Lucene search

K
oraclelinuxOracleLinuxELSA-2021-9621
HistoryDec 20, 2021 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2021-12-2000:00:00
linux.oracle.com
22

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

[5.4.17-2136.302.6.1]

  • rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug:33667276]
    [5.4.17-2136.302.6]
  • Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty)
    [Orabug: 33627551]
    [5.4.17-2136.302.5]
  • Revert drm: Initialize struct drm_crtc_state.no_vblank from device settings (Somasundaram Krishnasamy) [Orabug: 33611832]
  • Revert drm/atomic-helper: reset vblank on crtc reset (Somasundaram Krishnasamy) [Orabug: 33611832]
  • net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria) [Orabug: 29444833]
  • net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu) [Orabug: 29444833]
  • net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu) [Orabug: 29444833]
  • uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling) [Orabug: 33538583]
  • uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y for uek6/u3 (Sherry Yang) [Orabug: 33580598]
  • Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds) [Orabug: 33580598]
  • x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora) [Orabug: 33580824]
  • x86/asm: add clzero based page clearing (Ankur Arora) [Orabug: 33580824]
  • x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora) [Orabug: 33580824]
  • uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy) [Orabug: 33596873]
    [5.4.17-2136.302.4]
  • KVM: nSVM: Copy vmcb12 nRIP field to vmcb02 (Maciej S. Szmigiero) [Orabug: 33590307]
  • KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint (Maciej S. Szmigiero) [Orabug: 33590307]
  • KVM: nSVM: move nested vmrun tracepoint to enter_svm_guest_mode (Maxim Levitsky) [Orabug: 33590307]
  • x86/platform/uv: Add uv_hub_info_s to UEK KABI (John Donnelly) [Orabug: 33397019]
  • x86/platform/uv: Modify order of fields in uv_hub_info_s to avoid panic (Steve Wahl) [Orabug: 33397019]
  • arm64/bpf: remove 128MB limit for BPF JIT programs (Russell King) [Orabug: 33518795]
  • kernfs: dont create a negative dentry if inactive node exists (Ian Kent) [Orabug: 33548753]
  • kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [Orabug: 33548753]
  • kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [Orabug: 33548753]
  • kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [Orabug: 33548753]
  • kernfs: switch kernfs to use an rwsem (Ian Kent) [Orabug: 33548753]
  • kernfs: use VFS negative dentry caching (Ian Kent) [Orabug: 33548753]
  • kernfs: add a revision to identify directory node changes (Ian Kent) [Orabug: 33548753]
  • selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [Orabug: 33577735]
  • Revert net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 33590962]
  • Revert net/mlx5: Add new verb ib_get_vector_irqn (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Add preferred_cpu option to rds_rdma.ko (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 33590962]
  • Revert net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 33590962]
  • Revert IB/mlx4: Implement backend callback for ib_get_vector_irqn (Gerd Rausch) [Orabug: 33590962]
    [5.4.17-2136.302.2]
  • x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield) [Orabug: 32921559]
  • x86/kernel: Convert to new CPU match macros (Thomas Gleixner) [Orabug: 32921559]
  • net/mlx5: Disable mr_cache for SFs (Mikhael Goikhman) [Orabug: 33523558]
  • xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster) [Orabug: 33571340]
  • scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui) [Orabug: 33548142]
  • uek-rpm: Enable CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86_64 kernels (Dave Kleikamp) [Orabug: 33564971]
    [5.4.17-2136.302.1]
  • arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga) [Orabug: 33428617]
  • bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu) [Orabug: 33431722] {CVE-2021-41864}
  • xen/netfront: stop tx queues during live migration (Dongli Zhang) [Orabug: 33536399]
  • Revert xfs: Lower CIL flush limit for large logs (Catherine Hoang) [Orabug: 33536463]
  • Revert xfs: Throttle commits on delayed background CIL push (Catherine Hoang) [Orabug: 33536463]
  • nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo) [Orabug: 33536966]
  • nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields) [Orabug: 33536966]
  • rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge) [Orabug: 33538397]
    [5.4.17-2136.302.0]
  • LTS tag: v5.4.152 (Jack Vogel)
  • libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan)
  • silence nfscache allocation warnings with kvzalloc (Rik van Riel)
  • perf/x86: Reset destroy callback on event init failure (Anand K Mistry)
  • kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (Fares Mehanna)
  • KVM: do not shrink halt_poll_ns below grow_start (Sergey Senozhatsky)
