# changelog

author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.1.el7uek]
changelog:
  - uek-rpm: config-aarch-embedded2 add missing networking options (Thomas Tai)  [Orabug: 32961737]  
  - uek-rpm: config-aarch-embedded2 update for networking options (Thomas Tai)  [Orabug: 32961737]  
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926881]  
  - net/rds: Passive connections always yield (Gerd Rausch)  [Orabug: 32925131]  
  - mm, vmstat: drop zone->lock in /proc/pagetypeinfo (Stephen Brennan)  [Orabug: 32921246]  
  - net/rds: Prevent the cm_id from being pulled right under our feet (Gerd Rausch)  [Orabug: 32908885]  
  - Linux 4.14.216 (Greg Kroah-Hartman)   
  - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet (Vasily Averin)   
  - block: fix use-after-free in disk_part_iter_next (Ming Lei)   
  - KVM: arm64: Don't access PMCR_EL0 when no PMU is available (Marc Zyngier)   
  - wan: ds26522: select CONFIG_BITREVERSE (Arnd Bergmann)   
  - net/mlx5e: Fix two double free cases (Dinghao Liu)   
  - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (Dinghao Liu)   
  - iommu/intel: Fix memleak in intel_irq_remapping_alloc (Dinghao Liu)   
  - block: rsxx: select CONFIG_CRC32 (Arnd Bergmann)   
  - wil6210: select CONFIG_CRC32 (Arnd Bergmann)   
  - dmaengine: xilinx_dma: fix mixed_enum_type coverity warning (Shravya Kumbham)   
  - dmaengine: xilinx_dma: check dma_async_device_register return value (Shravya Kumbham)   
  - spi: stm32: FIFO threshold level - fix align packet size (Roman Guskov)   
  - cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() (Colin Ian King)   
  - i2c: sprd: use a specific timeout to avoid system hang up issue (Chunyan Zhang)   
  - ARM: OMAP2+: omap_device: fix idling of devices during probe (Andreas Kemnade)   
  - iio: imu: st_lsm6dsx: fix edge-trigger interrupts (Lorenzo Bianconi)   
  - iio: imu: st_lsm6dsx: flip irq return logic (Sean Nyekjaer)   
  - spi: pxa2xx: Fix use-after-free on unbind (Lukas Wunner)   
  - ubifs: wbuf: Don't leak kernel memory to flash (Richard Weinberger)   
  - drm/i915: Fix mismatch between misplaced vma check and vma insert (Chris Wilson)   
  - vmlinux.lds.h: Add PGO and AutoFDO input sections (Nick Desaulniers)   
  - x86/resctrl: Don't move a task to the same resource group (Fenghua Yu)   
  - x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR (Fenghua Yu)   
  - net: fix pmtu check in nopmtudisc mode (Florian Westphal)   
  - net: ip: always refragment ip defragmented packets (Florian Westphal)   
  - net: vlan: avoid leaks on register_vlan_dev() failures (Jakub Kicinski)   
  - net: cdc_ncm: correct overhead in delayed_ndp_size (Jouni K. Seppänen)   
  - powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at (Mathieu Desnoyers)   
  - Linux 4.14.215 (Greg Kroah-Hartman)   
  - KVM: x86: fix shift out of bounds reported by UBSAN (Paolo Bonzini)   
  - x86/mtrr: Correct the range check before performing MTRR type lookups (Ying-Tsun Huang)   
  - netfilter: xt_RATEEST: reject non-null terminated string from userspace (Florian Westphal)   
  - netfilter: ipset: fix shift-out-of-bounds in htable_bits() (Vasily Averin)   
  - Revert "device property: Keep secondary firmware node secondary by type" (Bard Liao)   
  - ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 (Kailang Yang)   
  - ALSA: hda/conexant: add a new hda codec CX11970 (bo liu)   
  - x86/mm: Fix leak of pmd ptlock (Dan Williams)   
  - USB: serial: keyspan_pda: remove unused variable (Johan Hovold)   
  - usb: gadget: configfs: Fix use-after-free issue with udc_name (Eddie Hung)   
  - usb: gadget: configfs: Preserve function ordering after bind failure (Chandana Kishori Chiluveru)   
  - usb: gadget: Fix spinlock lockup on usb_function_deactivate (Sriharsha Allenki)   
  - USB: gadget: legacy: fix return error code in acm_ms_bind() (Yang Yingliang)   
  - usb: gadget: function: printer: Fix a memory leak for interface descriptor (Zqiang)   
  - usb: gadget: f_uac2: reset wMaxPacketSize (Jerome Brunet)   
  - usb: gadget: select CONFIG_CRC32 (Arnd Bergmann)   
  - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks (Takashi Iwai)   
  - USB: usblp: fix DMA to stack (Johan Hovold)   
  - USB: yurex: fix control-URB timeout handling (Johan Hovold)   
  - USB: serial: option: add Quectel EM160R-GL (Bjørn Mork)   
  - USB: serial: option: add LongSung M5710 module support (Daniel Palmer)   
  - USB: serial: iuu_phoenix: fix DMA from stack (Johan Hovold)   
  - usb: uas: Add PNY USB Portable SSD to unusual_uas (Thinh Nguyen)   
  - usb: usbip: vhci_hcd: protect shift size (Randy Dunlap)   
  - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set (Michael Grzeschik)   
  - usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() (Yu Kuai)   
  - usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion (Serge Semin)   
  - USB: cdc-acm: blacklist another IR Droid device (Sean Young)   
  - usb: gadget: enable super speed plus (taehyun.cho)   
  - crypto: ecdh - avoid buffer overflow in ecdh_set_secret() (Ard Biesheuvel)   
  - net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE (Florian Fainelli)   
  - net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (Stefan Chulski)   
  - net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart)   
  - net: sched: prevent invalid Scell_log shift count (Randy Dunlap)   
  - vhost_net: fix ubuf refcount incorrectly when sendmsg fails (Yunjian Wang)   
  - net: usb: qmi_wwan: add Quectel EM160R-GL (Bjørn Mork)   
  - CDC-NCM: remove "connected" log message (Roland Dreier)   
  - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (Xie He)   
  - net: hns: fix return value check in __lb_other_process() (Yunjian Wang)   
  - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() (Guillaume Nault)   
  - net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (Grygorii Strashko)   
  - net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart)   
  - net: ethernet: Fix memleak in ethoc_probe (Dinghao Liu)   
  - net/ncsi: Use real net-device for response handler (John Wang)   
  - virtio_net: Fix recursive call to cpus_read_lock() (Jeff Dike)   
  - qede: fix offload for IPIP tunnel packets (Manish Chopra)   
  - atm: idt77252: call pci_disable_device() on error path (Dan Carpenter)   
  - ethernet: ucc_geth: set dev->max_mtu to 1518 (Rasmus Villemoes)   
  - ethernet: ucc_geth: fix use-after-free in ucc_geth_remove() (Rasmus Villemoes)   
  - depmod: handle the case of /sbin/depmod without /sbin in PATH (Linus Torvalds)   
  - lib/genalloc: fix the overflow when size is too big (Huang Shijie)   
  - scsi: ide: Do not set the RQF_PREEMPT flag for sense requests (Bart Van Assche)   
  - scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() (Adrian Hunter)   
  - workqueue: Kick a worker based on the actual activation of delayed works (Yunfeng Ye)   
  - kbuild: don't hardcode depmod path (Dominique Martinet)   
  - Linux 4.14.214 (Greg Kroah-Hartman)   
  - iio:magnetometer:mag3110: Fix alignment and data leak issues. (Jonathan Cameron)   
  - iio:imu:bmi160: Fix alignment and data leak issues (Jonathan Cameron)   
  - kdev_t: always inline major/minor helper functions (Josh Poimboeuf)   
  - dm verity: skip verity work if I/O error when system is shutting down (Hyeongseok Kim)   
  - ALSA: pcm: Clear the full allocated memory at hw_params (Takashi Iwai)   
  - module: delay kobject uevent until after module init call (Jessica Yu)   
  - powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe() (Qinglang Miao)   
  - quota: Don't overflow quota file offsets (Jan Kara)   
  - module: set MODULE_STATE_GOING state when a module fails to load (Miroslav Benes)   
  - rtc: sun6i: Fix memleak in sun6i_rtc_clk_init (Dinghao Liu)   
  - ALSA: seq: Use bool for snd_seq_queue internal flags (Takashi Iwai)   
  - media: gp8psk: initialize stats at power control logic (Mauro Carvalho Chehab)   
  - misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() (Anant Thazhemadam)   
  - reiserfs: add check for an invalid ih_entry_count (Rustam Kovhaev)   
  - of: fix linker-section match-table corruption (Johan Hovold)   
  - uapi: move constants from <linux/kernel.h> to <linux/const.h> (Petr Vorel)   
  - powerpc/bitops: Fix possible undefined behaviour with fls() and fls64() (Christophe Leroy)   
  - USB: serial: digi_acceleport: fix write-wakeup deadlocks (Johan Hovold)   
  - s390/dasd: fix hanging device offline processing (Stefan Haberland)   
  - vfio/pci: Move dummy_resources_list init in vfio_pci_probe() (Eric Auger)   
  - mm: memcontrol: implement lruvec stat functions on top of each other (Johannes Weiner)   
  - mm: memcontrol: eliminate raw access to stat and event counters (Johannes Weiner)   
  - ALSA: usb-audio: fix sync-ep altsetting sanity check (Johan Hovold)   
  - ALSA: usb-audio: simplify set_sync_ep_implicit_fb_quirk (Alberto Aguirre)   
  - ALSA: hda/ca0132 - Fix work handling in delayed HP detection (Takashi Iwai)   
  - md/raid10: initialize r10_bio->read_slot before use. (Kevin Vigor)   
  - x86/entry/64: Add instruction suffix (Jan Beulich)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.2.el7uek]
changelog:
  - KVM: x86: Consider LAPIC TSC-Deadline timer expired if deadline too short (Liran Alon)  [Orabug: 32992668]  
  - secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly)  [Orabug: 32982947]  
  - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)  [Orabug: 32977843]  
  - ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)  [Orabug: 32977843]  
  - uek-rpm: update kABI lists for a new symbol (Saeed Mirzamohammadi)  [Orabug: 32965746]  
  - {net, IB}/mlx4: Initialize CQ buffers in the driver when possible (Daniel Jurgens)  [Orabug: 32913303]  
  - bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912035]  {CVE-2021-32399} 
  - IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge)  [Orabug: 32816367]  
  - RDMA/mlx4: Enable querying AH for XRC QP types (Avihai Horon)  [Orabug: 32568907]  
  - RDMA/mlx5: Enable querying AH for XRC QP types (Avihai Horon)  [Orabug: 32568907]  
  - uek-rpm: add missing ARM_SPE_PMU for aarch64 (Russell King)  [Orabug: 27825982]  
  - Revert "drivers/perf: arm_spe_pmu does not build as a module" (Tom Saeger)  [Orabug: 27825982]  
  - perf: arm_spe: Enable ACPI/Platform automatic module loading (Jeremy Linton)  [Orabug: 27825982]  
  - arm_pmu: acpi: spe: Add initial MADT/SPE probing (Jeremy Linton)  [Orabug: 27825982]  
  - ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens (Jeremy Linton)  [Orabug: 27825982]  
  - ACPI/PPTT: Modify node flag detection to find last IDENTICAL (Jeremy Linton)  [Orabug: 27825982]  
  - drivers/perf: arm_spe: Don't error on high-order pages for aux buf (Will Deacon)  [Orabug: 27825982]  
  - ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags (Erik Schmauss)  [Orabug: 27825982]  
  - ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC (Erik Schmauss)  [Orabug: 27825982]  
  - perf: arm_spe: handle devm_kasprintf() failure (Nicholas Mc Guire)  [Orabug: 27825982]  
  - perf: arm_spe: Enable automatic DT loading (Jeremy Linton)  [Orabug: 27825982]  
  - drivers/perf: Initialise return value in armpmu_request_irqs() (Will Deacon)  [Orabug: 27825982]  
  - ACPI / PPTT: use ACPI ID whenever ACPI_PPTT_ACPI_PROCESSOR_ID_VALID is set (Sudeep Holla)  [Orabug: 27825982]  
  - ACPI / PPTT: fix build when CONFIG_ACPI_PPTT is not enabled (Sudeep Holla)  [Orabug: 27825982]  
  - arm_pmu: Use disable_irq_nosync when disabling SPI in CPU teardown hook (Will Deacon)  [Orabug: 27825982]  
  - ACPICA: Restructure ACPI table files (Erik Schmauss)  [Orabug: 27825982]  
  - arm_pmu: acpi: request IRQs up-front (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: note IRQs and PMUs per-cpu (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: explicitly enable/disable SPIs at hotplug (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: acpi: check for mismatched PPIs (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: add armpmu_alloc_atomic() (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: fold platform helpers into platform code (Mark Rutland)  [Orabug: 27825982]  
  - arm_pmu: kill arm_pmu_platdata (Mark Rutland)  [Orabug: 27825982]  
  - arm/arm64: pmu: Distinguish percpu irq and percpu_devid irq (Julien Thierry)  [Orabug: 27825982]  
  - irqdesc: Add function to identify percpu_devid irqs (Julien Thierry)  [Orabug: 27825982]  
  - perf/core: Export AUX buffer helpers to modules (Will Deacon)  [Orabug: 27825982]  
  - genirq: export irq_get_percpu_devid_partition to modules (Will Deacon)  [Orabug: 27825982]  
  - Linux 4.14.219 (Greg Kroah-Hartman)   
  - tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN (Pengcheng Yang)   
  - team: protect features update by RCU to avoid deadlock (Ivan Vecera)   
  - NFC: fix possible resource leak (Pan Bian)   
  - NFC: fix resource leak when target index is invalid (Pan Bian)   
  - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)   
  - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)   
  - x86/entry/64/compat: Fix "x86/entry/64/compat: Preserve r8-r11 in int $0x80" (Andy Lutomirski)   
  - x86/entry/64/compat: Preserve r8-r11 in int $0x80 (Andy Lutomirski)   
  - can: dev: prevent potential information leak in can_fill_info() (Dan Carpenter)   
  - mac80211: pause TX while changing interface type (Johannes Berg)   
  - iwlwifi: pcie: reschedule in long-running memory reads (Johannes Berg)   
  - iwlwifi: pcie: use jiffies for memory read spin time limit (Johannes Berg)   
  - RDMA/cxgb4: Fix the reported max_recv_sge value (Kamal Heib)   
  - xfrm: Fix oops in xfrm_replay_advance_bmp (Shmulik Ladkani)   
  - netfilter: nft_dynset: add timeout extension to template (Pablo Neira Ayuso)   
  - ARM: imx: build suspend-imx6.S with arm instruction set (Max Krummenacher)   
  - xen-blkfront: allow discard-* nodes to be optional (Roger Pau Monne)   
  - mt7601u: fix rx buffer refcounting (Lorenzo Bianconi)   
  - mt7601u: fix kernel crash unplugging the device (Lorenzo Bianconi)   
  - leds: trigger: fix potential deadlock with libata (Andrea Righi)   
  - xen: Fix XenStore initialisation for XS_LOCAL (David Woodhouse)   
  - KVM: x86: get smi pending status correctly (Jay Zhou)   
  - KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (Like Xu)   
  - drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] (Claudiu Beznea)   
  - drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs (Sudeep Holla)   
  - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family (Giacinto Cifelli)   
  - wext: fix NULL-ptr-dereference with cfg80211's lack of commit() (Johannes Berg)   
  - ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming (Koen Vandeputte)   
  - ACPI: sysfs: Prefer "compatible" modalias (Kai-Heng Feng)   
  - Linux 4.14.218 (Greg Kroah-Hartman)   
  - fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)   
  - writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)   
  - fs: move I_DIRTY_INODE to fs.h (Christoph Hellwig)   
  - x86/boot/compressed: Disable relocation relaxation (Arvind Sankar)   
  - tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)   
  - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" (Wang Hai)   
  - gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)   
  - futex: futex_wake_op, fix sign_extend32 sign bits (Jiri Slaby)   
  - net: dsa: b53: fix an off by one in checking "vlan->vid" (Dan Carpenter)   
  - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)   
  - ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)   
  - udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)   
  - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)   
  - sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)   
  - sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)   
  - netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)   
  - compiler.h: Raise minimum version of GCC to 5.1 for arm64 (Will Deacon)   
  - xhci: tegra: Delay for disabling LFPS detector (JC Kuo)   
  - xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)   
  - usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)   
  - usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)   
  - USB: ehci: fix an interrupt calltrace error (Longfang Liu)   
  - ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)   
  - stm class: Fix module init return on allocation failure (Wang Hui)   
  - intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)   
  - irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)   
  - iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)   
  - can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)   
  - can: dev: can_restart: fix use after free bug (Vincent Mailhol)   
  - i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)   
  - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)   
  - drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)   
  - drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)   
  - xen: Fix event channel callback via INTX/GSI (David Woodhouse)   
  - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback (Can Guo)   
  - ASoC: Intel: haswell: Add missing pm_ops (Cezary Rojewski)   
  - drm/atomic: put state on error path (Pan Bian)   
  - dm: avoid filesystem lookup in dm_get_dev_t() (Hannes Reinecke)   
  - mmc: sdhci-xenon: fix 1.8v regulator stabilization (Alex Leibovich)   
  - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error (Hans de Goede)   
  - ALSA: hda/via: Add minimum mute flag (Takashi Iwai)   
  - ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info() (Takashi Iwai)   
  - i2c: bpmp-tegra: Ignore unknown I2C_M flags (Mikko Perttunen)   
  - Linux 4.14.217 (Greg Kroah-Hartman)   
  - spi: cadence: cache reference clock rate during probe (Michael Hennerich)   
  - net: ipv6: Validate GSO SKB before finish IPv6 processing (Aya Levin)   
  - net: skbuff: disambiguate argument and member for skb_list_walk_safe helper (Jason A. Donenfeld)   
  - net: introduce skb_list_walk_safe for skb segment walking (Jason A. Donenfeld)   
  - net: use skb_list_del_init() to remove from RX sublists (Edward Cree)   
  - tipc: fix NULL deref in tipc_link_xmit() (Hoang Le)   
  - rxrpc: Fix handling of an unsupported token type in rxrpc_read() (David Howells)   
  - net: avoid 32 x truesize under-estimation for tiny skbs (Eric Dumazet)   
  - net: sit: unregister_netdevice on newlink's error path (Jakub Kicinski)   
  - net: stmmac: Fixed mtu channged by cache aligned (David Wu)   
  - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands (Petr Machata)   
  - net: dcb: Validate netlink message in DCB handler (Petr Machata)   
  - esp: avoid unneeded kmap_atomic call (Willem de Bruijn)   
  - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (Andrey Zhizhikin)   
  - netxen_nic: fix MSI/MSI-x interrupts (Manish Chopra)   
  - nfsd4: readdirplus shouldn't return parent of export (J. Bruce Fields)   
  - usb: ohci: Make distrust_firmware param default to false (Hamish Martin)   
  - netfilter: conntrack: fix reading nf_conntrack_buckets (Jesper Dangaard Brouer)   
  - ALSA: fireface: Fix integer overflow in transmit_midi_msg() (Geert Uytterhoeven)   
  - ALSA: firewire-tascam: Fix integer overflow in midi_port_work() (Geert Uytterhoeven)   
  - dm: eliminate potential source of excessive kernel log noise (Mike Snitzer)   
  - net: sunrpc: interpret the return value of kstrtou32 correctly (j.nixdorf@avm.de)   
  - mm, slub: consider rest of partial list if acquire_slab() fails (Jann Horn)   
  - RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp (Dinghao Liu)   
  - ext4: fix superblock checksum failure when setting password salt (Jan Kara)   
  - NFS: nfs_igrab_and_active must first reference the superblock (Trond Myklebust)   
  - pNFS: Mark layout for return if return-on-close was not sent (Trond Myklebust)   
  - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock (Dave Wysochanski)   
  - ASoC: Intel: fix error code cnl_set_dsp_D0() (Dan Carpenter)   
  - dump_common_audit_data(): fix racy accesses to ->d_name (Al Viro)   
  - ARM: picoxcell: fix missing interrupt-parent properties (Arnd Bergmann)   
  - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI (Shawn Guo)   
  - net: ethernet: fs_enet: Add missing MODULE_LICENSE (Michael Ellerman)   
  - misdn: dsp: select CONFIG_BITREVERSE (Arnd Bergmann)   
  - arch/arc: add copy_user_page() to <asm/page.h> to fix build error on ARC (Randy Dunlap)   
  - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram (Rasmus Villemoes)   
  - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (Filipe Manana)   
  - ARC: build: add boot_targets to PHONY (Masahiro Yamada)   
  - ARC: build: add uImage.lzma to the top-level target (Masahiro Yamada)   
  - ARC: build: remove non-existing bootpImage from KBUILD_IMAGE (Masahiro Yamada)   
  - ext4: fix bug for rename with RENAME_WHITEOUT (yangerkun)   
  - r8152: Add Lenovo Powered USB-C Travel Hub (Leon Schuermann)   
  - dm snapshot: flush merged data before committing metadata (Akilesh Kailash)   
  - mm/hugetlb: fix potential missing huge page size info (Miaohe Lin)   
  - ACPI: scan: Harden acpi_device_add() against device ID overflows (Dexuan Cui)   
  - MIPS: relocatable: fix possible boot hangup with KASLR enabled (Alexander Lobakin)   
  - MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB (Paul Cercueil)   
  - ASoC: dapm: remove widget from dirty list on free (Thomas Hebb)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.3.el7uek]
changelog:
  - uek-rpm: match Pensando config-aarch-embedded2 with the T93's config (Thomas Tai)  [Orabug: 32972392]  
  - quota: Fix memory leak when handling corrupted quota file (Jan Kara)  [Orabug: 33020349]  
  - xen/netback: fix spurious event detection for common event case (Juergen Gross)  [Orabug: 33020349]  
  - Input: i8042 - unbreak Pegatron C15B (Alexey Dobriyan)  [Orabug: 33020349]  
  - ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum)  [Orabug: 32983664]  
  - ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum)  [Orabug: 32983664]  
  - rds: ib: Mitigate intermittent incorrect RNR NAK Retry Timer modification (Håkon Bugge)  [Orabug: 32981187]  
  - scsi: smartpqi: Remove unused functions (Bart Van Assche)  [Orabug: 32967877]  
  - scsi: smartpqi: Fix device pointer variable reference static checker issue (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Fix blocks_per_row static checker issue (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Update version to 2.1.8-045 (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add new PCI IDs (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct system hangs when resuming from hibernation (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update enclosure identifier in sysfs (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Add additional logging for LUN resets (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update SAS initiator_port_protocols and target_port_protocols (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Add phy ID support for the physical drives (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Convert snprintf() to scnprintf() (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Fix driver synchronization issues (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update device scan operations (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update OFA management (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update RAID bypass handling (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update suspend/resume and shutdown (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Synchronize device resets with mutex (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update soft reset management for OFA (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update event handler (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for wwid (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Remove timeouts from internal cmds (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Disable WRITE SAME for HBA NVMe disks (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add host level stream detection enable (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add stream detection (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Align code with oob driver (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for long firmware version (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for BMIC sense feature cmd and feature bits (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for RAID1 writes (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for RAID5 and RAID6 writes (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Refactor scatterlist code (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Refactor aio submission code (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add support for new product ids (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct request leakage during reset operations (Murthy Bhat)  [Orabug: 32967877]  
  - scsi: smartpqi: Update version to 1.2.16-012 (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct pqi_sas_smp_handler busy condition (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Correct driver removal with HBA disks (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Update copyright (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Bump version to 1.2.16-010 (Don Brace)  [Orabug: 32967877]  
  - scsi: smartpqi: Add RAID bypass counter (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Support device deletion via sysfs (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Avoid crashing kernel for controller issues (Kevin Barnett)  [Orabug: 32967877]  
  - scsi: smartpqi: Update logical volume size after expansion (Mahesh Rajashekhara)  [Orabug: 32967877]  
  - scsi: smartpqi: Add id support for SmartRAID 3152-8i (Mahesh Rajashekhara)  [Orabug: 32967877]  
  - scsi: smartpqi: Identify physical devices without issuing INQUIRY (Kevin Barnett)  [Orabug: 32967877]  
  - remove ioremap_nocache and devm_ioremap_nocache (Christoph Hellwig)  [Orabug: 32967877]  
  - treewide: Use sizeof_field() macro (Pankaj Bharadiya)  [Orabug: 32967877]  
  - block-mq: fix kabi error (Junxiao Bi)  [Orabug: 32957529]  
  - blk-mq: fix blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957529]  
  - blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig)  [Orabug: 32957529]  
  - blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei)  [Orabug: 32957529]  
  - blk-mq: add blk_mq_all_tag_iter (Ming Lei)  [Orabug: 32957529]  
  - Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912101]  {CVE-2021-33034} 
  - rds: ib: Remove two ib_modify_qp() calls (Håkon Bugge)  [Orabug: 32762731]  
  - IB/cma: Introduce rdma_set_min_rnr_timer() (Håkon Bugge)  [Orabug: 32762731]  
  - scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed)  [Orabug: 32134986]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.el7uek]
changelog:
  - rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044345]  
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32804265]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982355]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820277]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.1.el7uek]
changelog:
  - KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins)  [Orabug: 33099053]  
  - scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 33099047]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.3.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33142065]  {CVE-2021-33909}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.505.4.4.el7uek]
changelog:
  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi)  [Orabug: 33187319]  
  - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi)  [Orabug: 33187319]  
  - mm: soft-offline: close the race against page allocation (Naoya Horiguchi)  [Orabug: 33187319]  
