Lucene search

K
oraclelinuxOracleLinuxELSA-2021-9349
HistoryJul 12, 2021 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2021-07-1200:00:00
linux.oracle.com
135

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

[4.14.35-2047.505.4]

  • rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33044345]
  • rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 32804265]
  • rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 32863569]
  • rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 32863569]
  • xfs: fix xlog_finish_defer_ops (Wengang Wang) [Orabug: 32982355]
  • Revert ‘Allow mce to reset instead of panic on UE’ (William Roche) [Orabug: 32820277]
    [4.14.35-2047.505.3]
  • uek-rpm: match Pensando config-aarch-embedded2 with the T93s config (Thomas Tai) [Orabug: 32972392]
  • quota: Fix memory leak when handling corrupted quota file (Jan Kara) [Orabug: 33020349]
  • xen/netback: fix spurious event detection for common event case (Juergen Gross) [Orabug: 33020349]
  • Input: i8042 - unbreak Pegatron C15B (Alexey Dobriyan) [Orabug: 33020349]
  • ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum) [Orabug: 32983664]
  • ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum) [Orabug: 32983664]
  • rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Hakon Bugge) [Orabug: 32981187]
  • scsi: smartpqi: Remove unused functions (Bart Van Assche) [Orabug: 32967877]
  • scsi: smartpqi: Fix device pointer variable reference static checker issue (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Fix blocks_per_row static checker issue (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Update version to 2.1.8-045 (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Add new PCI IDs (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Correct system hangs when resuming from hibernation (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update enclosure identifier in sysfs (Murthy Bhat) [Orabug: 32967877]
  • scsi: smartpqi: Add additional logging for LUN resets (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update SAS initiator_port_protocols and target_port_protocols (Murthy Bhat) [Orabug: 32967877]
  • scsi: smartpqi: Add phy ID support for the physical drives (Murthy Bhat) [Orabug: 32967877]
  • scsi: smartpqi: Convert snprintf() to scnprintf() (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Fix driver synchronization issues (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update device scan operations (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update OFA management (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update RAID bypass handling (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update suspend/resume and shutdown (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Synchronize device resets with mutex (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update soft reset management for OFA (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update event handler (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Add support for wwid (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Remove timeouts from internal cmds (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Disable WRITE SAME for HBA NVMe disks (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Add host level stream detection enable (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Add stream detection (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Align code with oob driver (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Add support for long firmware version (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Add support for BMIC sense feature cmd and feature bits (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Add support for RAID1 writes (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Add support for RAID5 and RAID6 writes (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Refactor scatterlist code (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Refactor aio submission code (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Add support for new product ids (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Correct request leakage during reset operations (Murthy Bhat) [Orabug: 32967877]
  • scsi: smartpqi: Update version to 1.2.16-012 (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Correct pqi_sas_smp_handler busy condition (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Correct driver removal with HBA disks (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Update copyright (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Bump version to 1.2.16-010 (Don Brace) [Orabug: 32967877]
  • scsi: smartpqi: Add RAID bypass counter (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Support device deletion via sysfs (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Avoid crashing kernel for controller issues (Kevin Barnett) [Orabug: 32967877]
  • scsi: smartpqi: Update logical volume size after expansion (Mahesh Rajashekhara) [Orabug: 32967877]
  • scsi: smartpqi: Add id support for SmartRAID 3152-8i (Mahesh Rajashekhara) [Orabug: 32967877]
  • scsi: smartpqi: Identify physical devices without issuing INQUIRY (Kevin Barnett) [Orabug: 32967877]
  • remove ioremap_nocache and devm_ioremap_nocache (Christoph Hellwig) [Orabug: 32967877]
  • treewide: Use sizeof_field() macro (Pankaj Bharadiya) [Orabug: 32967877]
  • block-mq: fix kabi error (Junxiao Bi) [Orabug: 32957529]
  • blk-mq: fix blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957529]
  • blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig) [Orabug: 32957529]
  • blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei) [Orabug: 32957529]
  • blk-mq: add blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957529]
  • Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka) [Orabug: 32912101] {CVE-2021-33034}
  • rds: ib: Remove two ib_modify_qp() calls (Hakon Bugge) [Orabug: 32762731]
  • IB/cma: Introduce rdma_set_min_rnr_timer() (Hakon Bugge) [Orabug: 32762731]
  • scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed) [Orabug: 32134986]
    [4.14.35-2047.505.2]
  • KVM: x86: Consider LAPIC TSC-Deadline timer expired if deadline too short (Liran Alon) [Orabug: 32992668]
  • secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly) [Orabug: 32982947]
  • ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki) [Orabug: 32977843]
  • ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki) [Orabug: 32977843]
  • uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi) [Orabug: 32965746]
  • {net, IB}/mlx4: Initialize CQ buffers in the driver when possible (Daniel Jurgens) [Orabug: 32913303]
  • bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma) [Orabug: 32912035] {CVE-2021-32399}
  • IB/core: Only update PKEY and GID caches on respective events (Hakon Bugge) [Orabug: 32816367]
  • RDMA/mlx4: Enable querying AH for XRC QP types (Avihai Horon) [Orabug: 32568907]
  • RDMA/mlx5: Enable querying AH for XRC QP types (Avihai Horon) [Orabug: 32568907]
  • uek-rpm: add missing ARM_SPE_PMU for aarch64 (Russell King) [Orabug: 27825982]
  • Revert ‘drivers/perf: arm_spe_pmu does not build as a module’ (Tom Saeger) [Orabug: 27825982]