  • tools/vm/page-types: remove dependency on opt_file for idle page tracking (Changbin Du)
  • scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong)
  • selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (Shuah Khan)
  • selftests: be sure to make khdr before other targets (Li Zhijian)
  • usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang)
  • usb: testusb: Fix for showing the connection speed (Faizel K B)
  • scsi: sd: Free scsi_disk device via put_device() (Ming Lei)
  • ext2: fix sleeping in atomic bugs on error (Dan Carpenter)
  • sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds)
  • xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich)
  • net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean)
  • LTS tag: v5.4.151 (Jack Vogel)
  • HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam)
  • netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik)
  • HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman)
  • usb: hso: remove the bailout parameter (Dongliang Mu)
  • libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind (sumiyawang)
  • PCI: Fix pci_host_bridge struct device release/free handling (Rob Herring)
  • net: stmmac: dont attach interface until resume finishes (Leon Yu)
  • net: udp: annotate data race around udp_sk(sk)->corkflag (Eric Dumazet)
  • HID: u2fzero: ignore incomplete packets without data (Andrej Shadura)
  • ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun)
  • ext4: fix reserved space counter leakage (Jeffle Xu)
  • ext4: fix loff_t overflow in ext4_max_bitmap_size() (Ritesh Harjani)
  • ipack: ipoctal: fix module reference leak (Johan Hovold)
  • ipack: ipoctal: fix missing allocation-failure check (Johan Hovold)
  • ipack: ipoctal: fix tty-registration error handling (Johan Hovold)
  • ipack: ipoctal: fix tty registration race (Johan Hovold)
  • ipack: ipoctal: fix stack information leak (Johan Hovold)
  • debugfs: debugfs_create_file_size(): use IS_ERR to check for error (Nirmoy Das)
  • elf: dont use MAP_FIXED_NOREPLACE for elf interpreter mappings (Chen Jingwen)
  • perf/x86/intel: Update event constraints for ICX (Kan Liang)
  • af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet)
  • net: sched: flower: protect fl_walk() with rcu (Vlad Buslov)
  • net: hns3: do not allow call hns3_nic_net_open repeatedly (Jian Shen)
  • scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy)
  • Revert block, bfq: honor already-setup queue merges (Jens Axboe)
  • selftests, bpf: test_lwt_ip_encap: Really disable rp_filter (Jiri Benc)
  • e100: fix buffer overrun in e100_get_regs (Jacob Keller)
  • e100: fix length calculation in e100_get_regs_len (Jacob Keller)
  • net: ipv4: Fix rtnexthop len when RTA_FLOW is present (Xiao Liang)
  • hwmon: (tmp421) fix rounding for negative values (Paul Fertser)
  • hwmon: (tmp421) report /PVLD condition as fault (Paul Fertser)
  • sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long)
  • mac80211-hwsim: fix late beacon hrtimer handling (Johannes Berg)
  • mac80211: mesh: fix potentially unaligned access (Johannes Berg)
  • mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi)
  • mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang)
  • hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Vadim Pasternak)
  • ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi)
  • drm/amd/display: Pass PCI deviceid into DC (Charlene Liu)
  • x86/kvmclock: Move this_cpu_pvti into kvmclock.h (Zelin Deng)
  • mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg)
  • scsi: ufs: Fix illegal offset in UPIU event trace (Jonathan Hsu)
  • hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
  • hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
  • hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Nadezda Lutovinova)
  • fs-verity: fix signed integer overflow with i_size near S64_MAX (Eric Biggers)
  • usb: cdns3: fix race condition before setting doorbell (Pawel Laszczak)
  • cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse)
  • cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao)
  • tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente)
  • LTS tag: v5.4.150 (Jack Vogel)
  • qnx4: work around gcc false positive warning bug (Linus Torvalds)
  • xen/balloon: fix balloon kthread freezing (Juergen Gross)
  • arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohar)
  • thermal/drivers/int340x: Do not set a wrong tcc offset on resume (Antoine Tenart)
  • EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri)
  • spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds)
  • net: 6pack: Fix tx timeout and slot time (Guenter Roeck)
  • alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck)
  • arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li)
  • parisc: Use absolute_pointer() to define PAGE0 (Helge Deller)
  • qnx4: avoid stringop-overread errors (Linus Torvalds)