  - mm: fix race on soft-offlining free huge pages (Naoya Horiguchi)  [Orabug: 33187319]  
  - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33187329]  
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33187327]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33187326]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33187321]  
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33187325]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.0.el7uek]
changelog:
  - Linux 4.14.223 (Greg Kroah-Hartman)   
  - dm era: Update in-core bitset after committing the metadata (Nikos Tsironis)   
  - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending (Jason A. Donenfeld)   
  - ipv6: silence compilation warning for non-IPV6 builds (Leon Romanovsky)   
  - ipv6: icmp6: avoid indirect call for icmpv6_send() (Eric Dumazet)   
  - sunvnet: use icmp_ndo_send helper (Jason A. Donenfeld)   
  - gtp: use icmp_ndo_send helper (Jason A. Donenfeld)   
  - icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n (Jason A. Donenfeld)   
  - icmp: introduce helper for nat'd source address in network device context (Jason A. Donenfeld)   
  - dm era: only resize metadata in preresume (Nikos Tsironis)   
  - dm era: Reinitialize bitset cache before digesting a new writeset (Nikos Tsironis)   
  - dm era: Use correct value size in equality function of writeset tree (Nikos Tsironis)   
  - dm era: Fix bitset memory leaks (Nikos Tsironis)   
  - dm era: Verify the data block size hasn't changed (Nikos Tsironis)   
  - dm era: Recover committed writeset after crash (Nikos Tsironis)   
  - gfs2: Don't skip dlm unlock if glock has an lvb (Bob Peterson)   
  - sparc32: fix a user-triggerable oops in clear_user() (Al Viro)   
  - f2fs: fix out-of-repair __setattr_copy() (Chao Yu)   
  - printk: fix deadlock when kernel panic (Muchun Song)   
  - gpio: pcf857x: Fix missing first interrupt (Maxim Kiselev)   
  - mmc: sdhci-esdhc-imx: fix kernel panic when remove module (Frank Li)   
  - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols (Fangrui Song)   
  - libnvdimm/dimm: Avoid race between probe and available_slots_show() (Dan Williams)   
  - usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (Yoshihiro Shimoda)   
  - mm: hugetlb: fix a race between freeing and dissolving the page (Muchun Song)   
  - hugetlb: fix copy_huge_page_from_user contig page struct assumption (Mike Kravetz)   
  - fs/affs: release old buffer head on error path (Pan Bian)   
  - mtd: spi-nor: hisi-sfc: Put child node np on error path (Pan Bian)   
  - watchdog: mei_wdt: request stop on unregister (Alexander Usyskin)   
  - arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing (He Zhe)   
  - floppy: reintroduce O_NDELAY fix (Jiri Kosina)   
  - x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson)   
  - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table (Martin Kaiser)   
  - drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue (Sabyrzhan Tasbolatov)   
  - seccomp: Add missing return in non-void function (Paul Cercueil)   
  - crypto: sun4i-ss - handle BigEndian for cipher (Corentin Labbe)   
  - crypto: sun4i-ss - checking sg length is not sufficient (Corentin Labbe)   
  - btrfs: fix extent buffer leak on failure to copy root (Filipe Manana)   
  - btrfs: fix reloc root leak with 0 ref reloc roots on recovery (Josef Bacik)   
  - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root (Josef Bacik)   
  - KEYS: trusted: Fix migratable=1 failing (Jarkko Sakkinen)   
  - tpm_tis: Fix check_locality for correct locality acquisition (James Bottomley)   
  - ALSA: hda/realtek: modify EAPD in the ALC886 (PeiSen Hou)   
  - usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt (Thinh Nguyen)   
  - usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 (Thinh Nguyen)   
  - USB: serial: mos7720: fix error code in mos7720_write() (Dan Carpenter)   
  - USB: serial: mos7840: fix error code in mos7840_write() (Dan Carpenter)   
  - usb: musb: Fix runtime PM race in musb_queue_resume_work (Paul Cercueil)   
  - USB: serial: option: update interface mapping for ZTE P685M (Lech Perczak)   
  - Input: i8042 - add ASUS Zenbook Flip to noselftest list (Marcos Paulo de Souza)   
  - Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)   
  - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S (Olivier Crête)   
  - Input: raydium_ts_i2c - do not send zero length (jeffrey.lin)   
  - HID: wacom: Ignore attempts to overwrite the touch_max value from HID (Jason Gerecke)   
  - ACPI: configfs: add missing check after configfs_register_default_group() (Qinglang Miao)   
  - ACPI: property: Fix fwnode string properties matching (Rafael J. Wysocki)   
  - blk-settings: align max_sectors on "logical_block_size" boundary (Mikulas Patocka)   
  - scsi: bnx2fc: Fix Kconfig warning & CNIC build errors (Randy Dunlap)   
  - mm/rmap: fix potential pte_unmap on an not mapped pte (Miaohe Lin)   
  - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (Maxime Ripard)   
  - arm64: Add missing ISB after invalidating TLB in __primary_switch (Marc Zyngier)   
  - mm/hugetlb: fix potential double free in hugetlb_register_node() error path (Miaohe Lin)   
  - mm/memory.c: fix potential pte_unmap_unlock pte error (Miaohe Lin)   
  - ocfs2: fix a use after free on error (Dan Carpenter)   
  - net/mlx4_core: Add missed mlx4_free_cmd_mailbox() (Chuhong Yuan)   
  - i40e: Fix overwriting flow control settings during driver loading (Mateusz Palczewski)   
  - i40e: Fix flow for IPv6 next header (extension header) (Slawomir Laba)   
  - ext4: fix potential htree index checksum corruption (Theodore Ts'o)   
  - drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) (Konrad Dybcio)   
  - PCI: Align checking of syscall user config accessors (Heiner Kallweit)   
  - VMCI: Use set_page_dirty_lock() when unregistering guest memory (Jorgen Hansen)   
  - pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() (Simon South)   
  - misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (Aswath Govindraju)   
  - misc: eeprom_93xx46: Fix module alias to enable module autoprobe (Aswath Govindraju)   
  - sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set (Randy Dunlap)   
  - Input: elo - fix an error code in elo_connect() (Dan Carpenter)   
  - perf test: Fix unaligned access in sample parsing test (Namhyung Kim)   
  - perf intel-pt: Fix missing CYC processing in PSB (Adrian Hunter)   
  - spi: pxa2xx: Fix the controller numbering for Wildcat Point (Andy Shevchenko)   
  - powerpc/8xx: Fix software emulation interrupt (Christophe Leroy)   
  - powerpc/pseries/dlpar: handle ibm, configure-connector delay status (Nathan Lynch)   
  - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (Dan Carpenter)   
  - spi: stm32: properly handle 0 byte transfer (Alain Volmat)   
  - RDMA/rxe: Fix coding error in rxe_recv.c (Bob Pearson)   
  - perf tools: Fix DSO filtering when not finding a map for a sampled address (Arnaldo Carvalho de Melo)   
  - tracepoint: Do not fail unregistering a probe due to memory failure (Steven Rostedt (VMware))   
  - amba: Fix resource leak for drivers without .remove (Uwe Kleine-König)   
  - ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores (Vladimir Murzin)   
  - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (Christophe JAILLET)   
  - powerpc/47x: Disable 256k page size (Christophe Leroy)   
  - IB/umad: Return EIO in case of when device disassociated (Shay Drory)   
  - auxdisplay: ht16k33: Fix refresh rate handling (Geert Uytterhoeven)   
  - isofs: release buffer head before return (Pan Bian)   
  - spi: atmel: Put allocated master before return (Pan Bian)   
  - certs: Fix blacklist flag type confusion (David Howells)   
  - regulator: axp20x: Fix reference cout leak (Pan Bian)   
  - clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined (Tom Rix)   
  - rtc: s5m: select REGMAP_I2C (Bartosz Golaszewski)   
  - power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (Claudiu Beznea)   
  - of/fdt: Make sure no-map does not remove already reserved regions (Nicolas Boichat)   
  - fdt: Properly handle "no-map" field in the memory region (KarimAllah Ahmed)   
  - mfd: bd9571mwv: Use devm_mfd_add_devices() (Yoshihiro Shimoda)   
  - dmaengine: hsu: disable spurious interrupt (Ferry Toth)   
  - dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (Christophe JAILLET)   
  - dmaengine: fsldma: Fix a resource leak in the remove function (Christophe JAILLET)   
  - HID: core: detect and skip invalid inputs to snto32() (Randy Dunlap)   
  - spi: cadence-quadspi: Abort read if dummy cycles required are too many (Pratyush Yadav)   
  - clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (Martin Blumenstingl)   
  - capabilities: Don't allow writing ambiguous v3 file capabilities (Eric W. Biederman)   
  - jffs2: fix use after free in jffs2_sum_write_data() (Tom Rix)   
  - fs/jfs: fix potential integer overflow on shift of a int (Colin Ian King)   
  - ima: Free IMA measurement buffer after kexec syscall (Lakshmi Ramasubramanian)   
  - ima: Free IMA measurement buffer on error (Lakshmi Ramasubramanian)   
  - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() (Daniele Alessandrelli)   
  - hwrng: timeriomem - Fix cooldown period calculation (Jan Henrik Weinstock)   
  - btrfs: clarify error returns values in __load_free_space_cache (Zhihao Cheng)   
  - Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (Andrea Parri (Microsoft))   
  - ata: ahci_brcm: Add back regulators management (Florian Fainelli)   
  - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values (Laurent Pinchart)   
  - media: pxa_camera: declare variable when DEBUG is defined (Tom Rix)   
  - media: cx25821: Fix a bug when reallocating some dma memory (Christophe JAILLET)   
  - media: qm1d1c0042: fix error return code in qm1d1c0042_init() (Luo Meng)   
  - media: lmedm04: Fix misuse of comma (Joe Perches)   
  - crypto: bcm - Rename struct device_private to bcm_device_private (Jiri Olsa)   
  - ASoC: cs42l56: fix up error handling in probe (Dan Carpenter)   
  - media: tm6000: Fix memleak in tm6000_start_stream (Dinghao Liu)   
  - media: media/pci: Fix memleak in empress_init (Dinghao Liu)   
  - media: vsp1: Fix an error handling path in the probe function (Christophe JAILLET)   
  - media: i2c: ov5670: Fix PIXEL_RATE minimum value (Jacopo Mondi)   
  - MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 (Nathan Chancellor)   
  - MIPS: c-r4k: Fix section mismatch for loongson2_sc_init (Nathan Chancellor)   
  - crypto: sun4i-ss - fix kmap usage (Corentin Labbe)   
  - gma500: clean up error handling in init (Dan Carpenter)   
  - drm/gma500: Fix error return code in psb_driver_load() (Jialin Zhang)   
  - fbdev: aty: SPARC64 requires FB_ATY_CT (Randy Dunlap)   
  - net: mvneta: Remove per-cpu queue mapping for Armada 3700 (Maxime Chevallier)   
  - net: amd-xgbe: Reset link when the link never comes back (Shyam Sundar S K)   
  - net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout (Shyam Sundar S K)   
  - ibmvnic: skip send_request_unmap for timeout reset (Lijun Pan)   
  - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case (Colin Ian King)   
  - mac80211: fix potential overflow when multiplying to u32 integers (Colin Ian King)   
  - bnxt_en: reverse order of TX disable and carrier off (Edwin Peer)   
  - ath9k: fix data bus crash when setting nf_override via debugfs (Linus Lüssing)   
  - bpf_lru_list: Read double-checked variable once without lock (Marco Elver)   
  - ARM: s3c: fix fiq for clang IAS (Arnd Bergmann)   
  - arm64: dts: msm8916: Fix reserved and rfsa nodes unit address (Vincent Knecht)   
  - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (Chen-Yu Tsai)   
  - usb: dwc2: Make "trimming xfer length" a debug message (Guenter Roeck)   
  - usb: dwc2: Abort transaction after errors with unknown reason (Guenter Roeck)   
  - usb: dwc2: Do not update data length if it is 0 on inbound transfers (Guenter Roeck)   
  - ARM: dts: Configure missing thermal interrupt for 4430 (Tony Lindgren)   
  - Bluetooth: Put HCI device if inquiry procedure interrupts (Pan Bian)   
  - Bluetooth: drop HCI device reference before return (Pan Bian)   
  - usb: gadget: u_audio: Free requests only after callback (Jack Pham)   
  - cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove() (Christophe JAILLET)   
  - arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso (Krzysztof Kozlowski)   
  - arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Spring (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Monk (Krzysztof Kozlowski)   
  - Bluetooth: Fix initializing response id after clearing struct (Christopher William Snowhill)   
  - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (Christophe JAILLET)   
  - random: fix the RNDRESEEDCRNG ioctl (Eric Biggers)   
  - MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section (Alexander Lobakin)   
  - kdb: Make memory allocations more robust (Sumit Garg)   
  - vmlinux.lds.h: add DWARF v5 sections (Nick Desaulniers)   
  - scripts/recordmcount.pl: support big endian for ARCH sh (Rong Chen)   
  - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. (Shyam Prasad N)   
  - NET: usb: qmi_wwan: Adding support for Cinterion MV31 (Christoph Schemmel)   
  - arm64: tegra: Add power-domain for Tegra210 HDA (Sameer Pujar)   
  - ntfs: check for valid standard information attribute (Rustam Kovhaev)   
  - usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable (Stefan Ursella)   
  - HID: make arrays usage and value to be the same (Will McVicker)   
  - Linux 4.14.222 (Greg Kroah-Hartman)   
  - kvm: check tlbs_dirty directly (Lai Jiangshan)   
  - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size (Manish Narani)   
  - USB: Gadget Ethernet: Re-enable Jumbo frames. (John Greb)   
  - scsi: qla2xxx: Fix crash during driver load on big endian machines (Arun Easi)   
  - xen/arm: don't ignore return errors from set_phys_to_machine (Stefano Stabellini)   
  - tracing: Avoid calling cc-option -mrecord-mcount for every Makefile (Vasily Gorbik)   
  - tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-mcount (Greg Thelen)   
  - trace: Use -mcount-record for dynamic ftrace (Andi Kleen)   
  - x86/build: Disable CET instrumentation in the kernel for 32-bit too (Borislav Petkov)   
  - h8300: fix PREEMPTION build, TI_PRE_COUNT undefined (Randy Dunlap)   
  - i2c: stm32f7: fix configuration of the digital filter (Alain Volmat)   
  - vsock: fix locking in vsock_shutdown() (Stefano Garzarella)   
  - vsock/virtio: update credit only if socket is not closed (Stefano Garzarella)   
  - net: watchdog: hold device global xmit lock during tx disable (Edwin Peer)   
  - net/vmw_vsock: improve locking in vsock_connect_timeout() (Norbert Slusarek)   
  - usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one (Serge Semin)   
  - usb: dwc3: ulpi: fix checkpatch warning (Felipe Balbi)   
  - netfilter: conntrack: skip identical origin tuple in same zone only (Florian Westphal)   
  - netfilter: xt_recent: Fix attempt to update deleted entry (Jozsef Kadlecsik)   
  - bpf: Check for integer overflow when using roundup_pow_of_two() (Bui Quang Minh)   
  - memblock: do not start bottom-up allocations with kernel_end (Roman Gushchin)   
  - ARM: ensure the signal page contains defined contents (Russell King)   
  - ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL (Alexandre Belloni)   
  - ovl: skip getxattr of security labels (Amir Goldstein)   
  - cap: fix conversions on getxattr (Miklos Szeredi)   
  - ovl: perform vfs_getxattr() with mounter creds (Miklos Szeredi)   
  - platform/x86: hp-wmi: Disable tablet-mode reporting by default (Hans de Goede)   
  - arm64: dts: rockchip: Fix PCIe DT properties on rk3399 (Marc Zyngier)   
  - MIPS: BMIPS: Fix section mismatch warning (Jaedon Shin)   
  - arm/xen: Don't probe xenbus as part of an early initcall (Julien Grall)   
  - tracing: Check length before giving out the filter buffer (Steven Rostedt (VMware))   
  - tracing: Do not count ftrace events in top level enable output (Steven Rostedt (VMware))   
  - squashfs: add more sanity checks in xattr id lookup (Phillip Lougher)   
  - squashfs: add more sanity checks in inode lookup (Phillip Lougher)   
  - squashfs: add more sanity checks in id lookup (Phillip Lougher)   
  - memcg: fix a crash in wb_workfn when a device disappears (Theodore Ts'o)   
  - include/trace/events/writeback.h: fix -Wstringop-truncation warnings (Qian Cai)   
  - lib/string: Add strscpy_pad() function (Tobin C. Harding)   
  - SUNRPC: Handle 0 length opaque XDR object data properly (Dave Wysochanski)   
  - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header (Dave Wysochanski)   
  - iwlwifi: mvm: guard against device removal in reprobe (Johannes Berg)   
  - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (Emmanuel Grumbach)   
  - iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (Johannes Berg)   
  - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() (Trond Myklebust)   
  - af_key: relax availability checks for skb size calculation (Cong Wang)   
  - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar)   
  - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar)   
  - fgraph: Initialize tracing_graph_pause at task creation (Steven Rostedt (VMware))   
  - Linux 4.14.221 (Greg Kroah-Hartman)   
  - net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add (DENG Qingfang)   
  - iommu/vt-d: Do not use flush-queue when caching-mode is on (Nadav Amit)   
  - Input: xpad - sync supported devices with fork on GitHub (Benjamin Valentin)   
  - x86/apic: Add extra serialization for non-serializing MSRs (Dave Hansen)   
  - x86/build: Disable CET instrumentation in the kernel (Josh Poimboeuf)   
  - mm: thp: fix MADV_REMOVE deadlock on shmem THP (Hugh Dickins)   
  - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active (Muchun Song)   
  - mm: hugetlb: fix a race between isolating and freeing page (Muchun Song)   
  - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page (Muchun Song)   
  - ARM: footbridge: fix dc21285 PCI configuration accessors (Russell King)   
  - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs (Thorsten Leemhuis)   
  - mmc: core: Limit retries when analyse of SDIO tuples fails (Fengnan Chang)   
  - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Gustavo A. R. Silva)   
  - cifs: report error instead of invalid when revalidating a dentry fails (Aurelien Aptel)   
  - xhci: fix bounce buffer usage for non-sg list case (Mathias Nyman)   
  - kretprobe: Avoid re-registration of the same kretprobe earlier (Wang ShaoBo)   
  - mac80211: fix station rate table updates on assoc (Felix Fietkau)   
  - ovl: fix dentry leak in ovl_get_redirect (Liangyan)   
  - usb: dwc2: Fix endpoint direction check in ep_from_windex (Heiko Stuebner)   
  - USB: usblp: don't call usb_set_interface if there's a single alt (Jeremy Figgins)   
  - USB: gadget: legacy: fix an error code in eth_bind() (Dan Carpenter)   
  - ipv4: fix race condition between route lookup and invalidation (Wei Wang)   
  - elfcore: fix building with clang (Arnd Bergmann)   
  - objtool: Support Clang non-section symbols in ORC generation (Josh Poimboeuf)   
  - net: lapb: Copy the skb before sending a packet (Xie He)   
  - arm64: dts: ls1046a: fix dcfg address range (Zyta Szpak)   
  - USB: serial: option: Adding support for Cinterion MV31 (Christoph Schemmel)   
  - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 (Chenxin Jin)   
  - USB: serial: cp210x: add pid/vid for WSDA-200-USB (Pho Tran)   
  - Linux 4.14.220 (Greg Kroah-Hartman)   
  - kthread: Extract KTHREAD_IS_PER_CPU (Peter Zijlstra)   
  - objtool: Don't fail on missing symbol table (Josh Poimboeuf)   
  - scsi: ibmvfc: Set default timeout to avoid crash during migration (Brian King)   
  - mac80211: fix fast-rx encryption check (Felix Fietkau)   
  - scsi: libfc: Avoid invoking response handler twice if ep is already completed (Javed Hasan)   
  - scsi: scsi_transport_srp: Don't block target in failfast state (Martin Wilck)   
  - x86: __always_inline __{rd,wr}msr() (Peter Zijlstra)   
  - phy: cpcap-usb: Fix warning for missing regulator_disable (Tony Lindgren)   
  - driver core: Extend device_is_dependent() (Rafael J. Wysocki)   
  - base: core: Remove WARN_ON from link dependencies check (Benjamin Gaignard)   
  - net_sched: gen_estimator: support large ewma log (Eric Dumazet)   
  - net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)   
  - ACPI: thermal: Do not call acpi_thermal_check() directly (Rafael J. Wysocki)   
  - ibmvnic: Ensure that CRQ entry read are correctly ordered (Lijun Pan)   
  - net: dsa: bcm_sf2: put device node before return (Pan Bian)   
  - rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil)  [Orabug: 33044345]  
  - rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil)  [Orabug: 32804265]  
  - rds/ib: handle posted ACK during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - rds/ib: reap tx completions during connection shutdown (Manjunath Patil)  [Orabug: 32863569]  
  - xfs: fix xlog_finish_defer_ops (Wengang Wang)  [Orabug: 32982355]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820277]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.1.el7uek]
changelog:
  - drivers/uio: Fix incorrect calls to pm_runtime_enable/disable. (David Clear)  [Orabug: 33070176]  
  - dts/pensando: Add board config partitions. (David Clear)  [Orabug: 33070176]  
  - drivers: updates driver version string to 1.15.9.7 (Thomas Tai)  [Orabug: 33065280]  
  - drivers: updates for 1.15.9.7 (Shannon Nelson)  [Orabug: 33065280]  
  - arm64: Stop printing the virtual memory layout (Laura Abbott)  [Orabug: 33059865]  
  - uek-rpm: Fix Pensando's network application error (Thomas Tai)  [Orabug: 33050671]  
  - RDMA/cma: Fix rdma_resolve_route memory leak (Gerd Rausch)  [Orabug: 33048382]  
  - uek-rpm: enable selinux for Pensando (Thomas Tai)  [Orabug: 33032940]  
  - scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran)  [Orabug: 32989009]  
  - xfs: fix lockup issue (Junxiao Bi)  [Orabug: 32880215]  
  - Build Pensando drivers for uek5 kernel (Vijay Kumar)  [Orabug: 32569849]  
  - net/ethernet/pensando: Fix Pensando driver build (Vijay Kumar)  [Orabug: 32569849]  
  - Added mdev, mnet_uio_pdrv and ionic_mnic driver src to UEK5 (Vijay Kumar)  [Orabug: 32569849]  
  - Linux 4.14.227 (Greg Kroah-Hartman)   
  - genirq: Disable interrupts for force threaded handlers (Thomas Gleixner)   
  - ext4: fix potential error in ext4_do_update_inode (Shijie Luo)   
  - ext4: do not try to set xattr into ea_inode if value is empty (zhangyi (F))   
  - ext4: find old entry again if failed to rename whiteout (zhangyi (F))   
  - x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (Oleg Nesterov)   
  - x86: Move TS_COMPAT back to asm/thread_info.h (Oleg Nesterov)   
  - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() (Oleg Nesterov)   
  - x86/ioapic: Ignore IRQ2 again (Thomas Gleixner)   
  - PCI: rpadlpar: Fix potential drc_name corruption in store functions (Tyrel Datwyler)   
  - iio: hid-sensor-temperature: Fix issues of timestamp channel (Ye Xiang)   
  - iio: hid-sensor-prox: Fix scale not correct issue (Ye Xiang)   
  - iio: hid-sensor-humidity: Fix alignment issue of timestamp channel (Ye Xiang)   
  - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler (Dinghao Liu)   
  - iio: adis16400: Fix an error code in adis16400_initial_setup() (Dan Carpenter)   
  - iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel (Jonathan Albrieux)   
  - iio:adc:stm32-adc: Add HAS_IOMEM dependency (Jonathan Cameron)   
  - usb: gadget: configfs: Fix KASAN use-after-free (Jim Lin)   
  - USB: replace hardcode maximum usb string length by definition (Macpaul Lin)   
  - usb-storage: Add quirk to defeat Kindle's automatic unload (Alan Stern)   
  - nvme-rdma: fix possible hang when failing to set io queues (Sagi Grimberg)   
  - scsi: lpfc: Fix some error codes in debugfs (Dan Carpenter)   
  - net/qrtr: fix __netdev_alloc_skb call (Pavel Skripkin)   
  - sunrpc: fix refcount leak for rpc auth modules (Daniel Kobras)   
  - svcrdma: disable timeouts on rdma backchannel (Timo Rothenpieler)   
  - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. (Joe Korty)   
  - nvmet: don't check iosqes,iocqes for discovery controllers (Sagi Grimberg)   
  - tools build feature: Check if pthread_barrier_t is available (Arnaldo Carvalho de Melo)   
  - perf: Make perf able to build with latest libbfd (Changbin Du)   
  - tools build: Check if gettid() is available before providing helper (Arnaldo Carvalho de Melo)   
  - tools build feature: Check if eventfd() is available (Arnaldo Carvalho de Melo)   
  - tools build feature: Check if get_current_dir_name() is available (Arnaldo Carvalho de Melo)   
  - perf tools: Use - Revert "PM: runtime: Update device status before letting suppliers suspend" (Rafael J. Wysocki)   
  - net: dsa: b53: Support setting learning on port (Florian Fainelli)   
  - bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)   
  - ext4: check journal inode extents more carefully (Jan Kara)   
  - ext4: don't allow overlapping system zones (Jan Kara)   
  - Linux 4.14.226 (Greg Kroah-Hartman)   
  - xen/events: avoid handling the same event on two cpus at the same time (Juergen Gross)   
  - xen/events: don't unmask an event channel when an eoi is pending (Juergen Gross)   
  - xen/events: reset affinity of 2-level event when tearing it down (Juergen Gross)   
  - iio: imu: adis16400: release allocated memory on failure (Navid Emamdoost)   
  - KVM: arm64: Fix exclusive limit for IPA size (Marc Zyngier)   
  - hwmon: (lm90) Fix max6658 sporadic wrong temperature reading (Boyang Yu)   
  - binfmt_misc: fix possible deadlock in bm_register_write (Lior Ribak)   
  - powerpc/64s: Fix instruction encoding for lis in ppc_function_entry() (Naveen N. Rao)   
  - include/linux/sched/mm.h: use rcu_dereference in in_vfork() (Matthew Wilcox (Oracle))   
  - stop_machine: mark helpers __always_inline (Arnd Bergmann)   
  - configfs: fix a use-after-free in __configfs_open_file (Daiyue Zhang)   
  - block: rsxx: fix error return code of rsxx_pci_probe() (Jia-Ju Bai)   
  - NFSv4.2: fix return value of _nfs4_get_security_label() (Ondrej Mosnacek)   
  - sh_eth: fix TRSCER mask for R7S72100 (Sergey Shtylyov)   
  - staging: comedi: pcl818: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: pcl711: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: me4000: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: dmm32at: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: das800: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: das6402: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: adv_pci1710: Fix endian problem for AI command data (Ian Abbott)   
  - staging: comedi: addi_apci_1500: Fix endian problem for command sample (Ian Abbott)   
  - staging: comedi: addi_apci_1032: Fix endian problem for COS sample (Ian Abbott)   
  - staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan (Lee Gibson)   
  - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd (Lee Gibson)   
  - staging: ks7010: prevent buffer overflow in ks_wlan_set_scan() (Dan Carpenter)   
  - staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() (Dan Carpenter)   
  - staging: rtl8712: unterminated string leads to read overflow (Dan Carpenter)   
  - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() (Dan Carpenter)   
  - staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() (Dan Carpenter)   
  - usbip: fix vhci_hcd attach_store() races leading to gpf (Shuah Khan)   
  - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf (Shuah Khan)   
  - usbip: fix vudc to check for stream socket (Shuah Khan)   
  - usbip: fix vhci_hcd to check for stream socket (Shuah Khan)   
  - usbip: fix stub_dev to check for stream socket (Shuah Khan)   