  • perf: arm_spe: Enable ACPI/Platform automatic module loading (Jeremy Linton) [Orabug: 27825982]
  • arm_pmu: acpi: spe: Add initial MADT/SPE probing (Jeremy Linton) [Orabug: 27825982]
  • ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens (Jeremy Linton) [Orabug: 27825982]
  • ACPI/PPTT: Modify node flag detection to find last IDENTICAL (Jeremy Linton) [Orabug: 27825982]
  • drivers/perf: arm_spe: Dont error on high-order pages for aux buf (Will Deacon) [Orabug: 27825982]
  • ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags (Erik Schmauss) [Orabug: 27825982]
  • ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC (Erik Schmauss) [Orabug: 27825982]
  • perf: arm_spe: handle devm_kasprintf() failure (Nicholas Mc Guire) [Orabug: 27825982]
  • perf: arm_spe: Enable automatic DT loading (Jeremy Linton) [Orabug: 27825982]
  • drivers/perf: Initialise return value in armpmu_request_irqs() (Will Deacon) [Orabug: 27825982]
  • ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set (Sudeep Holla) [Orabug: 27825982]
  • ACPI / PPTT: fix build when CONFIG_ACPI_PPTT is not enabled (Sudeep Holla) [Orabug: 27825982]
  • arm_pmu: Use disable_irq_nosync when disabling SPI in CPU teardown hook (Will Deacon) [Orabug: 27825982]
  • ACPICA: Restructure ACPI table files (Erik Schmauss) [Orabug: 27825982]
  • arm_pmu: acpi: request IRQs up-front (Mark Rutland) [Orabug: 27825982]
  • arm_pmu: note IRQs and PMUs per-cpu (Mark Rutland) [Orabug: 27825982]
  • arm_pmu: explicitly enable/disable SPIs at hotplug (Mark Rutland) [Orabug: 27825982]
  • arm_pmu: acpi: check for mismatched PPIs (Mark Rutland) [Orabug: 27825982]
  • arm_pmu: add armpmu_alloc_atomic() (Mark Rutland) [Orabug: 27825982]
  • arm_pmu: fold platform helpers into platform code (Mark Rutland) [Orabug: 27825982]
  • arm_pmu: kill arm_pmu_platdata (Mark Rutland) [Orabug: 27825982]
  • arm/arm64: pmu: Distinguish percpu irq and percpu_devid irq (Julien Thierry) [Orabug: 27825982]
  • irqdesc: Add function to identify percpu_devid irqs (Julien Thierry) [Orabug: 27825982]
  • perf/core: Export AUX buffer helpers to modules (Will Deacon) [Orabug: 27825982]
  • genirq: export irq_get_percpu_devid_partition to modules (Will Deacon) [Orabug: 27825982]
  • Linux 4.14.219 (Greg Kroah-Hartman)
  • tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN (Pengcheng Yang)
  • team: protect features update by RCU to avoid deadlock (Ivan Vecera)
  • NFC: fix possible resource leak (Pan Bian)
  • NFC: fix resource leak when target index is invalid (Pan Bian)
  • iommu/vt-d: Dont dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)
  • iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)
  • x86/entry/64/compat: Fix ‘x86/entry/64/compat: Preserve r8-r11 in int /u03/ksharma/errata_processing/work/el7arm/db_7arm.ELSA-2021-9349x80’ (Andy Lutomirski)
  • x86/entry/64/compat: Preserve r8-r11 in int /u03/ksharma/errata_processing/work/el7arm/db_7arm.ELSA-2021-9349x80 (Andy Lutomirski)
  • can: dev: prevent potential information leak in can_fill_info() (Dan Carpenter)
  • mac80211: pause TX while changing interface type (Johannes Berg)
  • iwlwifi: pcie: reschedule in long-running memory reads (Johannes Berg)
  • iwlwifi: pcie: use jiffies for memory read spin time limit (Johannes Berg)
  • RDMA/cxgb4: Fix the reported max_recv_sge value (Kamal Heib)
  • xfrm: Fix oops in xfrm_replay_advance_bmp (Shmulik Ladkani)
  • netfilter: nft_dynset: add timeout extension to template (Pablo Neira Ayuso)
  • ARM: imx: build suspend-imx6.S with arm instruction set (Max Krummenacher)
  • xen-blkfront: allow discard-* nodes to be optional (Roger Pau Monne)
  • mt7601u: fix rx buffer refcounting (Lorenzo Bianconi)
  • mt7601u: fix kernel crash unplugging the device (Lorenzo Bianconi)
  • leds: trigger: fix potential deadlock with libata (Andrea Righi)
  • xen: Fix XenStore initialisation for XS_LOCAL (David Woodhouse)
  • KVM: x86: get smi pending status correctly (Jay Zhou)
  • KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (Like Xu)
  • drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] (Claudiu Beznea)
  • drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs (Sudeep Holla)
  • net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family (Giacinto Cifelli)
  • wext: fix NULL-ptr-dereference with cfg80211s lack of commit() (Johannes Berg)
  • ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming (Koen Vandeputte)
  • ACPI: sysfs: Prefer ‘compatible’ modalias (Kai-Heng Feng)
  • Linux 4.14.218 (Greg Kroah-Hartman)
  • fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
  • writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
  • fs: move I_DIRTY_INODE to fs.h (Christoph Hellwig)
  • x86/boot/compressed: Disable relocation relaxation (Arvind Sankar)
  • tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)
  • Revert ‘mm/slub: fix a memory leak in sysfs_slab_add()’ (Wang Hai)
  • gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)
  • futex: futex_wake_op, fix sign_extend32 sign bits (Jiri Slaby)
  • net: dsa: b53: fix an off by one in checking ‘vlan->vid’ (Dan Carpenter)
  • net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)
  • ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)
  • udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)
  • skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)
  • sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)
  • sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)
  • netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)
  • compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)
  • xhci: tegra: Delay for disabling LFPS detector (JC Kuo)
  • xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)
  • usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)
  • usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)
  • USB: ehci: fix an interrupt calltrace error (Longfang Liu)
  • ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)
  • stm class: Fix module init return on allocation failure (Wang Hui)
  • intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)
  • irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)
  • iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)
  • can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)
  • can: dev: can_restart: fix use after free bug (Vincent Mailhol)
  • i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)
  • drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)
  • drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)
  • drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)
  • xen: Fix event channel callback via INTX/GSI (David Woodhouse)
  • scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)
  • ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)
  • drm/atomic: put state on error path (Pan Bian)
  • dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)
  • mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)
  • ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)
  • ALSA: hda/via: Add minimum mute flag (Takashi Iwai)
  • ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)
  • i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)
  • Linux 4.14.217 (Greg Kroah-Hartman)
