Lucene search

K
oraclelinuxOracleLinuxELSA-2021-9451
HistorySep 16, 2021 - 12:00 a.m.

Unbreakable Enterprise kernel-container security update

2021-09-1600:00:00
linux.oracle.com
33

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

[5.4.17-2102.205.7.2.el7]

  • btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276]
    [5.4.17-2102.205.7.1]
  • RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518]
    [5.4.17-2102.205.7]
  • rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge) [Orabug: 33253169]
  • vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora) [Orabug: 33200737] [Orabug: 33187733]
    [5.4.17-2102.205.6]
  • xfs: dont drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33241131]
  • xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 33241131]
  • rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372379]
    [5.4.17-2102.205.5]
  • KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky) [Orabug: 33226010] {CVE-2021-3653}
  • Revert KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Liam Merwick) [Orabug: 33226010] {CVE-2021-3653}
  • LTS tag: v5.4.140 (Jack Vogel)
  • arm64: fix compat syscall return truncation (Mark Rutland)
  • net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren)
  • alpha: Send stop IPI to send to online CPUs (Prarit Bhargava)
  • virt_wifi: fix error on connect (Matteo Croce)
  • reiserfs: check directory items on read from disk (Shreyansh Chouhan)
  • reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai)
  • libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig)
  • bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann)
  • soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann)
  • spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu)
  • soc: ixp4xx: fix printing resources (Arnd Bergmann)
  • arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon)
  • KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson)
  • KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini)
  • KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini)
  • md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu)
  • pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma)
  • timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner)
  • serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner)
  • serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko)
  • MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki)
  • serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki)
  • serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao)
  • serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter)
  • ext4: fix potential htree corruption when growing large_dir directories (Theodore Tso)
  • pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71))
  • media: rtl28xxu: fix zero-length control request (Johan Hovold)
  • staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin)
  • staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang)
  • tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks)
  • optee: Fix memory leak when failing to register shm pages (Tyler Hicks)
  • tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander)
  • optee: Clear stale cache entries during initialization (Tyler Hicks)
  • tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware))
  • scripts/tracing: fix the bug that cant parse raw_trace_func (Hui Su)
  • clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris)
  • usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko)
  • usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev)
  • usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell)
  • usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev)
  • usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak)
  • ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy)
  • ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov)
  • firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam)
  • firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam)
  • USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer)
  • USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau)
  • USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas)
  • USB: usbtmc: Fix RCU stall warning (Qiang.zhang)
  • Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) {CVE-2021-3573}
  • blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai)
  • net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin)
  • net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin)
  • net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin)
  • bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter)
  • mips: Fix non-POSIX regexp (H. Nikolaus Schaller)
  • net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart)
  • nfp: update ethtool reporting of pauseframe control (Fei Qin)
  • sctp: move the active_key update after sh_keys is added (Xin Long)
  • gpio: tqmx86: really make IRQ optional (Matthias Schiffer)
  • net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai)
  • net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett)
  • net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean)
  • net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean)
  • net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki)
  • dmaengine: imx-dma: configure the generic DMA type to make it work (Juergen Borleis)
  • media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil)
  • scsi: sr: Return correct event when media event code is 3 (Li Manyi)
  • spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation (Marek Vasut)
  • spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay (Marek Vasut)
  • omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller)
  • ARM: dts: am437x-l4: fix typo in can@0 node (Dario Binacchi)
  • clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi)
  • ALSA: usb-audio: fix incorrect clock source setting (chihhao.chen)
  • arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode (Pali Rohar)
  • ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins (Marek Vasut)
  • ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init (Colin Ian King)
  • ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz (Oleksandr Suvorov)
  • ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms (Maxime Chevallier)
  • ARM: imx: add missing clk_disable_unprepare() (Yang Yingliang)
  • ARM: imx: add missing iounmap() (Yang Yingliang)
  • arm64: dts: ls1028a: fix node name for the sysclk (Vladimir Oltean)
  • ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai)
  • Revert ACPICA: Fix memory leak caused by _CID repair function (Rafael J. Wysocki)
  • LTS tag: v5.4.139 (Jack Vogel)
  • spi: mediatek: Fix fifo transfer (Guenter Roeck)
  • bpf, selftests: Adjust few selftest outcomes wrt unreachable code (Daniel Borkmann)
  • bpf, selftests: Add a verifier test for assigning 32bit reg states to 64bit ones (John Fastabend)
  • bpf: Test_verifier, add alu32 bounds tracking tests (John Fastabend)
  • bpf: Fix leakage under speculation on mispredicted branches (Daniel Borkmann)
  • bpf: Do not mark insn as seen under speculative path verification (Daniel Borkmann)
  • bpf: Inherit expanded/patched seen count from old aux data (Daniel Borkmann)
  • Revert watchdog: iTCO_wdt: Account for rebooting on second timeout (Greg Kroah-Hartman)
  • firmware: arm_scmi: Add delayed response status check (Cristian Marussi)
  • firmware: arm_scmi: Ensure drivers provide a probe function (Sudeep Holla)
  • Revert Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Greg Kroah-Hartman)
  • ACPI: fix NULL pointer dereference (Linus Torvalds)
  • nvme: fix nvme_setup_command metadata trace event (Keith Busch)
  • net: Fix zero-copy head len calculation. (Pravin B Shelar)
  • qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He)
  • r8152: Fix potential PM refcount imbalance (Takashi Iwai)
  • ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits (Kyle Russell)
  • spi: stm32h7: fix full duplex irq handler handling (Alain Volmat)
  • regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin)
