Lucene search

K
oraclelinuxOracleLinuxELSA-2021-9565
HistoryNov 23, 2021 - 12:00 a.m.

Unbreakable Enterprise kernel-container security update

2021-11-2300:00:00
linux.oracle.com
8

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

[5.4.17-2136.301.1.2.el7]

  • Revert ‘net/rds: Allocate pages on HCA NUMA nodeid’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Use the same vector for send & receive’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Get rid of tasklets’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Put more CPU cores to work’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Make workers use the designated CPU’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/mlx5: Add new verb ‘ib_get_vector_irqn’’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Add ‘preferred_cpu’ option to ‘rds_rdma.ko’’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Follow the observed CQ CPU affinity’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Throttle check for CQ CPU affinity’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘net/rds: Bring tasklets back for better latency’ (Gerd Rausch) [Orabug: 33561324]
  • Revert ‘xfs: Lower CIL flush limit for large logs’ (Catherine Hoang) [Orabug: 33585639]
  • Revert ‘xfs: Throttle commits on delayed background CIL push’ (Catherine Hoang) [Orabug: 33585639]
    [5.4.17-2136.301.1.1.el7]
  • xfs: punch out data fork delalloc blocks on COW writeback failure (Brian
    Foster) [Orabug: 33542385]
    [5.4.17-2136.301.1.el7]
  • net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Add ‘preferred_cpu’ option to ‘rds_rdma.ko’ (Gerd Rausch) [Orabug: 33440594]
  • net/mlx5: Add new verb ‘ib_get_vector_irqn’ (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33440594]
  • net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33440594]
  • xen-blkfront: sanitize the removal state machine (Christoph Hellwig) [Orabug: 33392832]
  • xen/blkfront: fix ring info addressing (Juergen Gross) [Orabug: 33392832]
  • xen/blkfront: limit allocated memory size to actual use case (Juergen Gross) [Orabug: 33392832]
  • xfs: Throttle commits on delayed background CIL push (Dave Chinner) [Orabug: 29710712]
  • xfs: Lower CIL flush limit for large logs (Dave Chinner) [Orabug: 29710712]
  • sctp: account stream padding length for reconf chunk (Eiichi Tsukata) [Orabug: 32397993]
  • rds/ib: handle rds uncongested notifications in worker (Manjunath Patil) [Orabug: 33467788]
    [5.4.17-2136.301.0.el7]
  • LTS tag: v5.4.143 (Jack Vogel)
  • netfilter: nft_exthdr: fix endianness of tcp option cast (Sergey Marinkevich)
  • fs: warn about impending deprecation of mandatory locks (Jeff Layton)
  • mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim (Johannes Weiner)
  • mm, memcg: avoid stale protection values when cgroup is above protection (Yafang Shao)
  • ASoC: intel: atom: Fix breakage for PCM buffer address setup (Takashi Iwai)
  • PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI (Marcin Bachry)
  • btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (NeilBrown)
  • ipack: tpci200: fix memory leak in the tpci200_register (Dongliang Mu)
  • ipack: tpci200: fix many double free issues in tpci200_pci_probe (Dongliang Mu)
  • slimbus: ngd: reset dma setup during runtime pm (Srinivas Kandagatla)
  • slimbus: messaging: check for valid transaction id (Srinivas Kandagatla)
  • slimbus: messaging: start transaction ids from 1 instead of zero (Srinivas Kandagatla)
  • tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name (Steven Rostedt (VMware))
  • ALSA: hda - fix the ‘Capture Switch’ value change notifications (Jaroslav Kysela)
  • mmc: dw_mmc: Fix hang on data CRC error (Vincent Whitchurch)
  • ovl: add splice file read write helper (Murphy Zhou)
  • iavf: Fix ping is lost after untrusted VF had tried to change MAC (Sylwester Dziedziuch)
  • i40e: Fix ATR queue selection (Arkadiusz Kubalewski)
  • ovs: clear skb->tstamp in forwarding path (kaixi.fan)
  • net: mdio-mux: Handle -EPROBE_DEFER correctly (Saravana Kannan)
  • net: mdio-mux: Don’t ignore memory allocation errors (Saravana Kannan)
  • net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 (Dinghao Liu)
  • virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO (Jason Wang)
  • virtio-net: support XDP when not more queues (Xuan Zhuo)
  • vrf: Reset skb conntrack connection on VRF rcv (Lahav Schlesinger)
