King)   
  - staging: sm750fb: add missing case while setting FB_VISUAL (Matej Dujava)   
  - thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR (Sudip Mukherjee)   
  - tty: hvc: Fix data abort due to race in hvc_open (Raghavendra Rao Ananta)   
  - s390/qdio: put thinint indicator after early error (Julian Wiedmann)   
  - ALSA: usb-audio: Improve frames size computation (Alexander Tsoy)   
  - scsi: qedi: Do not flush offload work if ARP not resolved (Nilesh Javali)   
  - staging: greybus: fix a missing-check bug in gb_lights_light_config() (Chen Zhou)   
  - scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM (Tyrel Datwyler)   
  - scsi: sr: Fix sr_probe() missing deallocate of device minor (Simon Arlott)   
  - apparmor: fix introspection of of task mode for unconfined tasks (John Johansen)   
  - mksysmap: Fix the mismatch of '.L' symbols in System.map (ashimida)   
  - NTB: Fix the default port and peer numbers for legacy drivers (Logan Gunthorpe)   
  - yam: fix possible memory leak in yam_init_driver (Wang Hai)   
  - powerpc/crashkernel: Take "mem=" option into account (Pingfan Liu)   
  - nfsd: Fix svc_xprt refcnt leak when setup callback client failed (Xiyu Yang)   
  - powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7 events run (Kajol Jain)   
  - clk: clk-flexgen: fix clock-critical handling (Alain Volmat)   
  - scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event (Xiyu Yang)   
  - mfd: wm8994: Fix driver operation if loaded as modules (Marek Szyprowski)   
  - m68k/PCI: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - vfio/pci: fix memory leaks in alloc_perm_bits() (Qian Cai)   
  - ps3disk: use the default segment boundary (Emmanuel Nicolet)   
  - PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only register (Pali Rohár)   
  - dm mpath: switch paths in dm_blk_ioctl() code path (Martin Wilck)   
  - usblp: poison URBs upon disconnect (Oliver Neukum)   
  - i2c: pxa: clear all master action bits in i2c_pxa_stop_message() (Russell King)   
  - f2fs: report delalloc reserve as non-free in statfs for project quota (Konstantin Khlebnikov)   
  - iio: bmp280: fix compensation of humidity (Andreas Klinger)   
  - ALSA: isa/wavefront: prevent out of bounds write in ioctl (Dan Carpenter)   
  - scsi: qedi: Check for buffer overflow in qedi_set_path() (Dan Carpenter)   
  - ARM: integrator: Add some Kconfig selections (Linus Walleij)   
  - ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type (Xiyu Yang)   
  - backlight: lp855x: Ensure regulators are disabled on probe failure (Jon Hunter)   
  - clk: qcom: msm8916: Fix the address location of pll->config_reg (Bryan O'Donoghue)   
  - remoteproc: Fix IDR initialisation in rproc_alloc() (Alex Elder)   
  - iio: pressure: bmp280: Tolerate IRQ before registering (Andy Shevchenko)   
  - i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets (Adam Honse)   
  - clk: sunxi: Fix incorrect usage of round_down() (Rikard Falkeborn)   
  - power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select (Enric Balletbo i Serra)   
  - drm/i915: Whitelist context-local timestamp in the gen9 cmdparser (Chris Wilson)   
  - s390: fix syscall_get_error for compat processes (Dmitry V. Levin)   
  - Linux 4.14.185 (Greg Kroah-Hartman)   
  - perf symbols: Fix debuginfo search for Ubuntu (Adrian Hunter)   
  - perf probe: Fix to check blacklist address correctly (Masami Hiramatsu)   
  - perf probe: Do not show the skipped events (Masami Hiramatsu)   
  - w1: omap-hdq: cleanup to add missing newline for some dev_dbg (H. Nikolaus Schaller)   
  - mtd: rawnand: pasemi: Fix the probe error path (Miquel Raynal)   
  - mtd: rawnand: brcmnand: fix hamming oob layout (Álvaro Fernández Rojas)   
  - sunrpc: clean up properly in gss_mech_unregister() (NeilBrown)   
  - sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations. (NeilBrown)   
  - kbuild: force to build vmlinux if CONFIG_MODVERSION=y (Masahiro Yamada)   
  - powerpc/64s: Save FSCR to init_task.thread.fscr after feature init (Michael Ellerman)   
  - powerpc/64s: Don't let DT CPU features set FSCR_DSCR (Michael Ellerman)   
  - drivers/macintosh: Fix memleak in windfarm_pm112 driver (Michael Ellerman)   
  - ARM: tegra: Correct PL310 Auxiliary Control Register initialization (Dmitry Osipenko)   
  - kernel/cpu_pm: Fix uninitted local in cpu_pm (Douglas Anderson)   
  - dm crypt: avoid truncating the logical block size (Eric Biggers)   
  - sparc64: fix misuses of access_process_vm() in genregs32_[sg]et() (Al Viro)   
  - sparc32: fix register window handling in genregs32_[gs]et() (Al Viro)   
  - pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs (Jonathan Bakker)   
  - power: vexpress: add suppress_bind_attrs to true (Anders Roxell)   
  - igb: Report speed and duplex as unknown when device is runtime suspended (Kai-Heng Feng)   
  - media: ov5640: fix use of destroyed mutex (Tomi Valkeinen)   
  - b43_legacy: Fix connection problem with WPA3 (Larry Finger)   
  - b43: Fix connection problem with WPA3 (Larry Finger)   
  - b43legacy: Fix case where channel status is corrupted (Larry Finger)   
  - media: go7007: fix a miss of snd_card_free (Chuhong Yuan)   
  - carl9170: remove P2P_GO support (Christian Lamparter)   
  - e1000e: Relax condition to trigger reset for ME workaround (Punit Agrawal)   
  - e1000e: Disable TSO for buffer overrun workaround (Kai-Heng Feng)   
  - PCI: Program MPS for RCiEP devices (Ashok Raj)   
  - blk-mq: move _blk_mq_update_nr_hw_queues synchronize_rcu call (Giuliano Procida)   
  - btrfs: fix wrong file range cleanup after an error filling dealloc range (Filipe Manana)   
  - btrfs: fix error handling when submitting direct I/O bio (Omar Sandoval)   
  - PCI: Unify ACS quirk desired vs provided checking (Bjorn Helgaas)   
  - PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints (Ashok Raj)   
  - PCI: Generalize multi-function power dependency device links (Abhishek Sahu)   
  - vga_switcheroo: Use device link for HDA controller (Lukas Wunner)   
  - vga_switcheroo: Deduplicate power state tracking (Lukas Wunner)   
  - PCI: Make ACS quirk implementations more uniform (Bjorn Helgaas)   
  - PCI: Add ACS quirk for iProc PAXB (Abhinav Ratna)   
  - PCI: Avoid FLR for AMD Starship USB 3.0 (Kevin Buettner)   
  - PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0 (Marcos Scriven)   
  - PCI: Disable MSI for Freescale Layerscape PCIe RC mode (Hou Zhiqiang)   
  - ext4: fix race between ext4_sync_parent() and rename() (Eric Biggers)   
  - ext4: fix error pointer dereference (Jeffle Xu)   
  - ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max (Harshad Shirwadkar)   
  - evm: Fix possible memory leak in evm_calc_hmac_or_hash() (Roberto Sassu)   
  - ima: Directly assign the ima_default_policy pointer to ima_rules (Roberto Sassu)   
  - ima: Fix ima digest hash table key calculation (Krzysztof Struczynski)   
  - mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked() (Andrea Arcangeli)   
  - btrfs: send: emit file capabilities after chown (Marcos Paulo de Souza)   
  - string.h: fix incompatibility between FORTIFY_SOURCE and KASAN (Daniel Axtens)   
  - platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32() (Andy Shevchenko)   
  - cpuidle: Fix three reference count leaks (Qiushi Wu)   
  - spi: dw: Return any value retrieved from the dma_transfer callback (Serge Semin)   
  - mmc: sdhci-esdhc-imx: fix the mask for tuning start point (Haibo Chen)   
  - ixgbe: fix signed-integer-overflow warning (Xie XiuQi)   
  - mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core (Ulf Hansson)   
  - staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core (Ulf Hansson)   
  - mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk (Veerabhadrarao Badiganti)   
  - MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe() (YuanJunQing)   
  - PCI: Don't disable decoding when mmio_always_on is set (Jiaxun Yang)   
  - macvlan: Skip loopback packets in RX handler (Alexander Sverdlin)   
  - m68k: mac: Don't call via_flush_cache() on Mac IIfx (Finn Thain)   
  - x86/mm: Stop printing BRK addresses (Arvind Sankar)   
  - mips: Add udelay lpj numbers adjustment (Serge Semin)   
  - mips: MAAR: Use more precise address mask (Serge Semin)   
  - x86/boot: Correct relocation destination on old linkers (Arvind Sankar)   
  - mwifiex: Fix memory corruption in dump_station (Pali Rohár)   
  - rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup() (Dan Carpenter)   
  - md: don't flush workqueue unconditionally in md_open (Guoqing Jiang)   
  - net: qed*: Reduce RX and TX default ring count when running inside kdump kernel (Bhupesh Sharma)   
  - wcn36xx: Fix error handling path in 'wcn36xx_probe()' (Christophe JAILLET)   
  - nvme: refine the Qemu Identify CNS quirk (Christoph Hellwig)   
  - kgdb: Fix spurious true from in_dbg_master() (Daniel Thompson)   
  - mips: cm: Fix an invalid error code of INTVN_*_ERR (Serge Semin)   
  - MIPS: Truncate link address into 32bit for 32bit kernel (Jiaxun Yang)   
  - Crypto/chcr: fix for ccm(aes) failed test (Devulapally Shiva Krishna)   
  - powerpc/spufs: fix copy_to_user while atomic (Jeremy Kerr)   
  - net: allwinner: Fix use correct return type for ndo_start_xmit() (Yunjian Wang)   
  - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Dan Carpenter)   
  - net: lpc-enet: fix error return code in lpc_mii_init() (Wei Yongjun)   
  - exit: Move preemption fixup up, move blocking operations down (Jann Horn)   
  - lib/mpi: Fix 64-bit MIPS build with Clang (Nathan Chancellor)   
  - net: bcmgenet: set Rx mode before starting netif (Doug Berger)   
  - netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported (Pablo Neira Ayuso)   
  - audit: fix a net reference leak in audit_list_rules_send() (Paul Moore)   
  - MIPS: Make sparse_init() using top-down allocation (Tiezhu Yang)   
  - media: platform: fcp: Set appropriate DMA parameters (Kieran Bingham)   
  - media: dvb: return -EREMOTEIO on i2c transfer failure. (Colin Ian King)   
  - audit: fix a net reference leak in audit_send_reply() (Paul Moore)   
  - dt-bindings: display: mediatek: control dpi pins mode to avoid leakage (Jitao Shi)   
  - e1000: Distribute switch variables for initialization (Kees Cook)   
  - tools api fs: Make xxx__mountpoint() more scalable (Stephane Eranian)   
  - brcmfmac: fix wrong location to get firmware feature (Jaehoon Chung)   
  - staging: android: ion: use vmap instead of vm_map_ram (Christoph Hellwig)   
  - net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss() (Jia-Ju Bai)   
  - x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit (Jon Doron)   
  - spi: dw: Fix Rx-only DMA transfers (Serge Semin)   
  - ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE (Linus Walleij)   
  - btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums (Filipe Manana)   
  - clocksource: dw_apb_timer_of: Fix missing clockevent timers (Serge Semin)   
  - clocksource: dw_apb_timer: Make CPU-affiliation being optional (Serge Semin)   
  - spi: dw: Enable interrupts in accordance with DMA xfer mode (Serge Semin)   
  - kgdb: Prevent infinite recursive entries to the debugger (Douglas Anderson)   
  - Bluetooth: Add SCO fallback for invalid LMP parameters error (Hsin-Yu Chao)   
  - MIPS: Loongson: Build ATI Radeon GPU driver as module (Tiezhu Yang)   
  - ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (Jesper Dangaard Brouer)   
  - spi: dw: Zero DMA Tx and Rx configurations on stack (Andy Shevchenko)   
  - net: ena: fix error returning in ena_com_get_hash_function() (Arthur Kiyanovski)   
  - spi: pxa2xx: Apply CS clk quirk to BXT (Evan Green)   
  - objtool: Ignore empty alternatives (Julien Thierry)   
  - media: si2157: Better check for running tuner in init (Brad Love)   
  - crypto: ccp -- don't "select" CONFIG_DMADEVICES (Arnd Bergmann)   
  - drm: bridge: adv7511: Extend list of audio sample rates (Bogdan Togorean)   
  - ACPI: GED: use correct trigger type field in _Exx / _Lxx handling (Ard Biesheuvel)   
  - xen/pvcalls-back: test for errors when calling backend_connect() (Juergen Gross)   
  - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices (Xiaolong Huang)   
  - mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card() (Ulf Hansson)   
  - mmc: sdhci-msm: Clear tuning done flag while hs400 tuning (Veerabhadrarao Badiganti)   
  - agp/intel: Reinforce the barrier after GTT updates (Chris Wilson)   
  - perf: Add cond_resched() to task_function_call() (Barret Rhoden)   
  - fat: don't allow to mount if the FAT length == 0 (OGAWA Hirofumi)   
  - mm/slub: fix a memory leak in sysfs_slab_add() (Wang Hai)   
  - Smack: slab-out-of-bounds in vsscanf (Casey Schaufler)   
  - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (Qiujun Huang)   
  - ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb (Qiujun Huang)   
  - ath9k: Fix use-after-free Write in ath9k_htc_rx_msg (Qiujun Huang)   
  - ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx (Qiujun Huang)   
  - KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts (Marc Zyngier)   
  - KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits (Xing Li)   
  - KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data) (Xing Li)   
  - KVM: nVMX: Consult only the "basic" exit reason when routing nested exit (Sean Christopherson)   
  - KVM: nSVM: leave ASID aside in copy_vmcb_control_area (Paolo Bonzini)   
  - KVM: nSVM: fix condition for filtering async PF (Paolo Bonzini)   
  - video: fbdev: w100fb: Fix a potential double free. (Christophe JAILLET)   
  - proc: Use new_inode not new_inode_pseudo (Eric W. Biederman)   
  - ovl: initialize error in ovl_copy_xattr (Yuxuan Shui)   
  - selftests/net: in rxtimestamp getopt_long needs terminating null entry (tannerlove)   
  - crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req() (Longpeng(Mike))   
  - crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req() (Longpeng(Mike))   
  - crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req() (Longpeng(Mike))   
  - spi: bcm2835: Fix controller unregister order (Lukas Wunner)   
  - spi: pxa2xx: Fix controller unregister order (Lukas Wunner)   
  - spi: Fix controller unregister order (Lukas Wunner)   
  - spi: No need to assign dummy value in spi_unregister_controller() (Andy Shevchenko)   
  - spi: dw: Fix controller unregister order (Lukas Wunner)   
  - spi: dw: fix possible race condition (Sasha Levin)   
  - x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches. (Anthony Steinhauser)   
  - x86/speculation: Change misspelled STIPB to STIBP (Waiman Long)   
  - KVM: x86: only do L1TF workaround on affected processors (Paolo Bonzini)   
  - kvm: x86: Fix L1TF mitigation for shadow MMU (Kai Huang)   
  - ALSA: pcm: disallow linking stream to itself (Michał Mirosław)   
  - crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated (Christophe JAILLET)   
  - spi: bcm-qspi: when tx/rx buffer is NULL set to 0 (Justin Chen)   
  - spi: bcm2835aux: Fix controller unregister order (Lukas Wunner)   
  - nilfs2: fix null pointer dereference at nilfs_segctor_do_construct() (Ryusuke Konishi)   
  - cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages (Tejun Heo)   
  - ACPI: PM: Avoid using power resources if there are none for D0 (Rafael J. Wysocki)   
  - ACPI: GED: add support for _Exx / _Lxx handler methods (Ard Biesheuvel)   
  - ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe() (Qiushi Wu)   
  - ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile() (Qiushi Wu)   
  - ALSA: usb-audio: Fix inconsistent card PM state after resume (Takashi Iwai)   
  - ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines (Hui Wang)   
  - ALSA: es1688: Add the missed snd_card_free() (Chuhong Yuan)   
  - efi/efivars: Add missing kobject_put() in sysfs entry creation error path (Ard Biesheuvel)   
  - x86/reboot/quirks: Add MacBook6,1 reboot quirk (Hill Ma)   
  - x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Xiaochun Lee)   
  - x86_64: Fix jiffies ODR violation (Bob Haarman)   
  - mm: add kvfree_sensitive() for freeing sensitive data objects (Waiman Long)   
  - perf probe: Accept the instance number of kretprobe event (Masami Hiramatsu)   
  - ath9k_htc: Silence undersized packet warnings (Masashi Honma)   
  - powerpc/xive: Clear the page tables for the ESB IO mapping (Cédric Le Goater)   
  - drivers/net/ibmvnic: Update VNIC protocol version reporting (Thomas Falcon)   
  - Input: synaptics - add a second working PNP_ID for Lenovo T470s (Dennis Kadioglu)   
  - sched/fair: Don't NUMA balance for kthreads (Jens Axboe)   
  - ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook (Fredrik Strupe)   
  - crypto: talitos - fix ECB and CBC algs ivsize (Su Kang Yin)   
  - serial: imx: Fix handling of TC irq in combination with DMA (Uwe Kleine-König)   
  - vxlan: Avoid infinite loop when suppressing NS messages with invalid options (Ido Schimmel)   
  - ipv6: fix IPV6_ADDRFORM operation logic (Hangbin Liu)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2039.el7uek]
changelog:
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931370]  
  - net: Correct warning: label 'drop' defined but not used. (John Donnelly)  [Orabug: 31915658]  
  - KVM: Corrects build warnings for emulator_get_fpu/emulator_put_fpu (John Donnelly)  [Orabug: 31907225]  
  - oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31901947]  
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880142]  
  - bpf: Fix bpf_event_output re-entry issue (Allan Zhang)  [Orabug: 31865809]  
  - bpf: fix nested bpf tracepoints with per-cpu data (Matt Mullins)  [Orabug: 31865809]  
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)  [Orabug: 31721803]  
  - uek-rpm: Turn on module signing for embedded2 kernel (Dave Kleikamp)  [Orabug: 31920488]  
  - uek-rpm: Clean up config-aarch64-embedded2 (Dave Kleikamp)  [Orabug: 31920488]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2040.el7uek]
changelog:
  - KVM: x86: always expose VIRT_SSBD to guests (Paolo Bonzini)  [Orabug: 31916293]  
  - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955140]  {CVE-2020-25641} 
  - bpf: ensure helper ids match between UEK5, UEK6 and upstream (Alan Maguire)  [Orabug: 31860415]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872860]  {CVE-2020-25211} 
  - Linux 4.14.191 (Greg Kroah-Hartman)   
  - regmap: debugfs: check count when read regmap file (Peng Fan)   
  - mm/page_owner.c: remove drain_all_pages from init_early_allocated_pages (Oscar Salvador)   
  - tcp: allow at most one TLP probe per flight (Yuchung Cheng)   
  - rtnetlink: Fix memory(net_device) leak when ->newlink fails (Weilong Chen)   
  - ip6_gre: fix null-ptr-deref in ip6gre_init_net() (Wei Yongjun)   
  - AX.25: Prevent integer overflows in connect and sendmsg (Dan Carpenter)   
  - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (David Howells)   
  - net: udp: Fix wrong clean up for IS_UDPLITE macro (Miaohe Lin)   
  - net-sysfs: add a newline when printing 'tx_timeout' by sysfs (Xiongfeng Wang)   
  - drivers/net/wan/x25_asy: Fix to make it work (Xie He)   
  - dev: Defer free of skbs in flush_backlog (Subash Abhinov Kasiviswanathan)   
  - AX.25: Prevent out-of-bounds read in ax25_sendmsg() (Peilin Ye)   
  - AX.25: Fix out-of-bounds read in ax25_connect() (Peilin Ye)   
  - Linux 4.14.190 (Greg Kroah-Hartman)   
  - ath9k: Fix regression with Atheros 9271 (Mark O'Donovan)   
  - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb (Qiujun Huang)   
  - parisc: Add atomic64_set_release() define to avoid CPU soft lockups (John David Anglin)   
  - io-mapping: indicate mapping failure (Michael J. Ruhl)   
  - mm/memcg: fix refcount error while moving and swapping (Hugh Dickins)   
  - Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation (Fangrui Song)   
  - vt: Reject zero-sized screen buffer size. (Tetsuo Handa)   
  - fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. (Tetsuo Handa)   
  - serial: 8250_mtk: Fix high-speed baud rates clamping (Serge Semin)   
  - serial: 8250: fix null-ptr-deref in serial8250_start_tx() (Yang Yingliang)   
  - staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift (Ian Abbott)   
  - staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift (Ian Abbott)   
  - staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support (Ian Abbott)   
  - staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift (Ian Abbott)   
  - staging: wlan-ng: properly check endpoint types (Rustam Kovhaev)   
  - Revert "cifs: Fix the target file was deleted when rename failed." (Steve French)   
  - usb: xhci: Fix ASM2142/ASM3142 DMA addressing (Forest Crossman)   
  - usb: xhci-mtk: fix the failure of bandwidth allocation (Chunfeng Yun)   
  - binder: Don't use mmput() from shrinker function. (Tetsuo Handa)   
  - x86: math-emu: Fix up 'cmp' insn for clang ias (Arnd Bergmann)   
  - arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP (Will Deacon)   
  - usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init() (Evgeny Novikov)   
  - Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen (Ilya Katsnelson)   
  - dmaengine: ioat setting ioat timeout as module parameter (Leonid Ravich)   
  - hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow (Evgeny Novikov)   
  - regmap: dev_get_regmap_match(): fix string comparison (Marc Kleine-Budde)   
  - spi: mediatek: use correct SPI_CFG2_REG MACRO (leilk.liu)   
  - dmaengine: tegra210-adma: Fix runtime PM imbalance on error (Dinghao Liu)   
  - HID: apple: Disable Fn-key key-re-mapping on clone keyboards (Hans de Goede)   
  - HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override (Federico Ricchiuto)   
  - scripts/decode_stacktrace: strip basepath from all paths (Pi-Hsun Shih)   
  - serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X (Matthew Howell)   
  - bonding: check return value of register_netdevice() in bond_newlink() (Cong Wang)   
  - i2c: rcar: always clear ICSAR to avoid side effects (Wolfram Sang)   
  - ipvs: fix the connection sync failed in some cases (guodeqing)   
  - mlxsw: destroy workqueue when trap_register in mlxsw_emad_init (Liu Jian)   
  - bonding: check error value of register_netdevice() immediately (Taehee Yoo)   
  - net: smc91x: Fix possible memory leak in smc_drv_probe() (Wang Hai)   
  - drm: sun4i: hdmi: Fix inverted HPD result (Chen-Yu Tsai)   
  - net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration (Sergey Organov)   