  • spi: cadence: cache reference clock rate during probe (Michael Hennerich)
  • net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)
  • net: skbuff: disambiguate argument and member for skb_list_walk_safe helper (Jason A. Donenfeld)
  • net: introduce skb_list_walk_safe for skb segment walking (Jason A. Donenfeld)
  • net: use skb_list_del_init() to remove from RX sublists (Edward Cree)
  • tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)
  • rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)
  • net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)
  • net: sit: unregister_netdevice on newlinks error path (Jakub Kicinski)
  • net: stmmac: Fixed mtu channged by cache aligned (David Wu)
  • net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)
  • net: dcb: Validate netlink message in DCB handler (Petr Machata)
  • esp: avoid unneeded kmap_atomic call (Willem de Bruijn)
  • rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)
  • netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)
  • nfsd4: readdirplus shouldnt return parent of export (J. Bruce Fields)
  • usb: ohci: Make distrust_firmware param default to false (Hamish Martin)
  • netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)
  • ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)
  • ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)
  • dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)
  • net: sunrpc: interpret the return value of kstrtou32 correctly ([email protected])
  • mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)
  • RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)
  • ext4: fix superblock checksum failure when setting password salt (Jan Kara)
  • NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)
  • pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)
  • NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)
  • ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)
  • dump_common_audit_data(): fix racy accesses to ->d_name (Al Viro)
  • ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)
  • ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)
  • net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)
  • misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)
    to fix build error on ARC (Randy Dunlap)
  • ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)
  • btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)
  • ARC: build: add boot_targets to PHONY (Masahiro Yamada)
  • ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)
  • ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)
  • ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)
  • r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)
  • dm snapshot: flush merged data before committing metadata (Akilesh Kailash)
  • mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)
  • ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)
  • MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)
  • MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)
  • ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)
    [4.14.35-2047.505.1]
  • uek-rpm: config-aarch-embedded2 add missing networking options (Thomas Tai) [Orabug: 32961737]
  • uek-rpm: config-aarch-embedded2 update for networking options (Thomas Tai) [Orabug: 32961737]
  • RDS tcp loopback connection can hang (Rao Shoaib) [Orabug: 32926881]
  • net/rds: Passive connections always yield (Gerd Rausch) [Orabug: 32925131]
  • mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan) [Orabug: 32921246]
  • net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch) [Orabug: 32908885]
  • Linux 4.14.216 (Greg Kroah-Hartman)
  • net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)
  • block: fix use-after-free in disk_part_iter_next (Ming Lei)
  • KVM: arm64: Dont access PMCR_EL0 when no PMU is available (Marc Zyngier)
  • wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)
  • net/mlx5e: Fix two double free cases (Dinghao Liu)
  • net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)
  • iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)
  • block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)
  • wil6210: select CONFIG_CRC32 (Arnd Bergmann)
  • dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)
  • dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)
  • spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)
  • cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)
  • i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)
  • ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)
  • iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)
  • iio: imu: st_lsm6dsx: flip irq return logic (Sean Nyekjaer)
  • spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)
  • ubifs: wbuf: Dont leak kernel memory to flash (Richard Weinberger)
  • drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)
  • vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)
  • x86/resctrl: Dont move a task to the same resource group (Fenghua Yu)
  • x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)
  • net: fix pmtu check in nopmtudisc mode (Florian Westphal)
  • net: ip: always refragment ip defragmented packets (Florian Westphal)
  • net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)
  • net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppanen)
  • powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)
  • Linux 4.14.215 (Greg Kroah-Hartman)
  • KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)
  • x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)
  • netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)
  • netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)
  • Revert ‘device property: Keep secondary firmware node secondary by type’ (Bard Liao)
  • ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)
  • ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)
  • x86/mm: Fix leak of pmd ptlock (Dan Williams)
  • USB: serial: keyspan_pda: remove unused variable (Johan Hovold)
  • usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)
  • usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)
  • usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)
  • USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)
  • usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)
  • usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)
  • usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)
  • ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)
  • USB: usblp: fix DMA to stack (Johan Hovold)
  • USB: yurex: fix control-URB timeout handling (Johan Hovold)
  • USB: serial: option: add Quectel EM160R-GL (Bjorn Mork)
  • USB: serial: option: add LongSung M5710 module support (Daniel Palmer)
  • USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)
  • usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)
  • usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)
  • USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)
  • usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)
  • usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)
  • USB: cdc-acm: blacklist another IR Droid device (Sean Young)
  • usb: gadget: enable super speed plus (taehyun.cho)
  • crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)
  • net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)
  • net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)
  • net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)
  • net: sched: prevent invalid Scell_log shift count (Randy Dunlap)
  • vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)
  • net: usb: qmi_wwan: add Quectel EM160R-GL (Bjorn Mork)
  • CDC-NCM: remove ‘connected’ log message (Roland Dreier)
  • net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)
  • net: hns: fix return value check in __lb_other_process() (Yunjian Wang)
  • ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)
  • net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)
  • net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)
  • net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)
  • net/ncsi: Use real net-device for response handler (John Wang)
  • virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)
  • qede: fix offload for IPIP tunnel packets (Manish Chopra)
  • atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)
  • ethernet: ucc_geth: set dev->max_mtu to 1518 (Rasmus Villemoes)
  • ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)
  • depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)
  • lib/genalloc: fix the overflow when size is too big (Huang Shijie)
  • scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)
  • scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() (Adrian Hunter)
  • workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)
  • kbuild: dont hardcode depmod path (Dominique Martinet)
  • Linux 4.14.214 (Greg Kroah-Hartman)
  • iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)
  • iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)
  • kdev_t: always inline major/minor helper functions (Josh Poimboeuf)
  • dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)
  • ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)
  • module: delay kobject uevent until after module init call (Jessica Yu)
  • powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)
  • quota: Dont overflow quota file offsets (Jan Kara)
  • module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)
  • rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)
  • ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)
  • media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)
  • misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)
  • reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)
  • of: fix linker-section match-table corruption (Johan Hovold)
    (Petr Vorel)
  • powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)
  • USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)
  • s390/dasd: fix hanging device offline processing (Stefan Haberland)
  • vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)
  • mm: memcontrol: implement lruvec stat functions on top of each other (Johannes Weiner)
  • mm: memcontrol: eliminate raw access to stat and event counters (Johannes Weiner)
  • ALSA: usb-audio: fix sync-ep altsetting sanity check (Johan Hovold)
  • ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk (Alberto Aguirre)
  • ALSA: hda/ca0132 - Fix work handling in delayed HP detection (Takashi Iwai)
  • md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor)
  • x86/entry/64: Add instruction suffix (Jan Beulich)
    [4.14.35-2047.505.0]
  • cipso,calipso: resolve a number of problems with the DOI refcounts (Paul Moore) [Orabug: 32912072] {CVE-2021-33033}
  • sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907969] {CVE-2021-23133} {CVE-2021-23133}
  • scsi: core: add scsi_host_busy_iter() (Hannes Reinecke) [Orabug: 32621218]
  • scsi: fnic: Use scsi_host_busy_iter() to traverse commands (Hannes Reinecke) [Orabug: 32621218]
  • scsi: fnic: Kill ‘exclude_id’ argument to fnic_cleanup_io() (Hannes Reinecke) [Orabug: 32621218]
  • scsi: fnic: Validate io_req before others (Karan Tilak Kumar) [Orabug: 32621218]
  • scsi: fnic: Set scsi_set_resid() only for underflow (Karan Tilak Kumar) [Orabug: 32621218]
  • scsi: fnic: Fix memleak in vnic_dev_init_devcmd2 (Dinghao Liu) [Orabug: 32621218]
  • scsi: fnic: Avoid looping in TRANS ETH on unload (Karan Tilak Kumar) [Orabug: 32621218]
  • scsi: fnic: Change shost_printk() to FNIC_FCS_DBG() (Karan Tilak Kumar) [Orabug: 32621218]
  • scsi: fnic: Simplify the return expression of vnic_wq_copy_alloc() (Liu Shixin) [Orabug: 32621218]
  • scsi: fnic: Fix inconsistent format argument type in fnic_debugfs.c (Ye Bin) [Orabug: 32621218]
  • scsi: fnic: Do not call ‘scsi_done()’ for unhandled commands (Hannes Reinecke) [Orabug: 32621218]
  • scsi: fnic: Remove unneeded semicolon (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: Remove set but not used variable in is_fnic_fip_flogi_reject() (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: Remove set but not used ‘old_vlan’ (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: Use eth_broadcast_addr() to assign broadcast address (Miaohe Lin) [Orabug: 32621218]
  • scsi: fnic: Use true, false for fnic->internal_reset_inprogress (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: make vnic_wq_get_ctrl and vnic_wq_alloc_ring static (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: make fnic_list and fnic_list_lock static (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: make some symbols static (Jason Yan) [Orabug: 32621218]
  • scsi: fnic: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 32621218]
  • scsi: fnic: make array dev_cmd_err static const, makes object smaller (Colin Ian King) [Orabug: 32621218]
  • scsi: fnic: print port speed only at driver init or speed change (John Pittman) [Orabug: 32621218]
  • scsi: fnic: remove redundant assignment of variable rc (Colin Ian King) [Orabug: 32621218]
  • scsi: fnic: Remove set but not used variable ‘vdev’ (YueHaibing) [Orabug: 32621218]
  • scsi: fnic: no need to check return value of debugfs_create functions (Greg Kroah-Hartman) [Orabug: 32621218]
  • scsi: fnic: Update fnic driver version to 1.6.0.47 (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Enable fnic devcmd2 interface (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Adding devcmd2 init and posting interfaces (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Add devcmd2 initialization helpers (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: fnic devcmd2 controller definitions (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: fnic devcmd2 interface definitions (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Impose upper limit on max. # of CQs processed per intr (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: RQ enable and then post descriptors (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: delaying vnic dev enable till after req intr (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Warn when calling done for IO not issued to fw (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: fnic stats for max CQs processed and ISR time (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Add port speed stat to fnic debug stats (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: use fnic_lock to guard fnic->state_flags (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: vnic_rq_clean change BUG_ON to WARN_ON (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: change fnic queue depth to 256 (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: support to display 20G port speed (Satish Kharat) [Orabug: 32621218]