  • btrfs: fix lost inode on log replay after mix of fsync, rename and inode eviction (Filipe Manana)
  • btrfs: fix race causing unnecessary inode logging during link and rename (Filipe Manana)
  • btrfs: do not commit logs and transactions during link and rename operations (Filipe Manana)
  • btrfs: delete duplicated words + other fixes in comments (Randy Dunlap)
  • uek/ol/config-aarch64: Disable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER (Vijay Kumar) [Orabug: 33215814]
  • Revert rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 33220434]
  • Revert rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 33220434]
  • Revert rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 33220434]
  • Revert rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33220434]
  • KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33235071] {CVE-2021-3656}
  • LTS tag: v5.4.138 (Jack Vogel)
  • can: j1939: j1939_session_deactivate(): clarify lifetime of session object (Oleksij Rempel)
  • i40e: Add additional info to PHY type error (Lukasz Cieplicki)
  • Revert perf map: Fix dso->nsinfo refcounting (Arnaldo Carvalho de Melo)
  • powerpc/pseries: Fix regression while building external modules (Srikar Dronamraju)
  • PCI: mvebu: Setup BAR0 in order to fix MSI (Shmuel Hazan)
  • can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter)
  • sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai)
  • tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai)
  • sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner)
  • net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev() (Dima Chumak)
  • net/mlx5: Fix flow table chaining (Maor Gottlieb)
  • net: llc: fix skb_over_panic (Pavel Skripkin)
  • mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong)
  • net: Set true network header for ECN decapsulation (Gilad Naaman)
  • tipc: fix sleeping in tipc accept routine (Hoang Le)
  • i40e: Fix log TC creation failure when max num of queues is exceeded (Jedrzej Jagielski)
  • i40e: Fix queue-to-TC mapping on Tx (Jedrzej Jagielski)
  • i40e: Fix firmware LLDP agent related warning (Arkadiusz Kubalewski)
  • i40e: Fix logic of disabling queues (Arkadiusz Kubalewski)
  • netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso)
  • netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal)
  • cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi)
  • nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski)
  • NIU: fix incorrect error return, missed in previous revert (Paul Jakma)
  • HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT (Jason Gerecke)
  • can: esd_usb2: fix memory leak (Pavel Skripkin)
  • can: ems_usb: fix memory leak (Pavel Skripkin)
  • can: usb_8dev: fix memory leak (Pavel Skripkin)
  • can: mcba_usb_start(): add missing urb->transfer_dma initialization (Pavel Skripkin)
  • can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan)
  • can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT to 750ms (Zhang Changzhong)
  • ocfs2: issue zeroout to EOF blocks (Junxiao Bi)
  • ocfs2: fix zero out valid data (Junxiao Bi)
  • KVM: add missing compat KVM_CLEAR_DIRTY_LOG (Paolo Bonzini)
  • x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)
  • Revert ACPI: resources: Add checks for ACPI IRQ override (Hui Wang)
  • btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues)
  • btrfs: fix rw device counting in __btrfs_free_extra_devids (Desmond Cheong Zhi Xi)
  • x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka)
  • net_sched: check error pointer in tcf_dump_walker() (Cong Wang)
  • LTS tag: v5.4.137 (Jack Vogel)
  • ipv6: ip6_finish_output2: set sk into newly allocated nskb (Vasily Averin)
  • ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla)
  • iomap: remove the length variable in iomap_seek_hole (Christoph Hellwig)
  • iomap: remove the length variable in iomap_seek_data (Christoph Hellwig)
  • cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Hyunchul Lee)
  • firmware: arm_scmi: Fix range check for the maximum number of pending messages (Cristian Marussi)
  • firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow (Sudeep Holla)
  • hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi)
  • hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi)
  • hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi)
  • ipv6: allocate enough headroom in ip6_finish_output2() (Vasily Averin)
  • sctp: move 198 addresses from unusable to private scope (Xin Long)
  • net: annotate data race around sk_ll_usec (Eric Dumazet)
  • net/802/garp: fix memleak in garp_request_join() (Yang Yingliang)
  • net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang)
  • cgroup1: fix leaked context root causing sporadic NULL deref in LTP (Paul Gortmaker)
  • workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang)
  • af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)
  • KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky)
  • tools: Allow proper CC/CXX/… override with LLVM=1 in Makefile.include (Yonghong Song)
  • selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman)
  • LTS tag: v5.4.136 (Jack Vogel)
  • xhci: add xhci_get_virt_ep() helper (Mathias Nyman)
  • perf inject: Close inject.output on exit (Riccardo Mancini)
  • PCI: Mark AMD Navi14 GPU ATS as broken (Evan Quan)
  • btrfs: compression: dont try to compress if we dont have enough pages (David Sterba)
  • iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold)
  • iio: accel: bma180: Use explicit member assignment (Linus Walleij)
  • net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger)
  • net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz (Marek Behun)
  • drm: Return -ENOTTY for non-drm ioctls (Charles Baylis)
  • nds32: fix up stack guard gap (Greg Kroah-Hartman)
  • rbd: always kick acquire on acquired and released notifications (Ilya Dryomov)
  • rbd: dont hold lock_rwsem while running_list is being drained (Ilya Dryomov)
  • hugetlbfs: fix mount mode command line processing (Mike Kravetz)
  • userfaultfd: do not untag user pointers (Peter Collingbourne)
  • selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne)
  • ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme)
  • media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva)
  • btrfs: check for missing device in btrfs_trim_fs (Anand Jain)
  • tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)
  • tracing/histogram: Rename cpu to common_cpu (Steven Rostedt (VMware))
  • firmware/efi: Tell memblock about EFI iomem reservations (Marc Zyngier)
  • usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan)
  • USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping)
  • USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray)
  • USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco)
  • usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda)
  • usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson)
  • USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski)
  • usb: hub: Fix link power management max exit latency (MEL) calculations (Mathias Nyman)
  • usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman)
  • KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state (Nicholas Piggin)
  • KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin)
  • xhci: Fix lost USB 2 remote wake (Mathias Nyman)
  • ALSA: hdmi: Expose all pins on MSI MS-7C94 board (Takashi Iwai)
  • ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai)
  • ALSA: usb-audio: Add registration quirk for JBL Quantum headsets (Alexander Tsoy)
  • ALSA: usb-audio: Add missing proc text entry for BESPOKEN type (Takashi Iwai)
  • s390/boot: fix use of expolines in the DMA code (Alexander Egorenkov)
  • s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik)
  • Revert MIPS: add PMD table accounting into MIPSpmd_alloc_one (Huang Pei)
  • proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri)
  • drm/panel: raspberrypi-touchscreen: Prevent double-free (Maxime Ripard)
  • net: sched: cls_api: Fix the the wrong parameter (Yajun Deng)
  • sctp: update active_key for asoc when old key is being replaced (Xin Long)