  - ax88172a: fix ax88172a_unbind() failures (George Kennedy)   
  - hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path (Christophe JAILLET)   
  - bnxt_en: Fix race when modifying pause settings. (Vasundhara Volam)   
  - btrfs: fix page leaks after failure to lock page for delalloc (Robbie Ko)   
  - btrfs: fix mount failure caused by race with umount (Boris Burkov)   
  - btrfs: fix double free on ulist after backref resolution failure (Filipe Manana)   
  - ASoC: rt5670: Correct RT5670_LDO_SEL_MASK (Hans de Goede)   
  - ALSA: info: Drop WARN_ON() from buffer NULL sanity check (Takashi Iwai)   
  - uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov)   
  - spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours (Vladimir Oltean)   
  - SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion") (Olga Kornievskaia)   
  - irqdomain/treewide: Keep firmware node unconditionally allocated (Thomas Gleixner)   
  - drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout (Ben Skeggs)   
  - net: sky2: initialize return of gm_phy_read (Tom Rix)   
  - drivers/net/wan/lapbether: Fixed the value of hard_header_len (Xie He)   
  - xtensa: update *pos in cpuinfo_op.next (Max Filippov)   
  - xtensa: fix __sync_fetch_and_{and,or}_4 declarations (Max Filippov)   
  - scsi: scsi_transport_spi: Fix function pointer check (Tom Rix)   
  - mac80211: allow rx of mesh eapol frames with default rx key (Markus Theil)   
  - pinctrl: amd: fix npins for uart0 in kerncz_groups (Jacky Hu)   
  - gpio: arizona: put pm_runtime in case of failure (Navid Emamdoost)   
  - gpio: arizona: handle pm_runtime_get_sync failure case (Navid Emamdoost)   
  - Linux 4.14.189 (Greg Kroah-Hartman)   
  - rxrpc: Fix trace string (David Howells)   
  - libceph: don't omit recovery_deletes in target_copy() (Ilya Dryomov)   
  - sched/fair: handle case of task_h_load() returning 0 (Vincent Guittot)   
  - arm64: ptrace: Override SPSR.SS when single-stepping is enabled (Will Deacon)   
  - thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power (Finley Xiao)   
  - misc: atmel-ssc: lock with mutex instead of spinlock (Michał Mirosław)   
  - dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler (Krzysztof Kozlowski)   
  - intel_th: pci: Add Emmitsburg PCH support (Alexander Shishkin)   
  - intel_th: pci: Add Tiger Lake PCH-H support (Alexander Shishkin)   
  - intel_th: pci: Add Jasper Lake CPU support (Alexander Shishkin)   
  - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute (Vishwas M)   
  - MIPS: Fix build for LTS kernel caused by backporting lpj adjustment (Huacai Chen)   
  - timer: Fix wheel index calculation on last level (Frederic Weisbecker)   
  - uio_pdrv_genirq: fix use without device tree and no interrupt (Esben Haabendal)   
  - Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list (David Pedersen)   
  - mei: bus: don't clean driver pointer (Alexander Usyskin)   
  - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS (Chirantan Ekbote)   
  - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial (Alexander Lobakin)   
  - USB: serial: option: add Quectel EG95 LTE modem (AceLan Kao)   
  - USB: serial: option: add GosunCn GM500 series (Jörgen Storvist)   
  - USB: serial: ch341: add new Product ID for CH340 (Igor Moura)   
  - USB: serial: cypress_m8: enable Simply Automated UPB PIM (James Hilliard)   
  - USB: serial: iuu_phoenix: fix memory corruption (Johan Hovold)   
  - usb: gadget: function: fix missing spinlock in f_uac1_legacy (Zhang Qiang)   
  - usb: chipidea: core: add wakeup support for extcon (Peter Chen)   
  - usb: dwc2: Fix shutdown callback in platform (Minas Harutyunyan)   
  - USB: c67x00: fix use after free in c67x00_giveback_urb (Tom Rix)   
  - ALSA: usb-audio: Fix race against the error recovery URB submission (Takashi Iwai)   
  - ALSA: line6: Perform sanity check for each URB creation (Takashi Iwai)   
  - HID: magicmouse: do not set up autorepeat (Dmitry Torokhov)   
  - mtd: rawnand: oxnas: Release all devices in the _remove() path (Miquel Raynal)   
  - mtd: rawnand: oxnas: Unregister all devices on error (Miquel Raynal)   
  - mtd: rawnand: oxnas: Keep track of registered devices (Miquel Raynal)   
  - mtd: rawnand: brcmnand: fix CS0 layout (Álvaro Fernández Rojas)   
  - perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode (Jin Yao)   
  - copy_xstate_to_kernel: Fix typo which caused GDB regression (Kevin Buettner)   
  - ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski)   
  - Revert "thermal: mediatek: fix register index error" (Enric Balletbo i Serra)   
  - staging: comedi: verify array index is correct before using it (Dan Carpenter)   
  - usb: gadget: udc: atmel: fix uninitialized read in debug printk (Michał Mirosław)   
  - spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate (Marc Kleine-Budde)   
  - arm64: dts: meson: add missing gxl rng clock (Jerome Brunet)   
  - phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked (Colin Ian King)   
  - iio:health:afe4404 Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - ACPI: video: Use native backlight on Acer TravelMate 5735Z (Paul Menzel)   
  - ACPI: video: Use native backlight on Acer Aspire 5783z (Hans de Goede)   
  - mmc: sdhci: do not enable card detect interrupt for gpio cd type (Haibo Chen)   
  - doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in park mode (Neil Armstrong)   
  - Revert "usb/xhci-plat: Set PM runtime as active on resume" (Sasha Levin)   
  - Revert "usb/ehci-platform: Set PM runtime as active on resume" (Sasha Levin)   
  - Revert "usb/ohci-platform: Fix a warning when hibernating" (Sasha Levin)   
  - of: of_mdio: Correct loop scanning logic (Florian Fainelli)   
  - net: dsa: bcm_sf2: Fix node reference count (Florian Fainelli)   
  - spi: fix initial SPI_SR value in spi-fsl-dspi (Angelo Dureghello)   
  - spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer (Krzysztof Kozlowski)   
  - iio:health:afe4403 Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio:pressure:ms5611 Fix buffer element alignment (Jonathan Cameron)   
  - iio: pressure: zpa2326: handle pm_runtime_get_sync failure (Navid Emamdoost)   
  - iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() (Chuhong Yuan)   
  - iio: magnetometer: ak8974: Fix runtime PM imbalance on error (Dinghao Liu)   
  - iio:humidity:hdc100x Fix alignment and data leak issues (Jonathan Cameron)   
  - iio:magnetometer:ak8974: Fix alignment and data leak issues (Jonathan Cameron)   
  - arm64: alternative: Use true and false for boolean values (Gustavo A. R. Silva)   
  - i2c: eg20t: Load module automatically if ID matches (Andy Shevchenko)   
  - gfs2: read-only mounts should grab the sd_freeze_gl glock (Bob Peterson)   
  - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init (Vasily Averin)   
  - drm/exynos: fix ref count leak in mic_pre_enable (Navid Emamdoost)   
  - cgroup: Fix sock_cgroup_data on big-endian. (Cong Wang)   
  - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)   
  - tcp: md5: do not send silly options in SYNCOOKIES (Eric Dumazet)   
  - tcp: make sure listeners don't initialize congestion-control state (Christoph Paasch)   
  - net_sched: fix a memory leak in atm_tc_init() (Cong Wang)   
  - tcp: md5: allow changing MD5 keys in all socket states (Eric Dumazet)   
  - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers (Eric Dumazet)   
  - tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key() (Eric Dumazet)   
  - net: usb: qmi_wwan: add support for Quectel EG95 LTE modem (AceLan Kao)   
  - net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb (Martin Varghese)   
  - llc: make sure applications use ARPHRD_ETHER (Eric Dumazet)   
  - l2tp: remove skb_dst_set() from l2tp_xmit_skb() (Xin Long)   
  - ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg (Sabrina Dubroca)   
  - genetlink: remove genl_bind (Sean Tranchetti)   
  - s390/mm: fix huge pte soft dirty copying (Janosch Frank)   
  - ARC: elf: use right ELF_ARCH (Vineet Gupta)   
  - ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE (Vineet Gupta)   
  - dm: use noio when sending kobject event (Mikulas Patocka)   
  - drm/radeon: fix double free (Tom Rix)   
  - btrfs: fix fatal extent_buffer readahead vs releasepage race (Boris Burkov)   
  - Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb" (Greg Kroah-Hartman)   
  - KVM: x86: Mark CR4.TSD as being possibly owned by the guest (Sean Christopherson)   
  - KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode (Sean Christopherson)   
  - KVM: x86: bit 8 of non-leaf PDPEs is not reserved (Paolo Bonzini)   
  - KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART (Andrew Scull)   
  - KVM: arm64: Fix definition of PAGE_HYP_DEVICE (Will Deacon)   
  - ALSA: usb-audio: add quirk for MacroSilicon MS2109 (Hector Martin)   
  - ALSA: hda - let hs_mic be picked ahead of hp_mic (Hui Wang)   
  - ALSA: opl3: fix infoleak in opl3 (xidongwang)   
  - mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON() (Ido Schimmel)   
  - net: macb: mark device wake capable when "magic-packet" property present (Nicolas Ferre)   
  - nbd: Fix memory leak in nbd_add_socket (Zheng Bin)   
  - arm64: kgdb: Fix single-step exception handling oops (Wei Li)   
  - ALSA: compress: fix partial_drain completion state (Vinod Koul)   
  - smsc95xx: avoid memory leak in smsc95xx_bind (Andre Edich)   
  - smsc95xx: check return value of smsc95xx_reset (Andre Edich)   
  - net: cxgb4: fix return error value in t4_prep_fw (Li Heng)   
  - x86/entry: Increase entry_stack size to a full page (Peter Zijlstra)   
  - nvme-rdma: assign completion vector correctly (Max Gurtovoy)   
  - scsi: mptscsih: Fix read sense data size (Tomas Henzl)   
  - ARM: imx6: add missing put_device() call in imx6q_suspend_init() (yu kuai)   
  - cifs: update ctime and mtime during truncate (Zhang Xiaoxu)   
  - s390/kasan: fix early pgm check handler execution (Vasily Gorbik)   
  - ixgbe: protect ring accesses with READ- and WRITE_ONCE (Ciara Loftus)   
  - spi: spidev: fix a potential use-after-free in spidev_release() (Zhenzhong Duan)   
  - spi: spidev: fix a race between spidev_release and spidev_remove (Zhenzhong Duan)   
  - gpu: host1x: Detach driver on unregister (Thierry Reding)   
  - ARM: dts: omap4-droid4: Fix spi configuration and increase rate (Tony Lindgren)   
  - spi: spi-fsl-dspi: Fix external abort on interrupt in resume or exit paths (Krzysztof Kozlowski)   
  - spi: spi-fsl-dspi: use IRQF_SHARED mode to request IRQ (Chuanhua Han)   
  - spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer (Krzysztof Kozlowski)   
  - spi: spi-fsl-dspi: Adding shutdown hook (Peng Ma)   
  - KVM: s390: reduce number of IO pins to 1 (Christian Borntraeger)   
  - Linux 4.14.188 (Greg Kroah-Hartman)   
  - efi: Make it possible to disable efivar_ssdt entirely (Peter Jones)   
  - dm zoned: assign max_io_len correctly (Hou Tao)   
  - irqchip/gic: Atomically update affinity (Marc Zyngier)   
  - MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen (Hauke Mehrtens)   
  - cifs: Fix the target file was deleted when rename failed. (Zhang Xiaoxu)   
  - SMB3: Honor persistent/resilient handle flags for multiuser mounts (Paul Aurich)   
  - SMB3: Honor 'seal' flag for multiuser mounts (Paul Aurich)   
  - Revert "ALSA: usb-audio: Improve frames size computation" (Greg Kroah-Hartman)   
  - i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 (Chris Packham)   
  - virtio-blk: free vblk-vqs in error path of virtblk_probe() (Hou Tao)   
  - drm: sun4i: hdmi: Remove extra HPD polling (Chen-Yu Tsai)   
  - hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() (Misono Tomohiro)   
  - hwmon: (max6697) Make sure the OVERT mask is set correctly (Chu Lin)   
  - cxgb4: parse TC-U32 key values and masks natively (Rahul Lakkireddy)   
  - cxgb4: use unaligned conversion for fetching timestamp (Rahul Lakkireddy)   
  - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Herbert Xu)   
  - kgdb: Avoid suspicious RCU usage warning (Douglas Anderson)   
  - usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect (Zqiang)   
  - mm/slub: fix stack overruns with SLUB_STATS (Qian Cai)   
  - mm/slub.c: fix corrupted freechain in deactivate_slab() (Dongli Zhang)   
  - usbnet: smsc95xx: Fix use-after-free after removal (Tuomas Tynkkynen)   
  - EDAC/amd64: Read back the scrub rate PCI register on F15h (Borislav Petkov)   
  - mm: fix swap cache node allocation mask (Hugh Dickins)   
  - btrfs: fix data block group relocation failure due to concurrent scrub (Filipe Manana)   
  - btrfs: cow_file_range() num_bytes and disk_num_bytes are same (Anand Jain)   
  - btrfs: fix a block group ref counter leak after failure to remove block group (Filipe Manana)   
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722764]  
  - KVM: x86: Manually flush collapsible SPTEs only when toggling flags (Sean Christopherson)  [Orabug: 31722764]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722764]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722764]  
  - nvme: fix possible deadlock when I/O is blocked (Sagi Grimberg)  [Orabug: 31885904]  
  - KVM: nVMX: do not use dangling shadow VMCS after guest reset (Paolo Bonzini)  [Orabug: 31939079]  
  - Revert "usb: xhci: do not create and register shared_hcd when USB3.0 is disabled" (Thomas Tai)  [Orabug: 31945609]  
  - uek-rpm: Use oracle-armset-1 to build uekemb2 (Dave Kleikamp)  [Orabug: 31950896]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2041.el7uek]
changelog:
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 31351024]  {CVE-2019-19448} {CVE-2019-19448} 
  - sysctl: handle overflow in proc_get_long (Christian Brauner)  [Orabug: 30909367]  
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895823]  {CVE-2020-14385} 
  - RDS: add module parameter to allow module unload or not (Hans Westgaard Ry)  [Orabug: 31019519]  
  - rds: Revert "Disable module unload by default" (Hans Westgaard Ry)  [Orabug: 31019519]  
  - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31351790]  {CVE-2019-16089} 
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31682344]  
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914674]  {CVE-2020-14390} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914674]  {CVE-2020-14390} 
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933717]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31966609]  
  - EDAC/i10nm: Update driver to support different bus number config register offsets (Qiuxu Zhuo)  [Orabug: 31974251]  
  - EDAC, {skx,i10nm}: Make some configurations CPU model specific (Qiuxu Zhuo)  [Orabug: 31974251]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.1.el7uek]
changelog:
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131174]  {CVE-2020-25704} 
  - perf/core: Fix bad use of igrab() (Song Liu)  [Orabug: 32131174]  {CVE-2020-25704} 
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136897]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136897]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136897]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136897]  
  - xen/gntdev: fix up blockable calls to mn_invl_range_start (Michal Hocko)  [Orabug: 32139243]  
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32047440]  
  - platform/x86: ISST: Add new PCI device ids (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Allow additional TRL MSRs (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Use dev_get_drvdata (Chuhong Yuan)  [Orabug: 32047440]  
  - platform/x86: ISST: Restore state on resume (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select PUNIT MSR interface (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select mailbox interface via MSRs (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select mailbox interface via PCI (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add Intel Speed Select mmio interface (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add IOCTL to Translate Linux logical CPU to PUNIT CPU number (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Store per CPU information (Srinivas Pandruvada)  [Orabug: 32047440]  
  - platform/x86: ISST: Add common API to register and handle ioctls (Srinivas Pandruvada)  [Orabug: 32047440]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.2.el7uek]
changelog:
  - lockdown: make lockdown mode available in securityfs (Alan Maguire)  [Orabug: 32176137]  
  - uek-rpm: Don't build emb2 kernel for mips (Dave Kleikamp)  [Orabug: 32176895]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177537]  {CVE-2020-27673} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177989]  
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32195765]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32195765]  
  - lib/scatterlist: Add SG_CHAIN and SG_END macros for LSB encodings (Anshuman Khandual)  [Orabug: 32195765]  
  - lib/scatterlist: Avoid potential scatterlist entry overflow (Tvrtko Ursulin)  [Orabug: 32195765]  
  - lib/scatterlist: Fix offset type in sg_alloc_table_from_pages (Tvrtko Ursulin)  [Orabug: 32195765]  
  - rds: fix out-of-tree build broken by tracepoints (Alan Maguire)  [Orabug: 32185345]  
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177547]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.3.el7uek]
changelog:
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32173883]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32173883]  
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32177802]  
  - scsi: qla2xxx: Update version to 10.02.00.103-k (Nilesh Javali)  [Orabug: 32213922]  
  - qla2xxx: back port upstream patch (Quinn Tran)  [Orabug: 32213922]  
  - scsi: scsi_transport_fc: Add FPIN fc event codes (James Smart)  [Orabug: 32213922]  
  - scsi: scsi_transport_fc: refactor event posting routines (James Smart)  [Orabug: 32213922]  
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)  [Orabug: 32213922]  
  - Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Check if FW supports MQ before enabling (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Reduce noisy debug message (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Reduce duplicate code in reporting speed (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Indicate correct supported speeds for Mezz card (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Flush I/O on zone disable (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Flush all sessions on zone disable (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: remove incorrect sparse #ifdef (Linus Torvalds)  [Orabug: 32213922]  
  - scsi: qla2xxx: Return EBUSY on fcport deletion (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix return of uninitialized value in rval (Colin Ian King)  [Orabug: 32213922]  
  - scsi: qla2xxx: Initialize variable in qla8044_poll_reg() (Tom Rix)  [Orabug: 32213922]  
  - scsi: qla2xxx: Do not consume srb greedily (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Use constant when it is known (Pavel Machek (CIP))  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (Ye Bin)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (Ye Bin)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (Ye Bin)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix crash on session cleanup with unload (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix reset of MPI firmware (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix MPI reset needed message (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix buffer-buffer credit extraction error (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Correct the check for sscanf() return value (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Update version to 10.02.00.102-k (Nilesh Javali)  [Orabug: 32213922]  
  - scsi: qla2xxx: Add SLER and PI control support (Saurav Kashyap)  [Orabug: 32213922]  
  - scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Add rport fields in debugfs (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make tgt_port_database available in initiator mode (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix I/O errors during LIP reset tests (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Performance tweak (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix memory size truncation (Quinn Tran)  [Orabug: 32213922]  
  - scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Setup debugfs entries for remote ports (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix I/O failures during remote port toggle testing (Arun Easi)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove unneeded variable 'rval' (Jason Yan)  [Orabug: 32213922]  
  - scsi: qla2xxx: Handle incorrect entry_type entries (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Warn if done() or free() are called on an already freed srb (Daniel Wagner)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix the return value (Xianting Tian)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() (Tianjia Zhang)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() (Tianjia Zhang)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove redundant variable initialization (Tianjia Zhang)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove superfluous memset() (Li Heng)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix regression on sparc64 (René Rebe)  [Orabug: 32213922]  
  - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (Enzo Matsumiya)  [Orabug: 32213922]  
  - scsi: qla2xxx: Address a set of sparse warnings (Shyam Sundar)  [Orabug: 32213922]  
  - scsi: qla2xxx: SAN congestion management implementation (Shyam Sundar)  [Orabug: 32213922]  
  - scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (Shyam Sundar)  [Orabug: 32213922]  
  - scsi: qla2xxx: Introduce a function for computing the debug message prefix (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove a superfluous cast (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Initialize 'n' before using it (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (Bart Van Assche)  [Orabug: 32213922]  
  - scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (James Smart)  [Orabug: 32213922]  
  - scsi: fc: add FPIN ELS definition (James Smart)  [Orabug: 32213922]  
  - staging: rts5208: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218536]  
  - misc: rtsx: rename SG_END macro (Arnd Bergmann)  [Orabug: 32218536]  