  • sparc: avoid stringop-overread errors (Linus Torvalds)
  • net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck)
  • compiler.h: Introduce absolute_pointer macro (Guenter Roeck)
  • blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (Li Jinlin)
  • sparc32: page align size in arch_dma_alloc (Andreas Larsson)
  • nvme-multipath: fix ANA state updates when a namespace is not present (Anton Eidelman)
  • xen/balloon: use a kernel thread instead a workqueue (Juergen Gross)
  • bpf: Add oversize check before call kvcalloc() (Bixuan Cui)
  • ipv6: delay fib6_sernum increase in fib6_add (zhang kai)
  • m68k: Double cast io functions to unsigned long (Guenter Roeck)
  • net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson)
  • net: macb: fix use after free on rmmod (Tong Zhang)
  • blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng)
  • md: fix a lock order reversal in md_alloc (Christoph Hellwig)
  • irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)
  • irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build (Randy Dunlap)
  • scsi: lpfc: Use correct scnprintf() limit (Dan Carpenter)
  • scsi: qla2xxx: Restore initiator in dual mode (Dmitry Bogdanov)
  • cifs: fix a sign extension bug (Dan Carpenter)
  • thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter)
  • fpga: machxo2-spi: Fix missing error code in machxo2_write_complete() (Jiapeng Chong)
  • fpga: machxo2-spi: Return an error on failure (Tom Rix)
  • tty: synclink_gt: rename a conflicting function name (Randy Dunlap)
  • tty: synclink_gt, drop unneeded forward declarations (Jiri Slaby)
  • scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li)
  • net/mlx4_en: Dont allow aRFS for encapsulated packets (Aya Levin)
  • qed: rdma - dont wait for resources under hw error recovery flow (Shai Malin)
  • gpio: uniphier: Fix void functions to remove return value (Kunihiko Hayashi)
  • net/smc: add missing error check in smc_clc_prfx_set() (Karsten Graul)
  • bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan)
  • enetc: Fix illegal access when reading affinity_hint (Claudiu Manoil)
  • platform/x86/intel: punit_ipc: Drop wrong use of ACPI_PTR() (Andy Shevchenko)
  • afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation (David Howells)
  • net: hso: fix muxed tty registration (Johan Hovold)
  • serial: mvebu-uart: fix drivers tx_empty callback (Pali Rohar)
  • xhci: Set HCD flag to defer primary roothub registration (Kishon Vijay Abraham I)
  • btrfs: prevent __btrfs_dump_space_info() to underflow its free space (Qu Wenruo)
  • erofs: fix up erofs_lookup tracepoint (Gao Xiang)
  • mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter)
  • USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao)
  • USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski)
  • USB: serial: option: add Telit LN920 compositions (Carlo Lobrano)
  • USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski)
  • usb: core: hcd: Add support for deferring roothub registration (Kishon Vijay Abraham I)
  • Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski)
  • staging: greybus: uart: fix tty use after free (Johan Hovold)
  • binder: make sure fd closes complete (Todd Kjos)
  • USB: cdc-acm: fix minor-number release (Johan Hovold)
  • USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt)
  • usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary)
  • xen/x86: fix PV trap handling on secondary processors (Jan Beulich)
  • cifs: fix incorrect check for null pointer in header_assemble (Steve French)
  • usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter)
  • usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA (Minas Harutyunyan)
  • usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave (Minas Harutyunyan)
  • usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter)
  • LTS tag: v5.4.149 (Jack Vogel)
  • drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck)
  • rtc: rx8010: select REGMAP_I2C (Yu-Tung Chang)
  • blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin)
  • pwm: stm32-lp: Dont modify HW state in .remove() callback (Uwe Kleine-Konig)
  • pwm: rockchip: Dont modify HW state in .remove() callback (Uwe Kleine-Konig)
  • pwm: img: Dont modify HW state in .remove() callback (Uwe Kleine-Konig)
  • nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun)
  • nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun)
  • nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun)
  • nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun)
  • nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun)
  • nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun)
  • btrfs: fix lockdep warning while mounting sprout fs (Anand Jain)
  • ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton)
  • ceph: request Fw caps before updating the mtime in ceph_write_iter (Jeff Layton)
  • dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey)
