Lucene search

K
oraclelinuxOracleLinuxELSA-2022-9147
HistoryFeb 14, 2022 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2022-02-1400:00:00
linux.oracle.com
111

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

[5.4.17-2136.304.4.1]

  • Revert rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33832625]
  • cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman) [Orabug: 33832582] {CVE-2022-0492}
    [5.4.17-2136.304.4]
  • scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie) [Orabug: 33794250]
  • scsi: libiscsi: Drop taskqueuelock (Mike Christie) [Orabug: 33794250]
  • ib/core: add SET_DEVICE_OP call for clear_hw_stats() (Qing Huang) [Orabug: 33495339]
  • KVM: SVM: Dont intercept #GP for SEV guests (Sean Christopherson) [Orabug: 33446920]
  • Revert KVM: SVM: avoid infinite loop on NPF from bad address (Sean Christopherson) [Orabug: 33446920]
  • KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests (Sean Christopherson) [Orabug: 33446920]
  • rds/ib: Kernel upgrade to rds_ib_conns info displayed by rds-info (Rohit Nair) [Orabug: 33660929]
  • tee: handle lookup of shm with reference count 0 (Jens Wiklander) [Orabug: 33739582] {CVE-2021-44733}
  • smp: always continue to process IRQ work (Stephen Brennan) [Orabug: 33802464]
    [5.4.17-2136.304.3]
  • vfs: fs_context: fix up param length parsing in legacy_parse_param (Jamie Hill-Daniel) [Orabug: 33766454] {CVE-2022-0185}
  • LTS tag: v5.4.161 (Sherry Yang)
  • erofs: fix unsafe pagevec reuse of hooked pclusters (Gao Xiang)
  • erofs: remove the occupied parameter from z_erofs_pagevec_enqueue() (Yue Hu)
  • PCI: Add MSI masking quirk for Nvidia ION AHCI (Marc Zyngier)
  • PCI/MSI: Deal with devices lying about their MSI mask capability (Marc Zyngier)
  • PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)
  • parisc/entry: fix trace test in syscall exit path (Sven Schnelle)
  • fortify: Explicitly disable Clang support (Kees Cook)
  • scsi: ufs: Fix tm request when non-fatal error happens (Jaegeuk Kim)
  • ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)
  • MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL (Maciej W. Rozycki)
  • scsi: ufs: Fix interrupt error message for shared interrupts (Adrian Hunter)
  • soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)
  • LTS tag: v5.4.160 (Sherry Yang) [Orabug: 33536399]
  • selftests/bpf: Fix also no-alu32 strobemeta selftest (Andrii Nakryiko)
  • ath10k: fix invalid dma_addr_t token assignment (Arnd Bergmann)
  • SUNRPC: Partial revert of commit 6f9f17287e78 (Trond Myklebust)
  • PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohar)
  • powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module unload (Vasant Hegde)
  • s390/cio: make ccw_device_dma_* more robust (Halil Pasic)
  • s390/tape: fix timer initialization in tape_std_assign() (Sven Schnelle)
  • s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)
  • video: backlight: Drop maximum brightness override for brightness zero (Marek Vasut)
  • mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)
  • mm, oom: pagefault_out_of_memory: dont force global OOM for dying tasks (Vasily Averin)
  • powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC (Naveen N. Rao)
  • powerpc/security: Add a helper to query stf_barrier type (Naveen N. Rao)
  • powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)
  • powerpc/bpf: Validate branch ranges (Naveen N. Rao)
  • powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)
  • ovl: fix deadlock in splice write (Miklos Szeredi)
  • 9p/net: fix missing error check in p9_check_errors (Dominique Martinet)
  • net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE (Daniel Borkmann)
  • f2fs: should use GFP_NOFS for directory inodes (Jaegeuk Kim)
  • irqchip/sifive-plic: Fixup EOI failed when masked (Guo Ren)
  • parisc: Fix set_fixmap() on PA1.x CPUs (Helge Deller)
  • parisc: Fix backtrace to always include init funtion names (Helge Deller)
  • ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)
  • ARM: 9155/1: fix early early_iounmap() (Michal Miroslaw)
  • selftests/net: udpgso_bench_rx: fix port argument (Willem de Bruijn)
  • cxgb4: fix eeprom len when diagnostics not implemented (Rahul Lakkireddy)
  • net/smc: fix sk_refcnt underflow on linkdown and fallback (Dust Li)
  • vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)
  • net: hns3: allow configure ETS bandwidth of all TCs (Guangbin Huang)
  • net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Eric Dumazet)
  • bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding (John Fastabend)
  • arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (Arnd Bergmann)
  • nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)
  • llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)
  • perf bpf: Add missing free to bpf_event__print_bpf_prog_info() (Ian Rogers)
  • zram: off by one in read_block_state() (Dan Carpenter)
  • mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)
  • bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)
  • ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)
  • net: vlan: fix a UAF in vlan_dev_real_dev() (Ziyang Xuan)
  • net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)
  • xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)
  • i2c: xlr: Fix a resource leak in the error handling path of xlr_i2c_probe() (Christophe JAILLET)
  • NFSv4: Fix a regression in nfs_set_open_stateid_locked() (Trond Myklebust)
  • scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)
  • scsi: qla2xxx: Fix gnl list corruption (Quinn Tran)
  • ar7: fix kernel builds for compiler test (Jackie Liu)
  • watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)
  • m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)
  • signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL) (Eric W. Biederman)
  • dmaengine: dmaengine_desc_callback_valid(): Check for callback_result (Lars-Peter Clausen)
  • netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal)
  • soc: fsl: dpaa2-console: free buffer before returning from dpaa2_console_read (Robert-Ionut Alexa)
  • auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven)
  • auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven)
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven)
  • dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea)
  • mtd: core: dont remove debugfs directory if device is in use (Zev Weiss)
  • mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov)
  • fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai)
  • NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust)
  • opp: Fix return in _opp_add_static_v2() (YueHaibing)
  • PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Pali Rohar)
  • PCI: aardvark: Dont spam about PIO Response Status (Marek Behun)
  • drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71))
  • pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers)
  • rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen)
  • apparmor: fix error check (Tom Rix)
  • power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede)
  • mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven)
  • powerpc/44x/fsp2: add missing of_node_put (Bixuan Cui)