  • scsi: fnic: Use vzalloc (Sabyasachi Gupta) [Orabug: 32621218]
  • fnic: fix fnic_scsi_host_{start,end}_tag (Christoph Hellwig) [Orabug: 32621218]
  • scsi: fnic: replace gross legacy tag hack with blk-mq hack (Jens Axboe) [Orabug: 32621218]
  • scsi: fnic: switch to generic DMA API (Christoph Hellwig) [Orabug: 32621218]
  • scsi: fnic: fix spelling mistake in fnic stats ‘Abord’ -> ‘Abort’ (Colin Ian King) [Orabug: 32621218]
  • scsi: fnic: use 64-bit timestamps (Arnd Bergmann) [Orabug: 32621218]
  • scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes) [Orabug: 32621218]
  • scsi: fnic: add a space after %p in printf format (Nicolas Iooss) [Orabug: 32621218]
  • scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych) [Orabug: 32621218]
  • scsi: iscsi: Fix iSCSI cls conn state (Gulam Mohamed) [Orabug: 31669275]
  • iscsi: Fix race condition between login and sync thread (Gulam Mohamed) [Orabug: 31669275]
  • Linux 4.14.213 (Greg Kroah-Hartman)
  • PCI: Fix pci_slot_release() NULL pointer dereference (Jubin Zhong)
  • libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (Dan Williams)
  • clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 (Terry Zhou)
  • md/cluster: fix deadlock when node is doing resync job (Zhao Heming)
  • iio:imu:bmi160: Fix too large a buffer. (Jonathan Cameron)
  • iio:pressure:mpl3115: Force alignment of buffer (Jonathan Cameron)
  • iio:light:rpr0521: Fix timestamp alignment and prevent data leak. (Jonathan Cameron)
  • iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume (Qinglang Miao)
  • iio: buffer: Fix demux update (Nuno Sa)
  • mtd: parser: cmdline: Fix parsing of part-names with colons (Sven Eckelmann)
  • soc: qcom: smp2p: Safely acquire spinlock without IRQs (Evan Green)
  • spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path (Lukas Wunner)
  • spi: sc18is602: Dont leak SPI master in probe error path (Lukas Wunner)
  • spi: rb4xx: Dont leak SPI master in probe error path (Lukas Wunner)
  • spi: pic32: Dont leak DMA channels in probe error path (Lukas Wunner)
  • spi: davinci: Fix use-after-free on unbind (Lukas Wunner)
  • spi: spi-sh: Fix use-after-free on unbind (Lukas Wunner)
  • drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() (Zwane Mwaikambo)
  • jfs: Fix array index bounds check in dbAdjTree (Dave Kleikamp)
  • jffs2: Fix GC exit abnormally (Zhe Li)
  • ceph: fix race in concurrent __ceph_remove_cap invocations (Luis Henriques)
  • ima: Dont modify file descriptor mode on the fly (Roberto Sassu)
  • powerpc/powernv/memtrace: Dont leak kernel memory to user space (David Hildenbrand)
  • powerpc/xmon: Change printk() to pr_cont() (Christophe Leroy)
  • powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Tyrel Datwyler)
  • ARM: dts: at91: sama5d2: fix CAN message ram offset and size (Nicolas Ferre)
  • KVM: arm64: Introduce handling of AArch32 TTBCR2 traps (Marc Zyngier)
  • ext4: fix deadlock with fs freezing and EA inodes (Jan Kara)
  • ext4: fix a memory leak of ext4_free_data (Chunguang Xu)
  • USB: serial: keyspan_pda: fix write unthrottling (Johan Hovold)
  • USB: serial: keyspan_pda: fix tx-unthrottle use-after-free (Johan Hovold)
  • USB: serial: keyspan_pda: fix write-wakeup use-after-free (Johan Hovold)
  • USB: serial: keyspan_pda: fix stalled writes (Johan Hovold)
  • USB: serial: keyspan_pda: fix write deadlock (Johan Hovold)
  • USB: serial: keyspan_pda: fix dropped unthrottle interrupts (Johan Hovold)
  • USB: serial: mos7720: fix parallel-port state restore (Johan Hovold)
  • EDAC/amd64: Fix PCI component registration (Borislav Petkov)
  • crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() (Ard Biesheuvel)
  • powerpc/perf: Exclude kernel samples while counting events in user space. (Athira Rajeev)
  • staging: comedi: mf6x4: Fix AI end-of-conversion detection (Ian Abbott)
  • s390/dasd: fix list corruption of lcu list (Stefan Haberland)
  • s390/dasd: fix list corruption of pavgroup group list (Stefan Haberland)
  • s390/dasd: prevent inconsistent LCU device data (Stefan Haberland)
  • s390/smp: perform initial CPU reset also for SMT siblings (Sven Schnelle)
  • ALSA: usb-audio: Disable sample read check if firmware doesnt give back (Takashi Iwai)
  • ALSA: pcm: oss: Fix a few more UBSAN fixes (Takashi Iwai)
  • ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 (Chris Chiu)
  • ACPI: PNP: compare the string length in the matching_id() (Hui Wang)
  • Revert ‘ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks’ (Daniel Scally)
  • PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() (Rafael J. Wysocki)
  • Input: cyapa_gen6 - fix out-of-bounds stack access (Arnd Bergmann)
  • media: netup_unidvb: Dont leak SPI master in probe error path (Lukas Wunner)
  • media: sunxi-cir: ensure IR is handled when it is continuous (Sean Young)
  • media: gspca: Fix memory leak in probe (Alan Stern)
  • Input: goodix - add upside-down quirk for Teclast X98 Pro tablet (Simon Beginn)
  • Input: cros_ec_keyb - send ‘scancodes’ in addition to key events (Dmitry Torokhov)
  • fix namespaced fscaps when !CONFIG_SECURITY (Serge Hallyn)
  • cfg80211: initialize rekey_data (Sara Sharon)
  • clk: sunxi-ng: Make sure divider tables have sentinel (Jernej Skrabec)
  • clk: s2mps11: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)
  • qlcnic: Fix error code in probe (Dan Carpenter)
  • perf record: Fix memory leak when using ‘–user-regs=?’ to list registers (Zheng Zengkai)
  • pwm: lp3943: Dynamically allocate PWM chip base (Lokesh Vutla)
  • pwm: zx: Add missing cleanup in error path (Uwe Kleine-Konig)
  • clk: ti: Fix memleak in ti_fapll_synth_setup (Zhang Qilong)
  • watchdog: coh901327: add COMMON_CLK dependency (Arnd Bergmann)
  • watchdog: qcom: Avoid context switch in restart handler (Manivannan Sadhasivam)
  • net: korina: fix return value (Vincent Stehle)
  • net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function (Christophe JAILLET)
  • net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (Christophe JAILLET)
  • checkpatch: fix unescaped left brace (Dwaipayan Ray)
  • powerpc/ps3: use dma_mapping_error() (Vincent Stehle)
  • nfc: s3fwrn5: Release the nfc firmware (Bongsu Jeon)
  • um: chan_xterm: Fix fd leak (Anton Ivanov)
  • watchdog: sirfsoc: Add missing dependency on HAS_IOMEM (Guenter Roeck)
  • irqchip/alpine-msi: Fix freeing of interrupts on allocation error path (Marc Zyngier)
  • ASoC: wm_adsp: remove ‘ctl’ from list on error in wm_adsp_create_control() (Dan Carpenter)
  • extcon: max77693: Fix modalias string (Marek Szyprowski)
  • clk: tegra: Fix duplicated SE clock entry (Dmitry Osipenko)
  • x86/kprobes: Restore BTF if the single-stepping is cancelled (Masami Hiramatsu)
  • nfs_common: need lock during iterate through the list (Cheng Lin)
  • nfsd: Fix message level for normal termination (kazuo ito)
  • speakup: fix uninitialized flush_lock (Yang Yingliang)