  - USB: serial: cp210x: add some more GE USB IDs (Sebastian Reichel)   
  - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (Karan Singhal)   
  - USB: serial: ch341: add new Product ID (Niv Sardi)   
  - USB: serial: io_edgeport: fix memory leak in edge_startup (Pavel Skripkin)   
  - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (Forest Crossman)   
  - xhci: Improve detection of device initiated wake signal. (Mathias Nyman)   
  - usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM (Yoshihiro Shimoda)   
  - usb: gadget: f_uac1: stop playback on function disable (Ruslan Bilovol)   
  - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot (Ruslan Bilovol)   
  - USB: gadget: u_ether: Fix a configfs return code (Dan Carpenter)   
  - Goodix Fingerprint device is not a modem (Yorick de Wid)   
  - mmc: core: Fix partition switch time for eMMC (Adrian Hunter)   
  - s390/dasd: fix hanging IO request during DASD driver unbind (Stefan Haberland)   
  - s390/dasd: fix hanging DASD driver unbind (Stefan Haberland)   
  - Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") (Eric W. Biederman)   
  - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar (Takashi Iwai)   
  - ALSA: hda: Avoid spurious unsol event handling during S3/S4 (Takashi Iwai)   
  - ALSA: hda: Drop the BATCH workaround for AMD controllers (Takashi Iwai)   
  - ALSA: hda/hdmi: Cancel pending works before suspend (Takashi Iwai)   
  - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling (Mike Christie)   
  - s390/smp: __smp_rescan_cpus() - move cpumask away from stack (Heiko Carstens)   
  - PCI: mediatek: Add missing of_node_put() to fix reference leak (Krzysztof Wilczyński)   
  - PCI: xgene-msi: Fix race in installing chained irq handler (Martin Kaiser)   
  - powerpc/perf: Record counter overflow always if SAMPLE_IP is unset (Athira Rajeev)   
  - powerpc: improve handling of unrecoverable system reset (Nicholas Piggin)   
  - mmc: mediatek: fix race condition between msdc_request_timeout and irq (Chaotian Jing)   
  - mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()' (Christophe JAILLET)   
  - udf: fix silent AED tagLocation corruption (Steven J. Magnani)   
  - net: phy: fix save wrong speed and duplex problem if autoneg is on (Guangbin Huang)   
  - media: usbtv: Fix deadlock on suspend (Maxim Mikityanskiy)   
  - s390/cio: return -EFAULT if copy_to_user() fails (Eric Farman)   
  - drm: meson_drv add shutdown function (Artem Lapkin)   
  - drm/compat: Clear bounce structures (Daniel Vetter)   
  - s390/cio: return -EFAULT if copy_to_user() fails again (Wang Qing)   
  - perf traceevent: Ensure read cmdlines are null terminated. (Ian Rogers)   
  - net: stmmac: stop each tx channel independently (Joakim Zhang)   
  - net: davicom: Fix regulator not turned off on driver removal (Paul Cercueil)   
  - net: davicom: Fix regulator not turned off on failed probe (Paul Cercueil)   
  - net: lapbether: Remove netif_start_queue / netif_stop_queue (Xie He)   
  - net: usb: qmi_wwan: allow qmimux add/del with master up (Daniele Palmas)   
  - net: sched: avoid duplicates in classes dump (Maximilian Heyne)   
  - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 (Ong Boon Leong)   
  - net/mlx4_en: update moderation when config reset (Kevin(Yudong) Yang)   
  - sh_eth: fix TRSCER mask for SH771x (Sergey Shtylyov)   
  - Revert "mm, slub: consider rest of partial list if acquire_slab() fails" (Linus Torvalds)   
  - cifs: return proper error code in statfs(2) (Paulo Alcantara)   
  - netfilter: x_tables: gpf inside xt_find_revision() (Vasily Averin)   
  - can: flexcan: enable RX FIFO after FRZ/HALT valid (Joakim Zhang)   
  - can: flexcan: assert FRZ bit in flexcan_chip_freeze() (Joakim Zhang)   
  - can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership (Oleksij Rempel)   
  - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 (Balazs Nemeth)   
  - net: Fix gro aggregation for udp encaps with zero csum (Daniel Borkmann)   
  - ath9k: fix transmitting to stations in dynamic SMPS mode (Felix Fietkau)   
  - ethernet: alx: fix order of calls on resume (Jakub Kicinski)   
  - uapi: nfnetlink_cthelper.h: fix userspace compilation error (Dmitry V. Levin)   
  - Linux 4.14.225 (Greg Kroah-Hartman)   
  - drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register (AngeloGioacchino Del Regno)   
  - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom (Aswath Govindraju)   
  - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller (Bjorn Helgaas)   
  - platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 (Hans de Goede)   
  - platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices (Hans de Goede)   
  - platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag (Hans de Goede)   
  - platform/x86: acer-wmi: Add new force_caps module parameter (Hans de Goede)   
  - platform/x86: acer-wmi: Cleanup accelerometer device handling (Hans de Goede)   
  - platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines (Hans de Goede)   
  - mwifiex: pcie: skip cancel_work_sync() on reset failure path (Tsuchiya Yuto)   
  - iommu/amd: Fix sleeping in atomic in increase_address_space() (Andrey Ryabinin)   
  - dm table: fix iterate_devices based device capability checks (Jeffle Xu)   
  - rsxx: Return -EFAULT if copy_to_user() fails (Dan Carpenter)   
  - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits (Colin Ian King)   
  - usbip: tools: fix build error for multiple definition (Antonio Borneo)   
  - PM: runtime: Update device status before letting suppliers suspend (Rafael J. Wysocki)   
  - btrfs: fix raid6 qstripe kmap (Ira Weiny)   
  - btrfs: raid56: simplify tracking of Q stripe presence (David Sterba)   
  - Linux 4.14.224 (Greg Kroah-Hartman)   
  - media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)   
  - swap: fix swapfile read/write offset (Jens Axboe)   
  - zsmalloc: account the number of compacted pages correctly (Rokudo Yan)   
  - xen-netback: respect gnttab_map_refs()'s return value (Jan Beulich)   
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)   
  - parisc: Bump 64-bit IRQ stack size to 64 KB (John David Anglin)   
  - f2fs: handle unallocated section and zone on pinned/atgc (Jaegeuk Kim)   
  - media: uvcvideo: Allow entities with no pads (Ricardo Ribalda)   
  - staging: most: sound: add sanity check for function argument (Christian Gromm)   
  - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data (Gopal Tiwari)   
  - x86/build: Treat R_386_PLT32 relocation as R_386_PC32 (Fangrui Song)   
  - ath10k: fix wmi mgmt tx queue full due to race condition (Miaoqing Pan)   
  - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() (Di Zhu)   
  - wlcore: Fix command execute failure 19 for wl12xx (Tony Lindgren)   
  - vt/consolemap: do font sum unsigned (Jiri Slaby)   
  - x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk (Heiner Kallweit)   
  - staging: fwserial: Fix error handling in fwserial_create (Dinghao Liu)   
  - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ (Geert Uytterhoeven)   
  - net: bridge: use switchdev for port flags set through sysfs too (Vladimir Oltean)   
  - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing (Li Xinhai)   
  - net: fix up truesize of cloned skb in skb_prepare_for_shift() (Marco Elver)   
  - smackfs: restrict bytes count in smackfs write functions (Sabyrzhan Tasbolatov)   
  - xfs: Fix assert failure in xfs_setattr_size() (Yumei Huang)   
  - media: mceusb: sanity check for prescaler value (Sean Young)   
  - JFS: more checks for invalid superblock (Randy Dunlap)   
  - arm64: Use correct ll/sc atomic constraints (Andrew Murray)   
  - arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint (Will Deacon)   
  - arm64: Avoid redundant type conversions in xchg() and cmpxchg() (Will Deacon)   
  - arm64 module: set plt* section addresses to 0x0 (Shaoying Xu)   
  - virtio/s390: implement virtio-ccw revision 2 correctly (Cornelia Huck)   
  - drm/virtio: use kvmalloc for large allocations (Sergey Senozhatsky)   
  - hugetlb: fix update_and_free_page contig page struct assumption (Mike Kravetz)   
  - scripts: set proper OpenSSL include dir also for sign-file (Rolf Eike Beer)   
  - scripts: use pkg-config to locate libcrypto (Rolf Eike Beer)   
  - net: usb: qmi_wwan: support ZTE P685M modem (Lech Perczak)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.2.el7uek]
changelog:
  - KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts (Joao Martins)  [Orabug: 33089240]  
  - mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge (Naoya Horiguchi)  [Orabug: 33042327]  
  - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails (Naoya Horiguchi)  [Orabug: 33042327]  
  - mm: soft-offline: close the race against page allocation (Naoya Horiguchi)  [Orabug: 33042327]  
  - mm: fix race on soft-offlining free huge pages (Naoya Horiguchi)  [Orabug: 33042327]  
  - Revert "xen/fb: allow xenfb initialization for hvm guests" (Joe Jin)  [Orabug: 33075317]  
  - scsi: qla2xxx: Fix use after free in bsg (Quinn Tran)  [Orabug: 32912131]  
  - block: fix a race between del_gendisk and BLKRRPART (Gulam Mohamed)  [Orabug: 32285697]  
  - block: prevent block device lookups at the beginning of del_gendisk (Christoph Hellwig)  [Orabug: 32285697]  
  - block: take bd_mutex around delete_partitions in del_gendisk (Christoph Hellwig)  [Orabug: 32285697]  
  - Linux 4.14.231 (Greg Kroah-Hartman)   
  - xen/events: fix setting irq affinity (Juergen Gross)   
  - perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches (Arnaldo Carvalho de Melo)   
  - netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)   
  - net: phy: broadcom: Only advertise EEE for supported modes (Florian Fainelli)   
  - block: only update parent bi_status when bio fail (Yufen Yu)   
  - gfs2: report "already frozen/thawed" errors (Bob Peterson)   
  - drm/imx: imx-ldb: fix out of bounds array access warning (Arnd Bergmann)   
  - KVM: arm64: Disable guest access to trace filter controls (Suzuki K Poulose)   
  - KVM: arm64: Hide system instruction access to Trace registers (Suzuki K Poulose)   
  - Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath." (Greg Kroah-Hartman)   
  - net: ieee802154: stop dump llsec params for monitors (Alexander Aring)   
  - net: ieee802154: forbid monitor for del llsec seclevel (Alexander Aring)   
  - net: ieee802154: forbid monitor for set llsec params (Alexander Aring)   
  - net: ieee802154: fix nl802154 del llsec devkey (Alexander Aring)   
  - net: ieee802154: fix nl802154 add llsec key (Alexander Aring)   
  - net: ieee802154: fix nl802154 del llsec dev (Alexander Aring)   
  - net: ieee802154: fix nl802154 del llsec key (Alexander Aring)   
  - net: ieee802154: nl-mac: fix check on panid (Alexander Aring)   
  - net: mac802154: Fix general protection fault (Pavel Skripkin)   
  - drivers: net: fix memory leak in peak_usb_create_dev (Pavel Skripkin)   
  - drivers: net: fix memory leak in atusb_probe (Pavel Skripkin)   
  - net: tun: set tun->dev->addr_len during TUNSETLINK processing (Phillip Potter)   
  - cfg80211: remove WARN_ON() in cfg80211_sme_connect (Du Cheng)   
  - usbip: fix vudc usbip_sockfd_store races leading to gpf (Shuah Khan)   
  - net/ncsi: Avoid GFP_KERNEL in response handler (Samuel Mendoza-Jonas)   
  - net/ncsi: Refactor MAC, VLAN filters (Samuel Mendoza-Jonas)   
  - net/ncsi: Add generic netlink family (Samuel Mendoza-Jonas)   
  - net/ncsi: Don't return error on normal response (Samuel Mendoza-Jonas)   
  - net/ncsi: Improve general state logging (Samuel Mendoza-Jonas)   
  - net/ncsi: Make local function ncsi_get_filter() static (Wei Yongjun)   
  - clk: socfpga: fix iomem pointer cast on 64-bit (Krzysztof Kozlowski)   
  - RDMA/cxgb4: check for ipv6 address properly while destroying listener (Potnuri Bharat Teja)   
  - net/mlx5: Fix placement of log_max_flow_counter (Raed Salem)   
  - s390/cpcmd: fix inline assembly register clobbering (Alexander Gordeev)   
  - workqueue: Move the position of debug_work_activate() in __queue_work() (Zqiang)   
  - clk: fix invalid usage of list cursor in unregister (Lukasz Bartosik)   
  - clk: fix invalid usage of list cursor in register (Lukasz Bartosik)   
  - soc/fsl: qbman: fix conflicting alignment attributes (Arnd Bergmann)   
  - ASoC: sunxi: sun4i-codec: fill ASoC card owner (Bastian Germann)   
  - net/ncsi: Avoid channel_monitor hrtimer deadlock (Milton Miller)   
  - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces (Stefan Riedmueller)   
  - net:tipc: Fix a double free in tipc_sk_mcast_rcv (Lv Yunlong)   
  - gianfar: Handle error code at MAC address change (Claudiu Manoil)   
  - sch_red: fix off-by-one checks in red_check_params() (Eric Dumazet)   
  - amd-xgbe: Update DMA coherency values (Shyam Sundar S K)   
  - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips (Shengjiu Wang)   
  - regulator: bd9571mwv: Fix AVS and DVFS voltage range (Geert Uytterhoeven)   
  - i2c: turn recovery error on init to debug (Wolfram Sang)   
  - usbip: synchronize event handler with sysfs code paths (Shuah Khan)   
  - usbip: stub-dev synchronize sysfs code paths (Shuah Khan)   
  - usbip: add sysfs_lock to synchronize sysfs code paths (Shuah Khan)   
  - net: sched: sch_teql: fix null-pointer dereference (Pavel Tikhomirov)   
  - net: ensure mac header is set in virtio_net_hdr_to_skb() (Eric Dumazet)   
  - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field (Tetsuo Handa)   
  - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin (Marek Behún)   
  - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers (Gao Xiang)   
  - parisc: parisc-agp requires SBA IOMMU driver (Helge Deller)   
  - fs: direct-io: fix missing sdio->boundary (Jack Qiu)   
  - ia64: fix user_stack_pointer() for ptrace() (Sergei Trofimovich)   
  - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh (Muhammad Usama Anjum)   
  - xen/evtchn: Change irq_info lock to raw_spinlock_t (Luca Fancellu)   
  - nfc: Avoid endless loops caused by repeated llcp_sock_connect() (Xiaoming Ni)   
  - nfc: fix memory leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25672} 
  - nfc: fix refcount leak in llcp_sock_connect() (Xiaoming Ni)   {CVE-2020-25671} 
  - nfc: fix refcount leak in llcp_sock_bind() (Xiaoming Ni)   {CVE-2020-25670} 
  - ASoC: intel: atom: Stop advertising non working S24LE support (Hans de Goede)   
  - ALSA: aloop: Fix initialization of controls (Jonas Holmberg)   
  - Linux 4.14.230 (Greg Kroah-Hartman)   
  - can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate (Angelo Dureghello)   
  - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM (Masahiro Yamada)   
  - init/Kconfig: make COMPILE_TEST depend on !S390 (Heiko Carstens)   
  - cifs: Silently ignore unknown oplock break handle (Vincent Whitchurch)   
  - cifs: revalidate mapping when we open files for SMB1 POSIX (Ronnie Sahlberg)   
  - ia64: mca: allocate early mca with GFP_ATOMIC (Sergei Trofimovich)   
  - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() (Martin Wilck)   
  - x86/build: Turn off -fcf-protection for realmode targets (Arnd Bergmann)   
  - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state (Esteve Varela Colominas)   
  - drm/msm: Ratelimit invalid-fence message (Rob Clark)   
  - mac80211: choose first enabled channel for monitor (Karthikeyan Kathirvel)   
  - mISDN: fix crash in fritzpci (Tong Zhang)   
  - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove (Pavel Andrianov)   
  - ARM: dts: am33xx: add aliases for mmc interfaces (Mans Rullgard)   
  - Linux 4.14.229 (Greg Kroah-Hartman)   
  - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() (Du Cheng)   
  - staging: rtl8192e: Change state information from u16 to u8 (Atul Gopinathan)   
  - staging: rtl8192e: Fix incorrect source in memcpy() (Atul Gopinathan)   
  - usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference (Tong Zhang)   
  - USB: cdc-acm: fix use-after-free after probe failure (Johan Hovold)   
  - USB: cdc-acm: downgrade message to debug (Oliver Neukum)   
  - USB: cdc-acm: untangle a circular dependency between callback and softint (Oliver Neukum)   
  - cdc-acm: fix BREAK rx code path adding necessary calls (Oliver Neukum)   
  - usb: xhci-mtk: fix broken streams issue on 0.96 xHCI (Chunfeng Yun)   
  - usb: musb: Fix suspend with devices connected for a64 (Tony Lindgren)   
  - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (Vincent Palatin)   
  - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() (Shuah Khan)   
  - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (Zheyu Ma)   
  - extcon: Fix error handling in extcon_dev_register (Dinghao Liu)   
  - extcon: Add stubs for extcon_register_notifier_all() functions (Krzysztof Kozlowski)   
  - pinctrl: rockchip: fix restore error in resume (Wang Panzhenzhuan)   
  - reiserfs: update reiserfs_xattrs_initialized() condition (Tetsuo Handa)   
  - drm/amdgpu: check alignment on CPU page for bo map (Xℹ Ruoyao)   
  - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() (Nirmoy Das)   
  - mm: fix race by making init_zero_pfn() early_initcall (Ilya Lipnitskiy)   
  - tracing: Fix stack trace event size (Steven Rostedt (VMware))   
  - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook (Hui Wang)   
  - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO (Hui Wang)   
  - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect (Ikjoon Jang)   
  - bpf: Remove MTU check in __bpf_skb_max_len (Jesper Dangaard Brouer)   
  - net: wan/lmc: unregister device when no matching device is found (Tong Zhang)   
  - appletalk: Fix skb allocation size in loopback case (Doug Brown)   
  - net: ethernet: aquantia: Handle error cleanup of start on open (Nathan Rossi)   
  - brcmfmac: clear EAP/association status bits on linkdown events (Luca Pesce)   
  - ext4: do not iput inode under running transaction in ext4_rename() (zhangyi (F))   
  - ASoC: rt5659: Update MCLK rate in set_sysclk() (Sameer Pujar)   
  - staging: comedi: cb_pcidas64: fix request_irq() warn (Tong Zhang)   
  - staging: comedi: cb_pcidas: fix request_irq() warn (Tong Zhang)   
  - scsi: qla2xxx: Fix broken #endif placement (Alexey Dobriyan)   
  - scsi: st: Fix a use after free in st_open() (Lv Yunlong)   
  - vhost: Fix vhost_vq_reset() (Laurent Vivier)   
  - powerpc: Force inlining of cpu_has_feature() to avoid build failure (Christophe Leroy)   
  - ASoC: cs42l42: Always wait at least 3ms after reset (Lucas Tanure)   
  - ASoC: cs42l42: Fix mixer volume control (Lucas Tanure)   
  - ASoC: es8316: Simplify adc_pga_gain_tlv table (Hans de Goede)   
  - ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe (Benjamin Rood)   
  - ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)   
  - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 (Hans de Goede)   
  - rpc: fix NULL dereference on kmalloc failure (J. Bruce Fields)   
  - ext4: fix bh ref count on error paths (Zhaolong Zhang)   
  - ipv6: weaken the v4mapped source check (Jakub Kicinski)   
  - selinux: vsock: Set SID for socket returned by accept() (David Brazdil)   
  - Linux 4.14.228 (Greg Kroah-Hartman)   
  - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" (Marc Kleine-Budde)   
  - ext4: add reclaim checks to xattr code (Jan Kara)   
  - mac80211: fix double free in ibss_leave (Markus Theil)   
  - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (Eric Dumazet)   
  - net: sched: validate stab values (Eric Dumazet)   
  - can: dev: Move device back to init netns on owning netns delete (Martin Willi)   
  - locking/mutex: Fix non debug version of mutex_lock_io_nested() (Thomas Gleixner)   
  - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() (Jia-Ju Bai)   
  - scsi: qedi: Fix error return code of qedi_alloc_global_queues() (Jia-Ju Bai)   
  - perf auxtrace: Fix auxtrace queue conflict (Adrian Hunter)   
  - ACPI: scan: Use unique number for instance_no (Andy Shevchenko)   
  - ACPI: scan: Rearrange memory allocation in acpi_device_add() (Rafael J. Wysocki)   
  - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server (Potnuri Bharat Teja)   
  - net/mlx5e: Fix error path for ethtool set-priv-flag (Aya Levin)   
  - arm64: kdump: update ppos when reading elfcorehdr (Pavel Tatashin)   
  - drm/msm: fix shutdown hook in case GPU components failed to bind (Dmitry Baryshkov)   
  - net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes (Corentin Labbe)   
  - net: cdc-phonet: fix data-interface release on probe failure (Johan Hovold)   
  - mac80211: fix rate mask reset (Johannes Berg)   
  - can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning (Torin Cooper-Bennun)   
  - can: c_can: move runtime PM enable/disable to c_can_platform (Tong Zhang)   
  - can: c_can_pci: c_can_pci_remove(): fix use-after-free (Tong Zhang)   
  - can: peak_usb: add forgotten supported devices (Stephane Grosjean)   
  - ftgmac100: Restart MAC HW once (Dylan Hung)   
  - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template (Lv Yunlong)   
  - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 (Dinghao Liu)   
  - e1000e: add rtnl_lock() to e1000_reset_task (Vitaly Lifshits)   
  - net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port (Florian Fainelli)   
  - macvlan: macvlan_count_rx() needs to be aware of preemption (Eric Dumazet)   
  - libbpf: Fix INSTALL flag order (Georgi Valkov)   
  - bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD (Grygorii Strashko)   
  - ARM: dts: at91-sama5d27_som1: fix phy address to 7 (Claudiu Beznea)   
  - arm64: dts: ls1043a: mark crypto engine dma coherent (Horia Geantă)   
  - arm64: dts: ls1012a: mark crypto engine dma coherent (Horia Geantă)   
  - arm64: dts: ls1046a: mark crypto engine dma coherent (Horia Geantă)   
  - squashfs: fix xattr id and id lookup sanity checks (Phillip Lougher)   
  - squashfs: fix inode lookup sanity checks (Sean Nyekjaer)   
  - ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign (Sergei Trofimovich)   
  - ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls (Sergei Trofimovich)   
  - nfs: we don't support removing system.nfs4_acl (J. Bruce Fields)   
  - drm/radeon: fix AGP dependency (Christian König)   
  - u64_stats,lockdep: Fix u64_stats_init() vs lockdep (Peter Zijlstra)   
  - sparc64: Fix opcode filtering in handling of no fault loads (Rob Gardner)   
  - atm: idt77252: fix null-ptr-dereference (Tong Zhang)   
  - atm: uPD98402: fix incorrect allocation (Tong Zhang)   
  - net: wan: fix error return code of uhdlc_init() (Jia-Ju Bai)   
  - net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() (Jia-Ju Bai)   
  - NFS: Correct size calculation for create reply length (Frank Sorenson)   
  - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default (Timo Rothenpieler)   
  - gpiolib: acpi: Add missing IRQF_ONESHOT (Yang Li)   
  - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count (Denis Efremov)   
  - net: tehuti: fix error return code in bdx_probe() (Jia-Ju Bai)   
  - ixgbe: Fix memleak in ixgbe_configure_clsu32 (Dinghao Liu)   
  - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" (Hayes Wang)   
  - atm: lanai: dont run lanai_dev_close if not open (Tong Zhang)   
  - atm: eni: dont release is never initialized (Tong Zhang)   
  - powerpc/4xx: Fix build errors from mfdcr() (Michael Ellerman)   
  - net: fec: ptp: avoid register access when ipg clock is disabled (Heiko Thiery)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.3.el7uek]
changelog:
  - capmem: Mark the pages as non-readonly+dirty. (David Clear)  [Orabug: 33116008]  
  - PCI/ERR: Retain status from error notification (Keith Busch)  [Orabug: 32747989]  
  - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. (Dai Ngo)  [Orabug: 33106366]  
  - net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk)  [Orabug: 31895299]  {CVE-2020-14304}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.4.el7uek]
changelog:
  - rds/ib: avoid use of trace_printk() (Alan Maguire)  [Orabug: 33120588]  
  - RDMA/cma: Remove unnecessary INIT->INIT transition (Håkon Bugge)  [Orabug: 33114515]  
  - ext4: use ext4_grp_locked_error in mb_find_extent (Stephen Brennan)  [Orabug: 33027709]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.6.el7uek]
changelog:
  - rds: Check for illegal flags when creating an MR (Håkon Bugge)  [Orabug: 33144339]  
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135633]  {CVE-2021-33909}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.7.el7uek]
changelog:
  - scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le)  [Orabug: 33167357]  
  - Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy)  [Orabug: 33167350]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.8.el7uek]
changelog:
  - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33187189]  
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33187192]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33187195]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33187199]  
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33187200]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.9.el7uek]
changelog:
  - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33205367]  {CVE-2021-3656} {CVE-2021-3656} 
  - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33205444]  {CVE-2021-3653} {CVE-2021-3653}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.10.el7uek]
changelog:
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220435]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.506.8.1.el7uek]
changelog:
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33221378]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33221378]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33221378]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33221378]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.0.el7uek]
changelog:
  - rds: ib: Increase entropy of RDMA IOVAs (Håkon Bugge)  [Orabug: 33104574]  
  - Linux 4.14.234 (Greg Kroah-Hartman)   
  - Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)   
  - video: hgafb: correctly handle card detect failure during probe (Anirudh Rayabharam)   
  - tty: vt: always invoke vc->vc_sw->con_resize callback (Tetsuo Handa)   
  - vt: Fix character height handling with VT_RESIZEX (Maciej W. Rozycki)   
  - vgacon: Record video mode changes with VT_RESIZEX (Maciej W. Rozycki)   
  - video: hgafb: fix potential NULL pointer dereference (Igor Matheus Andrade Torrente)   
  - qlcnic: Add null check after calling netdev_alloc_skb (Tom Seewald)   
  - leds: lp5523: check return value of lp5xx_read and jump to cleanup code (Phillip Potter)   
  - net: rtlwifi: properly check for alloc_workqueue() failure (Greg Kroah-Hartman)   
  - net: stmicro: handle clk_prepare() failure during init (Anirudh Rayabharam)   
  - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() (Du Cheng)   
  - Revert "niu: fix missing checks of niu_pci_eeprom_read" (Greg Kroah-Hartman)   
  - Revert "qlcnic: Avoid potential NULL pointer dereference" (Greg Kroah-Hartman)   
  - Revert "rtlwifi: fix a potential NULL pointer dereference" (Greg Kroah-Hartman)   
  - Revert "media: rcar_drif: fix a memory disclosure" (Greg Kroah-Hartman)   
  - cdrom: gdrom: initialize global variable at init time (Greg Kroah-Hartman)   
  - cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom (Atul Gopinathan)   
  - Revert "gdrom: fix a memory leak bug" (Greg Kroah-Hartman)   
  - Revert "ecryptfs: replace BUG_ON with error handling code" (Greg Kroah-Hartman)   
  - Revert "video: imsttfb: fix potential NULL pointer dereferences" (Greg Kroah-Hartman)   
  - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" (Greg Kroah-Hartman)   
  - Revert "leds: lp5523: fix a missing check of return value of lp55xx_read" (Greg Kroah-Hartman)   
  - Revert "net: stmicro: fix a missing check of clk_prepare" (Greg Kroah-Hartman)   
  - Revert "video: hgafb: fix potential NULL pointer dereference" (Greg Kroah-Hartman)   