  • HID: u2fzero: properly handle timeouts in usb_submit_urb (Andrej Shadura)
  • HID: u2fzero: clarify error check and length calculations (Andrej Shadura)
  • serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula)
  • phy: qcom-qusb2: Fix a memory leak on probe (Vladimir Zapolskiy)
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald)
  • ASoC: cs42l42: Correct some register default values (Richard Fitzgerald)
  • ARM: dts: stm32: fix SAI sub nodes register range (Olivier Moysan)
  • staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC (Vegard Nossum)
  • RDMA/mlx4: Return missed an error if device doesnt support steering (Leon Romanovsky)
  • scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter)
  • power: supply: rt5033_battery: Change voltage values to uV (Jakob Hauser)
  • usb: gadget: hid: fix error code in do_config() (Dan Carpenter)
  • serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko)
  • video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy)
  • clk: at91: check pmc node status before registering syscore ops (Clement Leger)
  • memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu)
  • soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET)
  • arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade)
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai)
  • JFS: fix memleak in jfs_mount (Dongliang Mu)
  • MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu)
  • scsi: dc395: Fix error case unwinding (Tong Zhang)
  • ARM: dts: at91: tse850: the emac<->phy interface is rmii (Peter Rosin)
  • arm64: dts: meson-g12a: Fix the pwm regulator supply properties (Anand Moon)
  • RDMA/bnxt_re: Fix query SRQ failure (Selvin Xavier)
  • ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY (Marijn Suijten)
  • arm64: dts: rockchip: Fix GPU register width for RK3328 (Alex Bee)
  • ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu)
  • clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths (Christophe JAILLET)
  • RDMA/rxe: Fix wrong port_cap_flags (Junji Wei)
  • ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu)
  • ibmvnic: dont stop queue in xmit (Sukadev Bhattiprolu)
  • udp6: allow SO_MARK ctrl msg to affect routing (Jakub Kicinski)
  • selftests/bpf: Fix fclose/pclose mismatch in test_progs (Andrea Righi)
  • crypto: pcrypt - Delay write to padata->info (Daniel Jordan)
  • net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle))
  • net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K)
  • drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits (Alex Deucher)
  • wcn36xx: add proper DMA memory barriers in rx path (Benjamin Li)
  • libertas: Fix possible memory leak in probe and disconnect (Wang Hai)
  • libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai)
  • KVM: s390: Fix handle_sske page fault handling (Janis Schoetterl-Glausch)
  • samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang)
  • tcp: dont free a FIN sk_buff in tcp_remove_empty_skb() (Jon Maxwell)
  • irq: mips: avoid nested irq_enter() (Mark Rutland)
  • s390/gmap: dont unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand)
  • libbpf: Fix BTF data layout checks and allow empty BTF (Andrii Nakryiko)
  • smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa)
  • drm/msm: Fix potential NULL dereference in DPU SSPP (Jessica Zhang)
  • clocksource/drivers/timer-ti-dm: Select TIMER_OF (Kees Cook)
  • PM: hibernate: fix sparse warnings (Anders Roxell)
  • nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Max Gurtovoy)
  • phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner)
  • mwifiex: Send DELBA requests according to spec (Jonas Drenler)
  • rsi: stop thread firstly in rsi_91x_init() error handling (Ziyang Xuan)
  • mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Lorenzo Bianconi)
  • platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor)
  • block: ataflop: fix breakage introduced at blk-mq refactoring (Michael Schmitz)
  • mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET)
  • net: stream: dont purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski)
  • drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter)
  • ath10k: fix max antenna gain unit (Sven Eckelmann)
  • hwmon: (pmbus/lm25066) Let compiler determine outer dimension of lm25066_coeff (Zev Weiss)
  • hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang)
  • net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Daniel Borkmann)
  • memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter)
  • memstick: avoid out-of-range warning (Arnd Bergmann)
  • mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured (Tony Lindgren)
  • b43: fix a lower bounds test (Dan Carpenter)
  • b43legacy: fix a lower bounds test (Dan Carpenter)
  • hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann)
  • crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu)
  • crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu)
  • media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable() (Evgeny Novikov)
  • netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)
  • EDAC/amd64: Handle three rank interleaving mode (Yazen Ghannam)
  • ath9k: Fix potential interrupt storm on queue reset (Linus Lussing)
  • media: em28xx: Dont use ops->suspend if it is NULL (Colin Ian King)
  • cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva)
  • crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency (Arnd Bergmann)
  • kprobes: Do not use local variable when creating debugfs file (Punit Agrawal)
  • media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King)
  • media: tm6000: Avoid card name truncation (Kees Cook)
  • media: si470x: Avoid card name truncation (Kees Cook)
  • media: radio-wl1273: Avoid card name truncation (Kees Cook)
  • media: mtk-vpu: Fix a resource leak in the error handling path of mtk_vpu_probe() (Christophe JAILLET)
  • media: TDA1997x: handle short reads of hdmi info frame. (Tom Rix)
  • media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin)
  • media: cxd2880-spi: Fix a null pointer dereference on error handling path (Colin Ian King)
  • media: em28xx: add missing em28xx_close_extension (Pavel Skripkin)
  • drm/amdgpu: fix warning for overflow check (Arnd Bergmann)
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (Loic Poulain)
  • net: dsa: rtl8366rb: Fix off-by-one bug (Linus Walleij)
  • rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies() (Jiasheng Jiang)
  • crypto: caam - disable pkc for non-E SoCs (Michael Walle)
  • Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (Dinghao Liu)
  • wilc1000: fix possible memory leak in cfg_scan_result() (Ajay Singh)
  • cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)
  • net: net_namespace: Fix undefined member in key_remove_domain() (Yajun Deng)
  • virtio-gpu: fix possible memory allocation failure (liuyuntao)
  • drm/v3d: fix wait for TMU write combiner flush (Iago Toral Quiroga)
  • rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Neeraj Upadhyay)
  • Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi)
  • selftests/bpf: Fix strobemeta selftest regression (Andrii Nakryiko)
  • netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Pablo Neira Ayuso)
  • parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle)
  • parisc/unwind: fix unwinder when CONFIG_64BIT is enabled (Sven Schnelle)
  • task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller)
  • parisc: fix warning in flush_tlb_all (Sven Schnelle)
  • x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted (Vitaly Kuznetsov)
  • spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang)
  • btrfs: do not take the uuid_mutex in btrfs_rm_device (Josef Bacik)
  • net: annotate data-race in neigh_output() (Eric Dumazet)
  • vrf: run conntrack only in context of lower/physdev for locally generated packets (Florian Westphal)
  • ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann)
  • gre/sit: Dont generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra)
  • ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu)
  • smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa)
  • iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg)
  • selftests: kvm: fix mismatched fclose() after popen() (Shuah Khan)
  • PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin)
  • nvme: drop scan_lock and always kick requeue list when removing namespaces (Hannes Reinecke)
  • nvmet-tcp: fix use-after-free when a port is removed (Israel Rukshin)
  • nvmet: fix use-after-free when a port is removed (Israel Rukshin)
  • block: remove inaccurate requeue check (Jens Axboe)
  • mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma)
  • tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh)
  • workqueue: make sysfs of unbound kworker cpumask more clever (Menglong Dong)
  • lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin)
  • lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin)
  • memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma)
  • leaking_addresses: Always print a trailing newline (Kees Cook)
  • ACPI: battery: Accept charges over the design capacity as full (Andre Almeida)
  • iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher)
  • ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li)
  • tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware))
  • net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart)
  • media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam)
  • media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info (Ricardo Ribalda)
  • media: ipu3-imgu: imgu_fmt: Handle properly try (Ricardo Ribalda)
  • ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki)
  • ipmi: Disable some operations during a panic (Corey Minyard)
  • media: rcar-csi2: Add checking to rcsi2_start_receiver() (Nadezda Lutovinova)
  • brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Hans de Goede)
  • ia64: dont do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap)
  • media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana)
  • media: imx: set a media_device bus_info string (Martin Kepplinger)
  • media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova)
  • media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li)
  • media: uvcvideo: Set unique vdev name based in type (Ricardo Ribalda)
  • media: uvcvideo: Return -EIO for control errors (Ricardo Ribalda)
  • media: uvcvideo: Set capability in s_param (Ricardo Ribalda)
  • media: stm32: Potential NULL pointer dereference in dcmi_irq_thread() (Dmitriy Ulitin)
  • media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma)
  • media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender)
  • ath10k: high latency fixes for beacon buffer (Alagu Sankar)
  • mwifiex: Properly initialize private structure on interface type changes (Jonas Drebler)
  • mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Drebler)
  • x86: Increase exception stack sizes (Peter Zijlstra)
  • smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta)
  • locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra)
  • MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski)
  • MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski)
  • platform/x86: wmi: do not fail if disabling fails (Barnabas Pocze)
  • drm/panel-orientation-quirks: add Valve Steam Deck (Simon Ser)
  • Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai) {CVE-2021-3640}
  • drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6 (Hans de Goede)
  • drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1 (Hans de Goede)
  • drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2) (Hans de Goede)
  • dma-buf: WARN on dmabuf release with pending attachments (Charan Teja Reddy)
  • USB: chipidea: fix interrupt deadlock (Johan Hovold)
  • USB: iowarrior: fix control-message timeouts (Johan Hovold)
  • USB: serial: keyspan: fix memleak on probe errors (Wang Hai)
  • iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen)
  • pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang)
  • quota: correct error number in free_dqentry() (Zhang Yi)
  • quota: check block number when reading the block in quota file (Zhang Yi)
  • PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behun)
  • PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behun)
  • PCI: aardvark: Fix reporting Data Link Layer Link Active (Pali Rohar)
  • PCI: aardvark: Do not unmask unused interrupts (Pali Rohar)
  • PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohar)
  • PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohar)
  • PCI: pci-bridge-emul: Fix emulation of W1C bits (Marek Behun)
  • xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross)
  • ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin)
  • ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai)
  • serial: core: Fix initializing and restoring termios speed (Pali Rohar)
  • powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni)
  • can: j1939: j1939_can_recv(): ignore messages with invalid source address (Zhang Changzhong)
  • can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport (Zhang Changzhong)
  • KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Sean Christopherson)
  • power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler)
  • power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak)
  • signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman)
  • signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman)
  • RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad)
  • rsi: Fix module dev_oper_mode parameter description (Marek Vasut)
  • rsi: fix rate mask set leading to P2P failure (Martin Fuzzey)
  • rsi: fix key enabled check causing unwanted encryption for vap_id > 0 (Martin Fuzzey)
  • rsi: fix occasional initialisation failure with BT coex (Martin Fuzzey)
  • wcn36xx: handle connection loss indication (Benjamin Li)
  • libata: fix checking of DMA state (Reimar Doffinger)
  • mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Drebler)
  • wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain)
  • evm: mark evm_fixmode as __ro_after_init (Austin Kim)
  • rtl8187: fix control-message timeouts (Johan Hovold)
  • PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein)
  • ath10k: fix division by zero in send path (Johan Hovold)
  • ath10k: fix control-message timeout (Johan Hovold)