  • usb: oxu210hp-hcd: Fix memory leak in oxu_create (Zhang Qilong)
  • usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe (Zhang Qilong)
  • powerpc/pseries/hibernation: remove redundant cacheinfo update (Nathan Lynch)
  • powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (Nathan Lynch)
  • scsi: fnic: Fix error return code in fnic_probe() (Zhang Changzhong)
  • scsi: pm80xx: Fix error return in pm8001_pci_probe() (Zhang Qilong)
  • scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe (Qinglang Miao)
  • cpufreq: scpi: Add missing MODULE_ALIAS (Pali Rohar)
  • cpufreq: loongson1: Add missing MODULE_ALIAS (Pali Rohar)
  • cpufreq: st: Add missing MODULE_DEVICE_TABLE (Pali Rohar)
  • cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE (Pali Rohar)
  • cpufreq: highbank: Add missing MODULE_DEVICE_TABLE (Pali Rohar)
  • clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI (Keqian Zhu)
  • dm ioctl: fix error return code in target_message (Qinglang Miao)
  • ASoC: jz4740-i2s: add missed checks for clk_get() (Chuhong Yuan)
  • net/mlx5: Properly convey driver version to firmware (Leon Romanovsky)
  • memstick: r592: Fix error return in r592_probe() (Jing Xiangfeng)
  • arm64: dts: rockchip: Fix UART pull-ups on rk3328 (Chen-Yu Tsai)
  • pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe() (Yu Kuai)
  • ARM: dts: at91: sama5d2: map securam as device (Claudiu Beznea)
  • clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent() (Yu Kuai)
  • media: saa7146: fix array overflow in vidioc_s_audio() (Dan Carpenter)
  • vfio-pci: Use io_remap_pfn_range() for PCI IO memory (Jason Gunthorpe)
  • NFS: switch nfsiod to be an UNBOUND workqueue. (NeilBrown)
  • SUNRPC: xprt_load_transport() needs to support the netid ‘rdma6’ (Trond Myklebust)
  • NFSv4.2: condition READDIRs mask for security label based on LSM state (Olga Kornievskaia)
  • ath10k: Release some resources in an error handling path (Christophe JAILLET)
  • ath10k: Fix an error handling path (Christophe JAILLET)
  • ARM: dts: at91: at91sam9rl: fix ADC triggers (Alexandre Belloni)
  • PCI: iproc: Fix out-of-bound array accesses (Bharat Gooty)
  • genirq/irqdomain: Dont try to free an interrupt that has no mapping (Marc Zyngier)
  • power: supply: bq24190_charger: fix reference leak (Zhang Qilong)
  • ARM: dts: Remove non-existent i2c1 from 98dx3236 (Chris Packham)
  • HSI: omap_ssi: Dont jump to free ID in ssi_add_controller() (Jing Xiangfeng)
  • media: max2175: fix max2175_set_csm_mode() error code (Dan Carpenter)
  • mips: cdmm: fix use-after-free in mips_cdmm_bus_discover (Qinglang Miao)
  • samples: bpf: Fix lwt_len_hist reusing previous BPF map (Daniel T. Lee)
  • media: siano: fix memory leak of debugfs members in smsdvb_hotplug (Keita Suzuki)
  • cw1200: fix missing destroy_workqueue() on error in cw1200_init_common (Qinglang Miao)
  • orinoco: Move context allocation after processing the skb (Sebastian Andrzej Siewior)
  • ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host (Cristian Birsan)
  • ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host (Cristian Birsan)
  • memstick: fix a double-free bug in memstick_check (Qinglang Miao)
  • RDMA/cxgb4: Validate the number of CQEs (Kamal Heib)
  • Input: omap4-keypad - fix runtime PM error handling (Zhang Qilong)
  • drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe (Zhihao Cheng)
  • soc: ti: Fix reference imbalance in knav_dma_probe (Zhang Qilong)
  • soc: ti: knav_qmss: fix reference leak in knav_queue_probe (Zhang Qilong)
  • crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe (Zhang Qilong)
  • powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 (Christophe Leroy)
  • Input: ads7846 - fix unaligned access on 7845 (Dmitry Torokhov)
  • Input: ads7846 - fix integer overflow on Rt calculation (Oleksij Rempel)
  • Input: ads7846 - fix race that causes missing releases (David Jander)
  • drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() (Yang Yingliang)
  • media: solo6x10: fix missing snd_card_free in error handling case (Qinglang Miao)
  • scsi: core: Fix VPD LUN ID designator priorities (Martin Wilck)
  • media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm() (Yu Kuai)
  • staging: greybus: codecs: Fix reference counter leak in error handling (Zhang Qilong)
  • MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA (Necip Fazil Yildiran)
  • RDMa/mthca: Work around -Wenum-conversion warning (Arnd Bergmann)
  • ASoC: arizona: Fix a wrong free in wm8997_probe (Zhang Qilong)
  • ASoC: wm8998: Fix PM disable depth imbalance on error (Zhang Qilong)
  • mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure (Tsuchiya Yuto)
  • spi: tegra114: fix reference leak in tegra spi ops (Zhang Qilong)
  • spi: tegra20-sflash: fix reference leak in tegra_sflash_resume (Zhang Qilong)
  • spi: tegra20-slink: fix reference leak in slink ops of tegra20 (Zhang Qilong)
  • spi: spi-ti-qspi: fix reference leak in ti_qspi_setup (Zhang Qilong)
  • Bluetooth: Fix null pointer dereference in hci_event_packet() (Anmol Karn)
  • arm64: dts: exynos: Correct psci compatible used on Exynos7 (Pawel Chmiel)
  • selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling (Paul Moore)
  • ASoC: pcm: DRAIN support reactivation (Cezary Rojewski)
  • spi: img-spfi: fix reference leak in img_spfi_resume (Zhang Qilong)
  • crypto: talitos - Fix return type of current_desc_hdr() (Christophe Leroy)
  • sched: Reenable interrupts in do_sched_yield() (Thomas Gleixner)
  • sched/deadline: Fix sched_dl_global_validate() (Peng Liu)
  • ARM: p2v: fix handling of LPAE translation in BE mode (Ard Biesheuvel)
  • x86/mm/ident_map: Check for errors from ident_pud_init() (Arvind Sankar)
  • RDMA/rxe: Compute PSN windows correctly (Bob Pearson)
  • selinux: fix error initialization in inode_doinit_with_dentry() (Tianyue Ren)
  • RDMA/bnxt_re: Set queue pair state when being queried (Kamal Heib)
  • soc: mediatek: Check if power domains can be powered on at boot time (Nicolas Boichat)
  • soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains() (Dan Carpenter)
  • drm/gma500: fix double free of gma_connector (Tom Rix)
  • Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() (Peilin Ye)
  • md: fix a warning caused by a race between concurrent md_ioctl()s (Dae R. Jeong)
  • crypto: af_alg - avoid undefined behavior accessing salg_name (Eric Biggers)
  • media: msi2500: assign SPI bus number dynamically (Antti Palosaari)
  • quota: Sanity-check quota file headers on load (Jan Kara)
  • serial_core: Check for port state when tty is in error state (Alexey Kardashevskiy)
  • HID: i2c-hid: add Vero K147 to descriptor override (Julian Sax)
  • ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU (Krzysztof Kozlowski)
  • ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410 (Krzysztof Kozlowski)
  • ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU (Krzysztof Kozlowski)
  • usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul (Fabio Estevam)
  • USB: gadget: f_rndis: fix bitrate for SuperSpeed and above (Will McVicker)
  • usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus (Jack Pham)
  • USB: gadget: f_midi: setup SuperSpeed Plus descriptors (Will McVicker)