  - dm snapshot: fix crash with transient storage and zero chunk size (Mikulas Patocka)   
  - xen-pciback: reconfigure also from backend watch handler (Jan Beulich)   
  - rapidio: handle create_workqueue() failure (Anirudh Rayabharam)   
  - Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails" (Greg Kroah-Hartman)   
  - ALSA: hda/realtek: reset eapd coeff to default value for alc287 (Hui Wang)   
  - Revert "ALSA: sb8: add a check for request_region" (Greg Kroah-Hartman)   
  - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro (Takashi Sakamoto)   
  - ALSA: usb-audio: Validate MS endpoint descriptors (Takashi Iwai)   
  - ALSA: line6: Fix racy initialization of LINE6 MIDI (Takashi Iwai)   
  - cifs: fix memory leak in smb2_copychunk_range (Ronnie Sahlberg)   
  - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly (Oleg Nesterov)   
  - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() (Zhen Lei)   
  - RDMA/rxe: Clear all QP fields if creation failed (Leon Romanovsky)   
  - openrisc: Fix a memory leak (Christophe JAILLET)   
  - Linux 4.14.233 (Greg Kroah-Hartman)   
  - ipv6: remove extra dev_hold() for fallback tunnels (Eric Dumazet)   
  - xhci: Do not use GFP_KERNEL in (potentially) atomic context (Christophe JAILLET)   
  - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)   
  - sit: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)   
  - serial: 8250: fix potential deadlock in rs485-mode (Tomas Melin)   
  - lib: stackdepot: turn depot_lock spinlock to raw_spinlock (Zqiang)   
  - block: reexpand iov_iter after read/write (yangerkun)   
  - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP (Hui Wang)   
  - gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 (Hans de Goede)   
  - ceph: fix fscache invalidation (Jeff Layton)   
  - um: Mark all kernel symbols as local (Johannes Berg)   
  - Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state (Hans de Goede)   
  - Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices (Hans de Goede)   
  - ACPI / hotplug / PCI: Fix reference count leak in enable_slot() (Feilong Lin)   
  - ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() (louis.wang)   
  - PCI: thunder: Fix compile testing (Arnd Bergmann)   
  - isdn: capi: fix mismatched prototypes (Arnd Bergmann)   
  - cxgb4: Fix the -Wmisleading-indentation warning (Kaixu Xia)   
  - usb: sl811-hcd: improve misleading indentation (Arnd Bergmann)   
  - kgdb: fix gcc-11 warning on indentation (Arnd Bergmann)   
  - x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes (Arnd Bergmann)   
  - clk: exynos7: Mark aclk_fsys1_200 as critical (Paweł Chmiel)   
  - netfilter: conntrack: Make global sysctls readonly in non-init netns (Jonathon Reinhart)   
  - kobject_uevent: remove warning in init_uevent_argv() (Greg Kroah-Hartman)   
  - thermal/core/fair share: Lock the thermal zone while looping over instances (Lukasz Luba)   
  - MIPS: Avoid handcoded DIVU in `__div64_32' altogether (Maciej W. Rozycki)   
  - MIPS: Avoid DIVU in `__div64_32' is result would be zero (Maciej W. Rozycki)   
  - MIPS: Reinstate platform `__div64_32' handler (Maciej W. Rozycki)   
  - FDDI: defxx: Make MMIO the configuration default except for EISA (Maciej W. Rozycki)   
  - KVM: x86: Cancel pvclock_gtod_work on module removal (Thomas Gleixner)   
  - iio: tsl2583: Fix division by a zero lux_val (Colin Ian King)   
  - iio: gyro: mpu3050: Fix reported temperature value (Dmitry Osipenko)   
  - usb: core: hub: fix race condition about TRSMRCY of resume (Chunfeng Yun)   
  - usb: dwc2: Fix gadget DMA unmap direction (Phil Elwell)   
  - usb: xhci: Increase timeout for HC halt (Maximilian Luz)   
  - usb: dwc3: omap: improve extcon initialization (Marcel Hamer)   
  - blk-mq: Swap two calls in blk_mq_exit_queue() (Bart Van Assche)   
  - ACPI: scan: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - usb: fotg210-hcd: Fix an error message (Christophe JAILLET)   
  - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error (Dinghao Liu)   
  - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected (Kai-Heng Feng)   
  - userfaultfd: release page in error path to avoid BUG_ON (Axel Rasmussen)   
  - squashfs: fix divide error in calculate_skip() (Phillip Lougher)   
  - powerpc/64s: Fix crashes when toggling entry flush barrier (Michael Ellerman)   
  - powerpc/64s: Fix crashes when toggling stf barrier (Michael Ellerman)   
  - ARC: entry: fix off-by-one error in syscall number validation (Vineet Gupta)   
  - netfilter: nftables: avoid overflows in nft_hash_buckets() (Eric Dumazet)   
  - kernel: kexec_file: fix error return code of kexec_calculate_store_digests() (Jia-Ju Bai)   
  - net: fix nla_strcmp to handle more then one trailing null character (Maciej Żenczykowski)   
  - ksm: fix potential missing rmap_item for stable_node (Miaohe Lin)   
  - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() (Miaohe Lin)   
  - khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() (Miaohe Lin)   
  - drm/radeon: Fix off-by-one power_state index heap overwrite (Kees Cook)   
  - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b (Xin Long)   
  - rtc: ds1307: Fix wday settings for rx8130 (Nobuhiro Iwamatsu)   
  - NFSv4.2 fix handling of sr_eof in SEEK's reply (Olga Kornievskaia)   
  - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (Nikola Livic)   
  - NFS: Deal correctly with attribute generation counter overflow (Trond Myklebust)   
  - NFSv4.2: Always flush out writes in nfs42_proc_fallocate() (Trond Myklebust)   
  - rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() (Jia-Ju Bai)   
  - ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook (Zhen Lei)   
  - PCI: Release OF node in pci_scan_device()'s error path (Dmitry Baryshkov)   
  - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs (Colin Ian King)   
  - ASoC: rt286: Make RT286_SET_GPIO_* readable and writable (David Ward)   
  - net: ethernet: mtk_eth_soc: fix RX VLAN offload (Felix Fietkau)   
  - powerpc/iommu: Annotate nested lock for lockdep (Alexey Kardashevskiy)   
  - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join (Gustavo A. R. Silva)   
  - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt (Gustavo A. R. Silva)   
  - powerpc/pseries: Stop calling printk in rtas_stop_self() (Michael Ellerman)   
  - samples/bpf: Fix broken tracex1 due to kprobe argument change (Yaqi Chen)   
  - ASoC: rt286: Generalize support for ALC3263 codec (David Ward)   
  - powerpc/smp: Set numa node before updating mask (Srikar Dronamraju)   
  - sctp: Fix out-of-bounds warning in sctp_process_asconf_param() (Gustavo A. R. Silva)   
  - kconfig: nconf: stop endless search loops (Mihai Moldovan)   
  - selftests: Set CC to clang in lib.mk if LLVM is set (Yonghong Song)   
  - cuse: prevent clone (Miklos Szeredi)   
  - pinctrl: samsung: use 'int' for register masks in Exynos (Krzysztof Kozlowski)   
  - mac80211: clear the beacon's CRC after channel switch (Emmanuel Grumbach)   
  - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods (Eric Dumazet)   
  - Bluetooth: check for zapped sk before connecting (Archie Pusaka)   
  - Bluetooth: initialize skb_queue_head at l2cap_chan_create() (Tetsuo Handa)   
  - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default (Archie Pusaka)   
  - ALSA: rme9652: don't disable if not enabled (Tong Zhang)   
  - ALSA: hdspm: don't disable if not enabled (Tong Zhang)   
  - ALSA: hdsp: don't disable if not enabled (Tong Zhang)   
  - net: stmmac: Set FIFO sizes for ipq806x (Jonathan McDowell)   
  - tipc: convert dest node's address to network order (Hoang Le)   
  - fs: dlm: fix debugfs dump (Alexander Aring)   
  - tpm: fix error return code in tpm2_get_cc_attrs_tbl() (Zhen Lei)   
  - Revert "fdt: Properly handle "no-map" field in the memory region" (Quentin Perret)   
  - Revert "of/fdt: Make sure no-map does not remove already reserved regions" (Quentin Perret)   
  - smp: Fix smp_call_function_single_async prototype (Arnd Bergmann)   
  - kfifo: fix ternary sign extension bugs (Dan Carpenter)   
  - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req (Lv Yunlong)   
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Lv Yunlong)   
  - powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') (Christophe Leroy)   
  - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices (Toke Høiland-Jørgensen)   
  - net: davinci_emac: Fix incorrect masking of tx and rx error channel (Colin Ian King)   
  - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails (Sindhu Devale)   
  - vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella)   
  - mwl8k: Fix a double Free in mwl8k_probe_hw (Lv Yunlong)   
  - i2c: sh7760: fix IRQ error path (Sergey Shtylyov)   
  - rtlwifi: 8821ae: upgrade PHY and RF parameters (Ping-Ke Shih)   
  - powerpc/pseries: extract host bridge from pci_bus prior to bus removal (Tyrel Datwyler)   
  - MIPS: pci-legacy: stop using of_pci_range_to_resource (Ilya Lipnitskiy)   
  - i2c: sh7760: add IRQ check (Sergey Shtylyov)   
  - i2c: jz4780: add IRQ check (Sergey Shtylyov)   
  - i2c: emev2: add IRQ check (Sergey Shtylyov)   
  - i2c: cadence: add IRQ check (Sergey Shtylyov)   
  - net: thunderx: Fix unintentional sign extension issue (Colin Ian King)   
  - IB/hfi1: Fix error return code in parse_platform_config() (Wang Wensheng)   
  - mt7601u: fix always true expression (Colin Ian King)   
  - mac80211: bail out if cipher schemes are invalid (Johannes Berg)   
  - powerpc: iommu: fix build when neither PCI or IBMVIO is set (Randy Dunlap)   
  - powerpc/perf: Fix PMU constraint check for EBB events (Athira Rajeev)   
  - liquidio: Fix unintented sign extension of a left shift of a u16 (Colin Ian King)   
  - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls (Takashi Iwai)   
  - nfc: pn533: prevent potential memory corruption (Dan Carpenter)   
  - bug: Remove redundant condition check in report_bug (Andrew Scull)   
  - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect (Jia Zhou)   
  - powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration (Chen Huang)   
  - powerpc/prom: Mark identical_pvr_fixup as __init (Nathan Chancellor)   
  - net: lapbether: Prevent racing when checking whether the netif is running (Xie He)   
  - perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars (Arnaldo Carvalho de Melo)   
  - HID: plantronics: Workaround for double volume key presses (Maxim Mikityanskiy)   
  - x86/events/amd/iommu: Fix sysfs type mismatch (Nathan Chancellor)   
  - HSI: core: fix resource leaks in hsi_add_client_from_dt() (Dan Carpenter)   
  - mfd: stm32-timers: Avoid clearing auto reload register (Fabrice Gasnier)   
  - scsi: sni_53c710: Add IRQ check (Sergey Shtylyov)   
  - scsi: sun3x_esp: Add IRQ check (Sergey Shtylyov)   
  - scsi: jazz_esp: Add IRQ check (Sergey Shtylyov)   
  - clk: uniphier: Fix potential infinite loop (Colin Ian King)   
  - vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer (Jason Gunthorpe)   
  - ata: libahci_platform: fix IRQ check (Sergey Shtylyov)   
  - sata_mv: add IRQ checks (Sergey Shtylyov)   
  - pata_ipx4xx_cf: fix IRQ check (Sergey Shtylyov)   
  - pata_arasan_cf: fix IRQ check (Sergey Shtylyov)   
  - x86/kprobes: Fix to check non boostable prefixes correctly (Masami Hiramatsu)   
  - media: m88rs6000t: avoid potential out-of-bounds reads on arrays (Colin Ian King)   
  - media: omap4iss: return error code when omap4iss_get() failed (Yang Yingliang)   
  - media: vivid: fix assignment of dev->fbuf_out_flags (Colin Ian King)   
  - ttyprintk: Add TTY hangup callback. (Tetsuo Handa)   
  - x86/platform/uv: Fix !KEXEC build failure (Ingo Molnar)   
  - platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table (Steffen Dirkwinkel)   
  - firmware: qcom-scm: Fix QCOM_SCM configuration (He Ying)   
  - tty: fix return value for unsupported ioctls (Johan Hovold)   
  - tty: actually undefine superseded ASYNC flags (Johan Hovold)   
  - USB: cdc-acm: fix unprivileged TIOCCSERIAL (Johan Hovold)   
  - usb: gadget: r8a66597: Add missing null check on return from platform_get_resource (Colin Ian King)   
  - crypto: qat - Fix a double free in adf_create_ring (Lv Yunlong)   
  - ACPI: CPPC: Replace cppc_attr with kobj_attribute (Nathan Chancellor)   
  - soc: qcom: mdt_loader: Detect truncated read of segments (Bjorn Andersson)   
  - soc: qcom: mdt_loader: Validate that p_filesz < p_memsz (Bjorn Andersson)   
  - spi: Fix use-after-free with devm_spi_alloc_* (William A. Kennington III)   
  - staging: greybus: uart: fix unprivileged TIOCCSERIAL (Johan Hovold)   
  - staging: rtl8192u: Fix potential infinite loop (Colin Ian King)   
  - mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init (Lv Yunlong)   
  - USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR() (Yang Yingliang)   
  - crypto: qat - fix error path in adf_isr_resource_alloc() (Giovanni Cabiddu)   
  - phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally (Geert Uytterhoeven)   
  - bus: qcom: Put child node before return (Pan Bian)   
  - mtd: require write permissions for locking and badblock ioctls (Michael Walle)   
  - fotg210-udc: Complete OUT requests on short packets (Fabian Vogt)   
  - fotg210-udc: Don't DMA more than the buffer can take (Fabian Vogt)   
  - fotg210-udc: Mask GRP2 interrupts we don't handle (Fabian Vogt)   
  - fotg210-udc: Remove a dubious condition leading to fotg210_done (Fabian Vogt)   
  - fotg210-udc: Fix EP0 IN requests bigger than two packets (Fabian Vogt)   
  - fotg210-udc: Fix DMA on EP0 for length > max packet size (Fabian Vogt)   
  - crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init (Tong Zhang)   
  - crypto: qat - don't release uninitialized resources (Tong Zhang)   
  - usb: gadget: pch_udc: Check for DMA mapping error (Andy Shevchenko)   
  - usb: gadget: pch_udc: Check if driver is present before calling ->setup() (Andy Shevchenko)   
  - usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() (Andy Shevchenko)   
  - x86/microcode: Check for offline CPUs before requesting new microcode (Otavio Pontes)   
  - usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS (Badhri Jagan Sridharan)   
  - serial: stm32: fix tx_empty condition (Erwan Le Ray)   
  - serial: stm32: fix incorrect characters on console (Erwan Le Ray)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Snow (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family (Krzysztof Kozlowski)   
  - memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] (Colin Ian King)   
  - usb: gadget: pch_udc: Revert d3cb25a12138 completely (Andy Shevchenko)   
  - KVM: s390: split kvm_s390_real_to_abs (Claudio Imbrenda)   
  - KVM: s390: fix guarded storage control register handling (Heiko Carstens)   
  - KVM: s390: split kvm_s390_logical_to_effective (Claudio Imbrenda)   
  - x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported (Sean Christopherson)   
  - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices (Takashi Iwai)   
  - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries (Takashi Iwai)   
  - drm/radeon: fix copy of uninitialized variable back to userspace (Colin Ian King)   
  - cfg80211: scan: drop entry from hidden_list on overflow (Johannes Berg)   
  - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() (Dan Carpenter)   
  - md: md_open returns -EBUSY when entering racing area (Zhao Heming)   
  - md: factor out a mddev_find_locked helper from mddev_find (Christoph Hellwig)   
  - md: split mddev_find (Christoph Hellwig)   
  - md-cluster: fix use-after-free issue when removing rdev (Heming Zhao)   
  - tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware))   
  - misc: vmw_vmci: explicitly initialize vmci_datagram payload (Tetsuo Handa)   
  - misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct (Tetsuo Handa)   
  - misc: lis3lv02d: Fix false-positive WARN on various HP models (Hans de Goede)   
  - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR (Maciej W. Rozycki)   
  - MIPS: pci-rt2880: fix slot 0 configuration (Ilya Lipnitskiy)   
  - net/nfc: fix use-after-free llcp_sock_bind/connect (Or Cohen)   {CVE-2021-23134} 
  - modules: inherit TAINT_PROPRIETARY_MODULE (Christoph Hellwig)   
  - modules: return licensing information from find_symbol (Christoph Hellwig)   
  - modules: rename the licence field in struct symsearch to license (Christoph Hellwig)   
  - modules: unexport __module_address (Christoph Hellwig)   
  - modules: unexport __module_text_address (Christoph Hellwig)   
  - modules: mark each_symbol_section static (Christoph Hellwig)   
  - modules: mark find_symbol static (Christoph Hellwig)   
  - modules: mark ref_module static (Christoph Hellwig)   
  - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails (Benjamin Block)   
  - dm space map common: fix division bug in sm_ll_find_free_block() (Joe Thornber)   
  - dm persistent data: packed struct should have an aligned() attribute too (Joe Thornber)   
  - tracing: Map all PIDs to command lines (Steven Rostedt (VMware))   
  - usb: dwc3: gadget: Fix START_TRANSFER link state check (Thinh Nguyen)   
  - usb: gadget/function/f_fs string table fix for multiple languages (Dean Anderson)   
  - usb: gadget: Fix double free of device descriptor pointers (Hemant Kumar)   
  - usb: gadget: dummy_hcd: fix gpf in gadget_setup (Anirudh Rayabharam)   
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Peilin Ye)   
  - ext4: fix error code in ext4_commit_super (Fengnan Chang)   
  - ext4: fix check to prevent false positive report of incorrect used inodes (Zhang Yi)   
  - ftrace: Handle commands when closing set_ftrace_filter file (Steven Rostedt (VMware))   
  - posix-timers: Preserve return value in clock_adjtime32() (Chen Jun)   
  - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") (Thomas Gleixner)   
  - jffs2: check the validity of dstlen in jffs2_zlib_compress() (Yang Yang)   
  - Fix misc new gcc warnings (Linus Torvalds)   
  - security: commoncap: fix -Wstringop-overread warning (Arnd Bergmann)   
  - intel_th: pci: Add Alder Lake-M support (Alexander Shishkin)   
  - powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h (Tony Ambardar)   
  - powerpc/eeh: Fix EEH handling for hugepages in ioremap space. (Mahesh Salgaonkar)   
  - jffs2: Fix kasan slab-out-of-bounds problem (lizhe)   
  - NFSv4: Don't discard segments marked for return in _pnfs_return_layout() (Trond Myklebust)   
  - ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure (Marc Zyngier)   
  - openvswitch: fix stack OOB read while fragmenting IPv4 packets (Davide Caratti)   
  - arm64/vdso: Discard .note.gnu.property sections in vDSO (Bill Wendling)   
  - btrfs: fix race when picking most recent mod log operation for an old root (Filipe Manana)   
  - ALSA: sb: Fix two use after free in snd_sb_qsound_build (Lv Yunlong)   
  - ALSA: hda/conexant: Re-order CX5066 quirk table entries (Takashi Iwai)   
  - ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer (Lv Yunlong)   
  - scsi: libfc: Fix a format specifier (Bart Van Assche)   
  - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic (James Smart)   
  - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response (James Smart)   
  - drm/amdgpu: fix NULL pointer dereference (Guchun Chen)   
  - drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal (Marijn Suijten)   
  - media: gscpa/stv06xx: fix memory leak (Hans Verkuil)   
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init (Pavel Skripkin)   
  - media: i2c: adv7842: fix possible use-after-free in adv7842_remove() (Yang Yingliang)   
  - media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() (Yang Yingliang)   
  - media: adv7604: fix possible use-after-free in adv76xx_remove() (Yang Yingliang)   
  - power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() (Yang Yingliang)   
  - power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() (Yang Yingliang)   
  - clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return (Colin Ian King)   
  - media: vivid: update EDID (Hans Verkuil)   
  - media: em28xx: fix memory leak (Muhammad Usama Anjum)   
  - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() (Ewan D. Milne)   
  - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() (Bart Van Assche)   
  - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f (shaoyunl)   
  - power: supply: Use IRQF_ONESHOT (dongjian)   
  - media: gspca/sq905.c: fix uninitialized variable (Hans Verkuil)   
  - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs (Daniel Niv)   
  - extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged (Hans de Goede)   
  - power: supply: bq27xxx: fix power_avg for newer ICs (Matthias Schiffer)   
  - media: ite-cir: check for receive overflow (Sean Young)   
  - scsi: target: pscsi: Fix warning in pscsi_complete_cmd() (Chaitanya Kulkarni)   
  - scsi: lpfc: Fix pt2pt connection does not recover after LOGO (James Smart)   
  - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe (James Smart)   
  - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s (Josef Bacik)   
  - phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() (Yang Yingliang)   
  - intel_th: Consistency and off-by-one fix (Pavel Machek)   
  - spi: omap-100k: Fix reference leak to master (Wei Yongjun)   
  - spi: dln2: Fix reference leak to master (Wei Yongjun)   
  - perf/arm_pmu_platform: Fix error handling (Robin Murphy)   
  - tee: optee: do not check memref size on return from Secure World (Jerome Forissier)   
  - x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS) (John Millikin)   
  - PCI: PM: Do not read power state in pci_enable_device_flags() (Rafael J. Wysocki)   
  - usb: xhci: Fix port minor revision (Thinh Nguyen)   
  - usb: dwc3: gadget: Ignore EP queue requests during bus reset (Wesley Cheng)   
  - usb: gadget: f_uac1: validate input parameters (Ruslan Bilovol)   
  - usb: gadget: uvc: add bInterval checking for HS mode (Pawel Laszczak)   
  - crypto: api - check for ERR pointers in crypto_destroy_tfm() (Ard Biesheuvel)   
  - staging: wimax/i2400m: fix byte-order issue (karthik alapati)   
  - fbdev: zero-fill colormap in fbcmap.c (Phillip Potter)   
  - intel_th: pci: Add Rocket Lake CPU support (Alexander Shishkin)   
  - btrfs: fix metadata extent leak after failure to create subvolume (Filipe Manana)   
  - cifs: Return correct error code from smb2_get_enc_key (Paul Aurich)   
  - mmc: core: Set read only for SD cards with permanent write protect bit (Seunghui Lee)   
  - mmc: core: Do a power cycle when the CMD11 fails (DooHyun Hwang)   
  - mmc: block: Update ext_csd.cache_ctrl if it was written (Avri Altman)   
  - spi: spi-ti-qspi: Free DMA resources (Tudor Ambarus)   
  - ecryptfs: fix kernel panic with null dev_name (Jeffrey Mitchell)   
  - arm64: dts: mt8173: fix property typo of 'phys' in dsi node (Chunfeng Yun)   
  - ACPI: custom_method: fix a possible memory leak (Mark Langsdorf)   
  - ACPI: custom_method: fix potential use-after-free issue (Mark Langsdorf)   
  - s390/disassembler: increase ebpf disasm buffer size (Vasily Gorbik)   
  - platform/x86: thinkpad_acpi: Correct thermal sensor allocation (Mark Pearson)   
  - USB: Add reset-resume quirk for WD19's Realtek Hub (Chris Chiu)   
  - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet (Kai-Heng Feng)   
  - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX (Takashi Iwai)   
  - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() (Jiri Kosina)   
  - bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann)   
  - mips: Do not include hi and lo in clobber list for R6 (Romain Naour)   
  - MIPS: cpu-features.h: Replace __mips_isa_rev with MIPS_ISA_REV (Matt Redfearn)   
  - MIPS: Introduce isa-rev.h to define MIPS_ISA_REV (Matt Redfearn)   
  - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() (Jiri Kosina)   
  - net: usb: ax88179_178a: initialize local variables before use (Phillip Potter)   
  - bpf: fix up selftests after backports were fixed (Frank van der Linden)   
  - bpf: Fix backport of "bpf: restrict unknown scalars of mixed signed bounds for unprivileged" (Samuel Mendoza-Jonas)   
  - ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() (Rafael J. Wysocki)   
  - ACPI: tables: x86: Reserve memory occupied by ACPI tables (Rafael J. Wysocki)   
  - usbip: vudc synchronize sysfs code paths (Shuah Khan)   
  - Linux 4.14.232 (Greg Kroah-Hartman)   
  - USB: CDC-ACM: fix poison/unpoison imbalance (Oliver Neukum)   
  - net: hso: fix NULL-deref on disconnect regression (Johan Hovold)   
  - x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access (Mike Galbraith)   
  - ia64: tools: remove duplicate definition of ia64_mf() on ia64 (John Paul Adrian Glaubitz)   
  - ia64: fix discontig.c section mismatches (Randy Dunlap)   
  - cavium/liquidio: Fix duplicate argument (Wan Jiabing)   
  - xen-netback: Check for hotplug-status existence before watching (Michael Brown)   
  - s390/entry: save the caller of psw_idle (Vasily Gorbik)   
  - net: geneve: check skb is large enough for IPv4/IPv6 header (Phillip Potter)   
  - ARM: dts: Fix swapped mmc order for omap3 (Tony Lindgren)   
  - HID: wacom: Assign boolean values to a bool variable (Jiapeng Zhong)   
  - HID: alps: fix error return code in alps_input_configured() (Jia-Ju Bai)   
  - pinctrl: lewisburg: Update number of pins in community (Yuanyuan Zhong)   
  - ext4: correct error label in ext4_rename() (Zhang Yi)   
  - net: hso: fix null-ptr-deref during tty device unregistration (Anirudh Rayabharam)   
  - gup: document and work around "COW can break either way" issue (Linus Torvalds)   
  - ARM: 9071/1: uprobes: Don't hook on thumb instructions (Fredrik Strupe)   
  - ARM: footbridge: fix PCI interrupt mapping (Russell King)   
  - ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)   
  - ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)   
  - ibmvnic: avoid calling napi_disable() twice (Lijun Pan)   
  - i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)   
  - net: sit: Unregister catch-all devices (Hristo Venev)   
  - net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)   
  - netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)   
  - netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)   
  - scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)   
  - arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)   
  - readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)   
  - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)   
  - Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)   
  - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)   
  - usbip: Fix incorrect double assignment to udc->ud.tcp_rx (Colin Ian King)   
  - pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)   
  - net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)   
  - net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)   
  - net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)   
  - net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)   
  - net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)   
  - net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)   
  - net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)   
  - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state (Martin Wilck)   
  - ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)   
  - ARM: keystone: fix integer overflow warning (Arnd Bergmann)   
  - neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)   
  - arc: kernel: Return -EFAULT if copy_to_user() fails (Wang Qing)   
  - ARM: dts: Fix moving mmc devices with aliases for omap4 & 5 (Tony Lindgren)   
  - dmaengine: dw: Make it dependent to HAS_IOMEM (Andy Shevchenko)   
  - Input: nspire-keypad - enable interrupts only when opened (Fabian Vogt)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.1.el7uek]
changelog:
  - can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)  [Orabug: 33030700]  {CVE-2021-34693} 
  - Linux 4.14.236 (Greg Kroah-Hartman)   