  • ath6kl: fix control-message timeout (Johan Hovold)
  • ath6kl: fix division by zero in send path (Johan Hovold)
  • mwifiex: fix division by zero in fw download path (Johan Hovold)
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger)
  • regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski)
  • regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski)
  • hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss)
  • ia64: kprobes: Fix to pass correct trampoline address to the handler (Masami Hiramatsu)
  • btrfs: call btrfs_check_rw_degradable only if there is a missing device (Anand Jain)
  • btrfs: fix lost error handling when replaying directory deletes (Filipe Manana)
  • btrfs: clear MISSING device status bit in btrfs_close_one_device (Li Zhang)
  • net/smc: Correct spelling mistake to TCPF_SYN_RECV (Wen Gu)
  • nfp: bpf: relax prog rejection for mtu check through max_pkt_offset (Yu Xiao)
  • vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang)
  • r8169: Add device 10ec:8162 to driver r8169 (Janghyub Seo)
  • nvmet-tcp: fix header digest verification (Amit Engel)
  • drm: panel-orientation-quirks: Add quirk for GPD Win3 (Mario)
  • watchdog: Fix OMAP watchdog early handling (Walter Stoll)
  • net: multicast: calculate csum of looped-back and forwarded packets (Cyril Strejc)
  • spi: spl022: fix Microwire full duplex mode (Thomas Perrot)
  • nvmet-tcp: fix a memory leak when releasing a queue (Maurizio Lombardi)
  • bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer)
  • drm: panel-orientation-quirks: Add quirk for Aya Neo 2021 (Bryant Mairs)
  • mmc: winbond: dont build on M68K (Randy Dunlap)
  • reset: socfpga: add empty driver allowing consumers to probe (Pawel Anikiel)
  • ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode (Bastien Roucaries)
  • hyperv/vmbus: include linux/bitops.h (Arnd Bergmann)
  • sfc: Dont use netif_info before net_device setup (Erik Ekman)
  • cavium: Fix return values of the probe function (Zheyu Ma)
  • scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov)
  • scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (Zheyu Ma)
  • cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma)
  • x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson)
  • x86/cpu: Fix migration safety with X86_BUG_NULL_SEL (Jane Malalane)
  • x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c (Tom Lendacky)
  • fuse: fix page stealing (Miklos Szeredi)
  • ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai)
  • ALSA: timer: Fix use-after-free problem (Wang Wensheng)
  • ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim)
  • ALSA: usb-audio: Add registration quirk for JBL Quantum 400 (Alexander Tsoy)
  • ALSA: line6: fix control and interrupt message timeouts (Johan Hovold)
  • ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold)
  • ALSA: ua101: fix division by zero at probe (Johan Hovold)
  • ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED (Kai-Heng Feng)
  • ALSA: hda/realtek: Add quirk for ASUS UX550VE (Takashi Iwai)
  • ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N (Jaroslav Kysela)
  • ALSA: hda/realtek: Add quirk for Clevo PC70HS (Tim Crawford)
  • media: v4l2-ioctl: Fix check_ext_ctrls (Ricardo Ribalda)
  • media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Sean Young)
  • media: ite-cir: IR receiver stop working after receive overflow (Sean Young)
  • crypto: s5p-sss - Add error handling in s5p_aes_probe() (Tang Bin)
  • firmware/psci: fix application of sizeof to pointer (jing yangyang)
  • tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter)
  • parisc: Fix ptrace check on syscall return (Helge Deller)
  • mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Lohle)
  • scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)
  • scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file (Arun Easi)
  • libata: fix read log timeout value (Damien Le Moal)
  • Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)
  • Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang)
  • Input: iforce - fix control-message timeout (Johan Hovold)
  • binder: use cred instead of task for getsecid (Todd Kjos)
  • binder: use cred instead of task for selinux checks (Todd Kjos)
  • binder: use euid from cred instead of using task (Todd Kjos)
  • usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Nehal Bakulchandra Shah)
  • xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman)
  • LTS tag: v5.4.159 (Sherry Yang)
  • rsi: fix control-message timeout (Johan Hovold)
  • media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init (Gustavo A. R. Silva)
  • staging: rtl8192u: fix control-message timeouts (Johan Hovold)
  • staging: r8712u: fix control-message timeout (Johan Hovold)
  • comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold)
  • comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold)
  • comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold)
  • comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold)
  • comedi: dt9812: fix DMA buffers on stack (Johan Hovold)
  • isofs: Fix out of bound access for corrupted isofs image (Jan Kara)
  • printk/console: Allow to disable console output by using console= or console=null (Petr Mladek)
  • binder: dont detect sender/target during buffer cleanup (Todd Kjos)
  • usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren)
  • usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah)
  • usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven)
  • usb: ehci: handshake CMD_RUN instead of STS_HALT (Neal Liu)
  • Revert x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)
  • LTS tag: v5.4.158 (Sherry Yang)
  • ARM: 9120/1: Revert amba: make use of -1 IRQs warn (Wang Kefeng)
  • Revert drm/ttm: fix memleak in ttm_transfered_destroy (Greg Kroah-Hartman)
  • sfc: Fix reading non-legacy supported link modes (Erik Ekman)
  • Revert usb: core: hcd: Add support for deferring roothub registration (Greg Kroah-Hartman)
  • Revert xhci: Set HCD flag to defer primary roothub registration (Greg Kroah-Hartman)
  • media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)
  • net: ethernet: microchip: lan743x: Fix skb allocation failure (Yuiko Oshino)
  • vrf: Revert Reset skb conntrack connection… (Eugene Crosser)
  • scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei)
  • LTS tag: v5.4.157 (Sherry Yang)
  • perf script: Check session->header.env.arch before using it (Song Liu)
  • KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu (Halil Pasic)
  • KVM: s390: clear kicked_mask before sleeping again (Halil Pasic)
  • cfg80211: correct bridge/4addr mode check (Janusz Dziedzic)
  • net: use netif_is_bridge_port() to check for IFF_BRIDGE_PORT (Julian Wiedmann)
  • sctp: add vtag check in sctp_sf_ootb (Xin Long)
  • sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long)
  • sctp: add vtag check in sctp_sf_violation (Xin Long)
  • sctp: fix the processing for COOKIE_ECHO chunk (Xin Long)
  • sctp: fix the processing for INIT_ACK chunk (Xin Long)
  • sctp: use init_tag from inithdr for ABORT chunk (Xin Long)
  • phy: phy_start_aneg: Add an unlocked version (Andrew Lunn)
  • phy: phy_ethtool_ksettings_get: Lock the phy for consistency (Andrew Lunn)