  - ACPI: NFIT: Add runtime firmware activate support (Dan Williams)  [Orabug: 32224144]  
  - PM, libnvdimm: Add runtime firmware activation support (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Convert to DEVICE_ATTR_ADMIN_RO() (Dan Williams)  [Orabug: 32224144]  
  - driver-core: Introduce DEVICE_ATTR_ADMIN_{RO,RW} (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Emulate firmware activation commands (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Prepare nfit_ctl_test() for ND_CMD_CALL emulation (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Add command debug messages (Dan Williams)  [Orabug: 32224144]  
  - tools/testing/nvdimm: Cleanup dimm index passing (Dan Williams)  [Orabug: 32224144]  
  - ACPI: NFIT: Define runtime firmware activation commands (Dan Williams)  [Orabug: 32224144]  
  - ACPI: NFIT: Move bus_dsm_mask out of generic nvdimm_bus_descriptor (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Validate command family indices (Dan Williams)  [Orabug: 32224144]  
  - PM: hibernate: Incorporate concurrency handling (Domenico Andreoli)  [Orabug: 32224144]  
  - libnvdimm: Move nvdimm_bus_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm/of_pmem: Provide a unique name for bus provider (Aneesh Kumar K.V)  [Orabug: 32224144]  
  - libnvdimm: Move nvdimm_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_mapping_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_region_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_numa_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move nd_device_attribute_group to device_type (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move region attribute group definition (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm/region: Rewrite _probe_success() to _advance_seeds() (Dan Williams)  [Orabug: 32224144]  
  - libnvdimm: Move attribute groups to device type (Dan Williams)  [Orabug: 32224144]  
  - acpi/nfit: improve bounds checking for 'func' (Dan Carpenter)  [Orabug: 32224144]  
  - ACPI/nfit: delete the function to_acpi_nfit_desc (Xiaochun Lee)  [Orabug: 32224144]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.4.el7uek]
changelog:
  - bnxt_en: Release PCI regions when DMA mask setup fails during probe. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: fix error return code in bnxt_init_board() (Zhang Changzhong)  [Orabug: 32223677]  
  - bnxt_en: fix error return code in bnxt_init_one() (Zhang Changzhong)  [Orabug: 32223677]  
  - bnxt_en: Fix counter overflow logic. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: read EEPROM A2h address using page 0 (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Re-write PCI BARs after PCI fatal error. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Set driver default message level. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Enable online self tests for multi-host/NPAR mode. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Eliminate unnecessary RX resets. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Reduce unnecessary message log during RX errors. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Add a software counter for RX ring reset. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Implement RX ring reset in response to buffer errors. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Refactor bnxt_init_one_rx_ring(). (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Refactor bnxt_free_rx_skbs(). (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Update firmware interface spec to 1.10.1.68. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Improve preset max value for ethtool -l. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Handle ethernet link being disabled by firmware. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: add basic infrastructure to support PAM4 link speeds (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: refactor bnxt_get_fw_speed() (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: refactor code to limit speed advertising (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Update firmware interface spec to 1.10.1.65. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Fix wrong flag value passed to HWRM_PORT_QSTATS_EXT fw call. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Fix HWRM_FUNC_QSTATS_EXT firmware call. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Return -EOPNOTSUPP for ETHTOOL_GREGS on VFs. (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: return proper error codes in bnxt_show_temp (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Setup default RSS map in all scenarios. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: init RSS table for Minimal-Static VF reservation (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: fix HWRM error when querying VF temperature (Edwin Peer)  [Orabug: 32223677]  
  - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Don't query FW when netif_running() is false. (Pavan Chebbi)  [Orabug: 32223677]  
  - bnxt_en: Add support for 'ethtool -d' (Vasundhara Volam)  [Orabug: 32223677]  
  - bnxt_en: Switch over to use the 64-bit software accumulated counters. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Accumulate all counters. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Retrieve hardware masks for port counters. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Retrieve hardware counter masks from firmware if available. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Allocate additional memory for all statistics blocks. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Refactor statistics code and structures. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Use macros to define port statistics size and offset. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Update firmware interface to 1.10.1.54. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Remove PCIe non-counters from ethtool statistics (Vasundhara Volam)  [Orabug: 32223677]  
  - net: bnxt: don't complain if TC flower can't be supported (Jakub Kicinski)  [Orabug: 32223677]  
  - bnxt_en: Fix completion ring sizing with TPA enabled. (Michael Chan)  [Orabug: 32223677]  
  - bnxt_en: Init ethtool link settings after reading updated PHY configuration. (Vasundhara Volam)  [Orabug: 32223677]  
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233354]  {CVE-2020-14351} 
  - vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32201608]  
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32201608]  
  - vhost/scsi: Use copy_to_iter() to send control queue response (Bijan Mottahedeh)  [Orabug: 32201608]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32201608]  
  - vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32201608]  
  - vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32201608]  
  - vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32201608]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32201608]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32201608]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210458]  
  - intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32219015]  
  - qla2xxx: Add missing module version banner (John Donnelly)  [Orabug: 32244934]  
  - scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: A small correction in _base_process_reply_queue (Tomas Henzl)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix sync irqs (Tomas Henzl)  [Orabug: 32223781]  
  - scsi: mpt3sas: Detect tampered Aero and Sea adapters (Sreekanth Reddy)  [Orabug: 32223781]  
  - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (Tomas Henzl)  [Orabug: 32223781]  
  - scsi: mpt3sas: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32223781]  
  - scsi: mpt3sas: Remove superfluous memset() (Li Heng)  [Orabug: 32223781]  
  - scsi: mpt3sas: Update driver version to 35.100.00.00 (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Postprocessing of target and LUN reset (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Rename and export interrupt mask/unmask functions (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Cancel the running work during host reset (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Dump system registers for debugging (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (Suganath Prabu S)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix kdoc comments format (Damien Le Moal)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix set but unused variable (Damien Le Moal)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix error returns in BRM_status_show (Johannes Thumshirn)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix unlock imbalance (Damien Le Moal)  [Orabug: 32223781]  
  - scsi: mpt3sas: Fix spelling mistake (Flavio Suligoi)  [Orabug: 32223781]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.5.el7uek]
changelog:
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251912]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266679]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266679]  {CVE-2020-29660}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.6.el7uek]
changelog:
  - net/rds: Only yield with a valid "i_connecting_ts" timestamp (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Only increment rdma_resolve_route timeout on error (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Don't block workqueues "cma_wq" and "cm.wq" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Don't drop neighbor loopback connection (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Take the GID offset into account for IB devices (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Leave the neighbor cache alone (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Give each connection its own workqueue (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Disassociate ic and cm_id before rdma_destroy_id (Gerd Rausch)  [Orabug: 31030774]  
  - Revert "rds: ib: Implement proper cm_id compare" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Add a rdma_cm watchdog timer (Gerd Rausch)  [Orabug: 31030774]  
  - Revert "RDS: IB: fix panic with handlers running post teardown" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Release all resources allocated by "rds_ib_setup_qp" (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Change the "rds_aux_wq" workqueue to loose order (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Don't sleep inside worker threads (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Fix a few race conditions (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Execute "rdma_destroy_id" in the background (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Delay reconnects from passive side by 3 seconds (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Drop connections when peers perform failover (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Yield to incoming connection requests (Gerd Rausch)  [Orabug: 31030774]  
  - net/rds: Remove stale comments about random backoff (Gerd Rausch)  [Orabug: 31030774]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.7.el7uek]
changelog:
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32047319]  
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253411]  {CVE-2020-29568} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260255]  {CVE-2020-29569} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337717]  
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349205]  {CVE-2020-36158} 
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355208]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.8.el7uek]
changelog:
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32341032]  
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372161]  
  - A/A Bonding: Fix a one-byte-off kmalloc (Håkon Bugge)  [Orabug: 32380826]  
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32245078]  
  - A/A Bonding: Introduce selective interface name inclusion (Håkon Bugge)  [Orabug: 32350976]  
  - net/mlx5: Use a single MSIX vector for all control EQs in VFs (Ariel Levkovich)  [Orabug: 32368440]  
  - net/mlx5: Fix available EQs FW used to reserve (Denis Drozdov)  [Orabug: 32368440]  
  - net/mlx5: Use max_num_eqs for calculation of required MSIX vectors (Denis Drozdov)  [Orabug: 32368440]  
  - net/mlx5: Expose DEVX specification (Yishai Hadas)  [Orabug: 32368440]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248037]  {CVE-2020-28374}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.9.el7uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426612]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 31175013]  
  - net/rds: Incorrect RDS protocol version fall back (Ka-Cheong Poon)  [Orabug: 32376163]  
  - net/rds: Missing RDS/RDMA private data in response to connection request (Ka-Cheong Poon)  [Orabug: 32388407]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.10.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492110]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - tap: fix use-after-free (Michael S. Tsirkin)  [Orabug: 32466083]  
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471695]  
  - Fix double free KASAN warnings and use after free of kmalloc-32 object. (Imran Khan)  [Orabug: 32480357]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2043.el7uek]
changelog:
  - Revert "XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information." (Somasundaram Krishnasamy)  [Orabug: 32041544]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2043.1.el7uek]
changelog:
  - Fix multiple variable definition with syzkaller (Hans Westgaard Ry)  [Orabug: 32008826]  
  - ocfs2: fix remounting needed after setfacl command (Gang He)  [Orabug: 32042686]  
  - Linux 4.14.202 (Greg Kroah-Hartman)   
  - crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA (Dominik Przychodni)   
  - crypto: bcm - Verify GCM/CCM key length in setkey (Herbert Xu)   
  - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (Arnaud Patard)   
  - reiserfs: Fix oops during mount (Jan Kara)   
  - reiserfs: Initialize inode keys properly (Jan Kara)   
  - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters (Mychaela N. Falconia)   
  - USB: serial: pl2303: add device-id for HP GC device (Scott Chen)   
  - staging: comedi: check validity of wMaxPacketSize of usb endpoints found (Anant Thazhemadam)   
  - USB: serial: option: Add Telit FT980-KS composition (Leonid Bloch)   
  - USB: serial: option: add Cellient MPL200 card (Wilken Gottwalt)   
  - media: usbtv: Fix refcounting mixup (Oliver Neukum)   
  - Bluetooth: Disconnect if E0 is used for Level 4 (Luiz Augusto von Dentz)   
  - Bluetooth: Fix update of connection state in `hci_encrypt_cfm` (Patrick Steinhardt)   
  - Bluetooth: Consolidate encryption handling in hci_encrypt_cfm (Luiz Augusto von Dentz)   
  - Bluetooth: MGMT: Fix not checking if BT_HS is enabled (Luiz Augusto von Dentz)   
  - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (Luiz Augusto von Dentz)   
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)   
  - Bluetooth: fix kernel oops in store_pending_adv_report (Alain Michaud)   
  - Linux 4.14.201 (Greg Kroah-Hartman)   
  - net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails (Anant Thazhemadam)   
  - mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged (Vijay Balakrishna)   
  - mmc: core: don't set limits.discard_granularity as 0 (Coly Li)   
  - perf: Fix task_function_call() error handling (Kajol Jain)   
  - rxrpc: Fix server keyring leak (David Howells)   
  - rxrpc: Fix some missing _bh annotations on locking conn->state_lock (David Howells)   
  - rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read() (David Howells)   
  - rxrpc: Fix rxkad token xdr encoding (Marc Dionne)   
  - net: usb: ax88179_178a: fix missing stop entry in driver_info (Wilken Gottwalt)   
  - mdio: fix mdio-thunder.c dependency & build error (Randy Dunlap)   
  - bonding: set dev->needed_headroom in bond_setup_by_slave() (Eric Dumazet)   
  - xfrm: Use correct address family in xfrm_state_find (Herbert Xu)   
  - platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP (Necip Fazil Yildiran)   
  - net: stmmac: removed enabling eee in EEE set callback (Voon Weifeng)   
  - xfrm: clone whole liftime_cur structure in xfrm_do_migrate (Antony Antony)   
  - xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrate (Antony Antony)   
  - xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate (Antony Antony)   
  - drm/amdgpu: prevent double kfree ttm->sg (Philip Yang)   
  - openvswitch: handle DNAT tuple collision (Dumitru Ceara)   
  - net: team: fix memory leak in __team_options_register (Anant Thazhemadam)   
  - team: set dev->needed_headroom in team_setup_by_port() (Eric Dumazet)   
  - sctp: fix sctp_auth_init_hmacs() error path (Eric Dumazet)   
  - i2c: meson: fix clock setting overwrite (Jerome Brunet)   
  - cifs: Fix incomplete memory allocation on setxattr path (Vladimir Zapolskiy)   
  - mm/khugepaged: fix filemap page_to_pgoff(page) != offset (Hugh Dickins)   
  - macsec: avoid use-after-free in macsec_handle_frame() (Eric Dumazet)   
  - ftrace: Move RCU is watching check after recursion check (Steven Rostedt (VMware))   
  - Btrfs: fix unexpected failure of nocow buffered writes after snapshotting when low on space (Robbie Ko)   
  - mtd: rawnand: sunxi: Fix the probe error path (Miquel Raynal)   
  - perf top: Fix stdio interface input handling with glibc 2.28+ (Tommi Rantala)   
  - driver core: Fix probe_count imbalance in really_probe() (Tetsuo Handa)   
  - platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse (Aaron Ma)   
  - platform/x86: thinkpad_acpi: initialize tp_nvram_state variable (Tom Rix)   
  - usermodehelper: reset umask to default before executing user process (Linus Torvalds)   
  - net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key() (Anant Thazhemadam)   
  - fbcon: Fix global-out-of-bounds read in fbcon_get_font() (Peilin Ye)   
  - Revert "ravb: Fixed to be able to unload modules" (Geert Uytterhoeven)   
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)   
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)   
  - drm/syncobj: Fix drm_syncobj_handle_to_fd refcount leak (Giuliano Procida)   
  - ep_create_wakeup_source(): dentry name can change under you... (Al Viro)   
  - epoll: EPOLL_CTL_ADD: close the race in decision to take fast path (Al Viro)   
  - epoll: replace ->visited/visited_list with generation count (Al Viro)   
  - epoll: do not insert into poll queues until all sanity checks are done (Al Viro)   
  - random32: Restore __latent_entropy attribute on net_rand_state (Thibaut Sautereau)   
  - Input: trackpoint - enable Synaptics trackpoints (Vincent Huang)   
  - i2c: cpm: Fix i2c_ram structure (Nicolas VINCENT)   
  - iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate() (Yu Kuai)   
  - clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED (Marek Szyprowski)   
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)   
  - pinctrl: mvebu: Fix i2c sda definition for 98DX3236 (Chris Packham)   
  - nvme-fc: fail new connections to a deleted host or remote port (James Smart)   
  - spi: fsl-espi: Only process interrupts for expected events (Chris Packham)   
  - mac80211: do not allow bigger VHT MPDUs than the hardware supports (Felix Fietkau)   
  - drivers/net/wan/hdlc: Set skb->protocol before transmitting (Xie He)   
  - drivers/net/wan/lapbether: Make skb->protocol consistent with the header (Xie He)   
  - rndis_host: increase sleep time in the query-response loop (Olympia Giannou)   
  - net: dec: de2104x: Increase receive ring size for Tulip (Lucy Yan)   
  - drm/sun4i: mixer: Extend regmap max_register (Martin Cerveny)   
  - drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices (Xie He)   
  - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config (Jean Delvare)   
  - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 (Jiri Kosina)   
  - gpio: tc35894: fix up tc35894 interrupt configuration (dillon min)   
  - USB: gadget: f_ncm: Fix NDP16 datagram validation (Bryan O'Donoghue)   
  - net: virtio_vsock: Enhance connection semantics (Sebastien Boeuf)   
  - vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock() (Stefano Garzarella)   
  - vsock/virtio: stop workers during the .remove() (Stefano Garzarella)   
  - vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock (Stefano Garzarella)   
  - Linux 4.14.200 (Greg Kroah-Hartman)   
  - ata: sata_mv, avoid trigerrable BUG_ON (Jiri Slaby)   
  - ata: make qc_prep return ata_completion_errors (Jiri Slaby)   
  - ata: define AC_ERR_OK (Jiri Slaby)   
  - lib/string.c: implement stpcpy (Nick Desaulniers)   
  - mm, THP, swap: fix allocating cluster for swapfile by mistake (Gao Xiang)   
  - kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() (Masami Hiramatsu)   
  - s390/dasd: Fix zero write for FBA devices (Jan Höppner)   
  - MIPS: Add the missing 'CPU_1074K' into __get_cpu_type() (Wei Li)   
  - ALSA: asihpi: fix iounmap in error handler (Tom Rix)   
  - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh (Linus Lüssing)   
  - batman-adv: Add missing include for in_interrupt() (Sven Eckelmann)   
  - net: qed: RDMA personality shouldn't fail VF load (Dmitry Bogdanov)   
  - drm/vc4/vc4_hdmi: fill ASoC card owner (Marek Szyprowski)   
  - mac802154: tx: fix use-after-free (Eric Dumazet)   
  - batman-adv: mcast/TT: fix wrongly dropped or rerouted packets (Linus Lüssing)   
  - atm: eni: fix the missed pci_disable_device() for eni_init_one() (Jing Xiangfeng)   
  - batman-adv: bla: fix type misuse for backbone_gw hash indexing (Linus Lüssing)   
  - mwifiex: Increase AES key storage size to 256 bits (Maximilian Luz)   
  - clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init() (Tianjia Zhang)   
  - ieee802154/adf7242: check status of adf7242_read_reg (Tom Rix)   
  - ieee802154: fix one possible memleak in ca8210_dev_com_init (Liu Jian)   
  - objtool: Fix noreturn detection for ignored functions (Josh Poimboeuf)   
  - i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() (Hans de Goede)   
  - s390/init: add missing __init annotations (Ilya Leoshkevich)   
  - btrfs: qgroup: fix data leak caused by race between writeback and truncate (Qu Wenruo)   
  - vfio/pci: fix racy on error and request eventfd ctx (Zeng Tao)   
  - selftests/x86/syscall_nt: Clear weird flags after each test (Andy Lutomirski)   
  - scsi: libfc: Skip additional kref updating work event (Javed Hasan)   
  - scsi: libfc: Handling of extra kref (Javed Hasan)   