  • bnxt_en: Add missing DMA memory barriers (Michael Chan)
  • ptp_pch: Restore dependency on PCI (Andy Shevchenko)
  • net: 6pack: fix slab-out-of-bounds in decode_data (Pavel Skripkin)
  • bnxt: disable napi before canceling DIM (Jakub Kicinski)
  • bnxt: don’t lock the tx queue from napi poll (Jakub Kicinski)
  • bpf: Clear zext_dst of dead insns (Ilya Leoshkevich)
  • vhost: Fix the calculation in vhost_overflow() (Xie Yongji)
  • virtio: Protect vqs list access (Parav Pandit)
  • dccp: add do-while-0 stubs for dccp_pr_debug macros (Randy Dunlap)
  • cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant (Marek Behun)
  • iommu: Check if group is NULL before remove device (Frank Wunderlich)
  • Bluetooth: hidp: use correct wait queue when removing ctrl_wait (Ole Bjorn Midtbo)
  • drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X (Bing Guo)
  • net: usb: lan78xx: don’t modify phy_device state concurrently (Ivan T. Ivanov)
  • ARM: dts: nomadik: Fix up interrupt controller node names (Sudeep Holla)
  • scsi: core: Fix capacity set to zero after offlinining device (lijinlin)
  • scsi: core: Avoid printing an error if target_alloc() returns -ENXIO (Sreekanth Reddy)
  • scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() (Ye Bin)
  • scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() (Harshvardhan Jha)
  • dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (Peter Ujfalusi)
  • ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 (Dave Gerlach)
  • dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (Yu Kuai)
  • dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers (Adrian Larumbe)
  • USB: core: Avoid WARNings for 0-length descriptor requests (Alan Stern)
  • media: drivers/media/usb: fix memory leak in zr364xx_probe (Pavel Skripkin)
  • media: zr364xx: fix memory leaks in probe() (Dan Carpenter)
  • media: zr364xx: propagate errors from zr364xx_start_readpipe() (Evgeny Novikov)
  • mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards (Andreas Persson)
  • ath9k: Postpone key cache entry deletion for TXQ frames reference it (Jouni Malinen)
  • ath: Modify ath_key_delete() to not need full key entry (Jouni Malinen)
  • ath: Export ath_hw_keysetmac() (Jouni Malinen)
  • ath9k: Clear key cache explicitly on disabling hardware (Jouni Malinen)
  • ath: Use safer key clearing with key cache entries (Jouni Malinen)
  • x86/fpu: Make init_fpstate correct with optimized XSAVE (Thomas Gleixner)
  • ext4: fix EXT4_MAX_LOGICAL_BLOCK macro (Ritesh Harjani)
  • LTS tag: v5.4.142 (Jack Vogel) {CVE-2021-3653} {CVE-2021-3656}
  • KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) (Maxim Levitsky)
  • vmlinux.lds.h: Handle clang’s module.{c,d}tor sections (Nathan Chancellor)
  • ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton)
  • ceph: clean up locking annotation for ceph_get_snap_realm and __lookup_snap_realm (Jeff Layton)
  • ceph: add some lockdep assertions around snaprealm handling (Jeff Layton)
  • KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (Sean Christopherson)
  • PCI/MSI: Protect msi_desc::masked for multi-MSI (Thomas Gleixner)
  • PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (Thomas Gleixner)
  • PCI/MSI: Correct misleading comments (Thomas Gleixner)
  • PCI/MSI: Do not set invalid bits in MSI mask (Thomas Gleixner)
  • PCI/MSI: Enforce MSI[X] entry updates to be visible (Thomas Gleixner)
  • PCI/MSI: Enforce that MSI-X table entry is masked for update (Thomas Gleixner)
  • PCI/MSI: Mask all unused MSI-X entries (Thomas Gleixner)
  • PCI/MSI: Enable and mask MSI-X early (Thomas Gleixner)
  • genirq/timings: Prevent potential array overflow in __irq_timings_store() (Ben Dai)
  • genirq/msi: Ensure deactivation on teardown (Bixuan Cui)
  • x86/resctrl: Fix default monitoring groups reporting (Babu Moger)
  • x86/ioapic: Force affinity setup before startup (Thomas Gleixner)
  • x86/msi: Force affinity setup before startup (Thomas Gleixner)
  • genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (Thomas Gleixner)
  • x86/tools: Fix objdump version check again (Randy Dunlap)
  • powerpc/kprobes: Fix kprobe Oops happens in booke (Pu Lehui)
  • nbd: Aovid double completion of a request (Xie Yongji)
  • vsock/virtio: avoid potential deadlock when vsock device remove (Longpeng(Mike))
  • xen/events: Fix race in set_evtchn_to_irq (Maximilian Heyne)
  • net: igmp: increase size of mr_ifc_count (Eric Dumazet)
  • tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets (Neal Cardwell)
  • net: linkwatch: fix failure to restore device state across suspend/resume (Willy Tarreau)
  • net: bridge: fix memleak in br_add_if() (Yang Yingliang)
  • net: dsa: sja1105: fix broken backpressure in .port_fdb_dump (Vladimir Oltean)
  • net: dsa: lantiq: fix broken backpressure in .port_fdb_dump (Vladimir Oltean)
  • net: dsa: lan9303: fix broken backpressure in .port_fdb_dump (Vladimir Oltean)
  • net: igmp: fix data-race in igmp_ifc_timer_expire() (Eric Dumazet)
  • net: Fix memory leak in ieee802154_raw_deliver (Takeshi Misawa)
  • net: dsa: microchip: Fix ksz_read64() (Ben Hutchings)
  • drm/meson: fix colour distortion from HDR set during vendor u-boot (Christian Hewitt)
  • net/mlx5: Fix return value from tracer initialization (Aya Levin)
  • psample: Add a fwd declaration for skbuff (Roi Dayan)
  • iavf: Set RSS LUT and key in reset handle path (Md Fahad Iqbal Polash)
  • net: sched: act_mirred: Reset ct info when mirror/redirect skb (Hangbin Liu)
  • ppp: Fix generating ifname when empty IFLA_IFNAME is specified (Pali Rohar)
  • net: phy: micrel: Fix link detection on ksz87xx switch’ (Ben Hutchings)
  • platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-lookup tables (Hans de Goede)
  • platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED (Florian Eckert)
  • net: dsa: mt7530: add the missing RxUnicast MIB counter (DENG Qingfang)
  • ASoC: cs42l42: Fix LRCLK frame start edge (Richard Fitzgerald)
  • netfilter: nf_conntrack_bridge: Fix memory leak when error (Yajun Deng)
  • ASoC: cs42l42: Remove duplicate control for WNF filter frequency (Richard Fitzgerald)
  • ASoC: cs42l42: Fix inversion of ADC Notch Switch control (Richard Fitzgerald)
  • ASoC: cs42l42: Don’t allow SND_SOC_DAIFMT_LEFT_J (Richard Fitzgerald)
  • ASoC: cs42l42: Correct definition of ADC Volume control (Richard Fitzgerald)
  • ieee802154: hwsim: fix GPF in hwsim_new_edge_nl (Dongliang Mu)
  • ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi (Dongliang Mu)
  • libnvdimm/region: Fix label activation vs errors (Dan Williams)
  • ACPI: NFIT: Fix support for virtual SPA ranges (Dan Williams)
  • ceph: reduce contention in ceph_check_delayed_caps() (Luis Henriques)
  • i2c: dev: zero out array used for i2c reads from userspace (Greg Kroah-Hartman)
  • ASoC: intel: atom: Fix reference to PCM buffer address (Takashi Iwai)
  • ASoC: xilinx: Fix reference to PCM buffer address (Takashi Iwai)
  • iio: adc: Fix incorrect exit of for-loop (Colin Ian King)
  • iio: humidity: hdc100x: Add margin to the conversion time (Chris Lesiak)
  • iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels (Uwe Kleine-Konig)
  • LTS tag: v5.4.141 (Jack Vogel)
  • btrfs: don’t flush from btrfs_delayed_inode_reserve_metadata (Nikolay Borisov)
  • btrfs: export and rename qgroup_reserve_meta (Nikolay Borisov)
  • btrfs: qgroup: don’t commit transaction when we already hold the handle (Qu Wenruo)
  • net: xilinx_emaclite: Do not print real IOMEM pointer (YueHaibing)
  • btrfs: fix lockdep splat when enabling and disabling qgroups (Filipe Manana)
  • btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-after-EDQUOT (Qu Wenruo)
  • btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED (Qu Wenruo)
  • btrfs: qgroup: try to flush qgroup space when we get -EDQUOT (Qu Wenruo)
  • btrfs: qgroup: allow to unreserve range without releasing other ranges (Qu Wenruo)
  • btrfs: make btrfs_qgroup_reserve_data take btrfs_inode (Nikolay Borisov)
  • btrfs: make qgroup_free_reserved_data take btrfs_inode (Nikolay Borisov)
  • ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi)
  • ppp: Fix generating ppp unit id when ifname is not specified (Pali Rohar)
  • ALSA: hda: Add quirk for ASUS Flow x13 (Luke D Jones)
  • USB:ehci:fix Kunpeng920 ehci hardware problem (Longfang Liu)
  • usb: dwc3: gadget: Avoid runtime resume if disabling pullup (Wesley Cheng)
  • usb: dwc3: gadget: Disable gadget IRQ during pullup disable (Wesley Cheng)
  • usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable (Wesley Cheng)
  • usb: dwc3: gadget: Prevent EP queuing while stopping transfers (Wesley Cheng)
  • usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup (Wesley Cheng)
  • usb: dwc3: gadget: Allow runtime suspend if UDC unbinded (Wesley Cheng)
  • usb: dwc3: Stop active transfers before halting the controller (Wesley Cheng)