  • net/tls: Fix flipped sign in async_wait.err assignment (Daniel Jordan)
  • net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner)
  • net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent (Yuiko Oshino)
  • net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails (Yuiko Oshino)
  • nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck)
  • RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string (Mark Zhang)
  • net: Prevent infinite while loop in skb_tx_hash() (Michael Chan)
  • net: batman-adv: fix error handling (Pavel Skripkin)
  • regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang)
  • arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node (Clement Besch)
  • RDMA/mlx5: Set user priority for DCT (Patrisious Haddad)
  • nvme-tcp: fix data digest pointer calculation (Varun Prakash)
  • nvmet-tcp: fix data digest pointer calculation (Varun Prakash)
  • IB/hfi1: Fix abba locking issue with sc_disable() (Mike Marciniszyn)
  • IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn)
  • tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function (Liu Jian)
  • drm/ttm: fix memleak in ttm_transfered_destroy (Christian Konig)
  • net: lan78xx: fix division by zero in send path (Johan Hovold)
  • cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() (Johannes Berg)
  • mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen)
  • mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo)
  • mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung)
  • mmc: cqhci: clear HALT state after CQE enable (Wenbin Mei)
  • mmc: vub300: fix control-message timeouts (Johan Hovold)
  • net/tls: Fix flipped sign in tls_err_abort() calls (Daniel Jordan)
  • Revert net: mdiobus: Fix memory leak in __mdiobus_register (Pavel Skripkin)
  • nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski)
  • ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma)
  • Revert pinctrl: bcm: ns: support updated DT binding as syscon subnode (Rafal Milecki)
  • usbnet: fix error return code in usbnet_probe() (Wang Hai)
  • usbnet: sanity check for maxpacket (Oliver Neukum)
  • ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)
  • ipv6: use siphash in rt6_exception_hash() (Eric Dumazet)
  • powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao)
  • ARM: 9141/1: only warn about XIP address when not compile testing (Arnd Bergmann)
  • ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann)
  • ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann)
  • ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)
    [5.4.17-2136.304.2]
  • xfs: only relog deferred intent items if free space in the log gets low (Darrick J. Wong) [Orabug: 33548995]
  • xfs: expose the log push threshold (Darrick J. Wong) [Orabug: 33548995]
  • xfs: periodically relog deferred intent items (Darrick J. Wong) [Orabug: 33548995]
  • xfs: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 33548995]
  • xfs: change the order in which child and parent defer ops are finished (Darrick J. Wong) [Orabug: 33548995]
  • hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: add hugetlb demote page support (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: add demote bool to gigantic page routines (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: add demote hugetlb page sysfs interfaces (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: before freeing hugetlb page set dtor to appropriate value (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: drop ref count earlier after page allocation (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: simplify prep_compound_gigantic_page ref count racing code (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: address ref count racing in prep_compound_gigantic_page (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: remove prep_compound_huge_page cleanup (Mike Kravetz) [Orabug: 33652181]
  • hugetlb: add lockdep_assert_held() calls for hugetlb_lock (Mike Kravetz) [Orabug: 33652181]
  • Revert Revert net/mlx4_core: Add masking for a few queries on HCA caps (Freddy Carrillo) [Orabug: 33666385]
  • uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw) [Orabug: 33730433]
  • rds: ib: Incorporate the stat counter ib_rdma_flush_mr_pool_avoided in the structure rds_ib_stat_names (Praveen Kumar Kannoju) [Orabug: 33742436]
  • memcg: fix use-after-free in uncharge_batch (Michal Hocko) [Orabug: 33752722]
  • xfs: force the log offline when log intent item recovery fails (Darrick J. Wong) [Orabug: 33757272]
  • xfs: cancel intents immediately if process_intents fails (Darrick J. Wong) [Orabug: 33757272]
    [5.4.17-2136.304.1]
  • xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33745420] {CVE-2021-4155}
  • Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo) [Orabug: 33406414] {CVE-2021-3752}
  • x86/mce: Correct the detection of invalid notifier priorities (Zhen Lei) [Orabug: 33427594]
  • x86/mce/dev-mcelog: Do not update kflags on AMD systems (Smita Koralahalli) [Orabug: 33427594]
  • x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam) [Orabug: 33427594]
  • RAS/CEC: Fix cec_init() prototype (Luca Stefani) [Orabug: 33427594]
  • EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam) [Orabug: 33427594]
  • x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli) [Orabug: 33427594]
  • x86/mce/dev-mcelog: Fix -Wstringop-truncation warning about strncpy() (Tony Luck) [Orabug: 33427594]
  • x86/mce: Drop bogus comment about mce.kflags (Tony Luck) [Orabug: 33427594]
  • EDAC: Drop the EDAC report status checks (Tony Luck) [Orabug: 33427594]
  • x86/mce: Add mce=print_all option (Tony Luck) [Orabug: 33427594]
  • x86/mce: Change default MCE logger to check mce->kflags (Tony Luck) [Orabug: 33427594]
  • x86/mce: Fix all mce notifiers to update the mce->kflags bitmask (Tony Luck) [Orabug: 33427594]
  • x86/mce: Add a struct mce.kflags field (Tony Luck) [Orabug: 33427594]
  • x86/mce: Convert the CEC to use the MCE notifier (Tony Luck) [Orabug: 33427594]
  • x86/mce: Rename first function as early (Tony Luck) [Orabug: 33427594]
  • x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov) [Orabug: 33427594]
  • x86/mce/dev-mcelog: Dynamically allocate space for machine check records (Tony Luck) [Orabug: 33427594]
  • EDAC/mc: Determine mci pointer from the error descriptor (Robert Richter) [Orabug: 33427594]
  • EDAC: Store error type in struct edac_raw_error_desc (Robert Richter) [Orabug: 33427594]
  • x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schonherr) [Orabug: 33427594]
  • EDAC: Unify the mc_event tracepoint call (Robert Richter) [Orabug: 33427594]
  • EDAC/ghes: Remove intermediate buffer pvt->detail_location (Robert Richter) [Orabug: 33427594]
  • xfs: fix an incore inode UAF in xfs_bui_recover (Darrick J. Wong) [Orabug: 33541225]
  • xfs: clean up xfs_bui_item_recover iget/trans_alloc/ilock ordering (Darrick J. Wong) [Orabug: 33541225]
  • xfs: clean up bmap intent item recovery checking (Darrick J. Wong) [Orabug: 33541225]
  • x86/ioremap: Map EFI-reserved memory as encrypted for SEV (Tom Lendacky) [Orabug: 33547490]
  • efi/mokvar: Reserve the table only if it is in boot services data (Borislav Petkov) [Orabug: 33547490]