  • dmaengine: ioat: depends on !UML (Johannes Berg)
  • dmaengine: sprd: Add missing MODULE_DEVICE_TABLE (Zou Wei)
  • parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck)
  • drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (Thomas Gleixner)
  • thermal/core: Fix thermal_cooling_device_register() prototype (Arnd Bergmann)
  • Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn)
  • net: stmmac: reset Tx desc base address before restarting Tx (Jongsung Kim)
  • phy: avoid unnecessary link-up delay in polling mode (Petr Oros)
  • pwm: lpc32xx: Dont modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-Konig)
  • profiling: fix shift-out-of-bounds bugs (Pavel Skripkin)
  • nilfs2: use refcount_dec_and_lock() to fix potential UAF (Zhen Lei)
  • prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov)
  • 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji)
  • thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter)
  • dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko)
  • um: virtio_uml: fix memory leak on init failures (Johannes Berg)
  • staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() (Nathan Chancellor)
  • sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner)
  • sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner)
  • ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin)
  • ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin)
  • ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin)
  • ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin)
  • apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko)
  • ARM: Qualify enabling of swiotlb_init() (Florian Fainelli)
  • s390/pci_mmio: fully validate the VMA before calling follow_pte() (David Hildenbrand)
  • console: consume APC, DM, DCS (nick black)
  • PCI/ACPI: Add Ampere Altra SOC MCFG quirk (Tuan Phan)
  • PCI: aardvark: Fix reporting CRS value (Pali Rohar)
  • PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (Pali Rohar)
  • PCI: aardvark: Indicate error in val when config read fails (Pali Rohar)
  • PCI: pci-bridge-emul: Fix big-endian support (Grzegorz Jaszczyk)
  • LTS tag: v5.4.148 (Jack Vogel)
  • s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich)
  • s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich)
  • net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda)
  • ip_gre: validate csum_start only on pull (Willem de Bruijn)
  • qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu)
  • fq_codel: reject silly quantum parameters (Eric Dumazet)
  • netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans)
  • net: dsa: b53: Fix calculating number of switch ports (Rafal Milecki)
  • perf unwind: Do not overwrite FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64} (Li Huafei)
  • ARC: export clear_user_page() for modules (Randy Dunlap)
  • mtd: rawnand: cafe: Fix a resource leak in the error handling path of cafe_nand_probe() (Christophe JAILLET)
  • PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko)
  • KVM: arm64: Handle PSCI resets before userspace touches vCPU state (Oliver Upton)
  • mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set (Matthias Schiffer)
  • PCI: Fix pci_dev_str_match_path() alloc while atomic bug (Dan Carpenter)
  • mfd: axp20x: Update AXP288 volatile ranges (Hans de Goede)
  • NTB: perf: Fix an error code in perf_setup_inbuf() (Yang Li)
  • NTB: Fix an error code in ntb_msit_probe() (Yang Li)
  • ethtool: Fix an error code in cxgb2.c (Yang Li)
  • PCI: ibmphp: Fix double unmap of io_mem (Vishal Aslot)
  • net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas)
  • Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Ryoga Saito)
  • PCI: Add ACS quirks for Cavium multi-function devices (George Cherian)
  • tracing/probes: Reject events which have the same name of existing one (Masami Hiramatsu)
  • mfd: Dont use irq_create_mapping() to resolve a mapping (Marc Zyngier)
  • fuse: fix use after free in fuse_read_interrupt() (Miklos Szeredi)
  • PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (Wasim Khan)
  • mfd: db8500-prcmu: Adjust map to reality (Linus Walleij)
  • dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal)
  • mm/memory_hotplug: use unsigned long for PFN in zone_for_pfn_range() (David Hildenbrand)
  • net: hns3: fix the timing issue of VF clearing interrupt sources (Jiaran Zhang)
  • net: hns3: disable mac in flr process (Yufeng Mo)
  • net: hns3: change affinity_mask to numa node range (Yufeng Mo)
  • net: hns3: pad the short tunnel frame before sending to hardware (Yufeng Mo)
  • KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers (Nicholas Piggin)
  • ibmvnic: check failover_pending in login response (Sukadev Bhattiprolu)
  • dt-bindings: arm: Fix Toradex compatible typo (David Heidelberg)
  • qed: Handle management FW error (Shai Malin)
  • tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (zhenggy)