  • tracing: Reject string operand in the histogram expression (Masami Hiramatsu)
  • media: v4l2-mem2mem: always consider OUTPUT queue during poll (Alexandre Courbot)
  • tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag (Sumit Garg)
  • KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB (Sean Christopherson)
  • staging/bcm2835-codec: Do not update crop from S_FMT after res change (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-camera: Add support for H264 levels 4.1 and 4.2 (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Pass corrupt frame flag. (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Set the colourspace appropriately for RGB formats (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Fix support for levels 4.1 and 4.2 (Dave Stevenson) [Orabug: 33294426]
  • staging: vcsm-cma: Fix memory leak from not detaching dmabuf (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-camera: Add support for DMABUFs (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Add VC-1 support. (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Implement additional g_selection calls for decode (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Add support for pixel aspect ratio (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Correct logging of size_t to %zu (Dave Stevenson) [Orabug: 33294426]
  • bcm2835-isp: Allow formats with different colour spaces. (David Plowman) [Orabug: 33294426]
  • staging:bcm2835-camera: Fix the cherry-pick of AWB Greyworld (Dave Stevenson) [Orabug: 33294426]
  • staging: vc04_services: ISP: Add colour denoise control (Naushir Patuck) [Orabug: 33294426]
  • staging/bcm2835-isp: Log the number of excess supported formats (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-isp: Add the unpacked (16bpp) raw formats (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Log the number of excess supported formats (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Add the unpacked (16bpp) raw formats (Dave Stevenson) [Orabug: 33294426]
  • staging/vc04_services: Add additional unpacked raw formats (Dave Stevenson) [Orabug: 33294426]
  • staging/mmal-vchiq: Fix incorrect static vchiq_instance. (Dave Stevenson) [Orabug: 33294426]
  • staging/vc04-services/codec: Fix logical precedence issue (Dave Stevenson) [Orabug: 33294426]
  • staging: vchiq: Fix bulk transfers on 64-bit builds (Phil Elwell) [Orabug: 33294426]
  • vc-sm-cma: fixed kbuild problem (gesangtome) [Orabug: 33294426]
  • staging: vchiq: Fix bulk userdata handling (Phil Elwell) [Orabug: 33294426]
  • staging/vc04_services/codec: Clear last buf dequeued flag on START (Dave Stevenson) [Orabug: 33294426]
  • staging/vc04_services/codec: Add support for CID MPEG_HEADER_MODE (Dave Stevenson) [Orabug: 33294426]
  • staging/bcm2835-codec: Ensure OUTPUT timestamps are always forwarded (Dave Stevenson) [Orabug: 33294426]
  • staging: vc04_services: ISP: Add a more complex ISP processing component (Naushir Patuck) [Orabug: 33294426]
  • staging: vc04_services: Add a V4L2 M2M codec driver (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Use vc-sm-cma to support zero copy (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Add monochrome image formats (Dave Stevenson) [Orabug: 33294426]
  • staging: vchiq-mmal: Add support for 14bit Bayer (Dave Stevenson) [Orabug: 33294426]
  • staging: vc04_services: Add new vc-sm-cma driver (Dave Stevenson) [Orabug: 33294426]
  • staging: bcm2835-camera: Replace deprecated V4L2_PIX_FMT_BGR32 (Dave Stevenson) [Orabug: 33294426]
  • vchiq_2835_arm: Implement a DMA pool for small bulk transfers (#2699) (detule) [Orabug: 33294426]
  • staging: vchiq_arm: children inherit DMA config (Phil Elwell) [Orabug: 33294426]
  • staging: vchiq_arm: Clean up 40-bit DMA support (Phil Elwell) [Orabug: 33294426]
  • staging:vc04_services: bcm2835-camera: Request headers with I-frame (Dave Stevenson) [Orabug: 33294426]
  • staging: vc04_services: mmal-vchiq: Update parameters list (Dave Stevenson) [Orabug: 33294426]
  • staging: vchiq: Load bcm2835_isp driver from vchiq (Naushir Patuck) [Orabug: 33294426]
  • staging: vchiq_arm: Give vchiq children DT nodes (Phil Elwell) [Orabug: 33294426]
  • staging: vchiq: Use the old dma controller for OF config on platform devices (Dave Stevenson) [Orabug: 33294426]
  • staging: vchiq_arm: Set up dma ranges on child devices (Dave Stevenson) [Orabug: 33294426]