  - xen-pciback: redo VF placement in the virtual topology (Jan Beulich)   
  - sched/fair: Optimize select_idle_cpu (Cheng Jian)   
  - KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode (Sean Christopherson)   
  - bnxt_en: Remove the setting of dev_port. (Michael Chan)   
  - bpf: No need to simulate speculative domain for immediates (Daniel Borkmann)   
  - bpf: Fix mask direction swap upon off reg sign change (Daniel Borkmann)   
  - bpf: Wrap aux data inside bpf_sanitize_info container (Daniel Borkmann)   
  - bpf: Fix leakage of uninitialized bpf stack under speculation (Daniel Borkmann)   
  - selftests/bpf: make 'dubious pointer arithmetic' test useful (Alexei Starovoitov)   
  - selftests/bpf: fix test_align (Alexei Starovoitov)   
  - bpf/verifier: disallow pointer subtraction (Alexei Starovoitov)   
  - bpf: Update selftests to reflect new error states (Daniel Borkmann)   
  - bpf: Tighten speculative pointer arithmetic mask (Daniel Borkmann)   
  - bpf: Move sanitize_val_alu out of op switch (Daniel Borkmann)   
  - bpf: Refactor and streamline bounds check into helper (Daniel Borkmann)   
  - bpf: Improve verifier error messages for users (Daniel Borkmann)   
  - bpf: Rework ptr_limit into alu_limit and add common error path (Daniel Borkmann)   
  - bpf: Ensure off_reg has no mixed signed bounds for all types (Daniel Borkmann)   
  - bpf: Move off_reg into sanitize_ptr_alu (Daniel Borkmann)   
  - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)   
  - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY (Mina Almasry)   
  - btrfs: fixup error handling in fixup_inode_link_counts (Josef Bacik)   
  - btrfs: fix error handling in btrfs_del_csums (Josef Bacik)   
  - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (Krzysztof Kozlowski)   
  - ocfs2: fix data corruption by fallocate (Junxiao Bi)   
  - pid: take a reference when initializing `cad_pid` (Mark Rutland)   
  - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed (Ye Bin)   
  - ALSA: timer: Fix master timer notification (Takashi Iwai)   
  - net: caif: fix memory leak in cfusbl_device_notify (Pavel Skripkin)   
  - net: caif: fix memory leak in caif_device_notify (Pavel Skripkin)   
  - net: caif: add proper error handling (Pavel Skripkin)   
  - net: caif: added cfserl_release function (Pavel Skripkin)   
  - ieee802154: fix error return code in ieee802154_llsec_getparams() (Wei Yongjun)   
  - ieee802154: fix error return code in ieee802154_add_iface() (Zhen Lei)   
  - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (Pablo Neira Ayuso)   
  - HID: i2c-hid: fix format string mismatch (Arnd Bergmann)   
  - HID: pidff: fix error return code in hid_pidff_init() (Zhen Lei)   
  - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service (Julian Anastasov)   
  - vfio/platform: fix module_put call in error flow (Max Gurtovoy)   
  - vfio/pci: zap_vma_ptes() needs MMU (Randy Dunlap)   
  - vfio/pci: Fix error return code in vfio_ecap_init() (Zhen Lei)   
  - efi: cper: fix snprintf() use in cper_dimm_err_location() (Rasmus Villemoes)   
  - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared (Heiner Kallweit)   
  - net: usb: cdc_ncm: don't spew notifications (Grant Grundler)   
  - Linux 4.14.235 (Greg Kroah-Hartman)   
  - usb: core: reduce power-on-good delay time of root hub (Chunfeng Yun)   
  - drivers/net/ethernet: clean up unused assignments (Jesse Brandeburg)   
  - hugetlbfs: hugetlb_fault_mutex_hash() cleanup (Mike Kravetz)   
  - MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c (Randy Dunlap)   
  - MIPS: alchemy: xxs1500: add gpio-au1000.h header file (Randy Dunlap)   
  - sch_dsmark: fix a NULL deref in qdisc_reset() (Taehee Yoo)   
  - ipv6: record frag_max_size in atomic fragments in input path (Francesco Ruggeri)   
  - scsi: libsas: Use _safe() loop in sas_resume_port() (Dan Carpenter)   
  - ixgbe: fix large MTU request from VF (Jesse Brandeburg)   
  - bpf: Set mac_len in bpf_skb_change_head (Jussi Maki)   
  - ASoC: cs35l33: fix an error code in probe() (Dan Carpenter)   
  - staging: emxx_udc: fix loop in _nbu2ss_nuke() (Dan Carpenter)   
  - mld: fix panic in mld_newpack() (Taehee Yoo)   
  - net: bnx2: Fix error return code in bnx2_init_board() (Zhen Lei)   
  - net: mdio: octeon: Fix some double free issues (Christophe JAILLET)   
  - net: mdio: thunder: Fix a double free issue in the .remove function (Christophe JAILLET)   
  - net: netcp: Fix an error message (Christophe JAILLET)   
  - drm/amdgpu: Fix a use-after-free (xinhui pan)   
  - SMB3: incorrect file id in requests compounded with open (Steve French)   
  - platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI (Andy Shevchenko)   
  - platform/x86: hp-wireless: add AMD's hardware id to the supported list (Shyam Sundar S K)   
  - btrfs: do not BUG_ON in link_to_fixup_dir (Josef Bacik)   
  - openrisc: Define memory barrier mb (Peter Zijlstra)   
  - scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic (Matt Wang)   
  - media: gspca: properly check for errors in po1030_probe() (Greg Kroah-Hartman)   
  - media: dvb: Add check on sp8870_readreg return (Alaa Emad)   
  - libertas: register sysfs groups properly (Greg Kroah-Hartman)   
  - dmaengine: qcom_hidma: comment platform_driver_register call (Phillip Potter)   
  - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io (Phillip Potter)   
  - char: hpet: add checks after calling ioremap (Tom Seewald)   
  - net: caif: remove BUG_ON(dev == NULL) in caif_xmit (Du Cheng)   
  - net: fujitsu: fix potential null-ptr-deref (Anirudh Rayabharam)   
  - serial: max310x: unregister uart driver in case of failure and abort (Atul Gopinathan)   
  - platform/x86: hp_accel: Avoid invoking _INI to speed up resume (Kai-Heng Feng)   
  - perf jevents: Fix getting maximum number of fds (Felix Fietkau)   
  - i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare)   
  - i2c: s3c2410: fix possible NULL pointer deref on read message after write (Krzysztof Kozlowski)   
  - tipc: skb_linearize the head skb when reassembling msgs (Xin Long)   
  - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" (Hoang Le)   
  - drm/meson: fix shutdown crash when component not probed (Neil Armstrong)   
  - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config (Zhang Xiaoxu)   
  - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() (Trond Myklebust)   
  - NFS: fix an incorrect limit in filelayout_decode_layout() (Dan Carpenter)   
  - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)   
  - net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)   
  - usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen() (Yoshihiro Shimoda)   
  - USB: serial: pl2303: add device id for ADLINK ND-6530 GC (Zolton Jheng)   
  - USB: serial: ftdi_sio: add IDs for IDS GmbH Products (Dominik Andreas Schorpp)   
  - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 (Daniele Palmas)   
  - USB: serial: ti_usb_3410_5052: add startech.com device id (Sean MacLennan)   
  - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' (Zheyu Ma)   
  - serial: sh-sci: Fix off-by-one error in FIFO threshold register setting (Geert Uytterhoeven)   
  - USB: trancevibrator: fix control-request direction (Johan Hovold)   
  - iio: adc: ad7793: Add missing error code in ad7793_setup() (YueHaibing)   
  - staging: iio: cdc: ad7746: avoid overwrite of num_channels (Lucas Stankus)   
  - mei: request autosuspend after sending rx flow control (Alexander Usyskin)   
  - thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue (Mathias Nyman)   
  - misc/uss720: fix memory leak in uss720_probe (Dongliang Mu)   
  - kgdb: fix gcc-11 warnings harder (Greg Kroah-Hartman)   
  - dm snapshot: properly fix a crash when an origin has no snapshots (Mikulas Patocka)   
  - ath10k: Validate first subframe of A-MSDU before processing the list (Sriram R)   
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)   {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)   
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)   
  - mac80211: check defrag PN against current frame (Johannes Berg)   
  - mac80211: add fragment cache to sta_info (Johannes Berg)   
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)   {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)   {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)   
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)   {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)   {CVE-2020-26147} 
  - net: hso: fix control-request directions (Johan Hovold)   
  - proc: Check /proc/$pid/attr/ writes against file opener (Kees Cook)   
  - perf intel-pt: Fix transaction abort handling (Adrian Hunter)   
  - perf intel-pt: Fix sample instruction bytes (Adrian Hunter)   
  - iommu/vt-d: Fix sysfs leak in alloc_iommu() (Rolf Eike Beer)   
  - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() (Anna Schumaker)   
  - NFC: nci: fix memory leak in nci_allocate_device (Dongliang Mu)   
  - usb: dwc3: gadget: Enable suspend events (Jack Pham)   
  - scripts: switch explicitly to Python 3 (Andy Shevchenko)   
  - tweewide: Fix most Shebang lines (Finn Behrens)   
  - A/A Bonding: dev_hold/put() the delayed GARP work handler's netdev in rdmaip (Sharath Srinivasan)  [Orabug: 33161269]  
  - capmem: Mark the pages as non-readonly+dirty. (David Clear)  [Orabug: 33155665]  
  - Revert "capmem: Mark the pages as non-readonly+dirty." (Dave Kleikamp)  [Orabug: 33155665]  
  - ionic: clean interrupt before enabling queue to avoid credit race (Shannon Nelson)  [Orabug: 33155665]  
  - scsi: core: Retry I/O for Notify (Enable Spinup) Required error (Quat Le)  [Orabug: 33165871]  
  - Revert "x86/reboot: Force all cpus to exit VMX root if VMX is supported" (Somasundaram Krishnasamy)  [Orabug: 33156450]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.2.el7uek]
changelog:
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 33186981]  
  - rds: Congestion tracepoints should be enabled by default (Greg Jumper)  [Orabug: 33145670]  
  - Linux 4.14.238 (Sasha Levin)   
  - i2c: robotfuzz-osif: fix control-request directions (Johan Hovold)   
  - nilfs2: fix memory leak in nilfs_sysfs_delete_device_group (Pavel Skripkin)   
  - pinctrl: stm32: fix the reported number of GPIO lines per bank (Fabien Dessenne)   
  - net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY (Esben Haabendal)   
  - net: qed: Fix memcpy() overflow of qed_dcbx_params() (Kees Cook)   
  - r8169: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)   
  - sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)   
  - r8152: Avoid memcpy() over-reading of ETH_SS_STATS (Kees Cook)   
  - net/packet: annotate accesses to po->ifindex (Eric Dumazet)   
  - net/packet: annotate accesses to po->bind (Eric Dumazet)   
  - net: caif: fix memory leak in ldisc_open (Pavel Skripkin)   
  - inet: annotate date races around sk->sk_txhash (Eric Dumazet)   
  - ping: Check return value of function 'ping_queue_rcv_skb' (Zheng Yongjun)   
  - mac80211: drop multicast fragments (Johannes Berg)   
  - cfg80211: call cfg80211_leave_ocb when switching away from OCB (Du Cheng)   
  - mac80211: remove warning in ieee80211_get_sband() (Johannes Berg)   
  - Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Rafael J. Wysocki)   
  - arm64: perf: Disable PMU while processing counter overflows (Suzuki K Poulose)   
  - MIPS: generic: Update node names to avoid unit addresses (Nathan Chancellor)   
  - Makefile: Move -Wno-unused-but-set-variable out of GCC only block (Nathan Chancellor)   
  - ARM: 9081/1: fix gcc-10 thumb2-kernel regression (Arnd Bergmann)   
  - drm/radeon: wait for moving fence after pinning (Christian König)   
  - drm/nouveau: wait for moving fence after pinning v2 (Christian König)   
  - x86/fpu: Reset state for all signal restore failures (Thomas Gleixner)   
  - unfuck sysfs_mount() (Al Viro)   
  - kernfs: deal with kernfs_fill_super() failures (Al Viro)   
  - usb: dwc3: core: fix kernel panic when do reboot (Peter Chen)   
  - inet: use bigger hash table for IP ID generation (Eric Dumazet)   
  - can: bcm/raw/isotp: use per module netdevice notifier (Tetsuo Handa)   
  - net: fec_ptp: add clock rate zero check (Fugang Duan)   
  - mm/slub.c: include swab.h (Andrew Morton)   
  - net: bridge: fix vlan tunnel dst refcnt when egressing (Nikolay Aleksandrov)   
  - net: bridge: fix vlan tunnel dst null pointer dereference (Nikolay Aleksandrov)   
  - dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc (Bumyong Lee)   
  - ARCv2: save ABI registers across signal handling (Vineet Gupta)   
  - PCI: Work around Huawei Intelligent NIC VF FLR erratum (Chiqijun)   
  - PCI: Add ACS quirk for Broadcom BCM57414 NIC (Sriharsha Basavapatna)   
  - PCI: Mark some NVIDIA GPUs to avoid bus reset (Shanker Donthineni)   
  - PCI: Mark TI C667X to avoid bus reset (Antti Järvinen)   
  - tracing: Do no increment trace_clock_global() by one (Steven Rostedt (VMware))   
  - tracing: Do not stop recording comms if the trace file is being read (Steven Rostedt (VMware))   
  - tracing: Do not stop recording cmdlines when tracing is off (Steven Rostedt (VMware))   
  - usb: core: hub: Disable autosuspend for Cypress CY7C65632 (Andrew Lunn)   
  - can: mcba_usb: fix memory leak in mcba_usb (Pavel Skripkin)   
  - hwmon: (scpi-hwmon) shows the negative temperature properly (Riwen Lu)   
  - radeon: use memcpy_to/fromio for UVD fw upload (Chen Li)   
  - net: ethernet: fix potential use-after-free in ec_bhf_remove (Pavel Skripkin)   
  - icmp: don't send out ICMP messages with a source address of 0.0.0.0 (Toke Høiland-Jørgensen)   
  - net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)   
  - net: hamradio: fix memory leak in mkiss_close (Pavel Skripkin)   
  - be2net: Fix an error handling path in 'be_probe()' (Christophe JAILLET)   
  - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (Eric Dumazet)   
  - net: ipv4: fix memory leak in ip_mc_add1_src (Chengyang Fan)   
  - net: usb: fix possible use-after-free in smsc75xx_bind (Dongliang Mu)   
  - net: cdc_ncm: switch to eth%d interface naming (Maciej Żenczykowski)   
  - netxen_nic: Fix an error handling path in 'netxen_nic_probe()' (Christophe JAILLET)   
  - qlcnic: Fix an error handling path in 'qlcnic_probe()' (Christophe JAILLET)   
  - net: stmmac: dwmac1000: Fix extended MAC address registers definition (Jisheng Zhang)   
  - alx: Fix an error handling path in 'alx_probe()' (Christophe JAILLET)   
  - netfilter: synproxy: Fix out of bounds when parsing TCP options (Maxim Mikityanskiy)   
  - rtnetlink: Fix regression in bridge VLAN configuration (Ido Schimmel)   
  - udp: fix race between close() and udp_abort() (Paolo Abeni)   
  - net: rds: fix memory leak in rds_recvmsg (Pavel Skripkin)   
  - net: ipv4: fix memory leak in netlbl_cipsov4_add_std (Nanyong Sun)   
  - batman-adv: Avoid WARN_ON timing related checks (Sven Eckelmann)   
  - mm/memory-failure: make sure wait for page writeback in memory_failure (yangerkun)   
  - dmaengine: stedma40: add missing iounmap() on error in d40_probe() (Yang Yingliang)   
  - dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM (Randy Dunlap)   
  - dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM (Randy Dunlap)   
  - fib: Return the correct errno code (Zheng Yongjun)   
  - net: Return the correct errno code (Zheng Yongjun)   
  - net/x25: Return the correct errno code (Zheng Yongjun)   
  - rtnetlink: Fix missing error code in rtnl_bridge_notify() (Jiapeng Chong)   
  - net: ipconfig: Don't override command-line hostnames or domains (Josh Triplett)   
  - nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue() (Hannes Reinecke)   
  - nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails (Hannes Reinecke)   
  - nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues() (Hannes Reinecke)   
  - ethernet: myri10ge: Fix missing error code in myri10ge_probe() (Jiapeng Chong)   
  - scsi: target: core: Fix warning on realtime kernels (Maurizio Lombardi)   
  - gfs2: Fix use-after-free in gfs2_glock_shrink_scan (Hillf Danton)   
  - HID: gt683r: add missing MODULE_DEVICE_TABLE (Bixuan Cui)   
  - ARM: OMAP2+: Fix build warning when mmc_omap is not built (Yongqiang Liu)   
  - HID: usbhid: fix info leak in hid_submit_ctrl (Anirudh Rayabharam)   
  - HID: Add BUS_VIRTUAL to hid_connect logging (Mark Bolhuis)   
  - HID: hid-sensor-hub: Return error for hid_set_field() failure (Srinivas Pandruvada)   
  - net: ieee802154: fix null deref in parse dev addr (Dan Robertson)   
  - Linux 4.14.237 (Greg Kroah-Hartman)   
  - proc: only require mm_struct for writing (Linus Torvalds)   
  - tracing: Correct the length check which causes memory corruption (Liangyan)   
  - ftrace: Do not blindly read the ip address in ftrace_bug() (Steven Rostedt (VMware))   
  - scsi: core: Only put parent device if host state differs from SHOST_CREATED (Ming Lei)   
  - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING (Ming Lei)   
  - scsi: core: Fix error handling of scsi_host_alloc() (Ming Lei)   
  - NFS: Fix use-after-free in nfs4_init_client() (Anna Schumaker)   
  - kvm: fix previous commit for 32-bit builds (Paolo Bonzini)   
  - perf session: Correct buffer copying when peeking events (Leo Yan)   
  - NFS: Fix a potential NULL dereference in nfs_get_client() (Dan Carpenter)   
  - perf: Fix data race between pin_count increment/decrement (Marco Elver)   
  - regulator: max77620: Use device_set_of_node_from_dev() (Dmitry Osipenko)   
  - regulator: core: resolve supply for boot-on/always-on regulators (Dmitry Baryshkov)   
  - usb: fix various gadget panics on 10gbps cabling (Maciej Żenczykowski)   
  - usb: fix various gadgets null ptr deref on 10gbps cabling. (Maciej Żenczykowski)   
  - usb: gadget: eem: fix wrong eem header operation (Linyu Yuan)   
  - USB: serial: quatech2: fix control-request directions (Johan Hovold)   
  - USB: serial: omninet: add device id for Zyxel Omni 56K Plus (Alexandre GRIVEAUX)   
  - USB: serial: ftdi_sio: add NovaTech OrionMX product ID (George McCollister)   
  - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind (Wesley Cheng)   
  - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path (Mayank Rana)   
  - usb: dwc3: ep0: fix NULL pointer exception (Marian-Cristian Rotariu)   
  - USB: f_ncm: ncm_bitrate (speed) is unsigned (Maciej Żenczykowski)   
  - cgroup1: don't allow '
  ' in renaming (Alexander Kuznetsov)   
  - btrfs: return value from btrfs_mark_extent_written() in case of error (Ritesh Harjani)   
  - staging: rtl8723bs: Fix uninitialized variables (Wenli Looi)   
  - kvm: avoid speculation-based attacks from out-of-range memslot accesses (Paolo Bonzini)   
  - drm: Lock pointer access in drm_master_release() (Desmond Cheong Zhi Xi)   
  - drm: Fix use-after-free read in drm_getunique() (Desmond Cheong Zhi Xi)   
  - i2c: mpc: implement erratum A-004447 workaround (Chris Packham)   
  - i2c: mpc: Make use of i2c_recover_bus() (Chris Packham)   
  - powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers (Chris Packham)   
  - powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers (Chris Packham)   
  - bnx2x: Fix missing error code in bnx2x_iov_init_one() (Jiapeng Chong)   
  - MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER (Tiezhu Yang)   
  - net: appletalk: cops: Fix data race in cops_probe1 (Saubhik Mukherjee)   
  - net: macb: ensure the device is available before accessing GEMGXL control registers (Zong Li)   
  - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal (Dmitry Bogdanov)   
  - scsi: vmw_pvscsi: Set correct residual data length (Matt Wang)   
  - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock (Zheyu Ma)   
  - wq: handle VM suspension in stall detection (Sergey Senozhatsky)   
  - cgroup: disable controllers at parse time (Shakeel Butt)   
  - net: mdiobus: get rid of a BUG_ON() (Dan Carpenter)   
  - netlink: disable IRQs for netlink_lock_table() (Johannes Berg)   
  - bonding: init notify_work earlier to avoid uninitialized use (Johannes Berg)   
  - isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)   
  - ASoC: sti-sas: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - net/nfc/rawsock.c: fix a permission check bug (Jeimon)   
  - proc: Track /proc/$pid/attr/ opener mm_struct (Kees Cook)   
  - rds/ib: quarantine STALE mr before dereg (Manjunath Patil)  [Orabug: 33150437]  
  - rds/ib: avoid dereg of mr in frwr_clean (Manjunath Patil)  [Orabug: 33150414]  
  - rds/ib: update mr incarnation after forming inv wr (Manjunath Patil)  [Orabug: 33177350]  
  - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114648]  {CVE-2021-3609}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.3.el7uek]
changelog:
  - drivers: updates for 1.15.9.21 (Shannon Nelson)  [Orabug: 33220300]  
  - Revert "rds/ib: reap tx completions during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: recover rds connection from interrupt loss scenario" (Manjunath Patil)  [Orabug: 33220435]  
  - Revert "rds/ib: move rds_ib_clear_irq_miss() to .h file" (Manjunath Patil)  [Orabug: 33220435]  
  - NFS: Don't call generic_error_remove_page() while holding locks (Trond Myklebust)  [Orabug: 33213898]  
  - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods (aloktiw)  [Orabug: 33179252]  
  - ifb: fix packets checksum (Jon Maxwell)  [Orabug: 33145562]  
  - Linux 4.14.239 (Greg Kroah-Hartman)   
  - xen/events: reset active flag for lateeoi events later (Juergen Gross)   
  - kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync() (Petr Mladek)   
  - kthread_worker: split code for canceling the delayed work timer (Petr Mladek)   
  - kfifo: DECLARE_KIFO_PTR(fifo, u64) does not work on arm 32 bit (Sean Young)   
  - drm/nouveau: fix dma_address check for CPU/GPU sync (Christian König)   
  - scsi: sr: Return appropriate error code when disk is ejected (ManYi Li)   
  - mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk() (Hugh Dickins)   
  - mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): get vma_address_end() earlier (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): use goto instead of while (1) (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): add a level of indentation (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): crossing page table boundary (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): settle PageHuge on entry (Hugh Dickins)   
  - mm: page_vma_mapped_walk(): use page for pvmw->page (Hugh Dickins)   
  - mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split (Yang Shi)   
  - mm/thp: fix page_address_in_vma() on file THP tails (Jue Wang)   
  - mm/thp: fix vma_address() if virtual address below file offset (Hugh Dickins)   
  - mm/thp: try_to_unmap() use TTU_SYNC for safe splitting (Hugh Dickins)   
  - mm/rmap: use page_not_mapped in try_to_unmap() (Miaohe Lin)   
  - mm/rmap: remove unneeded semicolon in page_not_mapped() (Miaohe Lin)   
  - mm: add VM_WARN_ON_ONCE_PAGE() macro (Alex Shi)   
  - include/linux/mmdebug.h: make VM_WARN* non-rvals (Michal Hocko)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.4.el7uek]
changelog:
  - drivers: updated for 1.15.9.26 (Shannon Nelson)  [Orabug: 33235357]  
  - XFS: code enhancement to help debug (Wengang Wang)  [Orabug: 33186644]  
  - KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky)  [Orabug: 33234941]  {CVE-2021-3656} {CVE-2021-3656} 
  - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky)  [Orabug: 33234967]  {CVE-2021-3653} {CVE-2021-3653}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.5.el7uek]
changelog:
  - rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243560]  
  - KVM: SVM: use vmsave/vmload for saving/restoring additional host state (Michael Roth)  [Orabug: 33225761]  
  - KVM: SVM: Use asm goto to handle unexpected #UD on SVM instructions (Sean Christopherson)  [Orabug: 33225761]  
  - kvm: svm/avic: Do not send AVIC doorbell to self (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - svm/avic: Fix invalidate logical APIC id entry (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - svm: Fix improper check when deactivate AVIC (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - svm: Fix AVIC DFR and LDR handling (Suthikulpanit, Suravee)  [Orabug: 33225761]  
  - scsi: qla2xxx: Add heartbeat check (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (Baokun Li)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove duplicate declarations (Shaokun Zhang)  [Orabug: 33116624]  
  - scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (Daniel Wagner)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove redundant assignment to rval (Jiapeng Chong)  [Orabug: 33116624]  
  - scsi: qla2xxx: Prevent PRLI in target mode (Anastasia Kovaleva)  [Orabug: 33116624]  
  - scsi: qla2xxx: Add marginal path handling support (Bikash Hazarika)  [Orabug: 33116624]  
  - scsi: qla2xxx: Reserve extra IRQ vectors (Roman Bolshakov)  [Orabug: 33116624]  
  - scsi: qla2xxx: Reuse existing error handling path (Christophe JAILLET)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove unneeded if-null-free check (Qiheng Lin)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update version to 10.02.00.106-k (Nilesh Javali)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update default AER debug mask (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix mailbox recovery during PCIe error (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix crash in PCIe error handling (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix RISC RESET completion polling (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix stuck session (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Add H:C:T info in the log message for fc ports (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix IOPS drop seen in some adapters (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Check kzalloc() return value (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Simplify qla8044_minidump_process_control() (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Suppress Coverity complaints about dseg_r* (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix endianness annotations (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Constify struct qla_tgt_func_tmpl (Bart Van Assche)  [Orabug: 33116624]  
  - scsi: qla2xxx: Use dma_pool_zalloc() (Wang Qing)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix a couple of misdocumented functions (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix incorrectly named function qla8044_check_temp() (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix a couple of misnamed functions (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix some incorrect formatting/spelling issues (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Replace __qla2x00_marker()'s missing underscores (Lee Jones)  [Orabug: 33116624]  
  - scsi: qla2xxx: Simplify if statement (Jiapeng Chong)  [Orabug: 33116624]  
  - scsi: qla2xxx: Simplify the calculation of variables (Jiapeng Zhong)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix some memory corruption (Dan Carpenter)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove redundant NULL check (Yang Li)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove unnecessary NULL check (Dan Carpenter)  [Orabug: 33116624]  
  - scsi: qla2xxx: Assign boolean values to a bool variable (Jiapeng Zhong)  [Orabug: 33116624]  
  - scsi: qla2xxx: fc_remote_port_chkready() returns a SCSI result value (Hannes Reinecke)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit (Enzo Matsumiya)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update version to 10.02.00.105-k (Nilesh Javali)  [Orabug: 33116624]  
  - scsi: qla2xxx: Enable NVMe CONF (BIT_7) when enabling SLER (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix mailbox Ch erroneous error (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Wait for ABTS response on I/O timeouts for NVMe (Bikash Hazarika)  [Orabug: 33116624]  