  • net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup (Vladimir Oltean)
  • net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet)
  • vhost_net: fix OoB on sendmsg() failure. (Paolo Abeni)
  • events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers)
  • net/mlx5: Fix potential sleeping in atomic context (Maor Gottlieb)
  • net/mlx5: FWTrace, cancel work on alloc pd error flow (Saeed Mahameed)
  • perf machine: Initialize srcline string member in add_location struct (Michael Petlan)
  • tipc: increase timeout in tipc_sk_enqueue() (Hoang Le)
  • r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli)
  • net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang)
  • ptp: dp83640: dont define PAGE0 (Randy Dunlap)
  • net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet)
  • tipc: fix an use-after-free issue in tipc_recvmsg (Xin Long)
  • x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport)
  • s390/sclp: fix Secure-IPL facility detection (Alexander Egorenkov)
  • drm/etnaviv: add missing MMU context put when reaping MMU mapping (Lucas Stach)
  • drm/etnaviv: reference MMU context when setting up hardware state (Lucas Stach)
  • drm/etnaviv: fix MMU context leak on GPU reset (Lucas Stach)
  • drm/etnaviv: exec and MMU state is lost when resetting the GPU (Lucas Stach)
  • drm/etnaviv: keep MMU context across runtime suspend/resume (Lucas Stach)
  • drm/etnaviv: stop abusing mmu_context as FE running marker (Lucas Stach)
  • drm/etnaviv: put submit prev MMU context when it exists (Lucas Stach)
  • drm/etnaviv: return context from etnaviv_iommu_context_get (Lucas Stach)
  • drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 (Ernst Sjostrand)
  • PCI: Add AMD GPU multi-function power dependencies (Evan Quan)
  • PM: base: power: dont try to use non-existing RTC for storing data (Juergen Gross)
  • arm64/sve: Use correct size when reinitialising SVE state (Mark Brown)
  • xen: reset legacy rtc flag for PV domU (Juergen Gross)
  • btrfs: fix upper limit for max_inline for page size 64K (Anand Jain)
  • drm/panfrost: Clamp lock region to Bifrost minimum (Alyssa Rosenzweig)
  • drm/panfrost: Use u64 for size in lock_region (Alyssa Rosenzweig)
  • drm/panfrost: Simplify lock_region calculation (Alyssa Rosenzweig)
  • drm/amdgpu: Fix BUG_ON assert (Andrey Grodzovsky)
  • drm/msi/mdp4: populate priv->kms in mdp4_kms_init (David Heidelberg)
  • net: dsa: lantiq_gswip: fix maximum frame length (Jan Hoffmann)
  • lib/test_stackinit: Fix static initializer test (Kees Cook)
  • platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda)
  • memcg: enable accounting for pids in nested pid namespaces (Vasily Averin)
  • mm,vmscan: fix divide by zero in get_scan_count (Rik van Riel)
  • mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian)
  • s390/pv: fix the forcing of the swiotlb (Halil Pasic)
  • cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat)
  • scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap)
  • scsi: qla2xxx: Changes to support kdump kernel (Saurav Kashyap)
  • scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki)
  • ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() (chenying)
  • parisc: fix crash with signals and alloca (Mikulas Patocka)
  • net: w5100: check return value after calling platform_get_resource() (Yang Yingliang)
  • fix array-index-out-of-bounds in taprio_change (Haimin Zhang)
  • net: fix NULL pointer reference in cipso_v4_doi_free
  • ath9k: fix sleeping in atomic context (Miaoqing Pan)
  • ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen)
  • parport: remove non-zero check on count (Colin Ian King)
  • net/mlx5: DR, Enable QP retransmission (Yevgeny Kliteynik)
  • iwlwifi: mvm: fix access to BSS elements (Johannes Berg)
  • iwlwifi: mvm: avoid static queue number aliasing (Johannes Berg)
  • iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed (Zhang Qilong)
  • drm/amdkfd: Account for SH/SE count when setting up cu masks. (Sean Keely)
  • ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo)
  • ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang)
  • usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan)
  • usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam)
  • usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova)
  • Revert USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Mathias Nyman)
  • cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui)
  • mmc: core: Return correct emmc response in case of ioctl error (Nishad Kamdar)
  • selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian)
  • mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb)
  • mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani)
  • of: Dont allow __of_attached_node_sysfs() without CONFIG_SYSFS (Marc Zyngier)
  • ASoC: Intel: Skylake: Fix passing loadable flag for module (Gustaw Lewandowski)
  • ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (Cezary Rojewski)