  • staging: vchiq_arm: Register bcm2835-codec as a platform driver (Dave Stevenson) [Orabug: 33294426]
  • staging: vchiq_arm: Register vcsm-cma as a platform driver (Dave Stevenson) [Orabug: 33294426]
  • staging: bcm2835-camera: Add greyworld AWB mode (Dave Stevenson) [Orabug: 33294426]
  • v4l2: Add a Greyworld AWB mode. (Dave Stevenson) [Orabug: 33294426]
  • Add HDMI1 facility to the driver. (James Hughes) [Orabug: 33294426]
  • vchiq: Add 36-bit address support (Phil Elwell) [Orabug: 33294426]
  • staging: mmal-vchiq: Fix memory leak in error path (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Free the event context for control ports (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Update mmal_parameters.h with recently defined params (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal_vchiq: Add in the Bayer encoding formats (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson) [Orabug: 33294426]
  • staging: vc04_services: Support sending data to MMAL ports (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Add support for event callbacks. (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson) [Orabug: 33294426]
  • staging: bcm2835: fix vchiq_mmal dependencies (Arnd Bergmann) [Orabug: 33294426]
  • staging: mmal-vchiq: Fix memory leak for vchiq_instance (Seung-Woo Kim) [Orabug: 33294426]
  • staging: vchiq: Fix list_for_each exit tests (Dan Carpenter) [Orabug: 33294426]
  • staging: vchiq: Fix an uninitialized variable (Dan Carpenter) [Orabug: 33294426]
  • staging: vchiq: fix __user annotations (Arnd Bergmann) [Orabug: 33294426]
  • staging: vchiq: convert compat await_completion (Arnd Bergmann) [Orabug: 33294426]
  • staging: vchiq: convert compat bulk transfer (Arnd Bergmann) [Orabug: 33294426]
  • staging: vchiq: convert compat dequeue_message (Arnd Bergmann) [Orabug: 33294426]
  • staging: vchiq: convert compat create_service (Arnd Bergmann) [Orabug: 33294426]
  • staging: vchiq: rework compat handling (Arnd Bergmann) [Orabug: 33294426]
  • staging: vc04_services: Use fallthrough pseudo-keyword (Gustavo A. R. Silva) [Orabug: 33294426]
  • staging: vchiq: Fix refcounting bug in buffer_from_host() (Dan Carpenter) [Orabug: 33294426]
  • staging: vc04_services: vchiq-mmal: Fixed tab styling issue in mmal-vchiq.c (Anmol Karn) [Orabug: 33294426]
  • Staging: vc04_services: Fix unsigned int warnings (Baidyanath Kundu) [Orabug: 33294426]
  • staging: vchiq: Move vchiq.h into include directory (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Move defines into core header (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Use vchiq.h as the main header file for services (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Move conditional barrier definition into vchiq_core.h (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Get rid of vchi (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Move vchi_queue_kernel_message() into vchiq (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_bulk_queue_transmit() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_bulk_queue_receive() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Move definitions only used by core into core header (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Make vchiq_add_service() local (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Get rid of unnecessary definitions in vchiq_if.h (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Don’t include vchiq_core.h (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of struct vchiq_instance forward declaration (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Unify fourcc definition mechanisms (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Rework vchi_msg_hold() to match vchiq_msg_hold() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Pass vchiq’s message when holding a message (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of struct vchi_service (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Use struct vchiq_service_params (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Don’t use a typedef for vchiq_callback (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchiq_shim’s message callback (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Export vchiq_msg_queue_push (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Export vchiq_get_service_userdata() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Expose struct vchi_service (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Get