  • USB: gadget: f_acm: add support for SuperSpeed Plus (taehyun.cho)
  • USB: serial: option: add interface-number sanity check to flag handling (Johan Hovold)
  • soc/tegra: fuse: Fix index bug in get_process_id (Nicolin Chen)
  • dm table: Remove BUG_ON(in_interrupt()) (Thomas Gleixner)
  • scsi: mpt3sas: Increase IOCInit request timeout to 30s (Sreekanth Reddy)
  • vxlan: Copy needed_tailroom from lowerdev (Sven Eckelmann)
  • vxlan: Add needed_headroom for lower device (Sven Eckelmann)
  • drm/tegra: sor: Disable clocks on error in tegra_sor_init() (Qinglang Miao)
  • kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling (Nicholas Piggin)
  • RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait (Leon Romanovsky)
  • can: softing: softing_netdev_open(): fix error handling (Zhang Qilong)
  • scsi: bnx2i: Requires MMU (Randy Dunlap)
  • gpio: mvebu: fix potential user-after-free on probe (Baruch Siach)
  • ARM: dts: sun8i: v3s: fix GIC node memory range (Icenowy Zheng)
  • pinctrl: baytrail: Avoid clearing debounce value when turning it off (Andy Shevchenko)
  • pinctrl: merrifield: Set default bias in case no particular value given (Andy Shevchenko)
  • drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)
  • serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)
  • ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)
  • USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)
  • USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)
  • xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)
  • ALSA: usb-audio: Fix control ‘access overflow’ errors from chmap (Takashi Iwai)
  • ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)
  • USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)
  • USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)
  • mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)
  • net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)
  • net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)
  • net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)
  • tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)
  • net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)
  • PCI: qcom: Add missing reset for ipq806x (Ansuel Smith)
  • x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)
  • scsi: be2iscsi: Revert ‘Fix a theoretical leak in beiscsi_create_eqs()’ (Dan Carpenter)
  • kbuild: avoid static_assert for genksyms (Arnd Bergmann)
  • pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)
  • Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)
  • Input: cm109 - do not stomp on control URB (Dmitry Torokhov)
  • platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)
  • soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)
  • scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)
  • ARC: stack unwinding: dont assume non-current task is sleeping (Vineet Gupta)
  • iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)
  • arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)
  • iwlwifi: pcie: limit memory read spin time (Johannes Berg)
  • spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe (Nathan Chancellor)
  • spi: bcm2835aux: Fix use-after-free on unbind (Lukas Wunner)
  • Linux 4.14.212 (Greg Kroah-Hartman)
  • x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)
  • Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)
  • i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)
  • gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)
  • tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))
  • spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)
  • spi: bcm2835: Fix use-after-free on unbind (Lukas Wunner)
  • spi: bcm-qspi: Fix use-after-free on unbind (Lukas Wunner)
  • spi: Introduce device-managed SPI controller allocation (Lukas Wunner)
  • speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)
  • i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)
  • i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)
  • mm/swapfile: do not sleep with a spin lock held (Qian Cai)
  • cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)
  • ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)
  • ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)
  • ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)
  • USB: serial: option: fix Quectel BG96 matching (Bjorn Mork)
  • USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)
  • USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)
  • USB: serial: ch341: sort device-id entries (Johan Hovold)
  • USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)
  • USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)
  • usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)
  • vlan: consolidate VLAN parsing code and limit max parsing depth (Toke Hoiland-Jorgensen)
  • pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(…, GPIOD_OUT_HIGH) (Hans de Goede)
  • pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)
  • Linux 4.14.211 (Greg Kroah-Hartman)
  • RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)
  • Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)
  • Input: xpad - support Ardwiino Controllers (Sanjay Govind)
  • ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)
  • dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)
  • net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)
  • net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)
  • cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)
  • net/x25: prevent a couple of overflows (Dan Carpenter)
  • ibmvnic: Fix TX completion error handling (Thomas Falcon)
  • ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)
  • ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)
  • netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)
  • bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)
  • usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)
  • tun: honor IOCB_NOWAIT flag (Jens Axboe)
  • tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)
  • sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)
  • rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)
  • net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)
    [4.14.35-2047.504.2]
  • md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32887159]
  • video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32856879]
  • Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft)) [Orabug: 32856879]
  • Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley) [Orabug: 32856879]
  • dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860493] {CVE-2021-31916}
  • net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry) [Orabug: 32559464]
  • Linux 4.14.210 (Greg Kroah-Hartman)
  • USB: core: Fix regression in Hercules audio card (Alan Stern)
  • USB: core: add endpoint-blacklist quirk (Johan Hovold)
  • x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (Xiaochen Shen)
  • x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (Xiaochen Shen)
  • usb: gadget: Fix memleak in gadgetfs_fill_super (Zhang Qilong)
  • usb: gadget: f_midi: Fix memleak in f_midi_alloc (Zhang Qilong)
  • USB: core: Change %pK for __user pointers to %px (Alan Stern)