  • nvme: set the PRACT bit when using Write Zeroes with T10 PI (Christoph Hellwig)
  • r8169: Avoid duplicate sysfs entry creation error (Sayanta Pattanayak)
  • afs: Fix tracepoint string placement with built-in AFS (David Howells)
  • Revert USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)
  • nvme-pci: dont WARN_ON in nvme_reset_work if ctrl.state is not RESETTING (Zhihao Cheng)
  • ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions (Paolo Abeni)
  • net/sched: act_skbmod: Skip non-Ethernet packets (Peilin Ye)
  • net: hns3: fix rx VLAN offload state inconsistent issue (Jian Shen)
  • net/tcp_fastopen: fix data races around tfo_active_disable_stamp (Eric Dumazet)
  • net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition (Randy Dunlap)
  • bnxt_en: Check abort error state in bnxt_half_open_nic() (Somnath Kotur)
  • bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task() (Michael Chan)
  • bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe() (Michael Chan)
  • spi: cadence: Correct initialisation of runtime PM again (Marek Vasut)
  • scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov)
  • scsi: iscsi: Fix iface sysfs attr detection (Mike Christie)
  • netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi)
  • net: sched: fix memory leak in tcindex_partial_destroy_work (Pavel Skripkin)
  • KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak (Nicholas Piggin)
  • KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash (Nicholas Piggin)
  • net: decnet: Fix sleeping inside in af_decnet (Yajun Deng)
  • efi/tpm: Differentiate missing and invalid final event log table. (Michal Suchanek)
  • net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan)
  • bpftool: Check malloc return value in mount_bpffs_for_pin (Tobias Klauser)
  • bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats (John Fastabend)
  • s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King)
  • liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King)
  • ASoC: rt5631: Fix regcache sync errors on resume (Maxim Schwalm)
  • spi: mediatek: fix fifo rx mode (Peter Hess)
  • regulator: hi6421: Fix getting wrong drvdata (Axel Lin)
  • regulator: hi6421: Use correct variable type for regmap api val argument (Axel Lin)
  • spi: stm32: fixes pm_runtime calls in probe/remove (Alain Volmat)
  • spi: stm32: Use dma_request_chan() instead dma_request_slave_channel() (Peter Ujfalusi)
  • spi: imx: add a check for speed_hz before calculating the clock (Clark Wang)
  • perf data: Close all files in close_dir() (Riccardo Mancini)
  • perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini)
  • perf lzma: Close lzma stream on exit (Riccardo Mancini)
  • perf script: Fix memory threads and cpus leaks on exit (Riccardo Mancini)
  • perf dso: Fix memory leak in dso__new_map() (Riccardo Mancini)
  • perf test event_update: Fix memory leak of evlist (Riccardo Mancini)
  • perf test session_topology: Delete session->evlist (Riccardo Mancini)
  • perf env: Fix sibling_dies memory leak (Riccardo Mancini)
  • perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini)
  • nvme-pci: do not call nvme_dev_remove_admin from nvme_remove (Casey Chen)
  • cxgb4: fix IRQ free race during driver unload (Shahjada Abul Husain)
  • pwm: sprd: Ensure configuring period and duty_cycle isnt wrongly skipped (Uwe Kleine-Konig)
  • selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect (Hangbin Liu)
  • selftests: icmp_redirect: remove from checking for IPv6 route get (Hangbin Liu)
  • ipv6: fix disable_policy for fwd packets (Nicolas Dichtel)
  • gve: Fix an error handling path in gve_probe() (Christophe JAILLET)
  • igb: Fix position of assignment to *ring (Jedrzej Jagielski)
  • igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov)
  • iavf: Fix an error handling path in iavf_probe() (Christophe JAILLET)
  • e1000e: Fix an error handling path in e1000_probe() (Christophe JAILLET)
  • fm10k: Fix an error handling path in fm10k_probe() (Christophe JAILLET)
  • igb: Fix an error handling path in igb_probe() (Christophe JAILLET)
  • igc: Fix an error handling path in igc_probe() (Christophe JAILLET)
  • igc: Prefer to use the pci_release_mem_regions method (Sasha Neftin)
  • ixgbe: Fix an error handling path in ixgbe_probe() (Christophe JAILLET)
  • igc: change default return of igc_read_phy_reg() (Tom Rix)
  • igb: Fix use-after-free error during reset (Vinicius Costa Gomes)
  • igc: Fix use-after-free error during reset (Vinicius Costa Gomes)
  • LTS tag: v5.4.135 (Jack Vogel)
  • udp: annotate data races around unix_sk(sk)->gso_size (Eric Dumazet)
  • perf test bpf: Free obj_buf (Riccardo Mancini)
  • bpftool: Properly close va_list ap by va_end() on error (Gu Shengxian)
  • ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet)
  • tcp: annotate data races around tp->mtu_info (Eric Dumazet)
  • dma-buf/sync_file: Dont leak fences on merge failure (Jason Ekstrand)
  • net: fddi: fix UAF in fza_probe (Pavel Skripkin)
  • net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)
  • net: send SYNACK packet with accepted fwmark (Alexander Ovechkin)
  • net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)
  • net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin)
  • net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin)
  • net: ip_tunnel: fix mtu calculation for ETHER tunnel devices (Hangbin Liu)
  • net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli)
  • net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller)
  • net/sched: act_ct: fix err check for nf_conntrack_confirm (wenxu)
  • netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin)
  • net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko)
  • net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz (Marek Behun)
  • net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz (Marek Behun)
  • dm writecache: return the exact table values that were set (Mikulas Patocka)
  • usb: cdns3: Enable TDL_CHK only for OUT ep (Sanket Parmar)
  • f2fs: Show casefolding support only when supported (Daniel Rosenberg)
  • arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file (Pali Rohar)
  • firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware compatible string (Pali Rohar)
  • arm64: dts: armada-3720-turris-mox: add firmware node (Marek Behun)
  • cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara)
  • s390: introduce proper type handling call_on_stack() macro (Heiko Carstens)
  • sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal)
  • scsi: qedf: Add check to synchronize abort and flush (Javed Hasan)
  • scsi: libfc: Fix array index out of bound exception (Javed Hasan)
  • scsi: libsas: Add LUN number check in .slave_alloc callback (Yufen Yu)
  • scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King)
  • rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
  • kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich)
  • thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang)
  • arm64: dts: imx8mq: assign PCIe clocks (Lucas Stach)
  • arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab)
  • firmware: tegra: bpmp: Fix Tegra234-only builds (Thierry Reding)
  • soc/tegra: fuse: Fix Tegra234-only builds (Thierry Reding)
  • ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15 (Alexandre Torgue)
  • ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings (Alexandre Torgue)
  • ARM: dts: rockchip: fix supply properties in io-domains nodes (Johan Jonker)
  • arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla)
  • ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings (Alexandre Torgue)
  • ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue)
  • ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards (Alexandre Torgue)
  • ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko)
  • ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios (Grygorii Strashko)
  • kbuild: sink stdout from cmd for silent build (Masahiro Yamada)
  • rtc: mxc_v2: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
  • ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschafer)
  • ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser)
  • ARM: dts: Hurricane 2: Fix NAND nodes names (Rafal Milecki)
  • ARM: dts: BCM63xx: Fix NAND nodes names (Rafal Milecki)
  • ARM: NSP: dts: fix NAND nodes names (Rafal Milecki)
  • ARM: Cygnus: dts: fix NAND nodes names (Rafal Milecki)
  • ARM: brcmstb: dts: fix NAND nodes names (Rafal Milecki)
  • reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel)
  • arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang)
  • arm64: dts: rockchip: Fix power-controller node names for px30 (Elaine Zhang)
  • ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang)
  • ARM: dts: rockchip: Fix power-controller node names for rk3188 (Elaine Zhang)
  • ARM: dts: rockchip: Fix power-controller node names for rk3066a (Elaine Zhang)
  • ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x (Benjamin Gaignard)
  • ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia)
  • arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker)
  • ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker)
  • ARM: dts: gemini: add device_type on pci (Corentin Labbe)
  • ARM: dts: gemini: rename mdio to the right name (Corentin Labbe)
  • LTS tag: v5.4.134 (Jack Vogel)
  • misc: alcor_pci: fix inverted branch condition (Tong Zhang)
  • scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg() (Dan Carpenter)
  • MIPS: vdso: Invalid GIC access through VDSO (Martin Facknitz)
  • mips: disable branch profiling in boot/decompress.o (Randy Dunlap)
  • mips: always link byteswap helpers into decompressor (Arnd Bergmann)
  • scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET)
  • firmware: turris-mox-rwtm: fail probing when firmware does not support hwrng (Pali Rohar)
  • firmware: turris-mox-rwtm: report failures better (Marek Behun)
  • firmware: turris-mox-rwtm: fix reply status decoding function (Marek Behun)
  • thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations (Niklas Soderlund)
  • ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery (Christoph Niedermaier)
  • ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems (Christoph Niedermaier)
  • ARM: dts: imx6q-dhcom: Fix ethernet reset time properties (Christoph Niedermaier)
  • ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)
  • ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)
  • memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski)
  • memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski)
  • reset: bail if try_module_get() fails (Philipp Zabel)
  • ARM: dts: BCM5301X: Fixup SPI binding (Rafal Milecki)
  • firmware: arm_scmi: Reset Rx buffer to max size during async commands (Cristian Marussi)
  • firmware: tegra: Fix error return code in tegra210_bpmp_init() (Zhen Lei)
  • ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven)
  • arm64: dts: renesas: v3msk: Fix memory size (Valentine Barshak)
  • rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter)
  • memory: pl353: Fix error return code in pl353_smc_probe() (Zhen Lei)
  • reset: brcmstb: Add missing MODULE_DEVICE_TABLE (Zou Wei)
  • memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski)
  • ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski)
  • ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1 (Krzysztof Kozlowski)
  • ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski)
  • ARM: exynos: add missing of_node_put for loop iteration (Krzysztof Kozlowski)
  • reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski)
  • ARM: dts: gemini-rut1xx: remove duplicate ethernet node (Corentin Labbe)
  • hexagon: use common DISCARDS macro (Nathan Chancellor)
  • NFSv4/pNFS: Dont call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust)
  • ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei)
  • nvme-tcp: cant set sk_user_data without write_lock (Maurizio Lombardi)
  • virtio_net: move tx vq operation under tx queue lock (Michael S. Tsirkin)
  • pwm: imx1: Dont disable clocks at device remove time (Uwe Kleine-Konig)
  • x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner)
  • PCI: iproc: Support multi-MSI only on uniprocessor kernel (Sandor Bodo-Merle)
  • PCI: iproc: Fix multi-MSI base vector number allocation (Sandor Bodo-Merle)
  • ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng)
  • nfs: fix acl memory leak of posix_acl_create() (Gao Xiang)
  • watchdog: aspeed: fix hardware timeout calculation (Tao Ren)
  • um: fix error return code in winch_tramp() (Zhen Lei)
  • um: fix error return code in slip_open() (Zhen Lei)
  • NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust)
  • power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold)
  • PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczynski)
  • f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu)
  • x86/signal: Detect and prevent an alternate signal stack overflow (Chang S. Bae)
  • virtio_console: Assure used length from device is limited (Xie Yongji)
  • virtio_net: Fix error handling in virtnet_restore() (Xie Yongji)
  • virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji)
  • ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede)
  • ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang)
  • pwm: tegra: Dont modify HW state in .remove callback (Uwe Kleine-Konig)
  • pwm: img: Fix PM reference leak in img_pwm_enable() (Zou Wei)
  • power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei)
  • power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei)
  • NFS: nfs_find_open_context() may only select open files (Trond Myklebust)
  • ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton)
  • orangefs: fix orangefs df output. (Mike Marshall)
  • PCI: tegra: Add missing MODULE_DEVICE_TABLE (Zou Wei)
  • x86/fpu: Return proper error codes from user access functions (Thomas Gleixner)
  • watchdog: imx_sc_wdt: fix pretimeout (Stefan Eichenberger)
  • watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei)
  • watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei)
  • watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei)
  • PCI/P2PDMA: Avoid pci_get_slot(), which may sleep (Logan Gunthorpe)
  • ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers)
  • power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui)
  • power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)
  • power: supply: ab8500: Avoid NULL pointers (Linus Walleij)
  • pwm: spear: Dont modify HW state in .remove callback (Uwe Kleine-Konig)
  • power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE (Zou Wei)
  • power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE (Zou Wei)
  • lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov)
  • i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov)
  • intel_th: Wait until port is in reset before programming it (Alexander Shishkin)
  • staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto)
  • ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions (Geoffrey D. Bennett)
  • ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao)
  • backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-Konig)
  • ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters (Pierre-Louis Bossart)
  • powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt)
  • usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang)
  • usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol)
  • ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values (Geoffrey D. Bennett)
  • ALSA: usb-audio: scarlett2: Fix data_mutex lock (Geoffrey D. Bennett)
  • ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count (Geoffrey D. Bennett)
  • ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto)
  • Input: hideep - fix the uninitialized use in hideep_nvm_unlock() (Yizhuo Zhai)
  • s390/mem_detect: fix tprot() program check new psw handling (Heiko Carstens)
  • s390/mem_detect: fix diag260() program check new psw handling (Heiko Carstens)
  • s390/ipl_parm: fix program check new psw handling (Heiko Carstens)
  • s390/processor: always inline stap() and __load_psw_mask() (Heiko Carstens)
  • ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei)