  - cifs: Fix double add page to memcg when cifs_readpages (Zhang Xiaoxu)   
  - vfio/pci: Clear error and request eventfd ctx after releasing (Alex Williamson)   
  - x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline (Thomas Gleixner)   
  - mtd: parser: cmdline: Support MTD names containing one or more colons (Boris Brezillon)   
  - rapidio: avoid data race between file operation callbacks and mport_cdev_add(). (Madhuparna Bhowmik)   
  - mm/swap_state: fix a data race in swapin_nr_pages (Qian Cai)   
  - ceph: fix potential race in ceph_check_caps (Jeff Layton)   
  - mtd: rawnand: omap_elm: Fix runtime PM imbalance on error (Dinghao Liu)   
  - perf kcore_copy: Fix module map when there are no modules loaded (Adrian Hunter)   
  - perf util: Fix memory leak of prefix_if_not_in (Xie XiuQi)   
  - vfio/pci: fix memory leaks of eventfd ctx (Qian Cai)   
  - btrfs: don't force read-only after error in drop snapshot (David Sterba)   
  - usb: dwc3: Increase timeout for CmdAct cleared by device controller (Yu Chen)   
  - printk: handle blank console arguments passed in. (Shreyas Joshi)   
  - drm/nouveau/debugfs: fix runtime pm imbalance on error (Dinghao Liu)   
  - e1000: Do not perform reset in reset_task if we are already down (Alexander Duyck)   
  - arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register (Anshuman Khandual)   
  - USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int (Colin Ian King)   
  - fuse: don't check refcount after stealing page (Miklos Szeredi)   
  - powerpc/traps: Make unrecoverable NMIs die instead of panic (Nicholas Piggin)   
  - ALSA: hda: Fix potential race in unsol event handler (Takashi Iwai)   
  - tty: serial: samsung: Correct clock selection logic (Jonathan Bakker)   
  - USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe() (Tang Bin)   
  - Bluetooth: Handle Inquiry Cancel error after Inquiry Complete (Sonny Sasaka)   
  - phy: samsung: s5pv210-usb2: Add delay after reset (Jonathan Bakker)   
  - power: supply: max17040: Correct voltage reading (Jonathan Bakker)   
  - atm: fix a memory leak of vcc->user_back (Cong Wang)   
  - dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion (Krzysztof Kozlowski)   
  - arm64: cpufeature: Relax checks for AArch32 support at EL[0-2] (Will Deacon)   
  - sparc64: vcc: Fix error return code in vcc_probe() (Wei Yongjun)   
  - staging:r8188eu: avoid skb_clone for amsdu to msdu conversion (Ivan Safonov)   
  - drivers: char: tlclk.c: Avoid data race between init and interrupt handler (Madhuparna Bhowmik)   
  - bdev: Reduce time holding bd_mutex in sync in blkdev_close() (Douglas Anderson)   
  - KVM: Remove CREATE_IRQCHIP/SET_PIT2 race (Steve Rutherford)   
  - serial: uartps: Wait for tx_empty in console setup (Raviteja Narayanam)   
  - scsi: qedi: Fix termination timeouts in session logout (Nilesh Javali)   
  - mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area (Jaewon Kim)   
  - mm/vmscan.c: fix data races using kswapd_classzone_idx (Qian Cai)   
  - mm/filemap.c: clear page error before actual read (Xianting Tian)   
  - mm/kmemleak.c: use address-of operator on section symbols (Nathan Chancellor)   
  - NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests() (Trond Myklebust)   
  - ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor (Andreas Steinmetz)   
  - ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len (Liu Song)   
  - svcrdma: Fix leak of transport addresses (Chuck Lever)   
  - SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()' (Christophe JAILLET)   
  - RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices (Zhu Yanjun)   
  - tools: gpio-hammer: Avoid potential overflow in main (Gabriel Ravier)   
  - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn (Pratik Rajesh Sampat)   
  - perf cpumap: Fix snprintf overflow check (Christophe JAILLET)   
  - serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout (Vignesh Raghavendra)   
  - serial: 8250_omap: Fix sleeping function called from invalid context during probe (Peter Ujfalusi)   
  - serial: 8250_port: Don't service RX FIFO if throttled (Vignesh Raghavendra)   
  - tracing: Use address-of operator on section symbols (Nathan Chancellor)   
  - rtc: ds1374: fix possible race condition (Alexandre Belloni)   
  - tpm: ibmvtpm: Wait for buffer to be set before proceeding (Stefan Berger)   
  - xfs: don't ever return a stale pointer from __xfs_dir3_free_read (Darrick J. Wong)   
  - media: tda10071: fix unsigned sign extension overflow (Colin Ian King)   
  - Bluetooth: L2CAP: handle l2cap config request during open state (Howard Chung)   
  - scsi: aacraid: Disabling TM path and only processing IOP reset (Sagar Biradar)   
  - ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read (Wen Gong)   
  - drm/amdgpu: increase atombios cmd timeout (John Clements)   
  - mm: avoid data corruption on CoW fault into PFN-mapped VMA (Kirill A. Shutemov)   
  - ext4: fix a data race at inode->i_disksize (Qiujun Huang)   
  - timekeeping: Prevent 32bit truncation in scale64_check_overflow() (Wen Yang)   
  - Bluetooth: guard against controllers sending zero'd events (Alain Michaud)   
  - media: go7007: Fix URB type for interrupt handling (Takashi Iwai)   
  - dmaengine: tegra-apb: Prevent race conditions on channel's freeing (Dmitry Osipenko)   
  - bpf: Remove recursion prevention from rcu free callback (Thomas Gleixner)   
  - x86/pkeys: Add check for pkey "overflow" (Dave Hansen)   
  - media: staging/imx: Missing assignment in imx_media_capture_device_register() (Dan Carpenter)   
  - KVM: x86: fix incorrect comparison in trace event (Paolo Bonzini)   
  - RDMA/rxe: Fix configuration of atomic queue pair attributes (Bart Van Assche)   
  - perf test: Fix test trace+probe_vfs_getname.sh on s390 (Thomas Richter)   
  - drm/omap: fix possible object reference leak (Wen Yang)   
  - scsi: lpfc: Fix coverity errors in fmdi attribute handling (James Smart)   
  - scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (James Smart)   
  - selinux: sel_avc_get_stat_idx should increase position index (Vasily Averin)   
  - audit: CONFIG_CHANGE don't log internal bookkeeping as an event (Steve Grubb)   
  - skbuff: fix a data race in skb_queue_len() (Qian Cai)   
  - ALSA: hda: Clear RIRB status before reading WP (Mohan Kumar)   
  - KVM: fix overflow of zero page refcount with ksm running (Zhuang Yanying)   
  - Bluetooth: prefetch channel before killing sock (Hillf Danton)   
  - mm: pagewalk: fix termination condition in walk_pte_range() (Steven Price)   
  - Bluetooth: Fix refcount use-after-free issue (Manish Mandlik)   
  - tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility (Doug Smythies)   
  - selftests/ftrace: fix glob selftest (Sven Schnelle)   
  - ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter (Mert Dirik)   
  - tracing: Set kernel_stack's caller size properly (Josef Bacik)   
  - powerpc/eeh: Only dump stack once if an MMIO loop is detected (Oliver O'Halloran)   
  - dmaengine: zynqmp_dma: fix burst length configuration (Matthias Fend)   
  - ACPI: EC: Reference count query handlers under lock (Rafael J. Wysocki)   
  - media: ti-vpe: cal: Restrict DMA to avoid memory corruption (Nikhil Devshatwar)   
  - seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier (Marco Elver)   
  - rt_cpu_seq_next should increase position index (Vasily Averin)   
  - neigh_stat_seq_next() should increase position index (Vasily Averin)   
  - kernel/sys.c: avoid copying possible padding bytes in copy_to_user (Joe Perches)   
  - CIFS: Properly process SMB3 lease breaks (Pavel Shilovsky)   
  - debugfs: Fix !DEBUG_FS debugfs_create_automount (Kusanagi Kouichi)   
  - gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson)   
  - mmc: core: Fix size overflow for mmc partitions (Bradley Bolen)   
  - RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()' (Christophe JAILLET)   
  - xfs: fix attr leaf header freemap.size underflow (Brian Foster)   
  - RDMA/i40iw: Fix potential use after free (Pan Bian)   
  - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)   
  - mfd: mfd-core: Protect against NULL call-back function pointer (Lee Jones)   
  - mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup() (Hou Tao)   
  - clk/ti/adpll: allocate room for terminating null (Stephen Kitt)   
  - scsi: fnic: fix use after free (Pan Bian)   
  - PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out (Dmitry Osipenko)   
  - ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged (Hui Wang)   
  - ALSA: usb-audio: Add delay quirk for H570e USB headsets (Joakim Tjernlund)   
  - x86/ioapic: Unbreak check_timer() (Thomas Gleixner)   
  - arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback (Mikulas Patocka)   
  - media: smiapp: Fix error handling at NVM reading (Sakari Ailus)   
  - ASoC: kirkwood: fix IRQ error handling (Russell King)   
  - gma/gma500: fix a memory disclosure bug due to uninitialized bytes (Kangjie Lu)   
  - m68k: q40: Fix info-leak in rtc_ioctl (Fuqian Huang)   
  - scsi: aacraid: fix illegal IO beyond last LBA (Balsundar P)   
  - mm: fix double page fault on arm64 if PTE_AF is cleared (Jia He)   
  - serial: 8250: Avoid error message on reprobe (Lukas Wunner)   
  - ipv4: Update exception handling for multipath routes via same device (David Ahern)   
  - net: add __must_check to skb_put_padto() (Eric Dumazet)   
  - net: phy: Avoid NPD upon phy_detach() when driver is unbound (Florian Fainelli)   
  - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex. (Michael Chan)   
  - tipc: use skb_unshare() instead in tipc_buf_append() (Xin Long)   
  - tipc: fix shutdown() of connection oriented socket (Tetsuo Handa)   
  - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC (Necip Fazil Yildiran)   
  - ip: fix tos reflection in ack and reset packets (Wei Wang)   
  - mm/thp: fix __split_huge_pmd_locked() for migration PMD (Ralph Campbell)   
  - kprobes: fix kill kprobe which has been marked as gone (Muchun Song)   
  - KVM: fix memory leak in kvm_io_bus_unregister_dev() (Rustam Kovhaev)   
  - phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init (Sivaprakash Murugesan)   
  - af_key: pfkey_dump needs parameter validation (Mark Salyzyn)   
  - Linux 4.14.199 (Greg Kroah-Hartman)   
  - x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y (Adam Borowski)   
  - powerpc/dma: Fix dma_map_ops::get_required_mask (Alexey Kardashevskiy)   
  - ehci-hcd: Move include to keep CRC stable (Quentin Perret)   
  - serial: 8250_pci: Add Realtek 816a and 816b (Tobias Diedrich)   
  - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists (Hans de Goede)   
  - Input: trackpoint - add new trackpoint variant IDs (Vincent Huang)   
  - percpu: fix first chunk size calculation for populated bitmap (Sunghyun Jin)   
  - i2c: i801: Fix resume bug (Volker Rümelin)   
  - usblp: fix race between disconnect() and read() (Oliver Neukum)   
  - USB: UAS: fix disconnect by unplugging a hub (Oliver Neukum)   
  - USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook (Penghao)   
  - drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata() (Yu Kuai)   
  - drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail (Yu Kuai)   
  - MIPS: SNI: Fix spurious interrupts (Thomas Bogendoerfer)   
  - fbcon: Fix user font detection test at fbcon_resize(). (Tetsuo Handa)   
  - perf test: Free formats for perf pmu parse test (Namhyung Kim)   
  - MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT (Thomas Bogendoerfer)   
  - Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload (Michael Kelley)   
  - clk: rockchip: Fix initialization of mux_pll_src_4plls_p (Nathan Chancellor)   
  - KVM: MIPS: Change the definition of kvm type (Huacai Chen)   
  - spi: Fix memory leak on splited transfers (Gustav Wiklander)   
  - i2c: algo: pca: Reapply i2c bus settings after reset (Evan Nimmo)   
  - f2fs: fix indefinite loop scanning for free nid (Sahitya Tummala)   
  - nvme-fc: cancel async events before freeing event struct (David Milburn)   
  - rapidio: Replace 'select' DMAENGINES 'with depends on' (Laurent Pinchart)   
  - SUNRPC: stop printk reading past end of string (J. Bruce Fields)   
  - spi: spi-loopback-test: Fix out-of-bounds read (Vincent Whitchurch)   
  - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery (James Smart)   
  - scsi: libfc: Fix for double free() (Javed Hasan)   
  - scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort (Dinghao Liu)   
  - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall (Olga Kornievskaia)   
  - hv_netvsc: Remove "unlikely" from netvsc_select_queue (Haiyang Zhang)   
  - net: handle the return value of pskb_carve_frag_list() correctly (Miaohe Lin)   
  - gfs2: initialize transaction tr_ailX_lists earlier (Bob Peterson)   
  - gcov: add support for GCC 10.1 (Peter Oberparleiter)   
  - usb: typec: ucsi: acpi: Check the _DEP dependencies (Heikki Krogerus)   
  - usb: Fix out of sync data toggle if a configured device is reconfigured (Mathias Nyman)   
  - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules (Aleksander Morgado)   
  - USB: serial: option: support dynamic Quectel USB compositions (Bjørn Mork)   
  - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter (Patrick Riphagen)   
  - usb: core: fix slab-out-of-bounds Read in read_descriptors (Zeng Tao)   
  - staging: greybus: audio: fix uninitialized value issue (Vaibhav Agarwal)   
  - video: fbdev: fix OOB read in vga_8planes_imageblit() (Tetsuo Handa)   
  - ARM: dts: vfxxx: Add syscon compatible with OCOTP (Chris Healy)   
  - KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit (Wanpeng Li)   
  - fbcon: remove now unusued 'softback_lines' cursor() argument (Linus Torvalds)   
  - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars (Yi Zhang)   
  - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem (Hou Pu)   
  - scsi: target: iscsi: Fix data digest calculation (Varun Prakash)   
  - regulator: push allocation in set_consumer_device_supply() out of lock (Michał Mirosław)   
  - btrfs: fix wrong address when faulting in pages in the search ioctl (Filipe Manana)   
  - btrfs: fix lockdep splat in add_missing_dev (Josef Bacik)   
  - btrfs: require only sector size alignment for parent eb bytenr (Qu Wenruo)   
  - staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() (Rustam Kovhaev)   
  - iio:accel:mma8452: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio:accel:mma7455: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio: accel: kxsd9: Fix alignment of local buffer. (Jonathan Cameron)   
  - iio:chemical:ccs811: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio:light:max44000 Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio:magnetometer:ak8975 Fix alignment and data leak issues. (Jonathan Cameron)   
  - iio:adc:ti-adc081c Fix alignment and data leak issues (Jonathan Cameron)   
  - iio:adc:max1118 Fix alignment of timestamp and data leak issues (Jonathan Cameron)   
  - iio:adc:ina2xx Fix timestamp alignment issue. (Jonathan Cameron)   
  - iio:adc:ti-adc084s021 Fix alignment and data leak issues. (Jonathan Cameron)   
  - iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio:light:ltr501 Fix timestamp alignment issue. (Jonathan Cameron)   
  - iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set (Maxim Kochetkov)   
  - iio: adc: mcp3422: fix locking on error path (Angelo Compagnucci)   
  - iio: adc: mcp3422: fix locking scope (Angelo Compagnucci)   
  - gcov: Disable gcov build with GCC 10 (Leon Romanovsky)   
  - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled (Rander Wang)   
  - cpufreq: intel_pstate: Refuse to turn off with HWP enabled (Rafael J. Wysocki)   
  - ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id (Evgeniy Didin)   
  - drivers/net/wan/hdlc_cisco: Add hard_header_len (Xie He)   
  - irqchip/eznps: Fix build error for !ARC700 builds (Vineet Gupta)   
  - xfs: initialize the shortform attr header padding entry (Darrick J. Wong)   
  - drivers/net/wan/lapbether: Set network_header before transmitting (Xie He)   
  - ALSA: hda: Fix 2 channel swapping for Tegra (Mohan Kumar)   
  - firestream: Fix memleak in fs_open (Dinghao Liu)   
  - NFC: st95hf: Fix memleak in st95hf_in_send_cmd (Dinghao Liu)   
  - drivers/net/wan/lapbether: Added needed_tailroom (Xie He)   
  - dmaengine: acpi: Put the CSRT table after using it (Hanjun Guo)   
  - ARC: HSDK: wireup perf irq (Vineet Gupta)   
  - arm64: dts: ns2: Fixed QSPI compatible string (Florian Fainelli)   
  - ARM: dts: BCM5301X: Fixed QSPI compatible string (Florian Fainelli)   
  - mmc: sdhci-msm: Add retries when all tuning phases are found valid (Douglas Anderson)   
  - RDMA/core: Fix reported speed and width (Kamal Heib)   
  - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA (Luo Jiaxing)   
  - RDMA/rxe: Drop pointless checks in rxe_init_ports (Kamal Heib)   
  - RDMA/rxe: Fix memleak in rxe_mem_init_user (Dinghao Liu)   
  - ARM: dts: socfpga: fix register entry for timer3 on Arria10 (Dinh Nguyen)   
  - Linux 4.14.198 (Greg Kroah-Hartman)   
  - net: disable netpoll on fresh napis (Jakub Kicinski)   
  - tipc: fix shutdown() of connectionless socket (Tetsuo Handa)   
  - sctp: not disable bh in the whole sctp_get_port_local() (Xin Long)   
  - net: usb: dm9601: Add USB ID of Keenetic Plus DSL (Kamil Lorenc)   
  - netlabel: fix problems with mapping removal (Paul Moore)   
  - bnxt: don't enable NAPI until rings are ready (Jakub Kicinski)   
  - block: ensure bdi->io_pages is always initialized (Jens Axboe)   
  - ALSA; firewire-tascam: exclude Tascam FE-8 from detection (Takashi Sakamoto)   
  - Linux 4.14.197 (Greg Kroah-Hartman)   
  - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() (Himadri Pandya)   
  - cfg80211: regulatory: reject invalid hints (Johannes Berg)   
  - checkpatch: fix the usage of capture group ( ... ) (Mrinal Pandey)   
  - KVM: arm64: Set HCR_EL2.PTW to prevent AT taking synchronous exception (James Morse)   
  - KVM: arm64: Survive synchronous exceptions caused by AT instructions (James Morse)   
  - KVM: arm64: Defer guest entry when an asynchronous exception is pending (James Morse)   
  - KVM: arm64: Add kvm_extable for vaxorcism code (James Morse)   
  - mm: slub: fix conversion of freelist_corrupted() (Eugeniu Rosca)   
  - dm thin metadata: Avoid returning cmd->bm wild pointer on error (Ye Bin)   
  - dm cache metadata: Avoid returning cmd->bm wild pointer on error (Ye Bin)   
  - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks (Tejun Heo)   
  - affs: fix basic permission bits to actually work (Max Staudt)   
  - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection (Takashi Sakamoto)   
  - ALSA: hda/hdmi: always check pin power status in i915 pin fixup (Kai Vehmanen)   
  - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check (Takashi Iwai)   
  - ALSA: ca0106: fix error code handling (Tong Zhang)   
  - usb: qmi_wwan: add D-Link DWM-222 A2 device ID (Rogan Dawes)   
  - net: usb: qmi_wwan: add Telit 0x1050 composition (Daniele Palmas)   
  - btrfs: fix potential deadlock in the search ioctl (Josef Bacik)   
  - uaccess: Add non-pagefault user-space write function (Daniel Borkmann)   
  - uaccess: Add non-pagefault user-space read functions (Masami Hiramatsu)   
  - btrfs: set the lockdep class for log tree extent buffers (Josef Bacik)   
  - btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind (Nikolay Borisov)   
  - btrfs: Remove redundant extent_buffer_get in get_old_root (Nikolay Borisov)   
  - btrfs: drop path before adding new uuid tree entry (Josef Bacik)   
  - include/linux/log2.h: add missing () around n in roundup_pow_of_two() (Jason Gunthorpe)   
  - thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 (Tony Lindgren)   
  - iommu/vt-d: Serialize IOMMU GCMD register modifications (Lu Baolu)   
  - tg3: Fix soft lockup when tg3_reset_task() fails. (Michael Chan)   
  - fix regression in "epoll: Keep a reference on files added to the check list" (Al Viro)   
  - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)   
  - perf tools: Correct SNOOPX field offset (Al Grant)   
  - nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()' (Christophe JAILLET)   
  - bnxt_en: Fix PCI AER error recovery flow (Vasundhara Volam)   
  - bnxt_en: Check for zero dir entries in NVRAM. (Vasundhara Volam)   
  - gtp: add GTPA_LINK info to msg sent to userspace (Nicolas Dichtel)   
  - dmaengine: pl330: Fix burst length if burst size is smaller than bus width (Marek Szyprowski)   
  - net: arc_emac: Fix memleak in arc_mdio_probe (Dinghao Liu)   
  - ravb: Fixed to be able to unload modules (Yuusuke Ashizuka)   
  - net: systemport: Fix memleak in bcm_sysport_probe (Dinghao Liu)   
  - net: hns: Fix memleak in hns_nic_dev_probe (Dinghao Liu)   
  - netfilter: nf_tables: fix destination register zeroing (Florian Westphal)   
  - netfilter: nf_tables: incorrect enum nft_list_attributes definition (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add NFTA_SET_USERDATA if not null (Pablo Neira Ayuso)   
  - MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores (Florian Fainelli)   
  - MIPS: mm: BMIPS5000 has inclusive physical caches (Florian Fainelli)   
  - dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate() (Yu Kuai)   
  - batman-adv: bla: use netif_rx_ni when not in interrupt context (Jussi Kivilinna)   
  - batman-adv: Fix own OGM check in aggregated OGMs (Linus Lüssing)   
  - batman-adv: Avoid uninitialized chaddr when handling DHCP (Sven Eckelmann)   
  - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling (Peter Ujfalusi)   
  - xen/xenbus: Fix granting of vmalloc'd memory (Simon Leiner)   
  - s390: don't trace preemption in percpu macros (Sven Schnelle)   
  - cpuidle: Fixup IRQ state (Peter Zijlstra)   
  - ceph: don't allow setlease on cephfs (Jeff Layton)   
  - hwmon: (applesmc) check status earlier. (Tom Rix)   
  - drm/msm: add shutdown support for display platform_driver (Krishna Manikandan)   
  - perf record/stat: Explicitly call out event modifiers in the documentation (Kim Phillips)   
  - HID: core: Sanitize event code and type when mapping input (Marc Zyngier)   
  - HID: core: Correctly handle ReportSize being zero (Marc Zyngier)   
  - dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998675]  
  - configfs: make ci_type field, some pointers and function arguments const (Bhumika Goyal)  [Orabug: 32023670]  