  - scsi: qla2xxx: Move some messages from debug to normal log level (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Add error counters to debugfs node (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Implementation to get and manage host, target stats and initiator port (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Update version to 10.02.00.104-k (Nilesh Javali)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix device loss on 4G and older HBAs (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix the call trace for flush workqueue (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix flash update in 28XX adapters on big endian machines (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Handle aborts correctly for port undergoing deletion (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix N2N and NVMe connect retry failure (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix FW initialization error on big endian machines (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Fix compilation issue in PPC systems (Arun Easi)  [Orabug: 33116624]  
  - scsi: qla2xxx: Don't check for fw_started while posting NVMe command (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Tear down session if FW say it is down (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Limit interrupt vectors to number of CPUs (Quinn Tran)  [Orabug: 33116624]  
  - scsi: qla2xxx: Change post del message from debug level to log level (Saurav Kashyap)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove trailing semicolon in macro definition (Tom Rix)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove in_interrupt() from qla83xx-specific code (Ahmed S. Darwish)  [Orabug: 33116624]  
  - scsi: target: tcm_qla2xxx: Remove BUG_ON(in_interrupt()) (Ahmed S. Darwish)  [Orabug: 33116624]  
  - scsi: qla2xxx: Remove in_interrupt() from qla82xx-specific code (Ahmed S. Darwish)  [Orabug: 33116624]  
  - scsi: Remove unneeded break statements (Tom Rix)  [Orabug: 33116624]  
  - scsi: scsi_transport_fc: Add store capability to rport port_state in sysfs (Muneendra Kumar)  [Orabug: 33116624]  
  - scsi: scsi_transport_fc: Add a new rport state FC_PORTSTATE_MARGINAL (Muneendra Kumar)  [Orabug: 33116624]  
  - scsi: core: No retries on abort success (Muneendra Kumar)  [Orabug: 33116624]  
  - scsi: core: Add a new error code DID_TRANSPORT_MARGINAL in scsi.h (Muneendra Kumar)  [Orabug: 33116624]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.6.el7uek]
changelog:
  - xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang)  [Orabug: 33277336]  
  - rds: ib: Set SEND_SIGNALED on the last WR posted (Håkon Bugge)  [Orabug: 33253068]  
  - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33246581]  
  - scsi: lpfc: Fix crash due to port reset racing vs adapter error handling (James Smart)  [Orabug: 33213341]  
  - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster)  [Orabug: 33141334]  
  - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster)  [Orabug: 33141334]  
  - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)  [Orabug: 33114988]  {CVE-2021-3612} 
  - rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372381]  
  - dsc-drivers: update for 1.15.9-C-32 (Shannon Nelson)  [Orabug: 33281086]  
  - dts/pensando: creating reserved dma memory pool for mnet devices (Neel Patel)  [Orabug: 33281086]  
  - pcie: rm pcie register access message (#256) (Brad Smith)  [Orabug: 33281086]  
  - drivers: updates for 1.15.9-C-28 (Shannon Nelson)  [Orabug: 33281086]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.el7uek]
changelog:
  - xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  [Orabug: 33296813]  
  - Revert "mm: memcontrol: eliminate raw access to stat and event counters" (Ritika Srivastava)  [Orabug: 33254727]  
  - Revert "mm: memcontrol: implement lruvec stat functions on top of each other" (Ritika Srivastava)  [Orabug: 33254727]  
  - KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin)  [Orabug: 33054089]  {CVE-2021-22543} {CVE-2021-22543} 
  - ocfs2: issue zeroout to EOF blocks (Junxiao Bi)  [Orabug: 32974988]  
  - ocfs2: fix zero out valid data (Junxiao Bi)  [Orabug: 32974988]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.1.el7uek]
changelog:
  - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33306519]  
  - Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy)  [Orabug: 33323390]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.2.el7uek]
changelog:
  - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter)  [Orabug: 33337449]  
  - ip: Manual backport of pskb_inet_may_pull() (Håkon Bugge)  [Orabug: 33337449]  
  - Revert "Revert "net: geneve: check skb is large enough for IPv4/IPv6 header"" (Håkon Bugge)  [Orabug: 33337449]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.3.el7uek]
changelog:
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp)  [Orabug: 33354710]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.5.el7uek]
changelog:
  - Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)  [Orabug: 33369947]  {CVE-2021-3573} 
  - Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  [Orabug: 33369947]  
  - Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33369947]  {CVE-2021-3564} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33369956]  {CVE-2021-40490} 
  - fuse: fix bad inode (Miklos Szeredi)  [Orabug: 33369955]  {CVE-2020-36322} 
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33369954]  {CVE-2021-3679} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33369953]  {CVE-2021-38160} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33369952]  {CVE-2021-3655}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.507.7.6.el7uek]
changelog:
  - fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33406810]  {CVE-2021-28950} 
  - block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33406819]  
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33406814]  
  - net/mlx5: Rate limit errors in command interface (Leon Romanovsky)  [Orabug: 33406805]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.0.el7uek]
changelog:
  - Linux 4.14.241 (Greg Kroah-Hartman)   
  - xhci: add xhci_get_virt_ep() helper (Mathias Nyman)   
  - spi: spi-fsl-dspi: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - btrfs: compression: don't try to compress if we don't have enough pages (David Sterba)   
  - iio: accel: bma180: Fix BMA25x bandwidth register values (Stephan Gerhold)   
  - iio: accel: bma180: Use explicit member assignment (Linus Walleij)   
  - net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear (Doug Berger)   
  - drm: Return -ENOTTY for non-drm ioctls (Charles Baylis)   
  - selftest: use mmap instead of posix_memalign to allocate memory (Peter Collingbourne)   
  - ixgbe: Fix packet corruption due to missing DMA sync (Markus Boehme)   
  - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() (Gustavo A. R. Silva)   
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33198436]  {CVE-2021-3679} 
  - usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. (Minas Harutyunyan)   
  - USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick (John Keeping)   
  - USB: serial: cp210x: fix comments for GE CS1000 (Ian Ray)   
  - USB: serial: option: add support for u-blox LARA-R6 family (Marco De Marco)   
  - usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() (Yoshihiro Shimoda)   
  - usb: max-3421: Prevent corruption of freed memory (Mark Tomlinson)   
  - USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS (Julian Sikorski)   
  - usb: hub: Disable USB 3 device initiated lpm if exit latency is too high (Mathias Nyman)   
  - KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Nicholas Piggin)   
  - xhci: Fix lost USB 2 remote wake (Mathias Nyman)   
  - ALSA: sb: Fix potential ABBA deadlock in CSP driver (Takashi Iwai)   
  - s390/ftrace: fix ftrace_update_ftrace_func implementation (Vasily Gorbik)   
  - Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one" (Huang Pei)   
  - proc: Avoid mixing integer types in mem_rw() (Marcelo Henrique Cerri)   
  - Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" (Vincent Palatin)   
  - spi: cadence: Correct initialisation of runtime PM again (Marek Vasut)   
  - scsi: target: Fix protect handling in WRITE SAME(32) (Dmitry Bogdanov)   
  - scsi: iscsi: Fix iface sysfs attr detection (Mike Christie)   
  - netrom: Decrease sock refcount when sock timers expire (Nguyen Dinh Phi)   
  - net: decnet: Fix sleeping inside in af_decnet (Yajun Deng)   
  - net: fix uninit-value in caif_seqpkt_sendmsg (Ziyang Xuan)   
  - s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] (Colin Ian King)   
  - liquidio: Fix unintentional sign extension issue on left shift of u16 (Colin Ian King)   
  - spi: mediatek: fix fifo rx mode (Peter Hess)   
  - perf probe-file: Delete namelist in del_events() on the error path (Riccardo Mancini)   
  - perf test bpf: Free obj_buf (Riccardo Mancini)   
  - perf lzma: Close lzma stream on exit (Riccardo Mancini)   
  - perf probe: Fix dso->nsinfo refcounting (Riccardo Mancini)   
  - perf map: Fix dso->nsinfo refcounting (Riccardo Mancini)   
  - igb: Check if num of q_vectors is smaller than max before array access (Aleksandr Loktionov)   
  - iavf: Fix an error handling path in 'iavf_probe()' (Christophe JAILLET)   
  - e1000e: Fix an error handling path in 'e1000_probe()' (Christophe JAILLET)   
  - fm10k: Fix an error handling path in 'fm10k_probe()' (Christophe JAILLET)   
  - igb: Fix an error handling path in 'igb_probe()' (Christophe JAILLET)   
  - ixgbe: Fix an error handling path in 'ixgbe_probe()' (Christophe JAILLET)   
  - igb: Fix use-after-free error during reset (Vinicius Costa Gomes)   
  - ipv6: tcp: drop silly ICMPv6 packet too big messages (Eric Dumazet)   
  - tcp: annotate data races around tp->mtu_info (Eric Dumazet)   
  - dma-buf/sync_file: Don't leak fences on merge failure (Jason Ekstrand)   
  - net: validate lwtstate->data before returning from skb_tunnel_info() (Taehee Yoo)   
  - net: send SYNACK packet with accepted fwmark (Alexander Ovechkin)   
  - net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)   
  - net: qcom/emac: fix UAF in emac_remove (Pavel Skripkin)   
  - net: moxa: fix UAF in moxart_mac_probe (Pavel Skripkin)   
  - net: bcmgenet: Ensure all TX/RX queues DMAs are disabled (Florian Fainelli)   
  - net: bridge: sync fdb to new unicast-filtering ports (Wolfgang Bumiller)   
  - netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo (Vasily Averin)   
  - net: ipv6: fix return value of ip6_skb_dst_mtu (Vadim Fedorenko)   
  - sched/fair: Fix CFS bandwidth hrtimer expiry type (Odin Ugedal)   
  - scsi: libfc: Fix array index out of bound exception (Javed Hasan)   
  - scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 (Colin Ian King)   
  - rtc: max77686: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)   
  - kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set (Matthias Maennich)   
  - thermal/core: Correct function name thermal_zone_device_unregister() (Yang Yingliang)   
  - arm64: dts: ls208xa: remove bus-num from dspi node (Mian Yousaf Kaukab)   
  - arm64: dts: juno: Update SCPI nodes as per the YAML schema (Sudeep Holla)   
  - ARM: dts: stm32: fix RCC node name on stm32f429 MCU (Alexandre Torgue)   
  - ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info (Jonathan Neuschäfer)   
  - ARM: dts: imx6: phyFLEX: Fix UART hardware flow control (Primoz Fiser)   
  - ARM: dts: BCM63xx: Fix NAND nodes names (Rafał Miłecki)   
  - ARM: NSP: dts: fix NAND nodes names (Rafał Miłecki)   
  - ARM: Cygnus: dts: fix NAND nodes names (Rafał Miłecki)   
  - ARM: brcmstb: dts: fix NAND nodes names (Rafał Miłecki)   
  - reset: ti-syscon: fix to_ti_syscon_reset_data macro (Philipp Zabel)   
  - arm64: dts: rockchip: Fix power-controller node names for rk3328 (Elaine Zhang)   
  - ARM: dts: rockchip: Fix power-controller node names for rk3288 (Elaine Zhang)   
  - ARM: dts: rockchip: Fix the timer clocks order (Ezequiel Garcia)   
  - arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi (Johan Jonker)   
  - ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 (Johan Jonker)   
  - ARM: dts: gemini: add device_type on pci (Corentin Labbe)   
  - Linux 4.14.240 (Greg Kroah-Hartman)   
  - net: bridge: multicast: fix PIM hello router port marking race (Nikolay Aleksandrov)   
  - MIPS: vdso: Invalid GIC access through VDSO (Martin Fäcknitz)   
  - mips: disable branch profiling in boot/decompress.o (Randy Dunlap)   
  - mips: always link byteswap helpers into decompressor (Arnd Bergmann)   
  - scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (Christophe JAILLET)   
  - ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema (Aswath Govindraju)   
  - memory: fsl_ifc: fix leak of private memory on probe failure (Krzysztof Kozlowski)   
  - memory: fsl_ifc: fix leak of IO mapping on probe failure (Krzysztof Kozlowski)   
  - reset: bail if try_module_get() fails (Philipp Zabel)   
  - ARM: dts: BCM5301X: Fixup SPI binding (Rafał Miłecki)   
  - ARM: dts: r8a7779, marzen: Fix DU clock names (Geert Uytterhoeven)   
  - rtc: fix snprintf() checking in is_rtc_hctosys() (Dan Carpenter)   
  - memory: atmel-ebi: add missing of_node_put for loop iteration (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3 (Krzysztof Kozlowski)   
  - reset: a10sr: add missing of_match_table reference (Krzysztof Kozlowski)   
  - hexagon: use common DISCARDS macro (Nathan Chancellor)   
  - NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times (Trond Myklebust)   
  - ALSA: isa: Fix error return code in snd_cmi8330_probe() (Zhen Lei)   
  - x86/fpu: Limit xstate copy size in xstateregs_set() (Thomas Gleixner)   
  - ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode (Zhihao Cheng)   
  - nfs: fix acl memory leak of posix_acl_create() (Gao Xiang)   
  - watchdog: aspeed: fix hardware timeout calculation (Tao Ren)   
  - um: fix error return code in winch_tramp() (Zhen Lei)   
  - um: fix error return code in slip_open() (Zhen Lei)   
  - power: supply: rt5033_battery: Fix device tree enumeration (Stephan Gerhold)   
  - PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun (Krzysztof Wilczyński)   
  - f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs (Chao Yu)   
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33209273]  {CVE-2021-38160} 
  - virtio_net: Fix error handling in virtnet_restore() (Xie Yongji)   
  - virtio-blk: Fix memory leak among suspend/resume procedure (Xie Yongji)   
  - ACPI: video: Add quirk for the Dell Vostro 3350 (Hans de Goede)   
  - ACPI: AMBA: Fix resource name in /proc/iomem (Liguang Zhang)   
  - pwm: tegra: Don't modify HW state in .remove callback (Uwe Kleine-König)   
  - power: supply: ab8500: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - power: supply: charger-manager: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - NFS: nfs_find_open_context() may only select open files (Trond Myklebust)   
  - ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty (Jeff Layton)   
  - orangefs: fix orangefs df output. (Mike Marshall)   
  - x86/fpu: Return proper error codes from user access functions (Thomas Gleixner)   
  - watchdog: iTCO_wdt: Account for rebooting on second timeout (Jan Kiszka)   
  - watchdog: Fix possible use-after-free by calling del_timer_sync() (Zou Wei)   
  - watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() (Zou Wei)   
  - watchdog: Fix possible use-after-free in wdt_startup() (Zou Wei)   
  - ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1 (Nick Desaulniers)   
  - power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE (Bixuan Cui)   
  - power: supply: max17042: Do not enforce (incorrect) interrupt trigger type (Krzysztof Kozlowski)   
  - power: supply: ab8500: Avoid NULL pointers (Linus Walleij)   
  - pwm: spear: Don't modify HW state in .remove callback (Uwe Kleine-König)   
  - lib/decompress_unlz4.c: correctly handle zero-padding around initrds. (Dimitri John Ledkov)   
  - i2c: core: Disable client irq on reboot/shutdown (Dmitry Torokhov)   
  - intel_th: Wait until port is in reset before programming it (Alexander Shishkin)   
  - staging: rtl8723bs: fix macro value for 2.4Ghz only device (Fabio Aiuto)   
  - ALSA: hda: Add IRQ check for platform_get_irq() (Jiajun Cao)   
  - backlight: lm3630a: Fix return code of .update_status() callback (Uwe Kleine-König)   
  - powerpc/boot: Fixup device-tree on little endian (Benjamin Herrenschmidt)   
  - usb: gadget: hid: fix error return code in hid_bind() (Yang Yingliang)   
  - usb: gadget: f_hid: fix endianness issue with descriptors (Ruslan Bilovol)   
  - ALSA: bebob: add support for ToneWeal FW66 (Takashi Sakamoto)   
  - ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing() (Zhen Lei)   
  - selftests/powerpc: Fix "no_handler" EBB selftest (Athira Rajeev)   
  - ALSA: ppc: fix error return code in snd_pmac_probe() (Yang Yingliang)   
  - gpio: zynq: Check return value of pm_runtime_get_sync (Srinivas Neeli)   
  - powerpc/ps3: Add dma_mask to ps3_dma_region (Geoff Levand)   
  - ALSA: sb: Fix potential double-free of CSP mixer elements (Takashi Iwai)   
  - s390/sclp_vt220: fix console name to match device (Valentin Vidic)   
  - mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE (Zou Wei)   
  - scsi: qedi: Fix null ref during abort handling (Mike Christie)   
  - scsi: iscsi: Fix shost->max_id use (Mike Christie)   
  - scsi: iscsi: Add iscsi_cls_conn refcount helpers (Mike Christie)   
  - fs/jfs: Fix missing error code in lmLogInit() (Jiapeng Chong)   
  - tty: serial: 8250: serial_cs: Fix a memory leak in error handling path (Christophe JAILLET)   
  - scsi: core: Cap scsi_host cmd_per_lun at can_queue (John Garry)   
  - scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs (James Smart)   
  - scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology (James Smart)   
  - w1: ds2438: fixing bug that would always get page0 (Luiz Sampaio)   
  - Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro" (Takashi Sakamoto)   
  - misc/libmasm/module: Fix two use after free in ibmasm_init_one (Lv Yunlong)   
  - tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero (Sherry Sun)   
  - PCI: aardvark: Fix kernel panic during PIO transfer (Pali Rohár)   
  - PCI: aardvark: Don't rely on jiffies while holding spinlock (Remi Pommarel)   
  - tracing: Do not reference char * as a string in histograms (Steven Rostedt (VMware))   
  - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (Tyrel Datwyler)   
  - KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run() (Lai Jiangshan)   
  - KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled (Sean Christopherson)   
  - smackfs: restrict bytes count in smk_set_cipso() (Tetsuo Handa)   
  - jfs: fix GPF in diFree (Pavel Skripkin)   
  - media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K (Benjamin Drung)   
  - media: gspca/sunplus: fix zero-length control requests (Johan Hovold)   
  - media: gspca/sq905: fix control-request direction (Johan Hovold)   
  - media: zr364xx: fix memory leak in zr364xx_start_readpipe (Pavel Skripkin)   
  - media: dtv5100: fix control-request directions (Johan Hovold)   
  - dm btree remove: assign new_root only when removal succeeds (Hou Tao)   
  - ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe (Lv Yunlong)   
  - tracing: Simplify & fix saved_tgids logic (Paul Burton)   
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)   
  - power: supply: ab8500: Fix an old bug (Linus Walleij)   
  - ipmi/watchdog: Stop watchdog timer when the current action is 'none' (Petr Pavlu)   
  - qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute (Nathan Chancellor)   
  - ASoC: tegra: Set driver_name=tegra for all machine drivers (Dmitry Osipenko)   
  - cpu/hotplug: Cure the cpusets trainwreck (Thomas Gleixner)   
  - ata: ahci_sunxi: Disable DIPM (Timo Sigurdsson)   
  - mmc: core: Allow UHS-I voltage switch for SDSC cards if supported (Christian Löhle)   
  - mmc: core: clear flags before allowing to retune (Wolfram Sang)   
  - mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode (Al Cooper)   
  - pinctrl/amd: Add device HID for new AMD GPIO controller (Maximilian Luz)   
  - drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create() (Jing Xiangfeng)   
  - usb: gadget: f_fs: Fix setting of device and driver data cross-references (Andrew Gabbasov)   
  - powerpc/barrier: Avoid collision with clang's __lwsync macro (Nathan Chancellor)   
  - mac80211: fix memory corruption in EAPOL handling (Davis Mosenkovs)   
  - fuse: reject internal errno (Miklos Szeredi)   
  - bdi: Do not use freezable workqueue (Mika Westerberg)   
  - fscrypt: don't ignore minor_hash when hash is 0 (Eric Biggers)   
  - sctp: add size validation when walking chunks (Marcelo Ricardo Leitner)   
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33198408]  {CVE-2021-3655} 
  - Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc. (Tim Jiang)   
  - Bluetooth: Shutdown controller after workqueues are flushed or cancelled (Kai-Heng Feng)   
  - Bluetooth: Fix the HCI to MGMT status conversion table (Yu Liu)   
  - wireless: wext-spy: Fix out-of-bounds warning (Gustavo A. R. Silva)   
  - sfc: error code if SRIOV cannot be disabled (Íñigo Huguet)   
  - sfc: avoid double pci_remove of VFs (Íñigo Huguet)   
  - iwlwifi: mvm: don't change band on bound PHY contexts (Johannes Berg)   
  - RDMA/rxe: Don't overwrite errno from ib_umem_get() (Xiao Yang)   
  - vsock: notify server to shutdown when client has pending signal (Longpeng(Mike))   
  - atm: nicstar: register the interrupt handler in the right place (Zheyu Ma)   
  - atm: nicstar: use 'dma_free_coherent' instead of 'kfree' (Zheyu Ma)   
  - MIPS: add PMD table accounting into MIPS'pmd_alloc_one (Huang Pei)   
  - cw1200: add missing MODULE_DEVICE_TABLE (Zou Wei)   
  - wl1251: Fix possible buffer overflow in wl1251_cmd_scan (Lee Gibson)   
  - wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP (Tony Lindgren)   
  - xfrm: Fix error reporting in xfrm_state_construct. (Steffen Klassert)   
  - selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC (Minchan Kim)   
  - fjes: check return value after calling platform_get_resource() (Yang Yingliang)   
  - net: micrel: check return value after calling platform_get_resource() (Yang Yingliang)   
  - net: bcmgenet: check return value after calling platform_get_resource() (Yang Yingliang)   
  - virtio_net: Remove BUG() to avoid machine dead (Xianting Tian)   
  - dm space maps: don't reset space map allocation cursor when committing (Joe Thornber)   
  - RDMA/cxgb4: Fix missing error code in create_qp() (Jiapeng Chong)   
  - ipv6: use prandom_u32() for ID generation (Willy Tarreau)   
  - clk: tegra: Ensure that PLLU configuration is applied properly (Dmitry Osipenko)   
  - clk: renesas: r8a77995: Add ZA2 clock (Kuninori Morimoto)   
  - e100: handle eeprom as little endian (Jesse Brandeburg)   
  - udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)   
  - drm/virtio: Fix double free on probe failure (Xie Yongji)   
  - reiserfs: add check for invalid 1st journal block (Pavel Skripkin)   
  - net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT (Sebastian Andrzej Siewior)   
  - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() (Zou Wei)   
  - mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)   
  - atm: iphase: fix possible use-after-free in ia_module_exit() (Zou Wei)   
  - hugetlb: clear huge pte during flush function on mips platform (Bibo Mao)   
  - net: pch_gbe: Use proper accessors to BE data in pch_ptp_match() (Andy Shevchenko)   
  - drm/amd/amdgpu/sriov disable all ip hw status by default (Jack Zhang)   
  - drm/zte: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)   
  - drm/mxsfb: Don't select DRM_KMS_FB_HELPER (Thomas Zimmermann)   
  - mmc: vub3000: fix control-request direction (Johan Hovold)   
  - selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random (Dave Hansen)   
  - mm/huge_memory.c: don't discard hugepage if other processes are mapping it (Miaohe Lin)   
  - leds: ktd2692: Fix an error handling path (Christophe JAILLET)   
  - leds: as3645a: Fix error return code in as3645a_parse_node() (Zhen Lei)   
  - configfs: fix memleak in configfs_release_bin_file (Chung-Chiang Cheng)   
  - extcon: max8997: Add missing modalias string (Marek Szyprowski)   
  - extcon: sm5502: Drop invalid register write in sm5502_reg_data (Stephan Gerhold)   
  - phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe() (Christophe JAILLET)   
  - scsi: mpt3sas: Fix error return value in _scsih_expander_add() (Zhen Lei)   
  - of: Fix truncation of memory sizes on 32-bit platforms (Geert Uytterhoeven)   
  - ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK (Richard Fitzgerald)   
  - staging: gdm724x: check for overflow in gdm_lte_netif_rx() (Dan Carpenter)   
  - staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt() (Dan Carpenter)   
  - iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - eeprom: idt_89hpesx: Put fwnode in matching case during ->probe() (Andy Shevchenko)   
  - s390: appldata depends on PROC_SYSCTL (Randy Dunlap)   
  - scsi: FlashPoint: Rename si_flags field (Randy Dunlap)   
  - tty: nozomi: Fix the error handling path of 'nozomi_card_init()' (Christophe JAILLET)   
  - char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol() (Yu Kuai)   
  - Input: hil_kbd - fix error return code in hil_dev_connect() (Zhen Lei)   
  - ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup() (Yang Yingliang)   
  - iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp() (Jonathan Cameron)   
  - iio: adis_buffer: do not return ints in irq handlers (Nuno Sa)   
  - mwifiex: re-fix for unaligned accesses (Arnd Bergmann)   
  - tty: nozomi: Fix a resource leak in an error handling function (Christophe JAILLET)   
  - net: sched: fix warning in tcindex_alloc_perfect_hash (Pavel Skripkin)   
  - writeback: fix obtain a reference to a freeing memcg css (Muchun Song)   
  - Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid (Luiz Augusto von Dentz)   
  - Revert "ibmvnic: remove duplicate napi_schedule call in open function" (Dany Madden)   
  - i40e: Fix error handling in i40e_vsi_open (Dinghao Liu)   
  - net: bcmgenet: Fix attaching to PYH failed on RPi 4B (Jian-Hong Pan)   
  - vxlan: add missing rcu_read_lock() in neigh_reduce() (Eric Dumazet)   
  - pkt_sched: sch_qfq: fix qfq_change_class() error path (Eric Dumazet)   
  - net: ethernet: ezchip: fix error handling (Pavel Skripkin)   
  - net: ethernet: ezchip: fix UAF in nps_enet_remove (Pavel Skripkin)   
  - net: ethernet: aeroflex: fix UAF in greth_of_remove (Pavel Skripkin)   
  - samples/bpf: Fix the error return code of xdp_redirect's main() (Wang Hai)   
  - netfilter: nft_exthdr: check for IPv6 packet before further processing (Pablo Neira Ayuso)   
  - netlabel: Fix memory leak in netlbl_mgmt_add_common (Liu Shixin)   
  - ath10k: Fix an error code in ath10k_add_interface() (Yang Li)   
  - brcmsmac: mac80211_if: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - wireless: carl9170: fix LEDS build errors & warnings (Randy Dunlap)   
  - drm: qxl: ensure surf.data is ininitialized (Colin Ian King)   
  - RDMA/rxe: Fix failure during driver load (Kamal Heib)   
  - ehea: fix error return code in ehea_restart_qps() (Zhen Lei)   
  - drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write() (Yang Yingliang)   
  - net: pch_gbe: Propagate error from devm_gpio_request_one() (Andy Shevchenko)   
  - ocfs2: fix snprintf() checking (Dan Carpenter)   
  - ACPI: sysfs: Fix a buffer overrun problem with description_show() (Krzysztof Wilczyński)   
  - crypto: nx - Fix RCU warning in nx842_OF_upd_status (Herbert Xu)   
  - spi: spi-sun6i: Fix chipselect/clock bug (Mirko Vogt)   
  - btrfs: clear log tree recovering status if starting transaction fails (David Sterba)   