  • gpio: pca953x: Add support for the On Semi pca9655 (Peter Robinson)
  • selftests/powerpc: Fix no_handler EBB selftest (Athira Rajeev)
  • ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang)
  • gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli)
  • iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation (Xiyu Yang)
  • iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get fails (Xiyu Yang)
  • powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand)
  • ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai)
  • selftests: timers: rtcpie: skip test if default RTC device does not exist (Po-Hsu Lin)
  • s390/sclp_vt220: fix console name to match device (Valentin Vidic)
  • serial: tty: uartlite: fix console setup (Daniel Mack)
  • ASoC: img: Fix PM reference leak in img_i2s_in_probe() (Yufen Yu)
  • mfd: cpcap: Fix cpcap dmamask not set warnings (Tony Lindgren)
  • mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei)
  • scsi: qedi: Fix null ref during abort handling (Mike Christie)
  • scsi: iscsi: Fix shost->max_id use (Mike Christie)
  • scsi: iscsi: Fix conn use after free during resets (Mike Christie)
  • scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)
  • scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs (Chandrakanth Patil)
  • scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai)
  • scsi: megaraid_sas: Fix resource leak in case of probe failure (Chandrakanth Patil)
  • fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong)
  • scsi: scsi_dh_alua: Check for negative result value (Hannes Reinecke)
  • tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET)
  • ALSA: ac97: fix PM reference leak in ac97_bus_remove() (Yufen Yu)
  • scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry)
  • scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart)
  • scsi: lpfc: Fix Unexpected timeout error in direct attach topology (James Smart)
  • scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw() (Sergey Shtylyov)
  • w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio)
  • Revert ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto)
  • ALSA: usx2y: Dont call free_pages_exact() with NULL address (Takashi Iwai)
  • iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get() (Jonathan Cameron)
  • iio: gyro: fxa21002c: Balance runtime pm + use pm_runtime_resume_and_get(). (Jonathan Cameron)
  • misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge (Tong Zhang)
  • misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong)
  • tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun)
  • srcu: Fix broken node geometry after early ssp init (Frederic Weisbecker)
  • dmaengine: fsl-qdma: check dma_set_mask return value (Robin Gong)
  • net: moxa: Use devm_platform_get_and_ioremap_resource() (Yang Yingliang)
  • fbmem: Do not delete the mode that is still in use (Zhen Lei)
  • cgroup: verify that source is a string (Christian Brauner)
  • tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware))
  • scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler)
  • KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan)
  • KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson)
  • KVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio (Kefeng Wang)
  • LTS tag: v5.4.133 (Jack Vogel)
  • smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa)
  • jfs: fix GPF in diFree (Pavel Skripkin)
  • pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq() (Zou Wei)
    [5.4.17-2102.205.2]
  • rds/ib: quarantine STALE mr before dereg (Manjunath Patil) [Orabug: 33150447]
  • rds/ib: update mr incarnation after forming inv wr (Manjunath Patil) [Orabug: 33177348]
  • rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil) [Orabug: 33150427]
  • arm64: mm: kdump: Fix /proc/kcore (Henry Willard) [Orabug: 32570847]
    [5.4.17-2102.205.0]
  • LTS tag: v5.4.132 (Jack Vogel)
  • iommu/dma: Fix compile warning in 32-bit builds (Joerg Roedel)
  • mmc: vub3000: fix control-request direction (Johan Hovold)
  • mmc: block: Disable CMDQ on the ioctl path (Bean Huo)
  • scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd() (Varun Prakash)
  • perf llvm: Return -ENOMEM when asprintf() fails (Arnaldo Carvalho de Melo)
  • selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen)
  • mm/z3fold: fix potential memory leak in z3fold_destroy_pool() (Miaohe Lin)
  • mm/huge_memory.c: dont discard hugepage if other processes are mapping it (Miaohe Lin)
  • vfio/pci: Handle concurrent vma faults (Alex Williamson)
  • arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART (Pali Rohar)
  • serial: mvebu-uart: correctly calculate minimal possible baudrate (Pali Rohar)
  • serial: mvebu-uart: do not allow changing baudrate when uartclk is not available (Pali Rohar)
  • powerpc: Offline CPU in stop_this_cpu() (Nicholas Piggin)
  • leds: ktd2692: Fix an error handling path (Christophe JAILLET)
  • leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei)
  • configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng)
  • ASoC: atmel-i2s: Fix usage of capture and playback at the same time (Codrin Ciubotariu)
  • extcon: max8997: Add missing modalias string (Marek Szyprowski)
  • extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold)
  • phy: ti: dm816x: Fix the error handling path in dm816x_usb_phy_probe() (Christophe JAILLET)
  • phy: uniphier-pcie: Fix updating phy parameters (Kunihiko Hayashi)
  • soundwire: stream: Fix test for DP prepare complete (Richard Fitzgerald)
  • scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei)
  • mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume() (Yang Yingliang)
  • of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven)
  • ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald)
  • iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: light: vcnl4035: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates (Maciej W. Rozycki)
  • staging: mt7621-dts: fix pci address for PCI memory range (Sergio Paracuellos)
  • staging: rtl8712: fix memory leak in rtl871x_load_fw_cb (Pavel Skripkin)
  • staging: rtl8712: remove redundant check in r871xu_drv_init (Pavel Skripkin)
  • staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter)
  • staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter)
  • iio: magn: rm3100: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adc: at91-sama5d2: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: at91-sama5d2_adc: remove usage of iio_priv_to_dev() helper (Alexandru Ardelean)
  • eeprom: idt_89hpesx: Restore printing the unsupported fwnode name (Andy Shevchenko)
  • eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko)
  • usb: dwc2: Dont reset the core after setting turnaround time (Clement Lassieur)
  • usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov)
  • ASoC: mediatek: mtk-btcvsd: Fix an error handling path in mtk_btcvsd_snd_probe() (Christophe JAILLET)
  • iommu/dma: Fix IOVA reserve dma ranges (Srinath Mannam)
  • s390: appldata depends on PROC_SYSCTL (Randy Dunlap)
  • visorbus: fix error return code in visorchipset_init() (Zhen Lei)
  • fsi/sbefifo: Fix reset timeout (Joachim Fenkes)
  • fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE (Joachim Fenkes)
  • fsi: occ: Dont accept response from un-initialized OCC (Eddie James)
  • fsi: scom: Reset the FSI2PIB engine for any error (Eddie James)
  • fsi: core: Fix return of error values on failures (Colin Ian King)
  • scsi: FlashPoint: Rename si_flags field (Randy Dunlap)
  • leds: lm3692x: Put fwnode in any case during ->probe() (Andy Shevchenko)
  • leds: lm36274: cosmetic: rename lm36274_data to chip (Marek Behun)
  • leds: lm3532: select regmap I2C API (Andy Shevchenko)
  • tty: nozomi: Fix the error handling path of nozomi_card_init() (Christophe JAILLET)
  • firmware: stratix10-svc: Fix a resource leak in an error handling path (Christophe JAILLET)
  • char: pcmcia: error out if num_bytes_read is greater than 4 in set_protocol() (Yu Kuai)
  • mtd: partitions: redboot: seek fis-index-block in the right node (Corentin Labbe)
  • Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei)