rid of vchiq_util.h (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Move message queue into struct vchiq_service (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Introduce vchiq_validate_params() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of effect less expression (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Use vchiq’s enum vchiq_reason (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Use enum vchiq_bulk_mode instead of vchi’s transmission flags (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of flags argument in vchi_msg_hold() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchi_cfg.h (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of unnecessary defines (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi_common: Get rid of all unused definitions (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_msg_dequeue() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: bcm2835-audio: Use vchi_msg_hold() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Unify struct shim_service and struct vchi_service_handle (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of struct vchi_instance_handle (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_msg_peek() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of all useless callback reasons (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: mmal-vchiq: Fix formatting errors in mmal_parameters.h (Naushir Patuck) [Orabug: 33294426]
  • staging: mmal-vchiq: If the VPU returns an error, don’t negate it (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Always return the param size from param_get (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Fixup vchiq-mmal include ordering (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Make a mmal_buf struct for passing parameters (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Make timeout a defined parameter (Dave Stevenson) [Orabug: 33294426]
  • staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson) [Orabug: 33294426]
  • staging: bcm2835: Break MMAL support out from camera (Jacopo Mondi) [Orabug: 33294426]
  • trivial: staging: vc04_services: replace bitshift with BIT macro (Garrit Franke) [Orabug: 33294426]
  • staging: vchiq: Get rid of VCHIQ_SERVICE_OPENEND callback reason (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: move vchiq_release_message() into vchiq (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of C++ guards (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of not implemented function declarations (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchiq_status_to_vchi() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_service_set_option() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Merge vchi_msg_queue() into vchi_queue_kernel_message() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq: Move copy callback handling into vchiq (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_queue_user_message() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchi: Get rid of vchi_service_destroy() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vchiq_arm: cast with __force as needed (Mitchell Tasman) [Orabug: 33294426]
  • staging: vc04_services: Block comment alignment (John Oldman) [Orabug: 33294426]
  • staging: bcm2835-camera: insert emty line after declaration (Houssem KADI) [Orabug: 33294426]
  • staging: vc04_services: remove set but not used ‘local_entity_uc’ (Jason Yan) [Orabug: 33294426]
  • staging: bcm2835-camera: reduce indentation in ctrl_set_image_effect (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: reduce multiline statements (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: return early in mmal_setup_components (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Move video component setup in its own function (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Move encode component setup in its own function (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Simplify set_framerate_params (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Make struct indentation consistent (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Activate V4L2_EXPOSURE_METERING_MATRIX handling (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Drop PREVIEW_LAYER (Stefan Wahren) [Orabug: 33294426]
  • staging: vc04_services: interface: vchi: Correct long line comments and make them C89 style (R Veera Kumar) [Orabug: 33294426]