  - drm/vmwgfx: Use the dma scatter-gather iterator to get dma addresses (Thomas Hellstrom)  [Orabug: 32033773]  
  - i40e: Corrects i40e_setup_tc and i40e_xdp defined but not used warnings (John Donnelly)  [Orabug: 32034055]  
  - SCSI: Corrects 'ret' not used warning (John Donnelly)  [Orabug: 32041771]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042519]  
  - bnxt: Corrects warning: 'struct tc_cls_flower_offload' (John Donnelly)  [Orabug: 32047140]  
  - qed: Corrects warning: 'qed_iwarp_ll2_slowpath' defined but not used (John Donnelly)  [Orabug: 32052282]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2044.el7uek]
changelog:
  - platform/x86: Corrects warning: missing braces around initializer (John Donnelly)  [Orabug: 32085032]  
  - ALSA: Corrects warning: missing braces around initializer (John Donnelly)  [Orabug: 32086763]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 31505751]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 31990094]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 32003080]  
  - net/mlx5: Fix query_nic_sys_image_guid() error during init (Aviv Heller)  [Orabug: 32042095]  
  - Lock down /proc/kcore (redux!) (Konrad Rzeszutek Wilk)  [Orabug: 32053126]  
  - lockdown: Lock down perf when in confidentiality mode (David Howells)  [Orabug: 32053126]  
  - Lock down kprobes (redux!) (Konrad Rzeszutek Wilk)  [Orabug: 32053126]  
  - debugfs: whitelist spectre mitigation when locked down (Eric Snowberg)  [Orabug: 32053126]  
  - debugfs: Return -EPERM when locked down (Eric Snowberg)  [Orabug: 32053126]  
  - debugfs: Restrict debugfs when the kernel is locked down (David Howells)  [Orabug: 32053126]  
  - lockdown: Add __kernel_is_confidentiality_mode to figure out whether we are (Konrad Rzeszutek Wilk)  [Orabug: 32053126]  
  - dtrace: Restrict access when the kernel is locked down in confidentiality mode (Konrad Rzeszutek Wilk)  [Orabug: 32053126]  
  - bpf: Restrict bpf when kernel lockdown is in confidentiality mode (David Howells)  [Orabug: 32053126]  
  - security: Add a static lockdown policy LSM [diet-version] (Matthew Garrett)  [Orabug: 32053126]  
  - scsi: Corrects warning: passing argument 1 of 'wwn_to_u64' mismatch (John Donnelly)  [Orabug: 32059638]  
  - ipvlan: Corrects warning: label 'unregister_netdev' defined but not used (John Donnelly)  [Orabug: 32059749]  
  - net/rds: Check for NULL rid_dev_rem_complete (Ka-Cheong Poon)  [Orabug: 32063783]  
  - mm, compaction: raise compaction priority after it withdrawns (Vlastimil Babka)  [Orabug: 32065217]  
  - mm, reclaim: cleanup should_continue_reclaim() (Vlastimil Babka)  [Orabug: 32065217]  
  - mm, reclaim: make should_continue_reclaim perform dryrun detection (Hillf Danton)  [Orabug: 32065217]  
  - hwrng: cavium: Corrects warning: unused variable 'dev_id' (John Donnelly)  [Orabug: 32068852]  
  - arm64: Corrects warning: ISO C90 forbids mixed declarations and code (John Donnelly)  [Orabug: 32069006]  
  - KVM: Drop "const" attribute from old memslot in commit_memory_region() (Sean Christopherson)  [Orabug: 32069215]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2045.el7uek]
changelog:
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113474]  
  - Documentation/rds: document RDS tracepoint observability (Alan Maguire)  [Orabug: 31379527]  
  - selftests/net: add rds tracepoint tests (Alan Maguire)  [Orabug: 31379527]  
  - rds: uapi header should not use u[8,64] (Alan Maguire)  [Orabug: 31379527]  
  - rds: add congestion tracepoints for congestion seen/cleared (Alan Maguire)  [Orabug: 31379527]  
  - rds: tcp transport-specific tracepoints (Alan Maguire)  [Orabug: 31379527]  
  - rds: add rds_mr-related tracepoints (Alan Maguire)  [Orabug: 31379527]  
  - rds: remove rds real-time debugging (rds_rtd) framework (Alan Maguire)  [Orabug: 31379527]  
  - rds: add more info and err tracepoints (Alan Maguire)  [Orabug: 31379527]  
  - rds: add tracepoints for work queue events (Alan Maguire)  [Orabug: 31379527]  
  - rds: add IB flow control tracepoints (Alan Maguire)  [Orabug: 31379527]  
  - rds: add tracepoint for RDS IB errors, info (Alan Maguire)  [Orabug: 31379527]  
  - rds: add tracepoints for RDS send (completion), outbound drop (Alan Maguire)  [Orabug: 31379527]  
  - rds: add tracepoints for RDS receive, inbound drop (Alan Maguire)  [Orabug: 31379527]  
  - rds: add tracepoint for RDS connection state change (error) (Alan Maguire)  [Orabug: 31379527]  
  - rds: provide inline function to retrieve qp numbers (Alan Maguire)  [Orabug: 31379527]  
  - rds: retrieve netns inode number from rds socket for tracing purposes (Alan Maguire)  [Orabug: 31379527]  
  - rds: retrieve cgroup ptr from rds socket for tracing purposes (Alan Maguire)  [Orabug: 31379527]  
  - x86/apic: Get rid of multi CPU affinity (Thomas Gleixner)  [Orabug: 31975319]  
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 31980129]  
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32048974]  
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32048974]  
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32048974]  
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32048974]  
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32048974]  
  - jiffies: add utility function to calculate delta in ms (Matteo Croce)  [Orabug: 32048974]  
  - perf symbols: Check if we read regular file in dso__load() (Jiri Olsa)  [Orabug: 32090501]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32095656]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095961]  
  - octeontx2-pf: Return proper RSS indirection table size always (Sunil Goutham)  [Orabug: 32101825]  
  - octeontx2-af: Free RVU REE irq properly (Smadar Fuks)  [Orabug: 32101825]  
  - octeontx2-af: Free RVU NIX IRQs properly. (Rakesh Babu)  [Orabug: 32101825]  
  - octeontx2-af: Fix the BPID mask (Subbaraya Sundeep)  [Orabug: 32101825]  
  - octeontx2-pf: Fix receive buffer size calculation (Sunil Goutham)  [Orabug: 32101825]  
  - octeontx2-af: Fix updating wrong multicast list index in NIX_RX_ACTION (Naveen Mamindlapalli)  [Orabug: 32101825]  
  - octeontx2-af: Ratelimit prints from AF error interrupt handlers (Naveen Mamindlapalli)  [Orabug: 32101825]  
  - octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 32101825]  
  - octeontx2-af: Check the msix offset return value (Subbaraya Sundeep)  [Orabug: 32101825]  
  - octeontx2-af: make tx nibble fixup is always apply (Stanislaw Kardach)  [Orabug: 32101825]  
  - octeontx2-af: Stop kpu parsing at layer3 for ipv6 fragmented packets. (Abhijit Ayarekar)  [Orabug: 32101825]  
  - octeontx2-pf: Call mbox_reset before incrementing ack (Hariprasad Kelam)  [Orabug: 32101825]  
  - octeontx2-af: Simplify otx2_mbox_reset call (Hariprasad Kelam)  [Orabug: 32101825]  
  - Linux 4.14.203 (Greg Kroah-Hartman)   
  - powerpc/powernv/opal-dump : Use IRQ_HANDLED instead of numbers in interrupt handler (Mukesh Ojha)   
  - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets. (Lorenzo Colitti)   
  - eeprom: at25: set minimum read/write access stride to 1 (Christian Eggers)   
  - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). (Oliver Neukum)   
  - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices (Vincent Mailhol)   
  - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char (Peng Fan)   
  - net: korina: cast KSEG0 address to pointer in kfree (Valentin Vidic)   
  - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() (Zekun Shen)   
  - scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config() (Can Guo)   
  - usb: core: Solve race condition in anchor cleanup functions (Eli Billauer)   
  - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach (Wang Yufen)   
  - mwifiex: don't call del_timer_sync() on uninitialized timer (Tetsuo Handa)   
  - reiserfs: Fix memory leak in reiserfs_parse_options() (Jan Kara)   
  - ipvs: Fix uninit-value in do_ip_vs_set_ctl() (Peilin Ye)   
  - tty: ipwireless: fix error handling (Tong Zhang)   
  - scsi: qedi: Fix list_del corruption while removing active I/O (Nilesh Javali)   
  - scsi: qedi: Protect active command list to avoid list corruption (Nilesh Javali)   
  - Fix use after free in get_capset_info callback. (Doug Horn)   
  - rtl8xxxu: prevent potential memory leak (Chris Chiu)   
  - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy (Keita Suzuki)   
  - scsi: ibmvfc: Fix error return in ibmvfc_probe() (Jing Xiangfeng)   
  - Bluetooth: Only mark socket zapped after unlocking (Abhishek Pandit-Subedi)   
  - usb: ohci: Default to per-port over-current protection (Hamish Martin)   
  - xfs: make sure the rt allocator doesn't run off the end (Darrick J. Wong)   
  - reiserfs: only call unlock_new_inode() if I_NEW (Eric Biggers)   
  - misc: rtsx: Fix memory leak in rtsx_pci_probe (Keita Suzuki)   
  - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() (Brooke Basile)   
  - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value (Joakim Zhang)   
  - USB: cdc-acm: handle broken union descriptors (Johan Hovold)   
  - udf: Avoid accessing uninitialized data on failed inode read (Jan Kara)   
  - udf: Limit sparing table size (Jan Kara)   
  - usb: gadget: function: printer: fix use-after-free in __lock_acquire (Zqiang)   
  - misc: vop: add round_up(x,4) for vring_size to avoid kernel panic (Sherry Sun)   
  - mic: vop: copy data to kernel space then write to io memory (Sherry Sun)   
  - scsi: target: core: Add CONTROL field for trace events (Roman Bolshakov)   
  - scsi: mvumi: Fix error return in mvumi_io_attach() (Jing Xiangfeng)   
  - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() (Christoph Hellwig)   
  - mac80211: handle lack of sband->bitrates in rates (Thomas Pedersen)   
  - ntfs: add check for mft record size in superblock (Rustam Kovhaev)   
  - media: venus: core: Fix runtime PM imbalance in venus_probe (Dinghao Liu)   
  - fs: dlm: fix configfs memory leak (Alexander Aring)   
  - media: saa7134: avoid a shift overflow (Mauro Carvalho Chehab)   
  - mmc: sdio: Check for CISTPL_VERS_1 buffer size (Pali Rohár)   
  - media: uvcvideo: Ensure all probed info is returned to v4l2 (Adam Goode)   
  - media: media/pci: prevent memory leak in bttv_probe (Xiaolong Huang)   
  - media: bdisp: Fix runtime PM imbalance on error (Dinghao Liu)   
  - media: platform: sti: hva: Fix runtime PM imbalance on error (Dinghao Liu)   
  - media: platform: s3c-camif: Fix runtime PM imbalance on error (Dinghao Liu)   
  - media: vsp1: Fix runtime PM imbalance on error (Dinghao Liu)   
  - media: exynos4-is: Fix a reference count leak (Qiushi Wu)   
  - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync (Qiushi Wu)   
  - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync (Qiushi Wu)   
  - media: sti: Fix reference count leaks (Qiushi Wu)   
  - media: st-delta: Fix reference count leak in delta_run_work (Aditya Pakki)   
  - media: ati_remote: sanity check for both endpoints (Oliver Neukum)   
  - media: firewire: fix memory leak (Pavel Machek)   
  - crypto: ccp - fix error handling (Pavel Machek)   
  - i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs (Hans de Goede)   
  - perf: correct SNOOPX field offset (Al Grant)   
  - NTB: hw: amd: fix an issue about leak system resources (Kaige Li)   
  - nvmet: fix uninitialized work for zero kato (zhenwei pi)   
  - powerpc/powernv/dump: Fix race while processing OPAL dump (Vasant Hegde)   
  - arm64: dts: zynqmp: Remove additional compatible string for i2c IPs (Michal Simek)   
  - ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers (Cristian Ciocaltea)   
  - arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts (Stephan Gerhold)   
  - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
  - memory: omap-gpmc: Fix a couple off by ones (Dan Carpenter)   
  - KVM: x86: emulating RDPID failure shall return #UD rather than #GP (Robert Hoo)   
  - Input: sun4i-ps2 - fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
  - Input: twl4030_keypad - fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
  - Input: omap4-keypad - fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
  - Input: ep93xx_keypad - fix handling of platform_get_irq() error (Krzysztof Kozlowski)   
  - Input: stmfts - fix a & vs && typo (YueHaibing)   
  - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() (Dan Carpenter)   
  - vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages (Xiaoyang Xu)   
  - vfio/pci: Clear token on bypass registration failure (Alex Williamson)   
  - ext4: limit entries returned when counting fsmap records (Darrick J. Wong)   
  - clk: bcm2835: add missing release if devm_clk_hw_register fails (Navid Emamdoost)   
  - clk: at91: clk-main: update key before writing AT91_CKGR_MOR (Claudiu Beznea)   
  - PCI: iproc: Set affinity mask on MSI interrupts (Mark Tomlinson)   
  - i2c: rcar: Auto select RESET_CONTROLLER (Dirk Behme)   
  - mailbox: avoid timer start from callback (Jassi Brar)   
  - rapidio: fix the missed put_device() for rio_mport_add_riodev (Jing Xiangfeng)   
  - rapidio: fix error handling path (Souptick Joarder)   
  - ramfs: fix nommu mmap with gaps in the page cache (Matthew Wilcox (Oracle))   
  - lib/crc32.c: fix trivial typo in preprocessor condition (Tobias Jordan)   
  - f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info (Jamie Iles)   
  - IB/rdmavt: Fix sizeof mismatch (Colin Ian King)   
  - cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier (Srikar Dronamraju)   
  - powerpc/perf/hv-gpci: Fix starting index value (Kajol Jain)   
  - powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints (Athira Rajeev)   
  - overflow: Include header file with SIZE_MAX declaration (Leon Romanovsky)   
  - kdb: Fix pager search for multi-line strings (Daniel Thompson)   
  - RDMA/hns: Set the unsupported wr opcode (Lijun Ou)   
  - perf intel-pt: Fix "context_switch event has no tid" error (Adrian Hunter)   
  - powerpc/tau: Disable TAU between measurements (Finn Thain)   
  - powerpc/tau: Remove duplicated set_thresholds() call (Finn Thain)   
  - powerpc/tau: Use appropriate temperature sample interval (Finn Thain)   
  - RDMA/qedr: Fix use of uninitialized field (Michal Kalderon)   
  - xfs: limit entries returned when counting fsmap records (Darrick J. Wong)   
  - arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER (Necip Fazil Yildiran)   
  - ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values (Guillaume Tucker)   
  - mtd: mtdoops: Don't write panic data twice (Mark Tomlinson)   
  - mtd: lpddr: fix excessive stack usage with clang (Arnd Bergmann)   
  - powerpc/icp-hv: Fix missing of_node_put() in success path (Nicholas Mc Guire)   
  - powerpc/pseries: Fix missing of_node_put() in rng_init() (Nicholas Mc Guire)   
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)   
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)   
  - mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary (Suren Baghdasaryan)   
  - mm/memcg: fix device private memcg accounting (Ralph Campbell)   
  - net: korina: fix kfree of rx/tx descriptor array (Valentin Vidic)   
  - mwifiex: fix double free (Tom Rix)   
  - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() (Dan Carpenter)   
  - usb: dwc2: Fix INTR OUT transfers in DDMA mode. (Minas Harutyunyan)   
  - nl80211: fix non-split wiphy information (Johannes Berg)   
  - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well (Lorenzo Colitti)   
  - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. (Lorenzo Colitti)   
  - iwlwifi: mvm: split a print to avoid a WARNING in ROC (Emmanuel Grumbach)   
  - mfd: sm501: Fix leaks in probe() (Dan Carpenter)   
  - net: enic: Cure the enic api locking trainwreck (Thomas Gleixner)   
  - qtnfmac: fix resource leaks on unsupported iftype error return path (Colin Ian King)   
  - HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)   
  - quota: clear padding in v2r1_mem2diskdqb() (Eric Dumazet)   
  - usb: dwc2: Fix parameter type in function pointer prototype (Nathan Chancellor)   
  - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl (Takashi Iwai)   
  - misc: mic: scif: Fix error handling path (Souptick Joarder)   
  - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() (Dan Carpenter)   
  - pinctrl: mcp23s08: Fix mcp23x17 precious range (Thomas Preston)   
  - pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser (Thomas Preston)   
  - HID: roccat: add bounds checking in kone_sysfs_write_settings() (Dan Carpenter)   
  - video: fbdev: sis: fix null ptr dereference (Tom Rix)   
  - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error (Colin Ian King)   
  - drivers/virt/fsl_hypervisor: Fix error handling path (Souptick Joarder)   
  - pwm: lpss: Add range limit check for the base_unit register value (Hans de Goede)   
  - pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() (Hans de Goede)   
  - pty: do tty_flip_buffer_push without port->lock in pty_write (Artem Savkov)   
  - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() (Tyrel Datwyler)   
  - tty: serial: earlycon dependency (Tong Zhang)   
  - VMCI: check return value of get_user_pages_fast() for errors (Alex Dewar)   
  - backlight: sky81452-backlight: Fix refcount imbalance on error (dinghao.liu@zju.edu.cn)   
  - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() (Tianjia Zhang)   
  - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' (Christophe JAILLET)   
  - drm/gma500: fix error check (Tom Rix)   
  - mwifiex: Do not use GFP_KERNEL in atomic context (Christophe JAILLET)   
  - brcmfmac: check ndev pointer (Tom Rix)   
  - ASoC: qcom: lpass-cpu: fix concurrency issue (Rohit kumar)   
  - ASoC: qcom: lpass-platform: fix memory leak (Rohit kumar)   
  - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 (Bryan O'Donoghue)   
  - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() (Dan Carpenter)   
  - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() (Dan Carpenter)   
  - Bluetooth: hci_uart: Cancel init work before unregistering (Samuel Holland)   
  - ath10k: provide survey info as accumulated data (Venkateswara Naralasetty)   
  - regulator: resolve supply after creating regulator (Michał Mirosław)   
  - media: ti-vpe: Fix a missing check and reference count leak (Qiushi Wu)   
  - media: s5p-mfc: Fix a reference count leak (Qiushi Wu)   
  - media: platform: fcp: Fix a reference count leak. (Qiushi Wu)   
  - media: tc358743: initialize variable (Tom Rix)   
  - media: mx2_emmaprp: Fix memleak in emmaprp_probe (Dinghao Liu)   
  - cypto: mediatek - fix leaks in mtk_desc_ring_alloc (Xiaoliang Pang)   
  - crypto: omap-sham - fix digcnt register handling with export/import (Tero Kristo)   
  - media: omap3isp: Fix memleak in isp_probe (Dinghao Liu)   
  - media: uvcvideo: Set media controller entity functions (Laurent Pinchart)   
  - media: m5mols: Check function pointer in m5mols_sensor_power (Tom Rix)   
  - media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()" (Sylwester Nawrocki)   
  - media: tuner-simple: fix regression in simple_set_radio_freq (Tom Rix)   
  - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET)   
  - crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc() (Tianjia Zhang)   
  - crypto: algif_skcipher - EBUSY on aio should be an error (Herbert Xu)   
  - drivers/perf: xgene_pmu: Fix uninitialized resource struct (Mark Salter)   
  - x86/fpu: Allow multiple bits in clearcpuid= parameter (Arvind Sankar)   
  - EDAC/i5100: Fix error handling order in i5100_init_one() (Dinghao Liu)   
  - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Herbert Xu)   
  - ima: Don't ignore errors from crypto_shash_update() (Roberto Sassu)   
  - KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)   
  - KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages (Sean Christopherson)   
  - cifs: Return the error from crypt_message when enc/dec key not found. (Shyam Prasad N)   
  - cifs: remove bogus debug code (Dan Carpenter)   
  - icmp: randomize the global rate limiter (Eric Dumazet)   
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)   
  - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() (Defang Bo)   
  - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup (Xie He)   
  - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device (Xie He)   
  - ALSA: bebob: potential info leak in hwdep_read() (Dan Carpenter)   
  - binder: fix UAF when releasing todo list (Todd Kjos)   
  - r8169: fix data corruption issue on RTL8402 (Heiner Kallweit)   
  - net/ipv4: always honour route mtu during forwarding (Maciej Żenczykowski)   
  - tipc: fix the skb_unshare() in tipc_buf_append() (Cong Wang)   
  - net: usb: qmi_wwan: add Cellient MPL200 card (Wilken Gottwalt)   
  - mlx4: handle non-napi callers to napi_poll (Jonathan Lemon)   
  - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route (David Ahern)   
  - ibmveth: Identify ingress large send packets. (David Wilder)   
  - ibmveth: Switch order of ibmveth_helper calls. (David Wilder)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2046.el7uek]
changelog:
  - lockdown: By default run in integrity mode. (Konrad Rzeszutek Wilk)  [Orabug: 32131560]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32138009]  
  - Revert "pci: hardcode enumeration" (Dave Aldridge)  [Orabug: 32152281]  
  - hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152143]  
  - hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152143]  
  - Revert "iomap: Fix pipe page leakage during splicing" (George Kennedy)  [Orabug: 30848187]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakx (Ankur Arora)  [Orabug: 32080078]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on AMD Zen (Ankur Arora)  [Orabug: 32080078]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32080078]  
  - mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32080078]  
  - x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32080078]  
  - x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32080078]  
  - perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32080078]  
  - x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32080078]  
  - x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32080078]  
  - Linux 4.14.206 (Greg Kroah-Hartman)   
  - powercap: restrict energy meter to root access (Len Brown)   
  - Linux 4.14.205 (Greg Kroah-Hartman)  [Orabug: 32041544]  
  - arm64: dts: marvell: espressobin: add ethernet alias (Tomasz Maciej Nowak)   