  • ASoC: rsnd: tidyup loop on rsnd_adg_clk_query() (Kuninori Morimoto)
  • backlight: lm3630a_bl: Put fwnode in error case during ->probe() (Andy Shevchenko)
  • ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang)
  • ASoC: rk3328: fix missing clk_disable_unprepare() on error in rk3328_platform_probe() (Yang Yingliang)
  • iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: cros_ec_sensors: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: magn: bmc150: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: magn: hmc5843: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: accel: mxc4005: Fix overread of data and alignment issue. (Jonathan Cameron)
  • iio:accel:mxc4005: Drop unnecessary explicit casts in regmap_bulk_read calls (Jonathan Cameron)
  • iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)
  • iio: adis16400: do not return ints in irq handlers (Nuno Sa)
  • iio: adis_buffer: do not return ints in irq handlers (Nuno Sa)
  • mwifiex: re-fix for unaligned accesses (Arnd Bergmann)
  • tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET)
  • rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread() (Paul E. McKenney)
  • staging: fbtft: Rectify GPIO handling (Andy Shevchenko)
  • MIPS: Fix PKMAP with 32-bit MIPS huge page support (Wei Li)
  • RDMA/mlx5: Dont access NULL-cleared mpi pointer (Leon Romanovsky)
  • net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin)
  • net: lwtunnel: handle MTU calculation in forwading (Vadim Fedorenko)
  • writeback: fix obtain a reference to a freeing memcg css (Muchun Song)
  • clk: si5341: Update initialization magic (Robert Hancock)
  • clk: si5341: Avoid divide errors due to bogus register contents (Robert Hancock)
  • clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC (Cristian Ciocaltea)
  • clk: actions: Fix SD clocks factor table on Owl S500 SoC (Cristian Ciocaltea)
  • clk: actions: Fix UART clock dividers on Owl S500 SoC (Cristian Ciocaltea)
  • Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event (Luiz Augusto von Dentz)
  • Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)
  • Revert be2net: disable bh with spin_lock in be_process_mcc (Petr Oros)
  • gve: Fix swapped vars when fetching max queues (Bailey Forrest)
  • bpfilter: Specify the log level for the kmsg message (Gary Lin)
  • e1000e: Check the PCIm state (Sasha Neftin)
  • ipv6: fix out-of-bound access in ip6_parse_tlv() (Eric Dumazet)
  • ibmvnic: free tx_pool if tso_pool alloc fails (Sukadev Bhattiprolu)
  • Revert ibmvnic: remove duplicate napi_schedule call in open function (Dany Madden)
  • i40e: Fix autoneg disabling for non-10GBaseT links (Mateusz Palczewski)
  • i40e: Fix error handling in i40e_vsi_open (Dinghao Liu)
  • bpf: Do not change gso_size during bpf_skb_change_proto() (Maciej zenczykowski)
  • ipv6: exthdrs: do not blindly use init_net (Eric Dumazet)
  • net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan)
  • mac80211: remove iwlwifi specific workaround NDPs of null_response (Ping-Ke Shih)
  • ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl() (Eric Dumazet)
  • ieee802154: hwsim: Fix memory leak in hwsim_add_one (Dongliang Mu)
  • tc-testing: fix list handling (Marcelo Ricardo Leitner)
  • net/ipv4: swap flow ports when validating source (Miao Wang)
  • vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet)
  • pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet)
  • tls: prevent oversized sendfile() hangs by ignoring MSG_MORE (Jakub Kicinski)
  • net: sched: add barrier to ensure correct ordering for lockless qdisc (Yunsheng Lin)
  • vrf: do not push non-ND strict packets with a source LLA through packet taps again (Antoine Tenart)
  • net: ethernet: ezchip: fix error handling (Pavel Skripkin)
  • net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin)
  • net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin)
  • samples/bpf: Fix the error return code of xdp_redirects main() (Wang Hai)
  • RDMA/rxe: Fix qp reference counting for atomic ops (Bob Pearson)
  • netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols (Pablo Neira Ayuso)
  • netfilter: nft_osf: check for TCP packet before further processing (Pablo Neira Ayuso)
  • netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso)
  • RDMA/mlx5: Dont add slave port to unaffiliated list (Leon Romanovsky)
  • netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin)
  • ath10k: Fix an error code in ath10k_add_interface() (Yang Li)
  • brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET)
  • brcmfmac: correctly report average RSSI in station info (Alvin Sipraga)
  • brcmfmac: fix setting of station info chains bitmask (Alvin Sipraga)
  • ssb: Fix error return code in ssb_bus_scan() (Zhen Lei)
  • wcn36xx: Move hal_buf allocation to devm_kmalloc in probe (Bryan ODonoghue)
  • ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others (Dongliang Mu)
  • wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap)
  • ath10k: add missing error return code in ath10k_pci_probe() (Yang Yingliang)
  • ath10k: go to path err_unsupported when chip id is not supported (Yang Yingliang)
  • tools/bpftool: Fix error return code in do_batch() (Zhihao Cheng)
  • drm: qxl: ensure surf.data is ininitialized (Colin Ian King)
  • RDMA/rxe: Fix failure during driver load (Kamal Heib)
  • RDMA/core: Sanitize WQ state received from the userspace (Leon Romanovsky)
  • net/sched: act_vlan: Fix modify to allow 0 (Boris Sukholitko)
  • ehea: fix error return code in ehea_restart_qps() (Zhen Lei)
  • drm/rockchip: dsi: move all lane config except LCDC mux to bind() (Thomas Hebb)
  • drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang)
  • net: ftgmac100: add missing error return code in ftgmac100_probe() (Yang Yingliang)
  • clk: meson: g12a: fix gp0 and hifi ranges (Jerome Brunet)
  • pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities (Geert Uytterhoeven)
  • pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin (Geert Uytterhoeven)
  • net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko)
  • net: mvpp2: Put fwnode in error case during ->probe() (Andy Shevchenko)
  • video: fbdev: imxfb: Fix an error message (Christophe JAILLET)
  • xfrm: xfrm_state_mtu should return at least 1280 for ipv6 (Sabrina Dubroca)
  • dax: fix ENOMEM handling in grab_mapping_entry() (Jan Kara)
  • ocfs2: fix snprintf() checking (Dan Carpenter)
  • cpufreq: Make cpufreq_online() call driver->offline() on errors (Rafael J. Wysocki)
  • ACPI: bgrt: Fix CFI violation (Nathan Chancellor)
  • ACPI: Use DEVICE_ATTR_
    macros (Dwaipayan Ray)
  • blk-wbt: make sure throttle is enabled properly (Zhang Yi)
  • blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled() (Zhang Yi)
  • extcon: extcon-max8997: Fix IRQ freeing at error path (Matti Vaittinen)
  • ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczynski)
  • crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu)
  • spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt)
  • sched/uclamp: Fix uclamp_tg_restrict() (Qais Yousef)
  • sched/rt: Fix Deadline utilization tracking during policy change (Vincent Donnefort)
  • sched/rt: Fix RT utilization tracking during policy change (Vincent Donnefort)
  • btrfs: clear log tree recovering status if starting transaction fails (David Sterba)
  • regulator: hi655x: Fix pass wrong pointer to config.driver_data (Axel Lin)
  • KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap (Sean Christopherson)
  • hwmon: (max31790) Fix fan speed reporting for fan7…12 (Guenter Roeck)
  • hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck)
  • media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min)
  • arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan (Anshuman Khandual)
  • arm64: consistently use reserved_pg_dir (Mark Rutland)
  • mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei)
  • crypto: omap-sham - Fix PM reference leak in omap sham ops (Zhang Qilong)
  • crypto: nitrox - fix unchecked variable in nitrox_register_interrupts (Tong Tiangen)
  • media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva)