  • staging: vc04_services: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 33294426]
  • staging: bcm2835-camera: Use designators to init V4L2 controls (Stefan Wahren) [Orabug: 33294426]
  • staging: bcm2835-camera: Drop unused ignore_errors flag (Stefan Wahren) [Orabug: 33294426]
  • media: bcm2835-camera: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil) [Orabug: 33294426]
  • media: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil) [Orabug: 33294426]
  • staging: vc04_services: Fix wrong early return in next_service_by_instance() (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: don’t increment service refcount when it’s not needed (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: use kref + RCU to reference count services (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: fix indentation alignment in a few places (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: remove unneeded parentheses (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: remove unused function (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: vchiq_arm: Get rid of unused defines (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_arm_vcresume()'s signature (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Delete vchiq_platform_check_suspend() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of USE_TYPE_SERVICE_NO_RESUME (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of the rest of suspend/resume state handling (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get of even more suspend/resume states (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of unused suspend/resume states (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Delete vc_suspend_complete completion (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_check_resume() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_arm_vcsuspend() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_on_remote_use_active() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_platform_handle_timeout() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_platform_videocore_wanted() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_platform_suspend/resume() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of vchiq_platform_paused/resumed() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: get rid of vchiq_platform_use_suspend_timer() (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Delete blocked_count in struct vchiq_arm_state (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: get rid of blocked_blocker completion in struct vchiq_arm_state (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of resume_blocker completion in struct vchiq_arm_state (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Get rid of resume_blocked in struct vchiq_arm_state (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: Remove unused variables in struct vchiq_arm_state (Nicolas Saenz Julienne) [Orabug: 33294426]
  • staging: vc04_services: remove header include path to vc04_services (Masahiro Yamada) [Orabug: 33294426]
  • staging/vc04_services/bcm2835-camera: distinct numeration and names for devices (Michael Kupfer) [Orabug: 33294426]
  • staging: vchiq: Have vchiq_dump_* functions return an error code (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vchiq: Refactor indentation in vchiq_dump_* functions (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vchiq_dump: Replace min with min_t (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vchiq: Fix block comment format in vchiq_dump() (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04: Fix Kconfig indentation (Krzysztof Kozlowski) [Orabug: 33294426]
  • staging: vchiq: Refactor indentation in vchiq_platform_conn_state_changed() (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vchiq: Have vchiu_queue_init() return 0 on success. (Marcelo Diop-Gonzalez) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_PLATFORM_STATE_T typedef with struct opaque_platform_state (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_INSTANCE_T typedef with struct vchiq_instance (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_SERVICE_HANDLE_T typedef with unsigned int (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Rename VCHIQ_REMOTE_USE_CALLBACK_T to vchiq_remote_callback (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Rename VCHIQ_CALLBACK_T