  • efi: mokvar: add missing include of asm/early_ioremap.h (Ard Biesheuvel) [Orabug: 33547490]
  • efi: mokvar-table: fix some issues in new code (Ard Biesheuvel) [Orabug: 33547490]
  • efi: Support for MOK variable config table (Lenny Szubowicz) [Orabug: 33547490]
  • efi: Rename arm-init to efi-init common for all arch (Atish Patra) [Orabug: 33547490]
  • uek-rpm: Update ol7 locklist with fnic symbols (John Donnelly) [Orabug: 33590906]
  • uek-rpm: Update ol8 locklist with fnic symbols (John Donnelly) [Orabug: 33590906]
  • rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge) [Orabug: 33616020]
  • net/mlx4: fix non-determinism when comp_vector is zero (Hakon Bugge) [Orabug: 33616020]
  • net/mlx5: fix non-determinism when comp_vector is zero (Hakon Bugge) [Orabug: 33616020]
  • IB/core: Introduce IB_CQ_FORCE_ZERO_CV (Hakon Bugge) [Orabug: 33616020]
  • Revert net/mlx{4,5}: Fix signed formal parameter (Hakon Bugge) [Orabug: 33616020]
  • Revert net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Hakon Bugge) [Orabug: 33616020]
  • Revert rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge) [Orabug: 33616020]
  • mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan) [Orabug: 33646165]
  • mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan) [Orabug: 33646165]
  • Revert io_uring: reinforce cancel on flush during exit (Lee Jones) [Orabug: 33687075]
  • scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy) [Orabug: 33731040]
  • ocfs2: fix data corruption on truncate (Jan Kara) [Orabug: 33740343]
    [5.4.17-2136.303.3]
  • xfs: xfs_defer_capture should absorb remaining transaction reservation (Darrick J. Wong) [Orabug: 33520061]
  • xfs: xfs_defer_capture should absorb remaining block reservations (Darrick J. Wong) [Orabug: 33520061]
  • xfs: proper replay of deferred ops queued during log recovery (Darrick J. Wong) [Orabug: 33520061]
  • xfs: attach inode to dquot in xfs_bui_item_recover (Darrick J. Wong) [Orabug: 33520061]
  • xfs: log new intent items created as part of finishing recovered intent items (Darrick J. Wong) [Orabug: 33520061]
  • xfs: spell out the parameter name for ->cancel_item (Christoph Hellwig) [Orabug: 33520061]
  • xfs: use a xfs_btree_cur for the ->finish_cleanup state (Christoph Hellwig) [Orabug: 33520061]
  • xfs: turn dfp_done into a xfs_log_item (Christoph Hellwig) [Orabug: 33520061]
  • xfs: refactor xfs_defer_finish_noroll (Christoph Hellwig) [Orabug: 33520061]
  • xfs: turn dfp_intent into a xfs_log_item (Christoph Hellwig) [Orabug: 33520061]
  • xfs: merge the ->diff_items defer op into ->create_intent (Christoph Hellwig) [Orabug: 33520061]
  • xfs: merge the ->log_item defer op into ->create_intent (Christoph Hellwig) [Orabug: 33520061]
  • xfs: factor out a xfs_defer_create_intent helper (Christoph Hellwig) [Orabug: 33520061]
  • sched: Fix Core-wide rq->lock for uninitialized CPUs (Peter Zijlstra) [Orabug: 33568834]
  • admin-guide/hw-vuln: Rephrase a section of core-scheduling.rst (Fabio M. De Francesco) [Orabug: 33568834]
  • Documentation: Add usecases, design and interface for core scheduling (Joel Fernandes (Google)) [Orabug: 33568834]
  • kselftest: Add test for core sched prctl interface (Chris Hyser) [Orabug: 33568834]
  • sched: prctl() core-scheduling interface (Chris Hyser) [Orabug: 33568834]
  • sched: Inherit task cookie on fork() (Peter Zijlstra) [Orabug: 33568834]
  • sched: Trivial core scheduling cookie management (Peter Zijlstra) [Orabug: 33568834]
  • sched: Migration changes for core scheduling (Aubrey Li) [Orabug: 33568834]
  • sched: Trivial forced-newidle balancer (Peter Zijlstra) [Orabug: 33568834]
  • sched/fair: Snapshot the min_vruntime of CPUs on force idle (Joel Fernandes (Google)) [Orabug: 33568834]
  • sched: Fix priority inversion of cookied task with sibling (Joel Fernandes (Google)) [Orabug: 33568834]
  • sched/fair: Fix forced idle sibling starvation corner case (Vineeth Pillai) [Orabug: 33568834]
  • sched: Add core wide task selection and scheduling (Peter Zijlstra) [Orabug: 33568834]
  • sched: Basic tracking of matching tasks (Peter Zijlstra) [Orabug: 33568834]
  • sched: Introduce sched_class::pick_task() (Peter Zijlstra) [Orabug: 33568834]
  • sched: Allow sched_core_put() from atomic context (Peter Zijlstra) [Orabug: 33568834]
  • sched: Optimize rq_lockp() usage (Peter Zijlstra) [Orabug: 33568834]
  • sched: Core-wide rq->lock (Peter Zijlstra) [Orabug: 33568834]
  • sched: Prepare for Core-wide rq->lock (Peter Zijlstra) [Orabug: 33568834]
  • sched: Wrap rq::lock access (Peter Zijlstra) [Orabug: 33568834]
  • sched: Provide raw_spin_rq_lock() helpers (Peter Zijlstra) [Orabug: 33568834]
  • sched/fair: Add a few assertions (Peter Zijlstra) [Orabug: 33568834]
  • sched: Extract the task putting code from pick_next_task() (Chen Yu) [Orabug: 33568834]
  • rss_stat: add support to detect RSS updates of external mm (Joel Fernandes (Google)) [Orabug: 33568834]
  • Revert sched: Wrap rq::lock access (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Introduce sched_class::pick_task() (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Core-wide rq->lock (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched/fair: Add a few assertions (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Basic tracking of matching tasks (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Update core scheduler queue when taking cpu online/offline (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Add core wide task selection and scheduling. (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched/fair: wrapper for cfs_rq->min_vruntime (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched/fair: core wide vruntime comparison (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Trivial forced-newidle balancer (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: migration changes for core scheduling (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: cgroup tagging interface for core scheduling (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Cleanup kABI (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched: Enable disabling via CONFIG_SCHED_CORE (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched/core: remove undesired trace_printk from core scheduling backport (Kamalesh Babulal) [Orabug: 33568834]
  • Revert sched/core: cleanup kABI for struct rq (Kamalesh Babulal) [Orabug: 33568834]
  • RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib) [Orabug: 33615342]
  • xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong) [Orabug: 33676190]
  • fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679803] {CVE-2021-0920}
    [5.4.17-2136.303.2]
  • atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen) [Orabug: 33594983] {CVE-2021-43975}
  • RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry) [Orabug: 33620311]
  • rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug: 33652503]
  • sched: Mitigate increased latencies for sysctl_sched_wakeup_granularity. (chris hyser) [Orabug: 33107207]
  • net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan) [Orabug: 33585475]
  • proc: allow pid_revalidate() during LOOKUP_RCU (Stephen Brennan) [Orabug: 33647511]