  - PM: runtime: Resume the device earlier in __device_release_driver() (Rafael J. Wysocki)   
  - Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE" (Vineet Gupta)   
  - ARC: stack unwinding: avoid indefinite looping (Vineet Gupta)   
  - usb: mtu3: fix panic in mtu3_gadget_stop() (Macpaul Lin)   
  - USB: Add NO_LPM quirk for Kingston flash drive (Alan Stern)   
  - USB: serial: option: add Telit FN980 composition 0x1055 (Daniele Palmas)   
  - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 (Daniele Palmas)   
  - USB: serial: option: add Quectel EC200T module support (Ziyi Cao)   
  - USB: serial: cyberjack: fix write-URB completion race (Johan Hovold)   
  - serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init (Qinglang Miao)   
  - serial: 8250_mtk: Fix uart_get_baud_rate warning (Claire Chang)   
  - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (Eddy Wu)   
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)   
  - ACPI: NFIT: Fix comparison to '-ENXIO' (Zhang Qilong)   
  - drm/vc4: drv: Add error handding for bind (Hoegeun Kwon)   
  - vsock: use ns_capable_noaudit() on socket create (Jeff Vander Stoep)   
  - scsi: core: Don't start concurrent async scan on same host (Ming Lei)   
  - blk-cgroup: Pre-allocate tree node on blkg_conf_prep (Gabriel Krisman Bertazi)   
  - blk-cgroup: Fix memleak on error path (Gabriel Krisman Bertazi)   
  - of: Fix reserved-memory overlap detection (Vincent Whitchurch)   
  - x86/kexec: Use up-to-dated screen_info copy to fill boot params (Kairui Song)   
  - ARM: dts: sun4i-a10: fix cpu_alert temperature (Clément Péron)   
  - futex: Handle transient "ownerless" rtmutex state correctly (Mike Galbraith)   
  - tracing: Fix out of bounds write in get_trace_buf (Qiujun Huang)   
  - ftrace: Handle tracing when switching between context (Steven Rostedt (VMware))   
  - ftrace: Fix recursion check for NMI test (Steven Rostedt (VMware))   
  - gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring)   
  - mm: always have io_remap_pfn_range() set pgprot_decrypted() (Jason Gunthorpe)   
  - kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled (Zqiang)   
  - lib/crc32test: remove extra local_irq_disable/enable (Vasily Gorbik)   
  - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 (Geoffrey D. Bennett)   
  - Fonts: Replace discarded const qualifier (Lee Jones)   
  - blktrace: fix debugfs use after free (Luis Chamberlain)   {CVE-2019-19770} 
  - Blktrace: bail out early if block debugfs is not configured (Liu Bo)   
  - sfp: Fix error handing in sfp_probe() (YueHaibing)   
  - sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms (Petr Malat)   
  - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition (Daniele Palmas)   
  - gianfar: Account for Tx PTP timestamp in the skb headroom (Claudiu Manoil)   
  - gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP (Claudiu Manoil)   
  - tipc: fix use-after-free in tipc_bcast_get_mode (Hoang Huu Le)   
  - drm/i915: Break up error capture compression loops with cond_resched() (Chris Wilson)   
  - Linux 4.14.204 (Greg Kroah-Hartman)   
  - staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice (Ian Abbott)   
  - KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR (Marc Zyngier)   
  - device property: Don't clear secondary pointer for shared primary firmware node (Andy Shevchenko)   
  - device property: Keep secondary firmware node secondary by type (Andy Shevchenko)   
  - ARM: s3c24xx: fix missing system reset (Krzysztof Kozlowski)   
  - ARM: samsung: fix PM debug build with DEBUG_LL but !MMU (Krzysztof Kozlowski)   
  - arm: dts: mt7623: add missing pause for switchport (Frank Wunderlich)   
  - hil/parisc: Disable HIL driver when it gets stuck (Helge Deller)   
  - cachefiles: Handle readpage error correctly (Matthew Wilcox (Oracle))   
  - arm64: berlin: Select DW_APB_TIMER_OF (Jisheng Zhang)   
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)   
  - rtc: rx8010: don't modify the global rtc ops (Bartosz Golaszewski)   
  - drm/ttm: fix eviction valuable range check. (Dave Airlie)   
  - ext4: fix invalid inode checksum (Luo Meng)   
  - ext4: fix error handling code in add_new_gdb (Dinghao Liu)   
  - ext4: fix leaking sysfs kobject after failed mount (Eric Biggers)   
  - vringh: fix __vringh_iov() when riov and wiov are different (Stefano Garzarella)   
  - ring-buffer: Return 0 on success from ring_buffer_resize() (Qiujun Huang)   
  - 9P: Cast to loff_t before multiplying (Matthew Wilcox (Oracle))   
  - libceph: clear con->out_msg on Policy::stateful_server faults (Ilya Dryomov)   
  - ceph: promote to unsigned long long before shifting (Matthew Wilcox (Oracle))   
  - drm/amdgpu: don't map BO in reserved region (Madhav Chauhan)   
  - ia64: fix build error with !COREDUMP (Krzysztof Kozlowski)   
  - ubi: check kthread_should_stop() after the setting of task state (Zhihao Cheng)   
  - perf python scripting: Fix printable strings in python3 scripts (Jiri Olsa)   
  - ubifs: dent: Fix some potential memory leaks while iterating entries (Zhihao Cheng)   
  - NFSD: Add missing NFSv2 .pc_func methods (Chuck Lever)   
  - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag (Olga Kornievskaia)   
  - powerpc/powernv/elog: Fix race while processing OPAL error log event. (Mahesh Salgaonkar)   
  - powerpc: Warn about use of smt_snooze_delay (Joel Stanley)   
  - powerpc/rtas: Restrict RTAS requests from userspace (Andrew Donnellan)   
  - s390/stp: add locking to sysfs functions (Sven Schnelle)   
  - iio:gyro:itg3200: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio:adc:ti-adc12138 Fix alignment issue with timestamp (Jonathan Cameron)   
  - iio:adc:ti-adc0832 Fix alignment issue with timestamp (Jonathan Cameron)   
  - iio:light:si1145: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status (Paul Cercueil)   
  - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)   {CVE-2020-25656} 
  - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)   
  - drm/i915: Force VT'd workarounds when running as a guest OS (Chris Wilson)   
  - usb: host: fsl-mph-dr-of: check return of dma_set_mask() (Ran Wang)   
  - usb: cdc-acm: fix cooldown mechanism (Jerome Brunet)   
  - usb: dwc3: core: don't trigger runtime pm when remove driver (Li Jun)   
  - usb: dwc3: core: add phy cleanup for probe error handling (Li Jun)   
  - usb: dwc3: ep0: Fix ZLP for OUT ep0 requests (Thinh Nguyen)   
  - btrfs: fix use-after-free on readahead extent after failure to create it (Filipe Manana)   
  - btrfs: cleanup cow block on error (Josef Bacik)   
  - btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send() (Denis Efremov)   
  - btrfs: send, recompute reference path after orphanization of a directory (Filipe Manana)   
  - btrfs: reschedule if necessary when logging directory items (Filipe Manana)   
  - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() (Helge Deller)   
  - w1: mxc_w1: Fix timeout resolution problem leading to bus error (Martin Fuzzey)   
  - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (Wei Huang)   
  - ACPI: debug: don't allow debugging when ACPI is disabled (Jamie Iles)   
  - ACPI: video: use ACPI backlight for HP 635 Notebook (Alex Hung)   
  - ACPI / extlog: Check for RDMSR failure (Ben Hutchings)   
  - NFS: fix nfs_path in case of a rename retry (Ashish Sangwan)   
  - fs: Don't invalidate page buffers in block_write_full_page() (Jan Kara)   
  - leds: bcm6328, bcm6358: use devres LED registering function (Marek Behún)   
  - perf/x86/amd/ibs: Fix raw sample data accumulation (Kim Phillips)   
  - perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count() (Kim Phillips)   
  - md/raid5: fix oops during stripe resizing (Song Liu)   
  - nvme-rdma: fix crash when connect rejected (Chao Leng)   
  - sgl_alloc_order: fix memory leak (Douglas Gilbert)   
  - nbd: make the config put is called before the notifying the waiter (Xiubo Li)   
  - ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: move PMU node out of clock controller (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings (Krzysztof Kozlowski)   
  - memory: emif: Remove bogus debugfs error handling (Dan Carpenter)   
  - arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes (Yoshihiro Shimoda)   
  - gfs2: add validation checks for size of superblock (Anant Thazhemadam)   
  - ext4: Detect already used quota file early (Jan Kara)   
  - drivers: watchdog: rdc321x_wdt: Fix race condition bugs (Madhuparna Bhowmik)   
  - net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid (Anant Thazhemadam)   
  - clk: ti: clockdomain: fix static checker warning (Tero Kristo)   
  - bnxt_en: Log unknown link speed appropriately. (Michael Chan)   
  - md/bitmap: md_bitmap_get_counter returns wrong blocks (Zhao Heming)   
  - power: supply: test_power: add missing newlines when printing parameters by sysfs (Xiongfeng Wang)   
  - bus/fsl_mc: Do not rely on caller to provide non NULL mc_io (Diana Craciun)   
  - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values (Xie He)   
  - ACPI: Add out of bounds and numa_off protections to pxm_to_node() (Jonathan Cameron)   
  - arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE (Zhengyuan Liu)   
  - uio: free uio id after uio file node is freed (Lang Dai)   
  - USB: adutux: fix debugging (Oliver Neukum)   
  - cpufreq: sti-cpufreq: add stih418 support (Alain Volmat)   
  - kgdb: Make "kgdbcon" work properly with "kgdb_earlycon" (Douglas Anderson)   
  - printk: reduce LOG_BUF_SHIFT range for H8300 (John Ogness)   
  - drm/bridge/synopsys: dsi: add support for non-continuous HS clock (Antonio Borneo)   
  - mmc: via-sdmmc: Fix data race bug (Madhuparna Bhowmik)   
  - media: tw5864: check status of tw5864_frameinterval_get (Tom Rix)   
  - usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart (Badhri Jagan Sridharan)   
  - media: platform: Improve queue set up flow for bug fixing (Xia Jiang)   
  - media: videodev2.h: RGB BT2020 and HSV are always full range (Hans Verkuil)   
  - drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly (Nadezda Lutovinova)   
  - ath10k: fix VHT NSS calculation when STBC is enabled (Sathishkumar Muruganandam)   
  - ath10k: start recovery process when payload length exceeds max htc length for sdio (Wen Gong)   
  - video: fbdev: pvr2fb: initialize variables (Tom Rix)   
  - xfs: fix realtime bitmap/summary file truncation when growing rt volume (Darrick J. Wong)   
  - ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses (Douglas Anderson)   
  - um: change sigio_spinlock to a mutex (Johannes Berg)   
  - f2fs: fix to check segment boundary during SIT page readahead (Chao Yu)   
  - f2fs: add trace exit in exception path (Zhang Qilong)   
  - sparc64: remove mm_cpumask clearing to fix kthread_use_mm race (Nicholas Piggin)   
  - powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM (Nicholas Piggin)   
  - powerpc/powernv/smp: Fix spurious DBG() warning (Oliver O'Halloran)   
  - futex: Fix incorrect should_fail_futex() handling (Mateusz Nosek)   
  - mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (Amit Cohen)   
  - x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels (Jiri Slaby)   
  - fscrypt: return -EXDEV for incompatible rename or link into encrypted dir (Eric Biggers)   
  - ata: sata_rcar: Fix DMA boundary mask (Geert Uytterhoeven)   
  - mtd: lpddr: Fix bad logic in print_drs_error (Gustavo A. R. Silva)   
  - p54: avoid accessing the data mapped to streaming DMA (Jia-Ju Bai)   
  - fuse: fix page dereference after free (Miklos Szeredi)   
  - x86/xen: disable Firmware First mode for correctable memory errors (Juergen Gross)   
  - arch/x86/amd/ibs: Fix re-arming IBS Fetch (Kim Phillips)   
  - tipc: fix memory leak caused by tipc_buf_append() (Tung Nguyen)   
  - ravb: Fix bit fields checking in ravb_hwtstamp_get() (Andrew Gabbasov)   
  - gtp: fix an use-before-init in gtp_newlink() (Masahiro Fujiwara)   
  - efivarfs: Replace invalid slashes with exclamation marks in dentries. (Michael Schaller)   
  - arm64: link with -z norelro regardless of CONFIG_RELOCATABLE (Nick Desaulniers)   
  - scripts/setlocalversion: make git describe output more reliable (Rasmus Villemoes)   
  - Btrfs: fix selftests failure due to uninitialized i_mode in test inodes (Filipe Manana)  [Orabug: 31864725]  {CVE-2019-19816} 
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864725]  {CVE-2019-19816} 
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864725]  {CVE-2019-19816} 
  - hv_netvsc: Set probe mode to sync (Haiyang Zhang)  [Orabug: 32120118]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.500.9.1.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492110]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492102]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492094]  {CVE-2021-26932}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.9.2.el7uek]
changelog:
  - Fix double free KASAN warnings and use after free of kmalloc-32 object. (Imran Khan)  [Orabug: 32515995]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.500.9.3.el7uek]
changelog:
  - net/rds: Reject error code change (Ka-Cheong Poon)  [Orabug: 32577425]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran)  [Orabug: 32577399]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  [Orabug: 32577394]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.501.0.el7uek]
changelog:
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531559]  
  - uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches (Dave Kleikamp)  [Orabug: 32532588]  
  - dts/pensando: Fix compatile -> compatible typeo. (David Clear)  [Orabug: 32532588]  
  - Interrupt domain controllers for Elba ASIC. (David Clear)  [Orabug: 32532588]  
  - elba_defconfig: CONFIG_PTP_1588_CLOCK=y (David Clear)  [Orabug: 32532588]  
  - soc/pensando: pcie driver (David Clear)  [Orabug: 32532588]  
  - pcie: control access to pcie clock domain registers (David Clear)  [Orabug: 32532588]  
  - mmc: sdhci-cadence-elba ADMA and HS200 tuning support (David Clear)  [Orabug: 32532588]  
  - enable rcu callback offloading & adaptive tick mode to reduce jitter (David Clear)  [Orabug: 32532588]  
  - uek-rpm: Enable perf trace support for OL7 kernel builds. (Mridula Shastry)  [Orabug: 32528194]  
  - uek-rpm: update config-aarch-embedded2 for Elba (Dave Kleikamp)  [Orabug: 32361844]  
  - elba: u-boot environment partitions in the device-tree (David Clear)  [Orabug: 32361844]  
  - i2c: Add Elba Ortano Lattice RD1173 I2C controller driver. (David Clear)  [Orabug: 32361844]  
  - elba: one more mnet for elba.dtsi (David Clear)  [Orabug: 32361844]  
  - elba: Add IPv6 support to elba_defconfig (David Clear)  [Orabug: 32361844]  
  - mmc: sdhci-cadence-elba sdhci driver cleanup (David Clear)  [Orabug: 32361844]  
  - spi-dw: custom chip-select handler for elba (David Clear)  [Orabug: 32361844]  
  - arch/arm64: Pensando elba dts and config files (David Clear)  [Orabug: 32361844]  
  - drivers/soc/pensando: crash dump driver. (David Clear)  [Orabug: 32361844]  
  - drivers/pensando/soc: Boot State Machine (BSM) integration. (David Clear)  [Orabug: 32361844]  
  - drivers/soc/pensando: /dev/capmem driver. (David Clear)  [Orabug: 32361844]  
  - drivers/mmc/host: Pensando Elba support in the Cadence EMMC host controller (David Clear)  [Orabug: 32361844]  
  - drivers/gpio: support the Elba SPI chip-selects. (David Clear)  [Orabug: 32361844]  
  - arch/arm64: Pensando Elba SoC declaration. (David Clear)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: fix PHY write (Vladimir Kondratiev)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN for UniPhier (Masahiro Yamada)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: remove unneeded 'inline' marker (Masahiro Yamada)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: use struct_size() helper (Gustavo A. R. Silva)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: fix logically and structurally dead code (Gustavo A. R. Silva)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: send tune request twice to work around errata (Masahiro Yamada)  [Orabug: 32361844]  
  - mmc: sdhci-cadence: use bitfield access macros for cleanup (Masahiro Yamada)  [Orabug: 32361844]  
  - Revert "Support the reset pulse width from the device-tree." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Initial Pensando Capri SoC declaration" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add Capri EMMC phy and instantiate the driver in the dts" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Capri SPI driver" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Interrupt domain controllers for Capri ASIC." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add uio support for Capri PCIE and Link interrupts" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Pensando/Capri PCIE panic handler." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Pensando crash dump driver" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Pensando Boot State Machine (BSM) integration." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add mnic nodes to the Pensando devicetree" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "mtd/spi-nor/cadence-quadspi.c: Speed up reads." (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add /proc/xmaps" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add Pensando Capri board .dts files and default configs" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Provide for precise control of pgprot for Pensando" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Kconfig option to disable outer-cache-allocate for Pensando" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Add /dev/capmem driver for Pensando" (Dave Kleikamp)  [Orabug: 32361844]  
  - Revert "Make low-speed APB bus accesses single threaded" (Dave Kleikamp)  [Orabug: 32361844]  
  - sched/topology: Assert non-NUMA topology masks don't (partially) overlap (Valentin Schneider)  [Orabug: 32485794]  
  - x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov)  [Orabug: 32409137]  
  - x86/msr: Downgrade unrecognized MSR message (Borislav Petkov)  [Orabug: 32409137]  
  - x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov)  [Orabug: 32409137]  
  - x86/msr: Prevent userspace MSR access from dominating the console (Chris Down)  [Orabug: 32409137]  
  - x86/msr: Filter MSR writes (Borislav Petkov)  [Orabug: 32409137]  
  - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32409137]  
  - tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32409137]  
  - tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32409137]  
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422664]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422664]  
  - ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32435220]  {CVE-2020-16120} 
  - ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32435220]  {CVE-2020-16120} 
  - ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32435220]  
  - l2tp: fix race in pppol2tp_release with session object destroy (James Chapman)  [Orabug: 32435324]  
  - l2tp: fix races with tunnel socket close (James Chapman)  [Orabug: 32435324]  
  - l2tp: don't use inet_shutdown on ppp session destroy (James Chapman)  [Orabug: 32435324]  
  - l2tp: don't use inet_shutdown on tunnel destroy (James Chapman)  [Orabug: 32435324]  
  - l2tp: exit_net cleanup check added (Vasily Averin)  [Orabug: 32435324]  
  - l2tp: remove the .tunnel_sock field from struct pppol2tp_session (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: avoid using ->tunnel_sock for getting session's parent tunnel (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove .tunnel_sock from struct l2tp_eth (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: don't close sessions in l2tp_tunnel_destruct() (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove field 'dev' from struct l2tp_eth (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove l2tp_tunnel_count and l2tp_session_count (Guillaume Nault)  [Orabug: 32435324]  
  - l2tp: remove ->ref() and ->deref() (Guillaume Nault)  [Orabug: 32435324]  
  - net: l2tp: mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 32435324]  
  - l2tp: initialise PPP sessions before registering them (Guillaume Nault)  [Orabug: 32435324]  
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442506]  
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447189]  {CVE-2021-3347} 
  - futex: Don't enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447189]  {CVE-2021-3347} 
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447287]  {CVE-2021-3348} 
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32457375]  
  - net/rds: WARNING in rds_conn_drop (Ka-Cheong Poon)  [Orabug: 32481707]  
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490010]  
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490032]  
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492279]  
  - selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492279]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.501.1.el7uek]
changelog:
  - ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy)  [Orabug: 32620381]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.501.2.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32634994]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.0.el7uek]
changelog:
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32586918]  
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32586918]  
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580944]  
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576073]  
  - vhost: do not try to access device IOTLB when not initialized (Jason Wang)  [Orabug: 31906788]  
  - uek-rpm: config-aarch-embedded2 update for Feb 2021 Elba patches (Dave Kleikamp)  [Orabug: 32544715]  
  - huge page support for device memory (Neel Patel)  [Orabug: 32544715]  
  - mmc: sdhci-cadence-elba.c: Remove SDHCI_QUIRK_BROKEN_TIMEOUT_VAL (David Clear)  [Orabug: 32544715]  
  - KVM: nVMX: use correct clean fields when copying from eVMCS (Vitaly Kuznetsov)  [Orabug: 32544092]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492971]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492971]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (James Puthukattukaran)  [Orabug: 32527186]  
  - net/rds: Reject error code change (Ka-Cheong Poon)  [Orabug: 32565543]  
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 32519917]  
  - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32546040]  