  • btrfs: tree-log: check btrfs_lookup_data_extent return value (Marcos Paulo de Souza)
  • m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch (Arnd Bergmann)
  • drm/exynos: Always initialize mapping in exynos_drm_register_dma() (Nathan Chancellor)
  • lockd: lockd server-side shouldnt set fl_ops (J. Bruce Fields)
  • usb: chipidea: host: fix port index underflow and UBSAN complains (Li Jun)
  • gfs2: Dont call dlm after protocol is unmounted (Bob Peterson)
  • staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook)
  • rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields)
  • tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD (Luke Hsiao)
  • serial: sh-sci: fix break handling for sysrq (Ulrich Hecht)
  • opp: Dont print an error if required-opps is missing (Rajendra Nayak)
  • Bluetooth: Fix handling of LE Enhanced Connection Complete (Luiz Augusto von Dentz)
  • nvme-tcp: dont check blk_mq_tag_to_rq when receiving pdu data (Sagi Grimberg)
  • arm64: dts: ls1046a: fix eeprom entries (Raag Jadav)
  • arm64: tegra: Fix compatible string for Tegra132 CPUs (Thierry Reding)
  • ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner)
  • mac80211: Fix monitor MTU limit so that A-MSDUs get through (Johan Almbladh)
  • drm/display: fix possible null-pointer dereference in dcn10_set_clock() (Tuo Li)
  • gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li)
  • net/mlx5: Fix variable type to match 64bit (Eran Ben Elisha)
  • Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi)
  • Bluetooth: schedule SCO timeouts with delayed_work (Desmond Cheong Zhi Xi)
  • selftests/bpf: Fix xdp_tx.c prog section name (Jussi Maki)
  • drm/msm: mdp4: drop vblank get/put from prepare/complete_commit (David Heidelberg)
  • net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor)
  • arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul)
  • ARM: dts: imx53-ppd: Fix ACHC entry (Sebastian Reichel)
  • media: tegra-cec: Handle errors of clk_prepare_enable() (Evgeny Novikov)
  • media: TDA1997x: fix tda1997x_query_dv_timings() return value (Krzysztof Halasa)
  • media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil)
  • media: imx258: Limit the max analogue gain to 480 (Umang Jain)
  • media: imx258: Rectify mismatch of VTS value (Laurent Pinchart)
  • ASoC: Intel: bytcr_rt5640: Move Platform Clock routes to the maps for the matching in-/output (Hans de Goede)
  • arm64: tegra: Fix Tegra194 PCIe EP compatible string (Vidya Sagar)
  • bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() (Yufeng Mo)
  • workqueue: Fix possible memory leaks in wq_numa_init() (Zhen Lei)
  • Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi)
  • ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko)
  • samples: bpf: Fix tracex7 error raised on the missing argument (Juhee Kang)
  • staging: ks7010: Fix the initialization of the sleep_status structure (Christophe JAILLET)
  • serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman)
  • hvsi: dont panic on tty_register_driver failure (Jiri Slaby)
  • xtensa: ISS: dont panic in rs_init (Jiri Slaby)
  • serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki)
  • s390: make PCI mio support a machine flag (Niklas Schnelle)
  • s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens)
  • flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva)
  • ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva)
  • video: fbdev: riva: Error out if pixclock equals zero (Zheyu Ma)
  • video: fbdev: kyro: Error out if pixclock equals zero (Zheyu Ma)
  • video: fbdev: asiliantfb: Error out if pixclock equals zero (Zheyu Ma)
  • bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh)
  • bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh)
  • drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex (Anson Jacob)
  • drm/amd/display: Fix timer_per_pixel unit error (Oliver Logush)
  • tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma)
  • staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven)
  • usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham)
  • USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() (Evgeny Novikov)
  • usb: gadget: u_ether: fix a potential null pointer dereference (Maciej zenczykowski)
  • usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv)
  • usb: host: fotg210: fix the endpoints transactional opportunities calculation (Kelly Devilliv)
  • igc: Check if num of q_vectors is smaller than max before array access (Sasha Neftin)
  • drm: avoid blocking in drm_clients_infos rcu section (Desmond Cheong Zhi Xi)
  • Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang)
  • netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng)
  • video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma)
  • ARM: dts: qcom: apq8064: correct clock names (David Heidelberg)
  • iavf: fix locking of critical sections (Stefan Assmann)