to vchiq_callback (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Rename callback VCHIQ_USERDATA_TERM_T to vchiq_userdata_term (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_BULK_DIR_T enum typedef with enum vchiq_bulk_dir (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_CONNSTATE_T enum typedef with enum vchiq_connstate (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_SERVICE_OPTION_T enum typedef with enum vchiq_service_option (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_BULK_MODE_T enum typedef with enum vchiq_bulk_mode (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHIQ_STATUS_T enum typedef with enum vchiq_status (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Rename callback VCHI_CALLBACK_T to vchi_callback (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHI_SERVICE_HANDLE_T typedef with struct vchi_service_handle (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Replace VCHI_INSTANCE_T with struct vhci_instance_handle (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Remove enum typedefs in vchi (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: Remove unused structs (Jamal Shareef) [Orabug: 33294426]
  • staging: vc04_services: fix warnings of Block comments use of * (Jules Irenge) [Orabug: 33294426]
  • staging: vc04_services: fix warnings of scpace required between operator (Jules Irenge) [Orabug: 33294426]
  • staging: vc04_services: fix check warnings of line over 80 characters (Jules Irenge) [Orabug: 33294426]
  • media: v4l2-core: correctly validate video and metadata ioctls (Vandana BN) [Orabug: 33294426]
  • staging: vc04_services: use DIV_ROUND_UP helper macro (Wambui Karuga) [Orabug: 33294426]
  • staging: vc04_services: place the AND operator at the end of the previous line (Jules Irenge) [Orabug: 33294426]
  • staging: vc04_services: Avoid NULL comparison (Nachammai Karuppiah) [Orabug: 33294426]
  • staging: vchiq: don’t print pointless kernel address (Matteo Croce) [Orabug: 33294426]
  • staging: bcm2835-audio: Need to judge the return value of vchi_msg_dequeue in audio_vchi_callback (zhengbin) [Orabug: 33294426]
  • staging: vc04_services: make use of devm_platform_ioremap_resource (Hariprasad Kelam) [Orabug: 33294426]
  • staging: vc04_services: Avoid typedef (Nachammai Karuppiah) [Orabug: 33294426]
  • net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge) [Orabug: 33459335]
  • net/mlx{4,5}: Fix signed formal parameter (Hakon Bugge) [Orabug: 33459335]
  • net/mlx5: Initialize nvec based on ‘num_possible_cpus()’ (Gerd Rausch) [Orabug: 33451392]
  • drm/atomic-helper: reset vblank on crtc reset (Daniel Vetter) [Orabug: 33427369]
  • drm: Initialize struct drm_crtc_state.no_vblank from device settings (Thomas Zimmermann) [Orabug: 33427369]
  • uek-rpm: Remove unnecessary ld.so.conf.d file (Stephen Brennan) [Orabug: 33408515]
  • ocfs2: drop acl cache for directories too (Wengang Wang) [Orabug: 33407843]
  • crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (Dan Carpenter) [Orabug: 33406845] {CVE-2021-3744}
  • locking/csd_lock: Make csdlock_debug=1 default (Stephen Brennan) [Orabug: 33403352]
  • uek-rpm: config: Enable CONFIG_CSD_LOCK_WAIT_DEBUG (Stephen Brennan) [Orabug: 33403352]
  • locking/csd_lock: Remove unused ‘idle’ event (Stephen Brennan) [Orabug: 33403352]
  • locking/csd_lock: Add more data to CSD lock debugging (Juergen Gross) [Orabug: 33403352]
  • smp: refactor queueing of single smp call (Stephen Brennan) [Orabug: 33403352]
  • locking/csd_lock: Prepare more CSD lock debugging (Juergen Gross) [Orabug: 33403352]
  • locking/csd_lock: Add boot parameter for controlling CSD lock debugging (Juergen Gross) [Orabug: 33403352]
  • kernel/smp: Provide CSD lock timeout diagnostics (Paul E. McKenney) [Orabug: 33403352]
  • smp: Fix kABI breakage in __call_single_data (Stephen Brennan) [Orabug: 33403352]
  • smp: Add source and destination CPUs to __call_single_data (Paul E. McKenney) [Orabug: 33403352]
  • kvm: export per-vcpu exits to userspace (Dongli Zhang) [Orabug: 33387671]
  • RDMA/core/sa_query: Remove unused function (Hakon Bugge) [Orabug: 33408993]
  • video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy) [Orabug: 32176135]
  • bnx2x: Fix enabling network interfaces without VFs (Adrian Bunk) [Orabug: 33458877]
  • net/rds: ‘no error’ is no error (Gerd Rausch) [Orabug: 33252277]

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C