  - x86/kvm/hyper-v: move VMX controls sanitization out of nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 32543800]  
  - x86/kvm/hyper-v: remove stale evmcs_already_enabled check from nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 32543800]  
  - net/rds: Need to check shutdown progress in rds_conn_path_destroy() (Ka-Cheong Poon)  [Orabug: 32536002]  
  - A/A Bonding: In rdmaip synchronize access to ip_config[].rdmaip_dev (Sharath Srinivasan)  [Orabug: 32050122]  
  - net/rds: In rds_send_xmit() use sg_next() to get the next sg entry (Sharath Srinivasan)  [Orabug: 32125836]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)  [Orabug: 32551377]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.1.el7uek]
changelog:
  - mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32619973]  
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603381]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555678]  
  - ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy)  [Orabug: 32608965]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.2.el7uek]
changelog:
  - EDAC: skx_common: downgrade message importance on missing PCI device (Aristeu Rozanski)  [Orabug: 32651294]  
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651477]  {CVE-2021-28038} 
  - KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged (Wanpeng Li)  [Orabug: 32633928]  
  - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32640132]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.3.el7uek]
changelog:
  - video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui)  [Orabug: 32620797]  
  - video: hyperv_fb: Fix the cache type when mapping the VRAM (Dexuan Cui)  [Orabug: 32620797]  
  - RDMA/core: Fix corrupted SL on passive side (Håkon Bugge)  [Orabug: 32644356]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.4.el7uek]
changelog:
  - Revert "rds: ib: Remove two ib_modify_qp() calls" (Sharath Srinivasan)  [Orabug: 32715567]  
  - uek-rpm: Update SecureBoot Digicert 2021 certificates (Somasundaram Krishnasamy)  [Orabug: 32532514]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.502.5.el7uek]
changelog:
  - md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam)  [Orabug: 32655105]  
  - IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju)  [Orabug: 32751642]  
  - IB/mlx5: Use fragmented QP's buffer for in-kernel users (Guy Levi)  [Orabug: 32627473]  
  - net/mlx5: Refactor fragmented buffer struct fields and init flow (Tariq Toukan)  [Orabug: 32627473]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.0.el7uek]
changelog:
  - tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet)  [Orabug: 32660047]  
  - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit)  [Orabug: 32640437]  
  - iommu/amd: Increase interrupt remapping table limit to 512 entries (Suravee Suthikulpanit)  [Orabug: 32640437]  
  - rds: ib: move statistics counting from caller to callee in rds_ib_recv_refill (Håkon Bugge)  [Orabug: 32702021]  
  - uek-rpm: Enable IRQ time accounting option for UEK5 (Saeed Mirzamohammadi)  [Orabug: 32733985]  
  - btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669453]  {CVE-2021-28964} 
  - perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang)  [Orabug: 32669472]  {CVE-2021-28971} 
  - xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697854]  {CVE-2021-28688} 
  - ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang)  [Orabug: 32545320]  
  - rds: Add code to debug rds_tcp loopback hang (Rao Shoaib)  [Orabug: 32422982]  
  - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656764]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656764]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656764]  {CVE-2020-27170} {CVE-2020-27171} 
  - netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709123]  {CVE-2021-29650} 
  - netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal)  [Orabug: 32709123]  {CVE-2021-29650}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.1.el7uek]
changelog:
  - bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk)  [Orabug: 32759961]  {CVE-2021-29154} 
  - uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy)  [Orabug: 32781585]  
  - ext4: handle error of ext4_setup_system_zone() on remount (Jan Kara)  [Orabug: 32656590]  {CVE-2021-3428}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.503.1.1.el7uek]
changelog:
  - net/mlx5e: Rx, Fix checksum calculation for new hardware (Saeed Mahameed)  [Orabug: 32899003]  
  - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (Saeed Mahameed)  [Orabug: 32899003]  
  - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames (Cong Wang)  [Orabug: 32899003]  
  - mlx5: fix get_ip_proto() (Cong Wang)  [Orabug: 32899003]  
  - net/mlx5e: Set ECN for received packets using CQE indication (Natali Shechtman)  [Orabug: 32899003]  
  - net/mlx5e: CHECKSUM_COMPLETE offload for VLAN/QinQ packets (Gal Pressman)  [Orabug: 32899003]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.0.el7uek]
changelog:
  - IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32853000]  
  - x86/amd: Disable IBS on Rome processors due to erratum 1215 (Boris Ostrovsky)  [Orabug: 32817187]  
  - net/mlx5e: Rx, Fix checksum calculation for new hardware (Saeed Mahameed)  [Orabug: 32553186]  
  - net/mlx5e: Rx, Fixup skb checksum for packets with tail padding (Saeed Mahameed)  [Orabug: 32553186]  
  - net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames (Cong Wang)  [Orabug: 32553186]  
  - mlx5: fix get_ip_proto() (Cong Wang)  [Orabug: 32553186]  
  - net/mlx5e: Set ECN for received packets using CQE indication (Natali Shechtman)  [Orabug: 32553186]  
  - net/mlx5e: CHECKSUM_COMPLETE offload for VLAN/QinQ packets (Gal Pressman)  [Orabug: 32553186]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.1.el7uek]
changelog:
  - Linux 4.14.208 (Greg Kroah-Hartman)   
  - ACPI: GED: fix -Wformat (Nick Desaulniers)   
  - can: proc: can_remove_proc(): silence remove_proc_entry warning (Zhang Changzhong)   
  - mac80211: always wind down STA state (Johannes Berg)   
  - Input: sunkbd - avoid use-after-free in teardown paths (Dmitry Torokhov)   
  - powerpc/8xx: Always fault when _PAGE_ACCESSED is not set (Christophe Leroy)   
  - gpio: mockup: fix resource leak in error path (Bartosz Golaszewski)   
  - i2c: imx: Fix external abort on interrupt in exit paths (Krzysztof Kozlowski)   
  - i2c: imx: use clk notifier for rate changes (Lucas Stach)   
  - powerpc/64s: flush L1D after user accesses (Nicholas Piggin)   {CVE-2020-4788} 
  - powerpc/uaccess: Evaluate macro arguments once, before user access is allowed (Nicholas Piggin)   
  - powerpc: Fix __clear_user() with KUAP enabled (Andrew Donnellan)   
  - powerpc: Implement user_access_begin and friends (Christophe Leroy)   
  - powerpc: Add a framework for user access tracking (Christophe Leroy)   
  - powerpc/64s: flush L1D on kernel entry (Nicholas Piggin)   {CVE-2020-4788} 
  - powerpc/64s: move some exception handlers out of line (Daniel Axtens)   
  - powerpc/64s: Define MASKABLE_RELON_EXCEPTION_PSERIES_OOL (Daniel Axtens)   
  - Linux 4.14.207 (Greg Kroah-Hartman)   
  - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race (Nicholas Piggin)   
  - Convert trailing spaces and periods in path components (Boris Protopopov)   
  - reboot: fix overflow parsing reboot cpu number (Matteo Croce)   
  - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" (Matteo Croce)   
  - perf/core: Fix crash when using HW tracing kernel filters (Mathieu Poirier)   
  - x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP (Anand K Mistry)   
  - random32: make prandom_u32() output unpredictable (George Spelvin)   
  - net: Update window_clamp if SOCK_RCVBUF is set (Mao Wenan)   
  - r8169: fix potential skb double free in an error path (Heiner Kallweit)   
  - vrf: Fix fast path output packet handling with async Netfilter rules (Martin Willi)   
  - net/x25: Fix null-ptr-deref in x25_connect (Martin Schiller)   
  - net/af_iucv: fix null pointer dereference on shutdown (Ursula Braun)   
  - IPv6: Set SIT tunnel hard_header_len to zero (Oliver Herms)   
  - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" (Stefano Stabellini)   
  - pinctrl: amd: fix incorrect way to disable debounce filter (Coiby Xu)   
  - pinctrl: amd: use higher precision for 512 RtcClk (Coiby Xu)   
  - drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] (Thomas Zimmermann)   
  - don't dump the threads that had been already exiting when zapped. (Al Viro)   
  - selinux: Fix error return code in sel_ib_pkey_sid_slow() (Chen Zhou)   
  - mei: protect mei_cl_mtu from null dereference (Alexander Usyskin)   
  - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode (Chris Brandt)   
  - uio: Fix use-after-free in uio_unregister_device() (Shin'ichiro Kawasaki)   
  - thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() (Jing Xiangfeng)   
  - ext4: unlock xattr_sem properly in ext4_inline_data_truncate() (Joseph Qi)   
  - ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA (Kaixu Xia)   
  - perf: Fix get_recursion_context() (Peter Zijlstra)   
  - cosa: Add missing kfree in error path of cosa_write (Wang Hai)   
  - of/address: Fix of_node memory leak in of_dma_is_coherent (Evan Nimmo)   
  - xfs: fix a missing unlock on error in xfs_fs_map_blocks (Christoph Hellwig)   
  - xfs: fix rmap key and record comparison functions (Darrick J. Wong)   
  - xfs: fix flags argument to rmap lookup when converting shared file rmaps (Darrick J. Wong)   
  - nbd: fix a block_device refcount leak in nbd_release (Christoph Hellwig)   
  - pinctrl: aspeed: Fix GPI only function problem. (Billy Tsai)   
  - ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template (Andrew Jeffery)   
  - pinctrl: intel: Set default bias in case no particular value given (Andy Shevchenko)   
  - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() (Hannes Reinecke)   
  - cfg80211: regulatory: Fix inconsistent format argument (Ye Bin)   
  - mac80211: fix use of skb payload instead of header (Johannes Berg)   
  - drm/amdgpu: perform srbm soft reset always on SDMA resume (Evan Quan)   
  - scsi: hpsa: Fix memory leak in hpsa_init_one() (Keita Suzuki)   
  - gfs2: check for live vs. read-only file system in gfs2_fitrim (Bob Peterson)   
  - gfs2: Add missing truncate_inode_pages_final for sd_aspace (Bob Peterson)   
  - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free (Bob Peterson)   
  - usb: gadget: goku_udc: fix potential crashes in probe (Evgeny Novikov)   
  - ath9k_htc: Use appropriate rs_datalen type (Masashi Honma)   
  - Btrfs: fix missing error return if writeback for extent buffer never started (Filipe Manana)   
  - xfs: flush new eof page on truncate to avoid post-eof corruption (Brian Foster)   
  - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on (Stephane Grosjean)   
  - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping (Stephane Grosjean)   
  - can: peak_usb: add range checking in decode operations (Dan Carpenter)   
  - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() (Oleksij Rempel)   
  - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames (Oliver Hartkopp)   
  - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context (Vincent Mailhol)   
  - can: rx-offload: don't call kfree_skb() from IRQ context (Marc Kleine-Budde)   
  - ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() (Dan Carpenter)   
  - perf tools: Add missing swap for ino_generation (Jiri Olsa)   
  - net: xfrm: fix a race condition during allocing spi (zhuoliang zhang)   
  - hv_balloon: disable warning when floor reached (Olaf Hering)   
  - genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY (Marc Zyngier)   
  - btrfs: reschedule when cloning lots of extents (Johannes Thumshirn)   
  - btrfs: sysfs: init devices outside of the chunk_mutex (Josef Bacik)   
  - nbd: don't update block size after device is started (Ming Lei)   
  - time: Prevent undefined behaviour in timespec64_to_ns() (Zeng Tao)   
  - mm: mempolicy: fix potential pte_unmap_unlock pte error (Shijie Luo)   
  - ring-buffer: Fix recursion protection transitions between interrupt context (Steven Rostedt (VMware))   
  - regulator: defer probe when trying to get voltage from unresolved supply (Michał Mirosław)   
  - rds: Change return code from rds_send_xmit() when lock is taken (Håkon Bugge)  [Orabug: 32852117]  
  - rds: Fix unintended fall-through in rds_send_worker (Håkon Bugge)  [Orabug: 32852117]  
  - tcp: send in-queue bytes in cmsg upon read (Soheil Hassas Yeganeh)  [Orabug: 32871463]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.2.el7uek]
changelog:
  - md/raid1: properly indicate failure when ending a failed write request (Paul Clements)  [Orabug: 32887159]  
  - video: hyperv_fb: Add ratelimit on error message (Michael Kelley)  [Orabug: 32856879]  
  - Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft))  [Orabug: 32856879]  
  - Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley)  [Orabug: 32856879]  
  - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860493]  {CVE-2021-31916} 
  - net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry)  [Orabug: 32559464]  
  - Linux 4.14.210 (Greg Kroah-Hartman)   
  - USB: core: Fix regression in Hercules audio card (Alan Stern)   
  - USB: core: add endpoint-blacklist quirk (Johan Hovold)   
  - x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (Xiaochen Shen)   
  - x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (Xiaochen Shen)   
  - usb: gadget: Fix memleak in gadgetfs_fill_super (Zhang Qilong)   
  - usb: gadget: f_midi: Fix memleak in f_midi_alloc (Zhang Qilong)   
  - USB: core: Change %pK for __user pointers to %px (Alan Stern)   
  - perf probe: Fix to die_entrypc() returns error correctly (Masami Hiramatsu)   
  - can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (Marc Kleine-Budde)   
  - platform/x86: toshiba_acpi: Fix the wrong variable assignment (Kaixu Xia)   
  - can: gs_usb: fix endianess problem with candleLight firmware (Marc Kleine-Budde)   
  - efivarfs: revert "fix memory leak in efivarfs_create()" (Ard Biesheuvel)   
  - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (Lijun Pan)   
  - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (Lijun Pan)   
  - net: ena: set initial DMA width to avoid intel iommu issue (Shay Agroskin)   
  - nfc: s3fwrn5: use signed integer for parsing GPIO numbers (Krzysztof Kozlowski)   
  - IB/mthca: fix return value of error branch in mthca_init_cq() (Xiongfeng Wang)   
  - scsi: ufs: Fix race between shutdown and runtime resume flow (Stanley Chu)   
  - batman-adv: set .owner to THIS_MODULE (Taehee Yoo)   
  - phy: tegra: xusb: Fix dangling pointer on probe failure (Marc Zyngier)   
  - perf/x86: fix sysfs type mismatches (Sami Tolvanen)   
  - scsi: target: iscsi: Fix cmd abort fabric stop race (Mike Christie)   
  - scsi: libiscsi: Fix NOP race condition (Lee Duncan)   
  - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size (Sugar Zhang)   
  - nvme: free sq/cq dbbuf pointers when dbbuf set fails (Minwoo Im)   
  - proc: don't allow async path resolution of /proc/self components (Jens Axboe)   
  - HID: Add Logitech Dinovo Edge battery quirk (Hans de Goede)   
  - x86/xen: don't unbind uninitialized lock_kicker_irq (Brian Masney)   
  - dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant (Marc Ferland)   
  - HID: hid-sensor-hub: Fix issue with devices with no report ID (Pablo Ceballos)   
  - Input: i8042 - allow insmod to succeed on devices without an i8042 controller (Hans de Goede)   
  - HID: cypress: Support Varmilo Keyboards' media hotkeys (Frank Yang)   
  - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (Kai Vehmanen)   
  - ALSA: hda/hdmi: Use single mutex unlock in error paths (Takashi Iwai)   
  - arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (Will Deacon)   
  - arm64: pgtable: Fix pte_accessible() (Will Deacon)   
  - btrfs: adjust return values of btrfs_inode_by_name (Su Yue)   
  - btrfs: tree-checker: Enhance chunk checker to validate chunk profile (Qu Wenruo)   
  - PCI: Add device even if driver attach failed (Rajat Jain)   
  - wireless: Use linux/stddef.h instead of stddef.h (Hauke Mehrtens)   
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana)   
  - mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Gerald Schaefer)   
  - perf event: Check ref_reloc_sym before using it (Igor Lubashev)   
  - Linux 4.14.209 (Greg Kroah-Hartman)   
  - x86/microcode/intel: Check patch signature before saving microcode for early loading (Chen Yu)   
  - s390/dasd: fix null pointer dereference for ERP requests (Stefan Haberland)   
  - s390/cpum_sf.c: fix file permission for cpum_sfb_size (Thomas Richter)   
  - mac80211: free sta in sta_info_insert_finish() on errors (Johannes Berg)   
  - mac80211: minstrel: fix tx status processing corner case (Felix Fietkau)   
  - mac80211: minstrel: remove deferred sampling code (Felix Fietkau)   
  - xtensa: disable preemption around cache alias management calls (Max Filippov)   
  - regulator: workaround self-referent regulators (Michał Mirosław)   
  - regulator: avoid resolve_supply() infinite recursion (Michał Mirosław)   
  - regulator: fix memory leak with repeated set_machine_constraints() (Michał Mirosław)   
  - iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (Hans de Goede)   
  - iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (Hans de Goede)   
  - ext4: fix bogus warning in ext4_update_dx_flag() (Jan Kara)   
  - staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (Brian O'Keefe)   
  - efivarfs: fix memory leak in efivarfs_create() (Vamshi K Sthambamkadi)   
  - tty: serial: imx: keep console clocks always on (Fugang Duan)   
  - ALSA: mixart: Fix mutex deadlock (Takashi Iwai)   
  - ALSA: ctl: fix error path at adding user-defined element set (Takashi Sakamoto)   
  - speakup: Do not let the line discipline be used several times (Samuel Thibault)   
  - powerpc/uaccess-flush: fix missing includes in kup-radix.h (Daniel Axtens)   
  - libfs: fix error cast of negative value in simple_attr_write() (Yicong Yang)   
  - xfs: revert "xfs: fix rmap key and record comparison functions" (Darrick J. Wong)   
  - regulator: ti-abb: Fix array out of bound read access on the first transition (Nishanth Menon)   
  - MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu (Zhang Qilong)   
  - ASoC: qcom: lpass-platform: Fix memory leak (Srinivasa Rao Mandadapu)   
  - can: m_can: m_can_handle_state_change(): fix state change (Wu Bo)   
  - can: peak_usb: fix potential integer overflow on shift of a int (Colin Ian King)   
  - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (Marc Kleine-Budde)   
  - can: ti_hecc: Fix memleak in ti_hecc_probe (Zhang Qilong)   
  - can: dev: can_restart(): post buffer from the right context (Alejandro Concepcion Rodriguez)   
  - can: af_can: prevent potential access of uninitialized member in canfd_rcv() (Anant Thazhemadam)   
  - can: af_can: prevent potential access of uninitialized member in can_rcv() (Anant Thazhemadam)   
  - perf lock: Don't free "lock_seq_stat" if read_count isn't zero (Leo Yan)   
  - ARM: dts: imx50-evk: Fix the chip select 1 IOMUX (Fabio Estevam)   
  - arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy (Sergey Matyukevich)   
  - MIPS: export has_transparent_hugepage() for modules (Randy Dunlap)   
  - Input: adxl34x - clean up a data type in adxl34x_probe() (Dan Carpenter)   
  - vfs: remove lockdep bogosity in __sb_start_write (Darrick J. Wong)   
  - arm64: psci: Avoid printing in cpu_psci_cpu_die() (Will Deacon)   
  - pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq (Jianqun Xu)   
  - net: ftgmac100: Fix crash when removing driver (Joel Stanley)   
  - tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate (Ryan Sharpelletti)   
  - net: usb: qmi_wwan: Set DTR quirk for MR400 (Filip Moc)   
  - net/mlx5: Disable QoS when min_rates on all VFs are zero (Vladyslav Tarasiuk)   
  - sctp: change to hold/put transport for proto_unreach_timer (Xin Long)   
  - qlcnic: fix error return code in qlcnic_83xx_restart_hw() (Zhang Changzhong)   
  - net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request (Xie He)   
  - net/mlx4_core: Fix init_hca fields offset (Aya Levin)   
  - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() (Paul Moore)   
  - netlabel: fix our progress tracking in netlbl_unlabel_staticlist() (Paul Moore)   
  - net: Have netpoll bring-up DSA management interface (Florian Fainelli)   
  - net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (Tobias Waldekranz)   
  - net: bridge: add missing counters to ndo_get_stats64 callback (Heiner Kallweit)   
  - net: b44: fix error return code in b44_init_one() (Zhang Changzhong)   
  - mlxsw: core: Use variable timeout for EMAD retries (Ido Schimmel)   
  - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (Wang Hai)   
  - devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() (Wang Hai)   
  - atm: nicstar: Unmap DMA on send error (Sebastian Andrzej Siewior)   
  - ah6: fix error return code in ah6_input() (Zhang Changzhong)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.2.1.el7uek]
changelog:
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 33038214]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 33038213]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 33038213]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 33038211]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.504.2.2.el7uek]
changelog:
  - mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan)  [Orabug: 33043264]  
  - block-mq: fix kabi error (Junxiao Bi)  [Orabug: 33043253]  
  - blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 33043253]  
  - blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 33043253]  
  - blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 33043253]  
  - blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 33043253]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.0.el7uek]
changelog:
  - cipso,calipso: resolve a number of problems with the DOI refcounts (Paul Moore)  [Orabug: 32912072]  {CVE-2021-33033} 
  - sctp: delay auto_asconf init until binding the first addr (Xin Long)  [Orabug: 32907969]  {CVE-2021-23133} {CVE-2021-23133} 