  • iavf: do not override the adapter state in the watchdog task (Stefan Assmann)
  • iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron)
  • tipc: keep the skb in rcv queue until the whole data is read (Xin Long)
  • PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki)
  • crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson)
  • media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab)
  • ASoC: atmel: ATMEL drivers dont need HAS_DMA (Randy Dunlap)
  • drm/amdgpu: Fix amdgpu_ras_eeprom_init() (Luben Tuikov)
  • userfaultfd: prevent concurrent API initialization (Nadav Amit)
  • kbuild: Fix no symbols warning when CONFIG_TRIM_UNUSD_KSYMS=y (Masahiro Yamada)
  • MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel)
  • f2fs: fix to unmap pages from userspace process in punch_hole() (Chao Yu)
  • f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() (Chao Yu)
  • f2fs: fix to account missing .skipped_gc_rwsem (Chao Yu)
  • KVM: PPC: Fix clearing never mapped TCEs in realmode (Alexey Kardashevskiy)
  • clk: at91: clk-generated: Limit the requested rate to our range (Codrin Ciubotariu)
  • clk: at91: clk-generated: pass the id of changeable parent at registration (Claudiu Beznea)
  • clk: at91: sam9x60: Dont use audio PLL (Codrin Ciubotariu)
  • fscache: Fix cookie key hashing (David Howells)
  • platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call (Hans de Goede)
  • KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live (Nicholas Piggin)
  • HID: i2c-hid: Fix Elan touchpad regression (Jim Broadus)
  • scsi: target: avoid per-loop XCOPY buffer allocations (David Disseldorp)
  • powerpc/config: Renable MTD_PHYSMAP_OF (Joel Stanley)
  • scsi: qedf: Fix error codes in qedf_alloc_global_queues() (Dan Carpenter)
  • scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter)
  • scsi: smartpqi: Fix an error code in pqi_get_raid_map() (Dan Carpenter)
  • pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei)
  • scsi: fdomain: Fix error return code in fdomain_probe() (Wei Li)
  • SUNRPC: Fix potential memory corruption (Trond Myklebust)
  • dma-debug: fix debugfs initialization order (Anthony Iliopoulos)
  • openrisc: dont printk() unconditionally (Randy Dunlap)
  • f2fs: reduce the scope of setting fsck tag when de->name_len is zero (Yangtao Li)
  • f2fs: show f2fs instance in printk_ratelimited (Chao Yu)
  • RDMA/efa: Remove double QP type assignment (Leon Romanovsky)
  • powerpc/stacktrace: Include linux/delay.h (Michal Suchanek)
  • vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe)
  • pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi)
  • docs: Fix infiniband uverbs minor number (Leon Romanovsky)
  • RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky)
  • IB/hfi1: Adjust pkey entry in index 0 (Mike Marciniszyn)
  • scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND (Christoph Hellwig)
  • f2fs: quota: fix potential deadlock (Chao Yu)
  • HID: input: do not report stylus battery state as full (Dmitry Torokhov)
  • PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohar)
  • PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohar)
  • PCI: aardvark: Fix checking for PIO status (Evan Wang)
  • PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon)
  • PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczynski)
  • PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behun)
  • PCI/portdrv: Enable Bandwidth Notification only if port supports it (Stuart Hayes)
  • ARM: 9105/1: atags_to_fdt: dont warn about stack size (David Heidelberg)
  • libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede)
  • dmaengine: imx-sdma: remove duplicated sdma_load_context (Robin Gong)
  • Revert dmaengine: imx-sdma: refine to load context only once (Robin Gong)
  • media: rc-loopback: return number of emitters rather than error (Sean Young)
  • media: uvc: dont do DMA on stack (Mauro Carvalho Chehab)
  • VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai)
  • dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel)
  • power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski)
  • block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal)
  • crypto: public_key: fix overflow during implicit conversion (zhenwei pi)
  • arm64: head: avoid over-mapping in map_memory (Mark Rutland)
  • soc: aspeed: p2a-ctrl: Fix boundary check for mmap (Iwona Winiarska)
  • soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska)
  • soc: qcom: aoss: Fix the out of bound usage of cooling_devs (Manivannan Sadhasivam)
  • pinctrl: ingenic: Fix incorrect pull up/down info (Paul Cercueil)
  • pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast (Marc Zyngier)
  • tools/thermal/tmon: Add cross compiling support (Rolf Eike Beer)
  • 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha)
  • xen: fix setting of max_pfn in shared_info (Juergen Gross)
  • powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain)
  • PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Gorecki)
  • blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel)
  • blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel)
  • btrfs: reset replace target device to allocation state on close (Desmond Cheong Zhi Xi)
  • btrfs: wake up async_delalloc_pages waiters after submit (Josef Bacik)
  • rtc: tps65910: Correct driver module alias (Dmitry Osipenko)
  • LTS tag: v5.4.147 (Jack Vogel)
  • Revert time: Handle negative seconds correctly in timespec64_to_ns() (Greg Kroah-Hartman)
  • Revert posix-cpu-timers: Force next expiration recalc after itimer reset (Greg Kroah-Hartman)
  • Revert block: nbd: add sanity check for first_minor (Greg Kroah-Hartman)
  • Revert Bluetooth: Move shutdown callback before flushing tx and rx queue (Sasha Levin)
  • LTS tag: v5.4.146 (Jack Vogel)
  • clk: kirkwood: Fix a clocking boot regression (Linus Walleij)
  • backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson)
  • fbmem: dont allow too huge resolutions (Tetsuo Handa)
  • IMA: remove the dependency on CRYPTO_MD5 (THOBY Simon)
  • IMA: remove -Wmissing-prototypes warning (Austin Kim)
  • fuse: flush extending writes (Miklos Szeredi)
  • fuse: truncate pagecache on atomic_o_trunc (Miklos Szeredi)
  • KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (Sean Christopherson)
  • KVM: x86: Update vCPUs hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng)
  • KVM: s390: index kvm->arch.idle_mask by vcpu_idx (Halil Pasic)
  • x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger)
  • perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op (Kim Phillips)
  • tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi)
  • bpf: Fix pointer arithmetic mask tightening under state pruning (Daniel Borkmann)
  • bpf: verifier: Allocate idmap scratch in verifier env (Lorenz Bauer)
  • bpf: Fix leakage due to insufficient speculative store bypass mitigation (Daniel Borkmann)
  • bpf: Introduce BPF nospec instruction for mitigating Spectre v4 (Daniel Borkmann)
  • ipv4: fix endianness issue in inet_rtm_getroute_build_skb() (Eric Dumazet)
  • octeontx2-af: Fix loop in free and unmap counter (Subbaraya Sundeep)
  • net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren)
  • net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang)
  • ipv4: make exception cache less predictible (Eric Dumazet)
  • ipv6: make exception cache less predictible (Eric Dumazet)
  • brcmfmac: pcie: fix oops on failure to resume and reprobe (Ahmad Fatoum)
  • bcma: Fix memory leak for internally-handled cores (Zenghui Yu)
  • ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter)
  • ASoC: wcd9335: Disable irq on slave ports in the remove function (Christophe JAILLET)
  • ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function (Christophe JAILLET)
  • ASoC: wcd9335: Fix a double irq free in the remove function (Christophe JAILLET)
  • tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan)
  • usb: bdc: Fix an error handling path in bdc_probe() when no suitable DMA config is available (Christophe JAILLET)
  • usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov)
  • i2c: mt65xx: fix IRQ check (Sergey Shtylyov)
  • CIFS: Fix a potencially linear read overflow (Len Baker)
  • bpf: Fix possible out of bound write in narrow load handling (Andrey Ignatov)
  • mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
  • mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren)
  • ASoC: Intel: Skylake: Fix module resource and format selection (Cezary Rojewski)
  • ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs (Cezary Rojewski)
  • rsi: fix an error code in rsi_probe() (Dan Carpenter)
  • rsi: fix error code in rsi_load_9116_firmware() (Dan Carpenter)
  • i2c: s3c2410: fix IRQ check (Sergey Shtylyov)
  • i2c: iop3xx: fix deferred probing (Sergey Shtylyov)
  • Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin)
  • mm/swap: consider max pages in iomap_swapfile_add_extent (Xu Yu)
  • usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova)
  • nfsd4: Fix forced-expiry locking (J. Bruce Fields)
  • lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington)
  • mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang)
  • usb: phy: tahvo: add IRQ check (Sergey Shtylyov)
  • usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov)
  • usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse (Geert Uytterhoeven)
  • usb: phy: twl6030: add IRQ checks (Sergey Shtylyov)
  • usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov)
  • usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov)
  • drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET)
  • Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi)
  • counter: 104-quad-8: Return error when invalid mode during ceiling_write (William Breathitt Gray)
  • arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P