  - hwmon: (max31790) Fix fan speed reporting for fan7..12 (Guenter Roeck)   
  - hwmon: (max31722) Remove non-standard ACPI device IDs (Guenter Roeck)   
  - media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx (Dillon Min)   
  - mmc: usdhi6rol0: fix error return code in usdhi6_probe() (Zhen Lei)   
  - media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2() (Gustavo A. R. Silva)   
  - media: tc358743: Fix error return code in tc358743_probe_of() (Zhen Lei)   
  - media: exynos4-is: Fix a use after free in isp_video_release (Lv Yunlong)   
  - pata_ep93xx: fix deferred probing (Sergey Shtylyov)   
  - crypto: ccp - Fix a resource leak in an error handling path (Christophe JAILLET)   
  - pata_octeon_cf: avoid WARN_ON() in ata_host_activate() (Sergey Shtylyov)   
  - media: I2C: change 'RST' to "RSET" to fix multiple build errors (Randy Dunlap)   
  - pata_rb532_cf: fix deferred probing (Sergey Shtylyov)   
  - sata_highbank: fix deferred probing (Sergey Shtylyov)   
  - crypto: ux500 - Fix error return code in hash_hw_final() (Zhen Lei)   
  - crypto: ixp4xx - dma_unmap the correct address (Corentin Labbe)   
  - media: s5p_cec: decrement usage count if disabled (Mauro Carvalho Chehab)   
  - ia64: mca_drv: fix incorrect array size calculation (Arnd Bergmann)   
  - HID: wacom: Correct base usage for capacitive ExpressKey status bits (Jason Gerecke)   
  - ACPI: tables: Add custom DSDT file as makefile prerequisite (Richard Fitzgerald)   
  - platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard() (Jiapeng Chong)   
  - ACPI: bus: Call kobject_put() in acpi_init() error path (Hanjun Guo)   
  - ACPICA: Fix memory leak caused by _CID repair function (Erik Kaneda)   
  - fs: dlm: fix memory leak when fenced (Alexander Aring)   
  - random32: Fix implicit truncation warning in prandom_seed_state() (Richard Fitzgerald)   
  - fs: dlm: cancel work sync othercon (Alexander Aring)   
  - block_dump: remove block_dump feature in mark_inode_dirty() (zhangyi (F))   
  - ACPI: EC: Make more Asus laptops use ECDT _GPE (Chris Chiu)   
  - lib: vsprintf: Fix handling of number field widths in vsscanf (Richard Fitzgerald)   
  - hv_utils: Fix passing zero to 'PTR_ERR' warning (YueHaibing)   
  - ACPI: processor idle: Fix up C-state latency if not ordered (Mario Limonciello)   
  - HID: do not use down_interruptible() when unbinding devices (Dmitry Torokhov)   
  - regulator: da9052: Ensure enough delay time for .set_voltage_time_sel (Axel Lin)   
  - btrfs: disable build on platforms having page size 256K (Christophe Leroy)   
  - btrfs: abort transaction if we fail to update the delayed inode (Josef Bacik)   
  - btrfs: fix error handling in __btrfs_update_delayed_inode (Josef Bacik)   
  - media: siano: fix device register error path (Mauro Carvalho Chehab)   
  - media: dvb_net: avoid speculation from net slot (Mauro Carvalho Chehab)   
  - crypto: shash - avoid comparing pointers to exported functions under CFI (Ard Biesheuvel)   
  - mmc: via-sdmmc: add a check against NULL pointer dereference (Zheyu Ma)   
  - media: dvd_usb: memory leak in cinergyt2_fe_attach (Dongliang Mu)   
  - media: st-hva: Fix potential NULL pointer dereferences (Evgeny Novikov)   
  - media: bt8xx: Fix a missing check bug in bt878_probe (Zheyu Ma)   
  - media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release (Lv Yunlong)   
  - media: em28xx: Fix possible memory leak of em28xx struct (Igor Matheus Andrade Torrente)   
  - crypto: qat - remove unused macro in FW loader (Jack Xu)   
  - crypto: qat - check return code of qat_hal_rd_rel_reg() (Jack Xu)   
  - media: pvrusb2: fix warning in pvr2_i2c_core_done (Anirudh Rayabharam)   
  - media: cobalt: fix race condition in setting HPD (Hans Verkuil)   
  - media: cpia2: fix memory leak in cpia2_usb_probe (Pavel Skripkin)   
  - crypto: nx - add missing MODULE_DEVICE_TABLE (Bixuan Cui)   
  - spi: omap-100k: Fix the length judgment problem (Tian Tao)   
  - spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages() (Jay Fang)   
  - spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf' (Jay Fang)   
  - spi: Make of_register_spi_device also set the fwnode (Charles Keepax)   
  - fuse: check connected before queueing on fpq->io (Miklos Szeredi)   
  - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Yun Zhou)   
  - rsi: Assign beacon rate settings to the correct rate_info descriptor field (Marek Vasut)   
  - ssb: sdio: Don't overwrite const buffer if block_write fails (Michael Buesch)   
  - ath9k: Fix kernel NULL pointer dereference during ath_reset_internal() (Pali Rohár)   
  - serial_cs: remove wrong GLOBETROTTER.cis entry (Ondrej Zary)   
  - serial_cs: Add Option International GSM-Ready 56K/ISDN modem (Ondrej Zary)   
  - serial: sh-sci: Stop dmaengine transfer in sci_stop_tx() (Yoshihiro Shimoda)   
  - iio: ltr501: ltr501_read_ps(): add missing endianness conversion (Oliver Lang)   
  - iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR (Oliver Lang)   
  - iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too (Marc Kleine-Budde)   
  - rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path (Martin Fuzzey)   
  - s390/cio: dont call css_wait_for_slow_path() inside a lock (Vineeth Vijayan)   
  - SUNRPC: Should wake up the privileged task firstly. (Zhang Xiaoxu)   
  - SUNRPC: Fix the batch tasks count wraparound. (Zhang Xiaoxu)   
  - can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path (Stephane Grosjean)   
  - can: gw: synchronize rcu operations before removing gw job entry (Oliver Hartkopp)   
  - ext4: fix avefreec in find_group_orlov (Pan Dong)   
  - ext4: remove check for zero nr_to_scan in ext4_es_scan() (Zhang Yi)   
  - ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit (Zhang Yi)   
  - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)   
  - ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle (Zhang Yi)   
  - btrfs: clear defrag status of a root if starting transaction fails (David Sterba)   
  - btrfs: send: fix invalid path for unlink operations after parent orphanization (Filipe Manana)   
  - ARM: dts: at91: sama5d4: fix pinctrl muxing (Ludovic Desroches)   
  - iov_iter_fault_in_readable() should do nothing in xarray case (Al Viro)   
  - ntfs: fix validity check for file name attribute (Desmond Cheong Zhi Xi)   
  - USB: cdc-acm: blacklist Heimann USB Appset device (Hannu Hartikainen)   
  - usb: gadget: eem: fix echo command packet response issue (Linyu Yuan)   
  - net: can: ems_usb: fix use-after-free in ems_usb_disconnect() (Pavel Skripkin)   
  - Input: usbtouchscreen - fix control-request directions (Johan Hovold)   
  - media: dvb-usb: fix wrong definition (Pavel Skripkin)   
  - ALSA: usb-audio: fix rate on Ozone Z90 USB headset (Daehwan Jung)   
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp)  [Orabug: 33309109]  
  - Revert "net: geneve: check skb is large enough for IPv4/IPv6 header" (Somasundaram Krishnasamy)  [Orabug: 33307212]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.1.el7uek]
changelog:
  - RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33324346]  
  - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter)  [Orabug: 33329032]  
  - ip: Manual backport of pskb_inet_may_pull() (Håkon Bugge)  [Orabug: 33329032]  
  - Revert "Revert "net: geneve: check skb is large enough for IPv4/IPv6 header"" (Håkon Bugge)  [Orabug: 33329032]  
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33327179]  {CVE-2021-40490} 
  - uek-rpm: add CONFIG_PVPANIC_PCI to aarch64 (Mihai Carabas)  [Orabug: 33155642]  
  - misc/pvpanic: fix set driver data (Mihai Carabas)  [Orabug: 33155642]  
  - misc/pvpanic-pci: Allow automatic loading (Eric Auger)  [Orabug: 33155642]  
  - misc/pvpanic: Remove some dead-code (Christophe JAILLET)  [Orabug: 33155642]  
  - misc/pvpanic: Make 'pvpanic_probe()' resource managed (Christophe JAILLET)  [Orabug: 33155642]  
  - misc/pvpanic-mmio: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET)  [Orabug: 33155642]  
  - misc/pvpanic-mmio: Fix error handling in 'pvpanic_mmio_probe()' (Christophe JAILLET)  [Orabug: 33155642]  
  - misc/pvpanic-pci: Use GFP_KERNEL instead of GFP_ATOMIC (Christophe JAILLET)  [Orabug: 33155642]  
  - misc/pvpanic-pci: Fix error handling in 'pvpanic_pci_probe()' (Christophe JAILLET)  [Orabug: 33155642]  
  - misc/pvpanic: Make some symbols static (YueHaibing)  [Orabug: 33155642]  
  - misc/pvpanic: fix return value check in pvpanic_pci_probe() (Qiheng Lin)  [Orabug: 33155642]  
  - misc/pvpanic: add PCI driver (Mihai Carabas)  [Orabug: 33155642]  
  - misc/pvpanic: probe multiple instances (Mihai Carabas)  [Orabug: 33155642]  
  - misc/pvpanic: split-up generic and platform dependent code (Mihai Carabas)  [Orabug: 33155642]  
  - misc/pvpanic: Export module FDT device table (Shile Zhang)  [Orabug: 33155642]  
  - misc: pvpanic: sysfs_emit uses should have a newline (Joe Perches)  [Orabug: 33155642]  
  - misc: pvpanic: introduce events device attribue (zhenwei pi)  [Orabug: 33155642]  
  - misc: pvpanic: introduce device capability (zhenwei pi)  [Orabug: 33155642]  
  - misc: pvpanic: Check devm_ioport_map() for NULL (Andy Shevchenko)  [Orabug: 33155642]  
  - misc: pvpanic: Replace OF headers by mod_devicetable.h (Andy Shevchenko)  [Orabug: 33155642]  
  - misc: pvpanic: Combine ACPI and platform drivers (Andy Shevchenko)  [Orabug: 33155642]  
  - misc: pvpanic: Use devm_platform_ioremap_resource() (Wang ShaoBo)  [Orabug: 33155642]  
  - driver core: platform: Introduce platform_get_mem_or_io() (Andy Shevchenko)  [Orabug: 33155642]  
  - misc: pvpanic: move bit definition to uapi header file (zhenwei pi)  [Orabug: 33155642]  
  - misc: pvpanic: fix warning implicit declaration (Anders Roxell)  [Orabug: 33155642]  
  - misc/pvpanic: resolve compile errors for arch=um (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: fix a NULL vs IS_ERR() check (Dan Carpenter)  [Orabug: 33155642]  
  - misc/pvpanic: remove a redundant comma (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: convert to SPDX license tags (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: change header file sort style (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: remove unnecessary header file (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic : break dependency on ACPI (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic : grouping ACPI related stuff (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: add support to get pvpanic device info FDT (Peng Hao)  [Orabug: 33155642]  
  - dt-bindings: misc/pvpanic: add document for pvpanic-mmio (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: add MMIO support (Peng Hao)  [Orabug: 33155642]  
  - misc/pvpanic: simplify the code using acpi_dev_resource_io (Peng Hao)  [Orabug: 33155642]  
  - pvpanic: move pvpanic to misc as common driver (Peng Hao)  [Orabug: 33155642]  
  - fuse: fix bad inode (Miklos Szeredi)  [Orabug: 32769032]  {CVE-2020-36322} 
  - Linux 4.14.243 (Greg Kroah-Hartman)   
  - spi: mediatek: Fix fifo transfer (Guenter Roeck)   
  - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" (Greg Kroah-Hartman)   
  - KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() (Sean Christopherson)   
  - KVM: do not assume PTE is writable after follow_pfn (Paolo Bonzini)   
  - Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled" (Greg Kroah-Hartman)   
  - net: Fix zero-copy head len calculation. (Pravin B Shelar)   
  - qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union() (Jia He)   
  - r8152: Fix potential PM refcount imbalance (Takashi Iwai)   
  - regulator: rt5033: Fix n_voltages settings for BUCK and LDO (Axel Lin)   
  - btrfs: mark compressed range uptodate only if all bio succeed (Goldwyn Rodrigues)   
  - Linux 4.14.242 (Greg Kroah-Hartman)   
  - Revert "perf map: Fix dso->nsinfo refcounting" (Arnaldo Carvalho de Melo)   
  - can: hi311x: fix a signedness bug in hi3110_cmd() (Dan Carpenter)   
  - sis900: Fix missing pci_disable_device() in probe and remove (Wang Hai)   
  - tulip: windbond-840: Fix missing pci_disable_device() in probe and remove (Wang Hai)   
  - sctp: fix return value check in __sctp_rcv_asconf_lookup (Marcelo Ricardo Leitner)   
  - net/mlx5: Fix flow table chaining (Maor Gottlieb)   
  - net: llc: fix skb_over_panic (Pavel Skripkin)   
  - mlx4: Fix missing error code in mlx4_load_one() (Jiapeng Chong)   
  - tipc: fix sleeping in tipc accept routine (Hoang Le)   
  - netfilter: nft_nat: allow to specify layer 4 protocol NAT only (Pablo Neira Ayuso)   
  - netfilter: conntrack: adjust stop timestamp to real expiry value (Florian Westphal)   
  - cfg80211: Fix possible memory leak in function cfg80211_bss_update (Nguyen Dinh Phi)   
  - x86/asm: Ensure asm/proto.h can be included stand-alone (Jan Kiszka)   
  - nfc: nfcsim: fix use after free during module unload (Krzysztof Kozlowski)   
  - NIU: fix incorrect error return, missed in previous revert (Paul Jakma)   
  - can: esd_usb2: fix memory leak (Pavel Skripkin)   
  - can: ems_usb: fix memory leak (Pavel Skripkin)   
  - can: usb_8dev: fix memory leak (Pavel Skripkin)   
  - can: mcba_usb_start(): add missing urb->transfer_dma initialization (Pavel Skripkin)   
  - can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF (Ziyang Xuan)   
  - x86/kvm: fix vcpu-id indexed array sizes (Juergen Gross)   
  - gro: ensure frag0 meets IP header alignment (Eric Dumazet)   
  - virtio_net: Do not pull payload in skb->head (Eric Dumazet)   
  - ARM: dts: versatile: Fix up interrupt controller node names (Sudeep Holla)   
  - hfs: add lock nesting notation to hfs_find_init (Desmond Cheong Zhi Xi)   
  - hfs: fix high memory mapping in hfs_bnode_read (Desmond Cheong Zhi Xi)   
  - hfs: add missing clean-up in hfs_fill_super (Desmond Cheong Zhi Xi)   
  - sctp: move 198 addresses from unusable to private scope (Xin Long)   
  - net: annotate data race around sk_ll_usec (Eric Dumazet)   
  - net/802/garp: fix memleak in garp_request_join() (Yang Yingliang)   
  - net/802/mrp: fix memleak in mrp_request_join() (Yang Yingliang)   
  - workqueue: fix UAF in pwq_unbound_release_workfn() (Yang Yingliang)   
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)   
  - net: split out functions related to registering inflight socket files (Jens Axboe)   
  - KVM: x86: determine if an exception has an error code only when injecting it. (Maxim Levitsky)   
  - selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c (Greg Kroah-Hartman)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.2.el7uek]
changelog:
  - KVM: x86: Check kvm_rebooting in kvm_spurious_fault() (Sean Christopherson)  [Orabug: 33360245]  
  - Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw)  [Orabug: 33359680]  
  - net/mlx5: Rate limit errors in command interface (Leon Romanovsky)  [Orabug: 33305503]  
  - Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)  [Orabug: 33292634]  {CVE-2021-3573} 
  - Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  [Orabug: 33292634]  
  - Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33292634]  {CVE-2021-3564} 
  - IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33134287]  
  - IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33134287]  
  - uek-rpm: Add dm-cache-smq.ko module (John Donnelly)  [Orabug: 29198153]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.508.3.el7uek]
changelog:
  - fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950} 
  - block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33392821]  
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33352735]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.508.3.1.el7uek]
changelog:
  - block: Fix bio_integrity_payload handling for cloned bios (Martin K. Petersen)  [Orabug: 33335729]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.508.3.3.el7uek]
changelog:
  - xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33557611]  
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong)  [Orabug: 33557611]  
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong)  [Orabug: 33557611]  
  - xfs: flush removing page cache in xfs_reflink_remap_prep (Dave Chinner)  [Orabug: 33557611]  
  - xfs: fix shared extent data corruption due to missing cow reservation (Brian Foster)  [Orabug: 33557611]  
  - xfs: fix pagecache truncation prior to reflink (Darrick J. Wong)  [Orabug: 33557611]  
  - xfs: fix fork selection in xfs_find_trim_cow_extent (Christoph Hellwig)  [Orabug: 33557611]  
  - xfs: remove the unused trimmed argument from xfs_reflink_trim_around_shared (Christoph Hellwig)  [Orabug: 33557611]  
  - xfs: skip delalloc COW blocks in xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33557611]  
  - xfs: fix transaction leak in xfs_reflink_allocate_cow() (Dave Chinner)  [Orabug: 33557611]  
  - xfs: cow unwritten conversion uses uninitialized dfops (Brian Foster)  [Orabug: 33557611]  
  - xfs: fix double ijoin in xfs_reflink_clear_inode_flag() (Dave Chinner)  [Orabug: 33557611]  
  - xfs: fix double ijoin in xfs_reflink_cancel_cow_range (Dave Chinner)  [Orabug: 33557611]  
  - xfs: minor cleanup for xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33557611]  
  - xfs: fix transaction allocation deadlock in IO path (Dave Chinner)  [Orabug: 33557611]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.509.0.el7uek]
changelog:
  - uek-rpm: Pensando: disable CONFIG_PENSANDO_SOC_BSM_ENABLE (Dave Kleikamp)  [Orabug: 33428270]  
  - KVM: SVM: Drop __sme_page_pa for vmsave/vmload (Alejandro Jimenez)  [Orabug: 33413954]  
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)  [Orabug: 33406904]  
  - kvm: export per-vcpu exits to userspace (Dongli Zhang)  [Orabug: 33403457]  
  - tools/power/turbostat: Fallback to an MSR read for EPB (Borislav Petkov)  [Orabug: 33387024]  
  - RDMA/core: Save kernel caller name when creating CQ using ib_create_cq() (Bharat Potnuri)  [Orabug: 33353576]  
  - locking/csd_lock: Make csdlock_debug=1 default (Stephen Brennan)  [Orabug: 33245814]  
  - uek-rpm: config: Enable CONFIG_CSD_LOCK_WAIT_DEBUG (Stephen Brennan)  [Orabug: 33245814]  
  - locking/csd_lock: Remove unused "idle" event (Stephen Brennan)  [Orabug: 33245814]  
  - locking/csd_lock: Add more data to CSD lock debugging (Juergen Gross)  [Orabug: 33245814]  
  - smp: refactor queueing of single smp call (Stephen Brennan)  [Orabug: 33245814]  
  - locking/csd_lock: Prepare more CSD lock debugging (Juergen Gross)  [Orabug: 33245814]  
  - locking/csd_lock: Add boot parameter for controlling CSD lock debugging (Juergen Gross)  [Orabug: 33245814]  
  - kernel/smp: Provide CSD lock timeout diagnostics (Paul E. McKenney)  [Orabug: 33245814]  
  - smp: Fix kABI breakage in __call_single_data (Stephen Brennan)  [Orabug: 33245814]  
  - smp: Add source and destination CPUs to __call_single_data (Paul E. McKenney)  [Orabug: 33245814]  
  - x86/jump_label: Initialize static branching early (Pavel Tatashin)  [Orabug: 33245814]  
  - x86/alternatives, jumplabel: Use text_poke_early() before mm_init() (Pavel Tatashin)  [Orabug: 33245814]  
  - NFSv4.1 make cachethis=no for writes (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS: Add missing encode / decode sequence_maxsz to v4.2 operations (Anna Schumaker)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFSv4: Initialise connection to the server in nfs4_alloc_client() (Trond Myklebust)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS add a simple sync nfs4_proc_commit after async COPY (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS handle COPY ERR_OFFLOAD_NO_REQS (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS send OFFLOAD_CANCEL when COPY killed (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS export nfs4_async_handle_error (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS handle COPY reply CB_OFFLOAD call race (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS add support for asynchronous COPY (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS COPY xdr handle async reply (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS OFFLOAD_CANCEL xdr (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS CB_OFFLOAD xdr (Olga Kornievskaia)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS: Merge nfs41_free_stateid() with _nfs41_free_stateid() (Anna Schumaker)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS: Pass "privileged" value to nfs4_init_sequence() (Anna Schumaker)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS: Move call to nfs4_state_protect() to nfs4_commit_setup() (Anna Schumaker)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS: Move call to nfs4_state_protect_write() to nfs4_write_setup() (Anna Schumaker)  [Orabug: 33209530]  {CVE-2021-38199} 
  - NFS: Move delegation recall into the NFSv4 callback for rename_setup() (Trond Myklebust)  [Orabug: 33209530]  {CVE-2021-38199} 
  - uek-rpm: Remove unnecessary ld.so.conf.d file (Stephen Brennan)  [Orabug: 33186981]  
  - dccp: don't duplicate ccid when cloning dccp sock (Lin, Zhenpeng)  [Orabug: 32046139]  {CVE-2017-6074} {CVE-2020-16119} {CVE-2020-16119} 
  - ocfs2: drop acl cache for directories too (Wengang Wang)  [Orabug: 33253529]  
  - Linux 4.14.245 (Sasha Levin)   {CVE-2021-3656} 
  - netfilter: nft_exthdr: fix endianness of tcp option cast (Sergey Marinkevich)   
  - fs: warn about impending deprecation of mandatory locks (Jeff Layton)   
  - locks: print a warning when mount fails due to lack of "mand" support (Jeff Layton)   
  - ASoC: intel: atom: Fix breakage for PCM buffer address setup (Takashi Iwai)   
  - btrfs: prevent rename2 from exchanging a subvol with a directory from different parents (NeilBrown)   
  - ipack: tpci200: fix many double free issues in tpci200_pci_probe (Dongliang Mu)   
  - ALSA: hda - fix the 'Capture Switch' value change notifications (Jaroslav Kysela)   
  - mmc: dw_mmc: Fix hang on data CRC error (Vincent Whitchurch)   
  - net: mdio-mux: Handle -EPROBE_DEFER correctly (Saravana Kannan)   
  - net: mdio-mux: Don't ignore memory allocation errors (Saravana Kannan)   
  - net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32 (Dinghao Liu)   
  - ptp_pch: Restore dependency on PCI (Andy Shevchenko)   
  - net: 6pack: fix slab-out-of-bounds in decode_data (Pavel Skripkin)   
  - bnxt: don't lock the tx queue from napi poll (Jakub Kicinski)   
  - vhost: Fix the calculation in vhost_overflow() (Xie Yongji)   
  - dccp: add do-while-0 stubs for dccp_pr_debug macros (Randy Dunlap)   
  - Bluetooth: hidp: use correct wait queue when removing ctrl_wait (Ole Bjørn Midtbø)   
  - net: usb: lan78xx: don't modify phy_device state concurrently (Ivan T. Ivanov)   
  - ARM: dts: nomadik: Fix up interrupt controller node names (Sudeep Holla)   
  - scsi: core: Avoid printing an error if target_alloc() returns -ENXIO (Sreekanth Reddy)   
  - scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach() (Ye Bin)   
  - scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry() (Harshvardhan Jha)   
  - dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is not yet available (Peter Ujfalusi)   
  - ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218 (Dave Gerlach)   
  - dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe() (Yu Kuai)   
  - ath9k: Postpone key cache entry deletion for TXQ frames reference it (Jouni Malinen)   
  - ath: Modify ath_key_delete() to not need full key entry (Jouni Malinen)   
  - ath: Export ath_hw_keysetmac() (Jouni Malinen)   
  - ath9k: Clear key cache explicitly on disabling hardware (Jouni Malinen)   
  - ath: Use safer key clearing with key cache entries (Jouni Malinen)   
  - x86/fpu: Make init_fpstate correct with optimized XSAVE (Thomas Gleixner)   
  - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky)   
  - mac80211: drop data frames without key on encrypted links (Johannes Berg)   
  - vmlinux.lds.h: Handle clang's module.{c,d}tor sections (Nathan Chancellor)   
  - PCI/MSI: Enforce MSI[X] entry updates to be visible (Thomas Gleixner)   
  - PCI/MSI: Enforce that MSI-X table entry is masked for update (Thomas Gleixner)   
  - PCI/MSI: Mask all unused MSI-X entries (Thomas Gleixner)   
  - PCI/MSI: Protect msi_desc::masked for multi-MSI (Saeed Mirzamohammadi)   
  - PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown() (Thomas Gleixner)   
  - PCI/MSI: Correct misleading comments (Thomas Gleixner)   
  - PCI/MSI: Do not set invalid bits in MSI mask (Thomas Gleixner)   
  - PCI/MSI: Enable and mask MSI-X early (Thomas Gleixner)   
  - x86/resctrl: Fix default monitoring groups reporting (Babu Moger)   
  - x86/tools: Fix objdump version check again (Randy Dunlap)   
  - powerpc/kprobes: Fix kprobe Oops happens in booke (Pu Lehui)   
  - vsock/virtio: avoid potential deadlock when vsock device remove (Longpeng(Mike))   
  - xen/events: Fix race in set_evtchn_to_irq (Maximilian Heyne)   
  - tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B packets (Neal Cardwell)   
  - net: bridge: fix memleak in br_add_if() (Yang Yingliang)   
  - net: Fix memory leak in ieee802154_raw_deliver (Takeshi Misawa)   
  - psample: Add a fwd declaration for skbuff (Roi Dayan)   
  - ppp: Fix generating ifname when empty IFLA_IFNAME is specified (Pali Rohár)   
  - net: dsa: mt7530: add the missing RxUnicast MIB counter (DENG Qingfang)   
  - ASoC: cs42l42: Remove duplicate control for WNF filter frequency (Richard Fitzgerald)   
  - ASoC: cs42l42: Fix inversion of ADC Notch Switch control (Richard Fitzgerald)   
  - ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J (Richard Fitzgerald)   
  - ASoC: cs42l42: Correct definition of ADC Volume control (Richard Fitzgerald)   
  - ACPI: NFIT: Fix support for virtual SPA ranges (Dan Williams)   
  - i2c: dev: zero out array used for i2c reads from userspace (Greg Kroah-Hartman)   
  - ASoC: intel: atom: Fix reference to PCM buffer address (Takashi Iwai)   
  - iio: adc: Fix incorrect exit of for-loop (Colin Ian King)   
  - iio: humidity: hdc100x: Add margin to the conversion time (Chris Lesiak)   
  - Linux 4.14.244 (Greg Kroah-Hartman)   
  - net: xilinx_emaclite: Do not print real IOMEM pointer (YueHaibing)   
  - ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi)   
  - ppp: Fix generating ppp unit id when ifname is not specified (Pali Rohár)   
  - USB:ehci:fix Kunpeng920 ehci hardware problem (Longfang Liu)   
  - net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren)   
  - alpha: Send stop IPI to send to online CPUs (Prarit Bhargava)   
  - reiserfs: check directory items on read from disk (Shreyansh Chouhan)   
  - reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai)   
  - libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig)   
  - qmi_wwan: add network device usage statistics for qmimux devices (Reinhard Speyerer)   
  - perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)   
  - spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu)   
  - pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma)   
  - MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki)   
  - serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki)   
  - ext4: fix potential htree corruption when growing large_dir directories (Theodore Ts'o)   
  - pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71))   
  - media: rtl28xxu: fix zero-length control request (Johan Hovold)   
  - staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang)   
  - scripts/tracing: fix the bug that can't parse raw_trace_func (Hui Su)   
  - usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko)   
  - usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev)   
  - usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell)   
  - usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev)   
  - USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer)   
  - USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau)   
  - USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas)   
  - USB: usbtmc: Fix RCU stall warning (Qiang.zhang)   