  • m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning (Randy Dunlap)
  • media: gspca/gl860: fix zero-length control requests (Johan Hovold)
  • media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei)
  • media: au0828: fix a NULL vs IS_ERR() check (Dan Carpenter)
  • media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong)
  • pata_ep93xx: fix deferred probing (Sergey Shtylyov)
  • media: rc: i2c: Fix an error message (Christophe JAILLET)
  • crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET)
  • evm: fix writing
    /evm overflow (Mimi Zohar)
  • pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov)
  • kbuild: Fix objtool dependency for OBJECT_FILES_NON_STANDARD_
    := n (Josh Poimboeuf)
  • kbuild: run the checker after the compiler (Luc Van Oostenryck)
  • sched/uclamp: Fix locking around cpu_util_update_eff() (Qais Yousef)
  • sched/uclamp: Fix wrong implementation of cpu.uclamp.min (Qais Yousef)
  • media: I2C: change RST to RSET to fix multiple build errors (Randy Dunlap)
  • pata_rb532_cf: fix deferred probing (Sergey Shtylyov)
  • sata_highbank: fix deferred probing (Sergey Shtylyov)
  • crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei)
  • crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe)
  • media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab)
  • writeback, cgroup: increment isw_nr_in_flight before grabbing an inode (Roman Gushchin)
  • ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann)
  • kthread_worker: fix return value when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)
  • block: fix discard request merge (Ming Lei)
  • cifs: fix missing spinlock around update to ses->status (Steve French)
  • HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke)
  • ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald)
  • clocksource: Retry clock read if long delays detected (Paul E. McKenney)
  • PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv() (Haiyang Zhang)
  • EDAC/Intel: Do not load EDAC driver when running as a guest (Tony Luck)
  • nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst() (Hannes Reinecke)
  • platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong)
  • block: fix race between adding/removing rq qos and normal IO (Ming Lei)
  • ACPI: resources: Add checks for ACPI IRQ override (Hui Wang)
  • ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo)
  • ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda)
  • fs: dlm: fix memory leak when fenced (Alexander Aring)
  • random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald)
  • fs: dlm: cancel work sync othercon (Alexander Aring)
  • block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F))
  • ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu)
  • lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald)
  • hv_utils: Fix passing zero to PTR_ERR warning (YueHaibing)
  • ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello)
  • EDAC/ti: Add missing MODULE_DEVICE_TABLE (Bixuan Cui)
  • HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov)
  • media: Fix Media Controller API config checks (Shuah Khan)
  • regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin)
  • regulator: mt6358: Fix vdram2 .vsel_mask (Hsin-Hsiung Wang)
  • KVM: s390: get rid of register asm usage (Heiko Carstens)
  • lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage() (Boqun Feng)
  • locking/lockdep: Fix the dep path printing for backwards BFS (Boqun Feng)
  • btrfs: disable build on platforms having page size 256K (Christophe Leroy)
  • btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik)
  • btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik)
  • KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors (Suraj Jitindar Singh)
  • drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe() (Jing Xiangfeng)
  • hwmon: (max31790) Fix pwmX_enable attributes (Guenter Roeck)
  • hwmon: (max31790) Report correct current pwm duty cycles (Guenter Roeck)
  • media: imx-csi: Skip first few frames from a BT.656 source (Steve Longerbeam)
  • media: siano: fix device register error path (Mauro Carvalho Chehab)
  • media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab)
  • crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel)
  • mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma)
  • mmc: sdhci-sprd: use sdhci_sprd_writew (Krzysztof Kozlowski)
  • memstick: rtsx_usb_ms: fix UAF (Tong Zhang)
  • media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu)
  • Makefile: fix GDB warning with CONFIG_RELR (Nick Desaulniers)
  • media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov)
  • media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma)
  • media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong)
  • media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente)
  • sched/fair: Fix ascii art by relpacing tabs (Odin Ugedal)
  • crypto: qat - remove unused macro in FW loader (Jack Xu)
  • crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu)
  • media: imx: imx7_mipi_csis: Fix logging of only error event counters (Laurent Pinchart)
  • media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam)
  • media: cobalt: fix race condition in setting HPD (Hans Verkuil)
  • media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin)
  • media: sti: fix obj- targets (Mauro Carvalho Chehab)
  • crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui)
  • hwrng: exynos - Fix runtime PM imbalance on error (Lukasz Stelmach)
  • regulator: uniphier: Add missing MODULE_DEVICE_TABLE (Zou Wei)
  • spi: omap-100k: Fix the length judgment problem (Tian Tao)
  • spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang)
  • spi: spi-loopback-test: Fix tx_buf might be rx_buf (Jay Fang)
  • media: exynos-gsc: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
  • media: sti/bdisp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
  • media: s5p-jpeg: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
  • media: mtk-vcodec: fix PM runtime get logic (Mauro Carvalho Chehab)
  • media: sh_vou: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
  • media: s5p: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
  • media: mdk-mdp: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab)
  • spi: Make of_register_spi_device also set the fwnode (Charles Keepax)
  • fuse: reject internal errno (Miklos Szeredi)
  • fuse: check connected before queueing on fpq->io (Miklos Szeredi)
  • fuse: ignore PG_workingset after stealing (Miklos Szeredi)
  • evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded (Roberto Sassu)
  • evm: Execute evm_inode_init_security() only when an HMAC key is loaded (Roberto Sassu)
  • powerpc/stacktrace: Fix spurious stale traces in raise_backtrace_ipi() (Michael Ellerman)
  • seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou)
  • tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (Steven Rostedt (VMware))
  • tracing/histograms: Fix parsing of sym-offset modifier (Steven Rostedt (VMware))
  • rsi: fix AP mode with WPA failure due to encrypted EAPOL (Martin Fuzzey)
  • rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut)
  • ssb: sdio: Dont overwrite const buffer if block_write fails (Michael Buesch)
  • ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohar)
  • serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary)
  • serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary)
  • serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda)
  • serial: mvebu-uart: fix calculation of clock divisor (Pali Rohar)
  • iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang)
  • iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang)
  • iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde)
  • iio: light: tcs3472: do not free unallocated IRQ (frank zago)
  • rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey)
  • s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan)
  • KVM: PPC: Book3S HV: Workaround high stack usage with clang (Nathan Chancellor)
  • perf/smmuv3: Dont trample existing events with global filter (Robin Murphy)
  • SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu)
  • SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu)
  • mac80211: remove iwlwifi specific workaround that broke sta NDP tx (Felix Fietkau)
  • can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean)
  • can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after RCU is done (Oleksij Rempel)
  • can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp)
  • ext4: fix avefreec in find_group_orlov (Pan Dong)
  • ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi)
  • ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi)
  • ext4: return error code when ext4_fill_flex_info() fails (Yang Yingliang)
  • ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)
  • ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi)
  • btrfs: clear defrag status of a root if starting transaction fails (David Sterba)
  • btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana)
  • ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches)
  • arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode (Yang Jihong)
  • Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)
  • iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro)
  • copy_page_to_iter(): fix ITER_DISCARD case (Al Viro)
  • ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi)
  • xhci: solve a double free problem while doing s4 (Zhangjiantao (Kirin, nanjing))
  • usb: typec: Add the missed altmode_id_remove() in typec_register_altmode() (Jing Xiangfeng)
  • usb: dwc3: Fix debugfs creation flow (Minas Harutyunyan)
  • USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen)
  • usb: gadget: eem: fix echo command packet response issue (Linyu Yuan)
  • net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin)
  • Input: usbtouchscreen - fix control-request directions (Johan Hovold)
  • media: dvb-usb: fix wrong definition (Pavel Skripkin)
  • ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too (Takashi Iwai)
  • ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D (Takashi Iwai)
  • ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx (Elia Devito)
  • ALSA: hda/realtek: Add another ALC236 variant support (Takashi Iwai)
  • ALSA: intel8x0: Fix breakage at ac97 clock measurement (Takashi Iwai)
  • ALSA: usb-audio: scarlett2: Fix wrong resume call (Takashi Iwai)
  • ALSA: usb-audio: Fix OOB access at proc output (Takashi Iwai)
  • ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung)
  • LTS tag: v5.4.131 (Jack Vogel)
  • xen/events: reset active flag for lateeoi events later (Juergen Gross)
  • KVM: SVM: Call SEV Guest Decommission if ASID binding fails (Alper Gun)
  • s390/stack: fix possible register corruption with stack switch helper (Heiko Carstens)
  • KVM: SVM: Periodically schedule when unregistering regions on destroy (David Rientjes) {CVE-2020-36311}
  • LTS tag: v5.4.130 (Jack Vogel)
  • RDMA/mlx5: Block FDB rules when not in switchdev mode (Mark Bloch)
  • gpio: AMD8111 and TQMX86 require HAS_IOPORT_MAP (Johannes Berg)
  • drm/nouveau: fix dma_address check for CPU/GPU sync (Christian Konig)
  • scsi: sr: Return appropriate error code when disk is ejected (ManYi Li)
  • LTS tag v5.4.129 (Jack Vogel)
  • x86/efi: move common keyring handler functions to new file (Nayna Jain)
  • certs: Add wrapper function to check blacklisted binary hash (Nayna Jain)
  • mm, futex: fix shared futex pgoff on shmem huge page (Hugh Dickins)
  • mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins)
  • mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins)
  • mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins)
  • mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins)
  • mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins)
  • mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins)
  • mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins)
  • mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins)
  • mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins)
  • mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins)
  • mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi)
  • mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page() (Hugh Dickins)
  • mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang)
  • mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins)
  • mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins)
  • mm/thp: make is_huge_zero_pmd() safe and quicker (Hugh Dickins)
  • mm/thp: fix __split_huge_pmd_locked() on shmem migration entry (Hugh Dickins)
  • mm, thp: use head page in __migration_entry_wait() (Xu Yu)
  • mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin)
  • mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin)
  • mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi)
  • kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)
  • kthread_worker: split code for canceling the delayed work timer (Petr Mladek)
  • i2c: robotfuzz-osif: fix control-request directions (Johan Hovold)
  • KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin) {CVE-2021-22543}
  • nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin)
  • pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne)
  • net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal)
  • net: ll_temac: Add memory-barriers for TX BD access (Esben Haabendal)
  • PCI: Add AMD RS690 quirk to enable 64-bit DMA (Mikel Rychliski)
  • recordmcount: Correct st_shndx handling (Peter Zijlstra)
  • net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook)
  • KVM: selftests: Fix kvm_check_cap() assertion (Fuad Tabba)
  • r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
  • sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
  • r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)
  • net/packet: annotate accesses to po->ifindex (Eric Dumazet)
  • net/packet: annotate accesses to po->bind (Eric Dumazet)
  • net: caif: fix memory leak in ldisc_open (Pavel Skripkin)
  • net: phy: dp83867: perform soft reset and retain established link (Praneeth Bajjuri)
  • inet: annotate date races around sk->sk_txhash (Eric Dumazet)
  • ping: Check return value of function ping_queue_rcv_skb (Zheng Yongjun)
  • net: ethtool: clear heap allocations for ethtool function (Austin Kim)
  • mac80211: drop multicast fragments (Johannes Berg)
  • net: ipv4: Remove unneed BUG() function (Zheng Yongjun)
  • dmaengine: mediatek: use GFP_NOWAIT instead of GFP_ATOMIC in prep_dma (Guillaume Ranquet)
  • dmaengine: mediatek: do not issue a new desc if one is still current (Guillaume Ranquet)
  • dmaengine: mediatek: free the proper desc in desc_free handler (Guillaume Ranquet)
  • dmaengine: rcar-dmac: Fix PM reference leak in rcar_dmac_probe() (Zou Wei)
  • cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng)
  • mac80211_hwsim: drop pending frames on stop (Johannes Berg)
  • dmaengine: zynqmp_dma: Fix PM reference leak in zynqmp_dma_alloc_chan_resourc() (Yu Kuai)
  • Revert PCI: PM: Do not read power state in pci_enable_device_flags() (Rafael J. Wysocki)
  • spi: spi-nxp-fspi: move the register operation after the clock enable (Haibo Chen)
  • MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor)
  • arm64: link with -z norelro for LLD or aarch64-elf (Nick Desaulniers)
  • kbuild: add CONFIG_LD_IS_LLD (Sami Tolvanen)
  • mmc: meson-gx: use memcpy_to/fromio for dram-access-quirk (Neil Armstrong)
  • ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann)
  • drm/radeon: wait for moving fence after pinning (Christian Konig)
  • drm/nouveau: wait for moving fence after pinning v2 (Christian Konig)
  • Revert drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. (Yifan Zhang)
  • Revert drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. (Yifan Zhang)
  • module: limit enabling module.sig_enforce (Mimi Zohar)
  • mac80211: remove warning in ieee80211_get_sband() (Johannes Berg) [Orabug: 33171088]
  • platform/x86: ISST: Account for increased timeout in some cases (Srinivas Pandruvada) [Orabug: 33126078]
  • can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo) [Orabug: 33114646] {CVE-2021-3609}

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C