  • perf probe: Fix to die_entrypc() returns error correctly (Masami Hiramatsu)
  • can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (Marc Kleine-Budde)
  • platform/x86: toshiba_acpi: Fix the wrong variable assignment (Kaixu Xia)
  • can: gs_usb: fix endianess problem with candleLight firmware (Marc Kleine-Budde)
  • efivarfs: revert ‘fix memory leak in efivarfs_create()’ (Ard Biesheuvel)
  • ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (Lijun Pan)
  • ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (Lijun Pan)
  • net: ena: set initial DMA width to avoid intel iommu issue (Shay Agroskin)
  • nfc: s3fwrn5: use signed integer for parsing GPIO numbers (Krzysztof Kozlowski)
  • IB/mthca: fix return value of error branch in mthca_init_cq() (Xiongfeng Wang)
  • scsi: ufs: Fix race between shutdown and runtime resume flow (Stanley Chu)
  • batman-adv: set .owner to THIS_MODULE (Taehee Yoo)
  • phy: tegra: xusb: Fix dangling pointer on probe failure (Marc Zyngier)
  • perf/x86: fix sysfs type mismatches (Sami Tolvanen)
  • scsi: target: iscsi: Fix cmd abort fabric stop race (Mike Christie)
  • scsi: libiscsi: Fix NOP race condition (Lee Duncan)
  • dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size (Sugar Zhang)
  • nvme: free sq/cq dbbuf pointers when dbbuf set fails (Minwoo Im)
  • proc: dont allow async path resolution of /proc/self components (Jens Axboe)
  • HID: Add Logitech Dinovo Edge battery quirk (Hans de Goede)
  • x86/xen: dont unbind uninitialized lock_kicker_irq (Brian Masney)
  • dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant (Marc Ferland)
  • HID: hid-sensor-hub: Fix issue with devices with no report ID (Pablo Ceballos)
  • Input: i8042 - allow insmod to succeed on devices without an i8042 controller (Hans de Goede)
  • HID: cypress: Support Varmilo Keyboards media hotkeys (Frank Yang)
  • ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close (Kai Vehmanen)
  • ALSA: hda/hdmi: Use single mutex unlock in error paths (Takashi Iwai)
  • arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (Will Deacon)
  • arm64: pgtable: Fix pte_accessible() (Will Deacon)
  • btrfs: adjust return values of btrfs_inode_by_name (Su Yue)
  • btrfs: tree-checker: Enhance chunk checker to validate chunk profile (Qu Wenruo)
  • PCI: Add device even if driver attach failed (Rajat Jain)
  • wireless: Use linux/stddef.h instead of stddef.h (Hauke Mehrtens)
  • btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana)
  • mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() (Gerald Schaefer)
  • perf event: Check ref_reloc_sym before using it (Igor Lubashev)
  • Linux 4.14.209 (Greg Kroah-Hartman)
  • x86/microcode/intel: Check patch signature before saving microcode for early loading (Chen Yu)
  • s390/dasd: fix null pointer dereference for ERP requests (Stefan Haberland)
  • s390/cpum_sf.c: fix file permission for cpum_sfb_size (Thomas Richter)
  • mac80211: free sta in sta_info_insert_finish() on errors (Johannes Berg)
  • mac80211: minstrel: fix tx status processing corner case (Felix Fietkau)
  • mac80211: minstrel: remove deferred sampling code (Felix Fietkau)
  • xtensa: disable preemption around cache alias management calls (Max Filippov)
  • regulator: workaround self-referent regulators (Micha; Miros;aw)
  • regulator: avoid resolve_supply() infinite recursion (Micha; Miros;aw)
  • regulator: fix memory leak with repeated set_machine_constraints() (Micha; Miros;aw)
  • iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode (Hans de Goede)
  • iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum (Hans de Goede)
  • ext4: fix bogus warning in ext4_update_dx_flag() (Jan Kara)
  • staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids (Brian O Keefe)
  • efivarfs: fix memory leak in efivarfs_create() (Vamshi K Sthambamkadi)
  • tty: serial: imx: keep console clocks always on (Fugang Duan)
  • ALSA: mixart: Fix mutex deadlock (Takashi Iwai)
  • ALSA: ctl: fix error path at adding user-defined element set (Takashi Sakamoto)
  • speakup: Do not let the line discipline be used several times (Samuel Thibault)
  • powerpc/uaccess-flush: fix missing includes in kup-radix.h (Daniel Axtens)
  • libfs: fix error cast of negative value in simple_attr_write() (Yicong Yang)
  • xfs: revert ‘xfs: fix rmap key and record comparison functions’ (Darrick J. Wong)
  • regulator: ti-abb: Fix array out of bound read access on the first transition (Nishanth Menon)
  • MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu (Zhang Qilong)
  • ASoC: qcom: lpass-platform: Fix memory leak (Srinivasa Rao Mandadapu)
  • can: m_can: m_can_handle_state_change(): fix state change (Wu Bo)
  • can: peak_usb: fix potential integer overflow on shift of a int (Colin Ian King)
  • can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() (Marc Kleine-Budde)
  • can: ti_hecc: Fix memleak in ti_hecc_probe (Zhang Qilong)
  • can: dev: can_restart(): post buffer from the right context (Alejandro Concepcion Rodriguez)
  • can: af_can: prevent potential access of uninitialized member in canfd_rcv() (Anant Thazhemadam)
  • can: af_can: prevent potential access of uninitialized member in can_rcv() (Anant Thazhemadam)
  • perf lock: Don t free ‘lock_seq_stat’ if read_count isn t zero (Leo Yan)
  • ARM: dts: imx50-evk: Fix the chip select 1 IOMUX (Fabio Estevam)
  • arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy (Sergey Matyukevich)
  • MIPS: export has_transparent_hugepage() for modules (Randy Dunlap)
  • Input: adxl34x - clean up a data type in adxl34x_probe() (Dan Carpenter)
  • vfs: remove lockdep bogosity in __sb_start_write (Darrick J. Wong)
  • arm64: psci: Avoid printing in cpu_psci_cpu_die() (Will Deacon)
  • pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq (Jianqun Xu)
  • net: ftgmac100: Fix crash when removing driver (Joel Stanley)
  • tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate (Ryan Sharpelletti)
  • net: usb: qmi_wwan: Set DTR quirk for MR400 (Filip Moc)
  • net/mlx5: Disable QoS when min_rates on all VFs are zero (Vladyslav Tarasiuk)
  • sctp: change to hold/put transport for proto_unreach_timer (Xin Long)
  • qlcnic: fix error return code in qlcnic_83xx_restart_hw() (Zhang Changzhong)
  • net: x25: Increase refcnt of ‘struct x25_neigh’ in x25_rx_call_request (Xie He)
  • net/mlx4_core: Fix init_hca fields offset (Aya Levin)
  • netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() (Paul Moore)
  • netlabel: fix our progress tracking in netlbl_unlabel_staticlist() (Paul Moore)
  • net: Have netpoll bring-up DSA management interface (Florian Fainelli)
  • net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 (Tobias Waldekranz)
  • net: bridge: add missing counters to ndo_get_stats64 callback (Heiner Kallweit)
  • net: b44: fix error return code in b44_init_one() (Zhang Changzhong)
  • mlxsw: core: Use variable timeout for EMAD retries (Ido Schimmel)
  • inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() (Wang Hai)
  • devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() (Wang Hai)
  • atm: nicstar: Unmap DMA on send error (Sebastian Andrzej Siewior)
  • ah6: fix error return code in ah6_input() (Zhang Changzhong)

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C