  • selinux: slow_avc_audit has become non-blocking (Al Viro) [Orabug: 33647511]
  • make dump_common_audit_data() safe to be called from RCU pathwalk (Al Viro) [Orabug: 33647511]
  • new helper: d_find_alias_rcu() (Al Viro) [Orabug: 33647511]
    [5.4.17-2136.303.1]
  • Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty) [Orabug: 33642850]
  • ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna) [Orabug: 33501676]
  • net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann) [Orabug: 33520710]
  • cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich) [Orabug: 33542895]
  • uek-rpm: Add ktime_get_coarse_ts64 to KABI (John Donnelly) [Orabug: 33557973]
  • EDAC/i10nm: Add detection of memory levels for ICX/SPR servers (Qiuxu Zhuo) [Orabug: 33585319]
  • EDAC/skx_common: Add new ADXL components for 2-level memory (Qiuxu Zhuo) [Orabug: 33585319]
  • EDAC, skx_common: Refactor so that we initialize dev in result of adxl decode. (Tony Luck) [Orabug: 33585319]
  • net/rds: Dont pummel the subnet-manager (Gerd Rausch) [Orabug: 33589566]
  • rds: ib: Ack seq not always received in monotonic increasing order (Hakon Bugge) [Orabug: 33599862]
  • rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju) [Orabug: 33619953]
    [5.4.17-2136.303.0]
  • LTS tag: v5.4.156 (Jack Vogel)
  • pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() (Fabien Dessenne)
  • ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (Nick Desaulniers)
  • tracing: Have all levels of checks prevent recursion (Steven Rostedt (VMware))
  • net: mdiobus: Fix memory leak in __mdiobus_register (Yanfei Xu)
  • Input: snvs_pwrkey - add clk handling (Uwe Kleine-Konig)
  • ALSA: hda: avoid write to STATESTS if controller is in reset (Kai Vehmanen)
  • platform/x86: intel_scu_ipc: Update timeout value in comment (Prashant Malani)
  • isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma)
  • ARM: dts: spear3xx: Fix gmac node (Herve Codina)
  • net: stmmac: add support for dwmac 3.40a (Herve Codina)
  • btrfs: deal with errors when checking if a dir entry exists during log replay (Filipe Manana)
  • gcc-plugins/structleak: add makefile var for disabling structleak (Brendan Higgins)
  • selftests: netfilter: remove stray bash debug line (Florian Westphal)
  • netfilter: Kconfig: use default y instead of m for bool config option (Vegard Nossum)
  • isdn: cpai: check ctr->cnr to avoid array index out of bound (Xiaolong Huang)
  • nfc: nci: fix the UAF of rf_conn_info object (Lin Ma)
  • mm, slub: fix potential memoryleak in kmem_cache_open() (Miaohe Lin)
  • mm, slub: fix mismatch between reconstructed freelist depth and cnt (Miaohe Lin)
  • powerpc/idle: Dont corrupt back chain when going idle (Michael Ellerman)
  • KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (Michael Ellerman)
  • KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() (Michael Ellerman)
  • powerpc64/idle: Fix SP offsets when saving GPRs (Christopher M. Riedl)
  • audit: fix possible null-pointer dereference in audit_filter_rules (Gaosheng Cui)
  • ASoC: DAPM: Fix missing kctl change notifications (Takashi Iwai)
  • ALSA: hda/realtek: Add quirk for Clevo PC50HS (Steven Clarkson)
  • ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (Brendan Grieve)
  • vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle))
  • elfcore: correct reference to CONFIG_UML (Lukas Bulwahn)
  • ocfs2: mount fails with buffer overflow in strlen (Valentin Vidic)
  • ocfs2: fix data corruption after conversion from inline format (Jan Kara)
  • ceph: fix handling of meta errors (Jeff Layton)
  • can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes (Zhang Changzhong)
  • can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length (Zhang Changzhong)
  • can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ziyang Xuan)
  • can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer (Ziyang Xuan)
  • can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma)
  • can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (Stephane Grosjean)
  • can: rcar_can: fix suspend/resume (Yoshihiro Shimoda)
  • net: enetc: fix ethtool counter name for PM0_TERR (Vladimir Oltean)
  • net: stmmac: Fix E2E delay mechanism (Kurt Kanzenbach)
  • net: hns3: disable sriov before unload hclge layer (Peng Li)
  • net: hns3: add limit ets dwrr bandwidth cannot be 0 (Guangbin Huang)
  • net: hns3: reset DWRR of unused tc to zero (Guangbin Huang)
  • NIOS2: irqflags: rename a redefined register name (Randy Dunlap)
  • net: dsa: lantiq_gswip: fix register definition (Aleksander Jan Bajkowski)
  • lan78xx: select CRC32 (Vegard Nossum)
  • netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart)
  • ASoC: wm8960: Fix clock configuration on slave mode (Shengjiu Wang)
  • dma-debug: fix sg checks in debug_dma_map_sg() (Gerald Schaefer)
  • NFSD: Keep existing listeners on portlist error (Benjamin Coddington)
  • xtensa: xtfpga: Try software restart before simulating CPU reset (Guenter Roeck)
  • xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (Max Filippov)
  • ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (Eugen Hristev)
  • tee: optee: Fix missing devices unregister during optee_remove (Sumit Garg)
  • net: switchdev: do not propagate bridge updates across bridges (Russell King)
  • parisc: math-emu: Fix fall-through warnings (Helge Deller)
  • LTS tag: v5.4.155 (Jack Vogel)
  • ionic: dont remove netdev->dev_addr when syncing uc list (Shannon Nelson)
  • r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum)
  • qed: Fix missing error code in qed_slowpath_start() (chongjiapeng)
  • mqprio: Correct stats in mqprio_dump_class_stats(). (Sebastian Andrzej Siewior)
  • acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu)
  • drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter)
  • drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() (Dan Carpenter)
  • drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King)
  • drm/panel: olimex-lcd-olinuxino: select CRC32 (Vegard Nossum)
  • platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (Vadim Pasternak)
  • mlxsw: thermal: Fix out-of-bounds memory accesses (Ido Schimmel)
  • ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() (Wang Hai)
  • pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter)
  • NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan)
  • NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan)
  • nfc: fix error handling of nfc_proto_register() (Ziyang Xuan)
  • ethernet: s2io: fix setting mac address during resume (Arnd Bergmann)
  • net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun)
  • net: stmmac: fix get_hw_feature() on old hardware (Herve Codina)
  • net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp (Aya Levin)
  • net: korina: select CRC32 (Vegard Nossum)
  • net: arc: select CRC32 (Vegard Nossum)
  • gpio: pca953x: Improve bias setting (Andy Shevchenko)
  • iio: dac: ti-dac5571: fix an error code in probe() (Dan Carpenter)
  • iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter)
  • iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter)
  • iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N)