  - scsi: core: add scsi_host_busy_iter() (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Kill 'exclude_id' argument to fnic_cleanup_io() (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Validate io_req before others (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Set scsi_set_resid() only for underflow (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Fix memleak in vnic_dev_init_devcmd2 (Dinghao Liu)  [Orabug: 32621218]  
  - scsi: fnic: Avoid looping in TRANS ETH on unload (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Change shost_printk() to FNIC_FCS_DBG() (Karan Tilak Kumar)  [Orabug: 32621218]  
  - scsi: fnic: Simplify the return expression of vnic_wq_copy_alloc() (Liu Shixin)  [Orabug: 32621218]  
  - scsi: fnic: Fix inconsistent format argument type in fnic_debugfs.c (Ye Bin)  [Orabug: 32621218]  
  - scsi: fnic: Do not call 'scsi_done()' for unhandled commands (Hannes Reinecke)  [Orabug: 32621218]  
  - scsi: fnic: Remove unneeded semicolon (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Remove set but not used variable in is_fnic_fip_flogi_reject() (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Remove set but not used 'old_vlan' (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Use eth_broadcast_addr() to assign broadcast address (Miaohe Lin)  [Orabug: 32621218]  
  - scsi: fnic: Use true, false for fnic->internal_reset_inprogress (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: make vnic_wq_get_ctrl and vnic_wq_alloc_ring static (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: make fnic_list and fnic_list_lock static (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: make some symbols static (Jason Yan)  [Orabug: 32621218]  
  - scsi: fnic: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 32621218]  
  - scsi: fnic: make array dev_cmd_err static const, makes object smaller (Colin Ian King)  [Orabug: 32621218]  
  - scsi: fnic: print port speed only at driver init or speed change (John Pittman)  [Orabug: 32621218]  
  - scsi: fnic: remove redundant assignment of variable rc (Colin Ian King)  [Orabug: 32621218]  
  - scsi: fnic: Remove set but not used variable 'vdev' (YueHaibing)  [Orabug: 32621218]  
  - scsi: fnic: no need to check return value of debugfs_create functions (Greg Kroah-Hartman)  [Orabug: 32621218]  
  - scsi: fnic: Update fnic driver version to 1.6.0.47 (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Enable fnic devcmd2 interface (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Adding devcmd2 init and posting interfaces (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Add devcmd2 initialization helpers (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: fnic devcmd2 controller definitions (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: fnic devcmd2 interface definitions (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Impose upper limit on max. # of CQs processed per intr (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: RQ enable and then post descriptors (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: delaying vnic dev enable till after req intr (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Warn when calling done for IO not issued to fw (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: fnic stats for max CQs processed and ISR time (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Add port speed stat to fnic debug stats (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: use fnic_lock to guard fnic->state_flags (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: vnic_rq_clean change BUG_ON to WARN_ON (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: change fnic queue depth to 256 (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: support to display 20G port speed (Satish Kharat)  [Orabug: 32621218]  
  - scsi: fnic: Use vzalloc (Sabyasachi Gupta)  [Orabug: 32621218]  
  - fnic: fix fnic_scsi_host_{start,end}_tag (Christoph Hellwig)  [Orabug: 32621218]  
  - scsi: fnic: replace gross legacy tag hack with blk-mq hack (Jens Axboe)  [Orabug: 32621218]  
  - scsi: fnic: switch to generic DMA API (Christoph Hellwig)  [Orabug: 32621218]  
  - scsi: fnic: fix spelling mistake in fnic stats "Abord" -> "Abort" (Colin Ian King)  [Orabug: 32621218]  
  - scsi: fnic: use 64-bit timestamps (Arnd Bergmann)  [Orabug: 32621218]  
  - scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes)  [Orabug: 32621218]  
  - scsi: fnic: add a space after %p in printf format (Nicolas Iooss)  [Orabug: 32621218]  
  - scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych)  [Orabug: 32621218]  
  - scsi: iscsi: Fix iSCSI cls conn state (Gulam Mohamed)  [Orabug: 31669275]  
  - iscsi: Fix race condition between login and sync thread (Gulam Mohamed)  [Orabug: 31669275]  
  - Linux 4.14.213 (Greg Kroah-Hartman)   
  - PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)   
  - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)   
  - clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)   
  - md/cluster: fix deadlock when node is doing resync job (Zhao Heming)   
  - iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)   
  - iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)   
  - iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)   
  - iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)   
  - iio: buffer: Fix demux update (Nuno Sá)   
  - mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)   
  - soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)   
  - spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)   
  - spi: sc18is602: Don't leak SPI master in probe error path (Lukas Wunner)   
  - spi: rb4xx: Don't leak SPI master in probe error path (Lukas Wunner)   
  - spi: pic32: Don't leak DMA channels in probe error path (Lukas Wunner)   
  - spi: davinci: Fix use-after-free on unbind (Lukas Wunner)   
  - spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)   
  - drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)   
  - jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)   
  - jffs2: Fix GC exit abnormally (Zhe Li)   
  - ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)   
  - ima: Don't modify file descriptor mode on the fly (Roberto Sassu)   
  - powerpc/powernv/memtrace: Don't leak kernel memory to user space (David Hildenbrand)   
  - powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)   
  - powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)   
  - ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)   
  - KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)   
  - ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)   
  - ext4: fix a memory leak of ext4_free_data (Chunguang Xu)   
  - USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)   
  - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)   
  - USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)   
  - USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)   
  - USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)   
  - USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)   
  - USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)   
  - EDAC/amd64: Fix PCI component registration (Borislav Petkov)   
  - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)   
  - powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)   
  - staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)   
  - s390/dasd: fix list corruption of lcu list (Stefan Haberland)   
  - s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)   
  - s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)   
  - s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)   
  - ALSA: usb-audio: Disable sample read check if firmware doesn't give back (Takashi Iwai)   
  - ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)   
  - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)   
  - ACPI: PNP: compare the string length in the matching_id() (Hui Wang)   
  - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" (Daniel Scally)   
  - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)   
  - Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)   
  - media: netup_unidvb: Don't leak SPI master in probe error path (Lukas Wunner)   
  - media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)   
  - media: gspca: Fix memory leak in probe (Alan Stern)   
  - Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)   
  - Input: cros_ec_keyb - send 'scancodes' in addition to key events (Dmitry Torokhov)   
  - fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)   
  - cfg80211: initialize rekey_data (Sara Sharon)   
  - clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)   
  - clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
  - qlcnic: Fix error code in probe (Dan Carpenter)   
  - perf record: Fix memory leak when using '--user-regs=?' to list registers (Zheng Zengkai)   
  - pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)   
  - pwm: zx: Add missing cleanup in error path (Uwe Kleine-König)   
  - clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)   
  - watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)   
  - watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)   
  - net: korina: fix return value (Vincent Stehlé)   
  - net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)   
  - net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)   
  - checkpatch: fix unescaped left brace (Dwaipayan Ray)   
  - powerpc/ps3: use dma_mapping_error() (Vincent Stehlé)   
  - nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)   
  - um: chan_xterm: Fix fd leak (Anton Ivanov)   
  - watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)   
  - irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)   
  - ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control() (Dan Carpenter)   
  - extcon: max77693: Fix modalias string (Marek Szyprowski)   
  - clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)   
  - x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)   
  - nfs_common: need lock during iterate through the list (Cheng Lin)   
  - nfsd: Fix message level for normal termination (kazuo ito)   
  - speakup: fix uninitialized flush_lock (Yang Yingliang)   
  - usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)   
  - usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)   
  - powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)   
  - powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)   
  - scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)   
  - scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)   
  - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)   
  - cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohár)   
  - cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohár)   
  - cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
  - cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
  - cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohár)   
  - clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)   
  - dm ioctl: fix error return code in target_message (Qinglang Miao)   
  - ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)   
  - net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)   
  - memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)   
  - arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)   
  - pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)   
  - ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)   
  - clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)   
  - media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)   
  - vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)   
  - NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)   
  - SUNRPC: xprt_load_transport() needs to support the netid "rdma6" (Trond Myklebust)   
  - NFSv4.2: condition READDIR's mask for security label based on LSM state (Olga Kornievskaia)   
  - ath10k: Release some resources in an error handling path (Christophe JAILLET)   
  - ath10k: Fix an error handling path (Christophe JAILLET)   
  - ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)   
  - PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)   
  - genirq/irqdomain: Don't try to free an interrupt that has no mapping (Marc Zyngier)   
  - power: supply: bq24190_charger: fix reference leak (Zhang Qilong)   
  - ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)   
  - HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() (Jing Xiangfeng)   
  - media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)   
  - mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)   
  - samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)   
  - media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)   
  - cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)   
  - orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)   
  - ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)   
  - ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)   
  - memstick: fix a double-free bug in memstick_check (Qinglang Miao)   
  - RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)   
  - Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)   
  - drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)   
  - soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)   
  - soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)   
  - crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)   
  - powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)   
  - Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)   
  - Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)   
  - Input: ads7846 - fix race that causes missing releases (David Jander)   
  - drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)   
  - media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)   
  - scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)   
  - media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)   
  - staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)   
  - MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)   
  - RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)   
  - ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)   
  - ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)   
  - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)   
  - spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)   
  - spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)   
  - spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)   
  - spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)   
  - Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)   
  - arm64: dts: exynos: Correct psci compatible used on Exynos7 (Paweł Chmiel)   
  - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)   
  - ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)   
  - spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)   
  - crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)   
  - sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)   
  - sched/deadline: Fix sched_dl_global_validate() (Peng Liu)   
  - ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)   
  - x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)   
  - RDMA/rxe: Compute PSN windows correctly (Bob Pearson)   
  - selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)   
  - RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)   
  - soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)   
  - soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)   
  - drm/gma500: fix double free of gma_connector (Tom Rix)   
  - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)   
  - md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)   
  - crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)   
  - media: msi2500: assign SPI bus number dynamically (Antti Palosaari)   
  - quota: Sanity-check quota file headers on load (Jan Kara)   
  - serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)   
  - HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)   
  - ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)   
  - usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)   
  - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)   
  - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)   
  - USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)   
  - USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)   
  - USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)   
  - soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)   
  - dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)   
  - scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)   
  - vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)   
  - vxlan: Add needed_headroom for lower device (Sven Eckelmann)   
  - drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)   
  - kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)   
  - RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)   
  - can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)   
  - scsi: bnx2i: Requires MMU (Randy Dunlap)   
  - gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)   
  - ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)   
  - pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)   
  - pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)   
  - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)   
  - serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)   
  - ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)   
  - USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)   
  - USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)   
  - xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)   
  - ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)   
  - ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)   
  - USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)   
  - USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)   
  - mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)   
  - net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)   
  - net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)   
  - net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)   
  - tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)   
  - net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)   
  - PCI: qcom: Add missing reset for ipq806x (Ansuel Smith)   
  - x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)   
  - scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" (Dan Carpenter)   
  - kbuild: avoid static_assert for genksyms (Arnd Bergmann)   
  - pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)   
  - Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)   
  - Input: cm109 - do not stomp on control URB (Dmitry Torokhov)   
  - platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)   
  - soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)   
  - scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)   
  - ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)   
  - iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)   
  - arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)   
  - iwlwifi: pcie: limit memory read spin time (Johannes Berg)   
  - spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe (Nathan Chancellor)   
  - spi: bcm2835aux: Fix use-after-free on unbind (Lukas Wunner)   
  - Linux 4.14.212 (Greg Kroah-Hartman)   
  - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)   
  - Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)   
  - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)   
  - gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)   
  - tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))   
  - spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)   
  - spi: bcm2835: Fix use-after-free on unbind (Lukas Wunner)   
  - spi: bcm-qspi: Fix use-after-free on unbind (Lukas Wunner)   
  - spi: Introduce device-managed SPI controller allocation (Lukas Wunner)   
  - speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)   
  - i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)   
  - i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)   
  - mm/swapfile: do not sleep with a spin lock held (Qian Cai)   
  - cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)   
  - ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)   
  - ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)   
  - ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)   
  - USB: serial: option: fix Quectel BG96 matching (Bjørn Mork)   
  - USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)   
  - USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)   
  - USB: serial: ch341: sort device-id entries (Johan Hovold)   
  - USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)   
  - USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)   
  - usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)   
  - vlan: consolidate VLAN parsing code and limit max parsing depth (Toke Høiland-Jørgensen)   
  - pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)   
  - pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)   
  - Linux 4.14.211 (Greg Kroah-Hartman)   
  - RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)   
  - Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)   
  - Input: xpad - support Ardwiino Controllers (Sanjay Govind)   
  - ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)   
  - dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)   
  - net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)   
  - net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)   
  - cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)   
  - net/x25: prevent a couple of overflows (Dan Carpenter)   
  - ibmvnic: Fix TX completion error handling (Thomas Falcon)   
  - ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)   
  - ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)   
  - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)   
  - bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)   
  - usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)   
  - tun: honor IOCB_NOWAIT flag (Jens Axboe)   
  - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)   
  - sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)   
  - rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)   
  - net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)