  • iio: mtk-auxadc: fix case IIO_CHAN_INFO_PROCESSED (Hui Liu)
  • iio: adc128s052: Fix the error handling path of adc128_probe() (Christophe JAILLET)
  • iio: adc: aspeed: set driver data when adc probe. (Billy Tsai)
  • powerpc/xive: Discard disabled interrupts in get_irqchip_state() (Cedric Le Goater)
  • x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov)
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd)
  • EDAC/armada-xp: Fix output of uncorrectable error counter (Hans Potsch)
  • virtio: write back F_VERSION_1 before validate (Halil Pasic)
  • USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc)
  • USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas)
  • USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang)
  • USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado)
  • Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen)
  • usb: musb: dsps: Fix the probe error path (Miquel Raynal)
  • efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua)
  • efi/cper: use stack buffer for error record decoding (Ard Biesheuvel)
  • cb710: avoid NULL pointer subtraction (Arnd Bergmann)
  • xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov)
  • xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti)
  • xhci: guard accesses to ep_state in xhci_endpoint_reset() (Jonathan Bell)
  • mei: me: add Ice Lake-N device id. (Andy Shevchenko)
  • x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (James Morse)
  • watchdog: orion: use 0 for unset heartbeat (Chris Packham)
  • btrfs: check for error when looking up inode during dir entry replay (Filipe Manana)
  • btrfs: deal with errors when adding inode reference during log replay (Filipe Manana)
  • btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana)
  • btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)
  • csky: Fixup regs.sr broken in ptrace (Guo Ren)
  • csky: dont let sigreturn play with priveleged bits of status register (Al Viro)
  • s390: fix strrchr() implementation (Roberto Sassu)
  • nds32/ftrace: Fix Error: invalid operands (UND and UND sections) for ^ (Steven Rostedt)
  • ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)
  • ALSA: hda/realtek - ALC236 headset MIC recording issue (Kailang Yang)
  • ALSA: hda/realtek: Add quirk for Clevo X170KM-G (Werner Sembach)
  • ALSA: hda/realtek: Complete partial device name to avoid ambiguity (Werner Sembach)
  • ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai)
  • ALSA: usb-audio: Add quirk for VF0770 (Jonas Hahnfeld)
  • ovl: simplify file splice (Miklos Szeredi)
  • LTS tag: v5.4.154 (Jack Vogel)
  • sched: Always inline is_percpu_thread() (Peter Zijlstra)
  • scsi: virtio_scsi: Fix spelling mistake Unsupport -> Unsupported (Colin Ian King)
  • scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong)
  • drm/amdgpu: fix gart.bo pin_count leak (Leslie Shi)
  • net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap)
  • mac80211: check return value of rhashtable_init (MichelleJin)
  • net: prevent user from passing illegal stab size
  • m68k: Handle arrivals of multiple signals correctly (Al Viro)
  • mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing)
  • netfilter: nf_nat_masquerade: defer conntrack walk to work queue (Florian Westphal)
  • netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic (Florian Westphal)
  • HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs (Joshua-Dickens)
  • netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden)
  • HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori)
  • ext4: correct the error path of ext4_write_inline_data_end() (Zhang Yi)
  • net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli)
  • LTS tag: v5.4.153 (Jack Vogel)
  • x86/Kconfig: Correct reference to MWINCHIP3D (Lukas Bulwahn)
  • x86/hpet: Use another crystalball to evaluate HPET usability (Thomas Gleixner)
  • x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI (Lukas Bulwahn)
  • RISC-V: Include clone3() on rv32 (Palmer Dabbelt)
  • bpf, s390: Fix potential memory leak about jit_data (Tiezhu Yang)
  • i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles)
  • net: prefer socket bound to interface when not in VRF (Mike Manning)
  • i40e: Fix freeing of uninitialized misc IRQ vector (Sylwester Dziedziuch)
  • i40e: fix endless loop under rtnl (Jiri Benc)
  • gve: fix gve_get_stats() (Eric Dumazet)
  • rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet)
  • gve: Correct available tx qpl check (Catherine Sullivan)
  • drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang)
  • video: fbdev: gbefb: Only instantiate device when built for IP32 (Mark Brown)
  • bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 (Tony Lindgren)
  • netlink: annotate data races around nlk->bound (Eric Dumazet)
  • net: sfp: Fix typo in state machine debug string (Sean Anderson)
  • net/sched: sch_taprio: properly cancel timer from taprio_destroy() (Eric Dumazet)
  • net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet)
  • ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel)
  • arm64: dts: ls1028a: add missing CAN nodes (Michael Walle)
  • arm64: dts: freescale: Fix SP805 clock-names (Andre Przywara)
  • ptp_pch: Load module automatically if ID matches (Andy Shevchenko)
  • powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohar)
  • net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet)
  • phy: mdio: fix memory leak (Pavel Skripkin)
  • bpf, arm: Fix register clobbering in div/mod implementation (Johan Almbladh)
  • xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov)
  • xtensa: use CONFIG_USE_OF instead of CONFIG_OF (Randy Dunlap)
  • xtensa: move XCHAL_KIO_* definitions to kmem_layout.h (Max Filippov)
  • arm64: dts: qcom: pm8150: use qcom,pm8998-pon binding (Dmitry Baryshkov)
  • ARM: dts: imx: Fix USB host power regulator polarity on M53Menlo (Marek Vasut)
  • ARM: dts: imx: Add missing pinctrl-names for panel on M53Menlo (Marek Vasut)
  • soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment (Shawn Guo)
  • ARM: dts: qcom: apq8064: Use 27MHz PXO clock as DSI PLL reference (Marijn Suijten)
  • soc: qcom: socinfo: Fixed argument passed to platform_set_data() (Antonio Martorana)
  • bpf, mips: Validate conditional branch offsets (Piotr Krysiuk)
  • MIPS: BPF: Restore MIPS32 cBPF JIT (Paul Burton)
  • ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg)
  • ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros)
  • xen/balloon: fix cancelled balloon action (Juergen Gross)
  • nfsd4: Handle the NFSv4 READDIR dircount hint being zero (Trond Myklebust)
  • nfsd: fix error handling of register_pernet_subsys() in init_nfsd() (Patrick Ho)
  • ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)
  • mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk (Neil Armstrong)
  • xen/privcmd: fix error handling in mmap-resource processing (Jan Beulich)
  • usb: typec: tcpm: handle SRC_STARTUP state if cc changes (Xu Yang)
  • USB: cdc-acm: fix break reporting (Johan Hovold)
  • USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold)
  • Partially revert usb: Kconfig: using select for USB_COMMON dependency (Ben Hutchings)

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C