  - net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin)   
  - net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin)   
  - net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin)   
  - bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter)   
  - mips: Fix non-POSIX regexp (H. Nikolaus Schaller)   
  - nfp: update ethtool reporting of pauseframe control (Fei Qin)   
  - net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai)   
  - media: videobuf2-core: dequeue if start_streaming fails (Hans Verkuil)   
  - scsi: sr: Return correct event when media event code is 3 (Li Manyi)   
  - omap5-board-common: remove not physically existing vdds_1v8_main fixed-regulator (H. Nikolaus Schaller)   
  - clk: stm32f4: fix post divisor setup for I2S/SAI PLLs (Dario Binacchi)   
  - ALSA: seq: Fix racy deletion of subscriber (Takashi Iwai)   
  - Revert "ACPICA: Fix memory leak caused by _CID repair function" (Rafael J. Wysocki)


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.509.1.el7uek]
changelog:
  - net/mlx{4,5},rds_rdma: fix non-determinism when comp_vector is zero (Håkon Bugge)  [Orabug: 33449986]  
  - net/mlx{4,5}: Fix signed formal parameter (Håkon Bugge)  [Orabug: 33449986]  
  - openvswitch: fix build warning in ovs_fragment() (John Donnelly)  [Orabug: 33460370]  
  - arm64: pensando: Kernel PCIe manager for Pensando SmartNIC (Rob Gardner)  [Orabug: 33413998]  
  - net/rds: "no error" is no error (Gerd Rausch)  [Orabug: 33457412]  
  - x86/vector: search CPU vector starts from last successfully assigned (Joe Jin)  [Orabug: 33451207]  
  - Linux 4.14.247 (Greg Kroah-Hartman)   
  - s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant (Ilya Leoshkevich)   
  - net: renesas: sh_eth: Fix freeing wrong tx descriptor (Yoshihiro Shimoda)   
  - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom (Dinghao Liu)   
  - netfilter: socket: icmp6: fix use-after-scope (Benjamin Hesmans)   
  - net: dsa: b53: Fix calculating number of switch ports (Rafał Miłecki)   
  - ARC: export clear_user_page() for modules (Randy Dunlap)   
  - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' (Christophe JAILLET)   
  - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Andy Shevchenko)   
  - ethtool: Fix an error code in cxgb2.c (Yang Li)   
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 (Daniele Palmas)   
  - PCI: Add ACS quirks for Cavium multi-function devices (George Cherian)   
  - mfd: Don't use irq_create_mapping() to resolve a mapping (Marc Zyngier)   
  - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation (Miquel Raynal)   
  - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() (David Hildenbrand)   
  - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() (zhenggy)   
  - net/af_unix: fix a data-race in unix_dgram_poll (Eric Dumazet)   
  - events: Reuse value read using READ_ONCE instead of re-reading it (Baptiste Lepers)   
  - tipc: increase timeout in tipc_sk_enqueue() (Hoang Le)   
  - r6040: Restore MDIO clock frequency after MAC reset (Florian Fainelli)   
  - net/l2tp: Fix reference count leak in l2tp_udp_recv_core (Xiyu Yang)   
  - ptp: dp83640: don't define PAGE0 (Randy Dunlap)   
  - net-caif: avoid user-triggerable WARN_ON(1) (Eric Dumazet)   
  - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries (Mike Rapoport)   
  - PM: base: power: don't try to use non-existing RTC for storing data (Juergen Gross)   
  - bnx2x: Fix enabling network interfaces without VFs (Adrian Bunk)   
  - xen: reset legacy rtc flag for PV domU (Juergen Gross)   
  - platform/chrome: cros_ec_proto: Send command again when timeout occurs (Patryk Duda)   
  - memcg: enable accounting for pids in nested pid namespaces (Vasily Averin)   
  - mm/hugetlb: initialize hugetlb_usage in mm_init (Liu Zixian)   
  - cpufreq: powernv: Fix init_chip_info initialization in numa=off (Pratik R. Sampat)   
  - scsi: qla2xxx: Sync queue idx with queue_pair_map idx (Saurav Kashyap)   
  - scsi: BusLogic: Fix missing pr_cont() use (Maciej W. Rozycki)   
  - parisc: fix crash with signals and alloca (Mikulas Patocka)   
  - net: w5100: check return value after calling platform_get_resource() (Yang Yingliang)   
  - net: fix NULL pointer reference in cipso_v4_doi_free (王贇)   
  - ath9k: fix sleeping in atomic context (Miaoqing Pan)   
  - ath9k: fix OOB read ar9300_eeprom_restore_internal (Zekun Shen)   
  - parport: remove non-zero check on count (Colin Ian King)   
  - ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B (Xiaotan Luo)   
  - ASoC: rockchip: i2s: Fix regmap_ops hang (Sugar Zhang)   
  - usbip:vhci_hcd USB port can get stuck in the disabled state (Shuah Khan)   
  - usbip: give back URBs for unsent unlink requests during cleanup (Anirudh Rayabharam)   
  - usb: musb: musb_dsps: request_irq() after initializing musb (Nadezda Lutovinova)   
  - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" (Mathias Nyman)   
  - cifs: fix wrong release in sess_alloc_buffer() failed path (Ding Hui)   
  - selftests/bpf: Enlarge select() timeout for test_maps (Li Zhijian)   
  - mmc: rtsx_pci: Fix long reads when clock is prescaled (Thomas Hebb)   
  - mmc: sdhci-of-arasan: Check return value of non-void funtions (Manish Narani)   
  - gfs2: Don't call dlm after protocol is unmounted (Bob Peterson)   
  - staging: rts5208: Fix get_ms_information() heap buffer size (Kees Cook)   
  - rpc: fix gss_svc_init cleanup on failure (J. Bruce Fields)   
  - ARM: tegra: tamonten: Fix UART pad setting (Andreas Obergschwandtner)   
  - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() (Tuo Li)   
  - Bluetooth: avoid circular locks in sco_sock_connect (Desmond Cheong Zhi Xi)   
  - net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() (Nathan Chancellor)   
  - arm64: dts: qcom: sdm660: use reg value for memory node (Vinod Koul)   
  - media: v4l2-dv-timings.c: fix wrong condition in two for-loops (Hans Verkuil)   
  - ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output (Hans de Goede)   
  - Bluetooth: skip invalid hci_sync_conn_complete_evt (Desmond Cheong Zhi Xi)   
  - ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init() (Andy Shevchenko)   
  - staging: ks7010: Fix the initialization of the 'sleep_status' structure (Christophe JAILLET)   
  - serial: 8250_pci: make setup_port() parameters explicitly unsigned (Greg Kroah-Hartman)   
  - hvsi: don't panic on tty_register_driver failure (Jiri Slaby)   
  - xtensa: ISS: don't panic in rs_init (Jiri Slaby)   
  - serial: 8250: Define RX trigger levels for OxSemi 950 devices (Maciej W. Rozycki)   
  - s390/jump_label: print real address in a case of a jump label bug (Heiko Carstens)   
  - flow_dissector: Fix out-of-bounds warnings (Gustavo A. R. Silva)   
  - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() (Gustavo A. R. Silva)   
  - video: fbdev: riva: Error out if 'pixclock' equals zero (Zheyu Ma)   
  - video: fbdev: kyro: Error out if 'pixclock' equals zero (Zheyu Ma)   
  - video: fbdev: asiliantfb: Error out if 'pixclock' equals zero (Zheyu Ma)   
  - bpf/tests: Do not PASS tests without actually testing the result (Johan Almbladh)   
  - bpf/tests: Fix copy-and-paste error in double word test (Johan Almbladh)   
  - tty: serial: jsm: hold port lock when reporting modem line changes (Zheyu Ma)   
  - staging: board: Fix uninitialized spinlock when attaching genpd (Geert Uytterhoeven)   
  - usb: gadget: composite: Allow bMaxPower=0 if self-powered (Jack Pham)   
  - usb: gadget: u_ether: fix a potential null pointer dereference (Maciej Żenczykowski)   
  - usb: host: fotg210: fix the actual_length of an iso packet (Kelly Devilliv)   
  - usb: host: fotg210: fix the endpoint's transactional opportunities calculation (Kelly Devilliv)   
  - Smack: Fix wrong semantics in smk_access_entry() (Tianjia Zhang)   
  - netlink: Deal with ESRCH error in nlmsg_notify() (Yajun Deng)   
  - video: fbdev: kyro: fix a DoS bug by restricting user input (Zheyu Ma)   
  - ARM: dts: qcom: apq8064: correct clock names (David Heidelberg)   
  - iio: dac: ad5624r: Fix incorrect handling of an optional regulator. (Jonathan Cameron)   
  - PCI: Use pci_update_current_state() in pci_enable_device_flags() (Rafael J. Wysocki)   
  - crypto: mxs-dcp - Use sg_mapping_iter to copy data (Sean Anderson)   
  - media: dib8000: rewrite the init prbs logic (Mauro Carvalho Chehab)   
  - MIPS: Malta: fix alignment of the devicetree buffer (Oleksij Rempel)   
  - scsi: qedi: Fix error codes in qedi_alloc_global_queues() (Dan Carpenter)   
  - pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() (Zhen Lei)   
  - openrisc: don't printk() unconditionally (Randy Dunlap)   
  - vfio: Use config not menuconfig for VFIO_NOIOMMU (Jason Gunthorpe)   
  - pinctrl: samsung: Fix pinctrl bank pin count (Jaehyoung Choi)   
  - docs: Fix infiniband uverbs minor number (Leon Romanovsky)   
  - RDMA/iwcm: Release resources if iw_cm module initialization fails (Leon Romanovsky)   
  - HID: input: do not report stylus battery state as "full" (Dmitry Torokhov)   
  - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Pali Rohár)   
  - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Pali Rohár)   
  - PCI: xilinx-nwl: Enable the clock through CCF (Hyun Kwon)   
  - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Krzysztof Wilczyński)   
  - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Marek Behún)   
  - ARM: 9105/1: atags_to_fdt: don't warn about stack size (David Heidelberg)   
  - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs (Hans de Goede)   
  - media: rc-loopback: return number of emitters rather than error (Sean Young)   
  - media: uvc: don't do DMA on stack (Mauro Carvalho Chehab)   
  - VMCI: fix NULL pointer dereference when unmapping queue pair (Wang Hai)   
  - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Arne Welzel)   
  - power: supply: max17042: handle fails of reading status register (Krzysztof Kozlowski)   
  - block: bfq: fix bfq_set_next_ioprio_data() (Damien Le Moal)   
  - crypto: public_key: fix overflow during implicit conversion (zhenwei pi)   
  - soc: aspeed: lpc-ctrl: Fix boundary check for mmap (Iwona Winiarska)   
  - 9p/xen: Fix end of loop tests for list_for_each_entry (Harshvardhan Jha)   
  - include/linux/list.h: add a macro to test if entry is pointing to the head (Andy Shevchenko)   
  - xen: fix setting of max_pfn in shared_info (Juergen Gross)   
  - powerpc/perf/hv-gpci: Fix counter value parsing (Kajol Jain)   
  - PCI/MSI: Skip masking MSI-X on Xen PV (Marek Marczykowski-Górecki)   
  - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN (Niklas Cassel)   
  - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN (Niklas Cassel)   
  - rtc: tps65910: Correct driver module alias (Dmitry Osipenko)   
  - fbmem: don't allow too huge resolutions (Tetsuo Handa)   
  - clk: kirkwood: Fix a clocking boot regression (Linus Walleij)   
  - backlight: pwm_bl: Improve bootloader/kernel device handover (Daniel Thompson)   
  - IMA: remove -Wmissing-prototypes warning (Austin Kim)   
  - KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Zelin Deng)   
  - x86/resctrl: Fix a maybe-uninitialized build warning treated as error (Babu Moger)   
  - tty: Fix data race between tiocsti() and flush_to_ldisc() (Nguyen Dinh Phi)   
  - netns: protect netns ID lookups with RCU (Guillaume Nault)   
  - net: qualcomm: fix QCA7000 checksum handling (Stefan Wahren)   
  - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Xiyu Yang)   
  - ipv4: make exception cache less predictible (Eric Dumazet)   
  - bcma: Fix memory leak for internally-handled cores (Zenghui Yu)   
  - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() (Dan Carpenter)   
  - tty: serial: fsl_lpuart: fix the wrong mapbase value (Andy Duan)   
  - usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available (Christophe JAILLET)   
  - usb: ehci-orion: Handle errors of clk_prepare_enable() in probe (Evgeny Novikov)   
  - i2c: mt65xx: fix IRQ check (Sergey Shtylyov)   
  - CIFS: Fix a potencially linear read overflow (Len Baker)   
  - mmc: moxart: Fix issue with uninitialized dma_slave_config (Tony Lindgren)   
  - mmc: dw_mmc: Fix issue with uninitialized dma_slave_config (Tony Lindgren)   
  - i2c: s3c2410: fix IRQ check (Sergey Shtylyov)   
  - i2c: iop3xx: fix deferred probing (Sergey Shtylyov)   
  - Bluetooth: add timeout sanity check to hci_inquiry (Pavel Skripkin)   
  - usb: gadget: mv_u3d: request_irq() after initializing UDC (Nadezda Lutovinova)   
  - mac80211: Fix insufficient headroom issue for AMSDU (Chih-Kang Chang)   
  - usb: phy: tahvo: add IRQ check (Sergey Shtylyov)   
  - usb: host: ohci-tmio: add IRQ check (Sergey Shtylyov)   
  - Bluetooth: Move shutdown callback before flushing tx and rx queue (Kai-Heng Feng)   
  - usb: phy: twl6030: add IRQ checks (Sergey Shtylyov)   
  - usb: phy: fsl-usb: add IRQ check (Sergey Shtylyov)   
  - usb: gadget: udc: at91: add IRQ check (Sergey Shtylyov)   
  - drm/msm/dsi: Fix some reference counted resource leaks (Christophe JAILLET)   
  - Bluetooth: fix repeated calls to sco_sock_kill (Desmond Cheong Zhi Xi)   
  - arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7 (Krzysztof Kozlowski)   
  - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow (Colin Ian King)   
  - soc: qcom: smsm: Fix missed interrupts if state changes while masked (Stephan Gerhold)   
  - PCI: PM: Enable PME if it can be signaled from D3cold (Rafael J. Wysocki)   
  - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently (Rafael J. Wysocki)   
  - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect (Dongliang Mu)   
  - i2c: highlander: add IRQ check (Sergey Shtylyov)   
  - net: cipso: fix warnings in netlbl_cipsov4_add_std (Pavel Skripkin)   
  - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos (Martin KaFai Lau)   
  - Bluetooth: sco: prevent information leak in sco_conn_defer_accept() (Dan Carpenter)   
  - media: go7007: remove redundant initialization (Pavel Skripkin)   
  - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr (Dongliang Mu)   
  - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init (Dongliang Mu)   
  - soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally (Geert Uytterhoeven)   
  - certs: Trigger creation of RSA module signing key if it's not an RSA key (Stefan Berger)   
  - crypto: qat - use proper type for vf_mask (Giovanni Cabiddu)   
  - clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel (Phong Hoang)   
  - spi: spi-pic32: Fix issue with uninitialized dma_slave_config (Tony Lindgren)   
  - spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config (Tony Lindgren)   
  - m68k: emu: Fix invalid free in nfeth_cleanup() (Pavel Skripkin)   
  - udf_get_extendedattr() had no boundary checks. (Stian Skjelstad)   
  - crypto: qat - do not export adf_iov_putmsg() (Giovanni Cabiddu)   
  - crypto: qat - fix naming for init/shutdown VF to PF notifications (Marco Chiappero)   
  - crypto: qat - fix reuse of completion variable (Marco Chiappero)   
  - crypto: qat - handle both source of interrupt in VF ISR (Giovanni Cabiddu)   
  - crypto: qat - do not ignore errors from enable_vf2pf_comms() (Giovanni Cabiddu)   
  - libata: fix ata_host_start() (Damien Le Moal)   
  - s390/cio: add dev_busid sysfs entry for each subchannel (Vineeth Vijayan)   
  - power: supply: max17042_battery: fix typo in MAx17042_TOFF (Sebastian Krzyszkowiak)   
  - nvme-rdma: don't update queue count when failing to set io queues (Ruozhu Li)   
  - isofs: joliet: Fix iocharset=utf8 mount option (Pali Rohár)   
  - udf: Check LVID earlier (Jan Kara)   
  - crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop() (Tony Lindgren)   
  - power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors (Hans de Goede)   
  - crypto: mxs-dcp - Check for DMA mapping errors (Sean Anderson)   
  - regmap: fix the offset of register error log (Jeongtae Park)   
  - PCI: Call Max Payload Size-related fixup quirks early (Marek Behún)   
  - x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions (Paul Gortmaker)   
  - usb: host: xhci-rcar: Don't reload firmware after the completion (Yoshihiro Shimoda)   
  - Revert "btrfs: compression: don't try to compress if we don't have enough pages" (Qu Wenruo)   
  - mm/page_alloc: speed up the iteration of max_order (Muchun Song)   
  - net: ll_temac: Remove left-over debug message (Esben Haabendal)   
  - powerpc/boot: Delete unneeded .globl _zimage_start (Fangrui Song)   
  - powerpc/module64: Fix comment in R_PPC64_ENTRY handling (Michael Ellerman)   
  - crypto: talitos - reduce max key size for SEC1 (Christophe Leroy)   
  - mm/kmemleak.c: make cond_resched() rate-limiting more efficient (Andrew Morton)   
  - s390/disassembler: correct disassembly lines alignment (Vasily Gorbik)   
  - ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2) (Mathieu Desnoyers)   
  - ath10k: fix recent bandwidth conversion bug (Christian Lamparter)   
  - f2fs: fix potential overflow (Chao Yu)   
  - USB: serial: mos7720: improve OOM-handling in read_mos_reg() (Tom Rix)   
  - igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian)   
  - media: stkwebcam: fix memory leak in stk_camera_probe (Pavel Skripkin)   
  - clk: fix build warning for orphan_list (Greg Kroah-Hartman)   
  - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl (Zubin Mithra)   
  - ARM: 8918/2: only build return_address() if needed (Ben Dooks)   
  - cryptoloop: add a deprecation warning (Christoph Hellwig)   
  - perf/x86/amd/ibs: Work around erratum #1197 (Kim Phillips)   
  - perf/x86/intel/pt: Fix mask of num_address_ranges (Xiaoyao Li)   
  - qede: Fix memset corruption (Shai Malin)   
  - net: macb: Add a NULL check on desc_ptp (Harini Katakam)   
  - qed: Fix the VF msix vectors flow (Shai Malin)   
  - xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG (Randy Dunlap)   
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)   
  - Linux 4.14.246 (Greg Kroah-Hartman)   
  - Revert "floppy: reintroduce O_NDELAY fix" (Denis Efremov)   
  - KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)   
  - KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs (Sean Christopherson)   
  - fbmem: add margin check to fb_check_caps() (George Kennedy)   
  - vt_kdsetmode: extend console locking (Linus Torvalds)   
  - drm/nouveau/disp: power down unused DP links during init (Ben Skeggs)   
  - drm: Copy drm_wait_vblank to user before returning (Mark Yacoub)   
  - vringh: Use wiov->used to check for read/write desc order (Neeraj Upadhyay)   
  - virtio: Improve vq->broken access to avoid any compiler optimization (Parav Pandit)   
  - opp: remove WARN when no valid OPPs remain (Michał Mirosław)   
  - usb: gadget: u_audio: fix race condition on endpoint stop (Jerome Brunet)   
  - net: marvell: fix MVNETA_TX_IN_PRGRS bit number (Maxim Kiselev)   
  - xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()' (Christophe JAILLET)   
  - ip_gre: add validation for csum_start (Shreyansh Chouhan)   
  - e1000e: Fix the max snoop/no-snoop latency for 10M (Sasha Neftin)   
  - IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs() (Tuo Li)   
  - usb: dwc3: gadget: Stop EP0 transfers during pullup disable (Wesley Cheng)   
  - usb: dwc3: gadget: Fix dwc3_calc_trbs_left() (Thinh Nguyen)   
  - USB: serial: option: add new VID/PID to support Fibocom FG150 (Zhengjun Zhang)   
  - Revert "USB: serial: ch341: fix character loss at high transfer rates" (Johan Hovold)   
  - can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters (Stefan Mätje)   
  - ARC: Fix CONFIG_STACKDEPOT (Guenter Roeck)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.509.2.el7uek]
changelog:
  - rds/ib: handle rds uncongested notifications in worker (Manjunath Patil)  [Orabug: 33467790]  
  - block: Fix bio_integrity_payload handling for cloned bios (Martin K. Petersen)  [Orabug: 33485629]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.509.2.1.el7uek]
changelog:
  - Revert "x86/vector: search CPU vector starts from last successfully assigned" (John Donnelly)  [Orabug: 33513920]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.509.2.2.el7uek]
changelog:
  - xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33557700]  
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong)  [Orabug: 33557700]  
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong)  [Orabug: 33557700]  
  - xfs: flush removing page cache in xfs_reflink_remap_prep (Dave Chinner)  [Orabug: 33557700]  
  - xfs: fix shared extent data corruption due to missing cow reservation (Brian Foster)  [Orabug: 33557700]  
  - xfs: fix pagecache truncation prior to reflink (Darrick J. Wong)  [Orabug: 33557700]  
  - xfs: fix fork selection in xfs_find_trim_cow_extent (Christoph Hellwig)  [Orabug: 33557700]  
  - xfs: remove the unused trimmed argument from xfs_reflink_trim_around_shared (Christoph Hellwig)  [Orabug: 33557700]  
  - xfs: skip delalloc COW blocks in xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33557700]  
  - xfs: fix transaction leak in xfs_reflink_allocate_cow() (Dave Chinner)  [Orabug: 33557700]  
  - xfs: cow unwritten conversion uses uninitialized dfops (Brian Foster)  [Orabug: 33557700]  
  - xfs: fix double ijoin in xfs_reflink_clear_inode_flag() (Dave Chinner)  [Orabug: 33557700]  
  - xfs: fix double ijoin in xfs_reflink_cancel_cow_range (Dave Chinner)  [Orabug: 33557700]  
  - xfs: minor cleanup for xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33557700]  
  - xfs: fix transaction allocation deadlock in IO path (Dave Chinner)  [Orabug: 33557700]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.509.2.3.el7uek]
changelog:
  - rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33670981]  
  - take care multiple extents in CoW extent converting (Wengang Wang)  [Orabug: 33647277]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.0.el7uek]
changelog:
  - xen-blkfront: sanitize the removal state machine (Christoph Hellwig)  [Orabug: 33486179]  
  - xen/blkfront: fix ring info addressing (Juergen Gross)  [Orabug: 33486179]  
  - xen/blkfront: limit allocated memory size to actual use case (Juergen Gross)  [Orabug: 33486179]  
  - xen-blkfront: do not remove disk when device_create_file() is failed (Dongli Zhang)  [Orabug: 33486179]  
  - cifs: move cifsFileInfo_put logic into a work-queue (Ronnie Sahlberg)  [Orabug: 33473933]  
  - genirq/affinity: Spread irq vectors among present CPUs as far as possible (Ming Lei)  [Orabug: 33456847]  
  - genirq/affinity: Allow irq spreading from a given starting point (Ming Lei)  [Orabug: 33456847]  
  - genirq/affinity: Move actual irq vector spreading into a helper function (Ming Lei)  [Orabug: 33456847]  
  - genirq/affinity: Rename *node_to_possible_cpumask as *node_to_cpumask (Ming Lei)  [Orabug: 33456847]  
  - net/mlx5: Initialize nvec based on "num_possible_cpus()" (Gerd Rausch)  [Orabug: 33451394]  
  - net/rds: Bring tasklets back for better latency (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Add "preferred_cpu" option to "rds_rdma.ko" (Gerd Rausch)  [Orabug: 33308966]  
  - net/mlx5: Add new verb "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 33308966]  
  - net/mlx5: Fix MLX5_EQ_VEC_COMP_BASE usage (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Fix "rds_ib_init" initialization order (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Make workers use the designated CPU (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Put more CPU cores to work (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Get rid of tasklets (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Use the same vector for send & receive (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33308966]  
  - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch)  [Orabug: 33308966]  
  - btrfs: always wait on ordered extents at fsync time (Josef Bacik)  [Orabug: 33046870]  
  - sctp: account stream padding length for reconf chunk (Eiichi Tsukata)  [Orabug: 32816609]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.1.el7uek]
changelog:
  - RDS: Remove obsolete flag (Hans Westgaard Ry)  [Orabug: 33516782]  
  - RDMA/mlx5: Avoid taking MRs from larger MR cache pools when a pool is empty (Aharon Landau)  [Orabug: 33514377]  
  - IB/mlx4: Implement backend callback for "ib_get_vector_irqn" (Gerd Rausch)  [Orabug: 33509437]  
  - Revert "x86/vector: search CPU vector starts from last successfully assigned" (John Donnelly)  [Orabug: 33488855]  
  - rds: Fix leak in rds_init (Håkon Bugge)  [Orabug: 33488611]  
  - rds: include pid in rds_sock struct (Rohit Nair)  [Orabug: 33481153]  
  - RDS-IB: Add garbage-collection to cache (Hans Westgaard Ry)  [Orabug: 33426208]  
  - RDS-IB: Fix cachehit statistics (Hans Westgaard Ry)  [Orabug: 33426208]  
  - RDS-IB: Fix cache-allocation statistics (Hans Westgaard Ry)  [Orabug: 33426208]  
  - netem: use 64 bit divide by rate (Stephen Hemminger)  [Orabug: 33135408]  
  - fs/dcache: add trace points for negative dentry pruning (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: remove global pool for negative dentry percpu counters (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: enforce a hard limit on the negative dentry count (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: Estimate the number of negative dentries to prune per filesystem (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: change name and granularity of negative dentry sysctl parameter (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: schedule only one instance of negative dentry shrinker (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: correct the usage of static_key for negative dentry (Gautham Ananthakrishna)  [Orabug: 31182222]  
  - fs/dcache: Spread negative dentry pruning across multiple CPUs (Waiman Long)  [Orabug: 31182222]  
  - fs/dcache: Enable automatic pruning of negative dentries (Waiman Long)  [Orabug: 31182222]  
  - fs/dcache: Add sysctl parameter neg-dentry-pc as a soft limit on negative dentries (Waiman Long)  [Orabug: 31182222]  
  - fs/dcache: Track & report number of negative dentries (Waiman Long)  [Orabug: 31182222]  
  - Linux 4.14.249 (Greg Kroah-Hartman)   
  - cred: allow get_cred() and put_cred() to be given NULL. (NeilBrown)   
  - HID: usbhid: free raw_report buffers in usbhid_stop (Anirudh Rayabharam)   
  - netfilter: ipset: Fix oversized kvmalloc() calls (Jozsef Kadlecsik)   
  - HID: betop: fix slab-out-of-bounds Write in betop_probe (F.A.Sulaiman)   
  - crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (Dan Carpenter)   
  - usb: hso: remove the bailout parameter (Dongliang Mu)   
  - usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)   
  - hso: fix bailout in error case of probe (Oliver Neukum)   
  - arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 (Suzuki K Poulose)   
  - ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE (Alex Sverdlin)   
  - ARM: 9079/1: ftrace: Add MODULE_PLTS support (Alex Sverdlin)   
  - ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() (Alex Sverdlin)   
  - ARM: 9077/1: PLT: Move struct plt_entries definition to header (Alex Sverdlin)   
  - EDAC/synopsys: Fix wrong value type assignment for edac_mode (Sai Krishna Potthuri)   
  - net: udp: annotate data race around udp_sk(sk)->corkflag (Eric Dumazet)   
  - ext4: fix potential infinite loop in ext4_dx_readdir() (yangerkun)   
  - ipack: ipoctal: fix module reference leak (Johan Hovold)   
  - ipack: ipoctal: fix missing allocation-failure check (Johan Hovold)   
  - ipack: ipoctal: fix tty-registration error handling (Johan Hovold)   
  - ipack: ipoctal: fix tty registration race (Johan Hovold)   
  - ipack: ipoctal: fix stack information leak (Johan Hovold)   
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Saeed Mirzamohammadi)   
  - scsi: csiostor: Add module softdep on cxgb4 (Rahul Lakkireddy)   
  - e100: fix buffer overrun in e100_get_regs (Jacob Keller)   
  - e100: fix length calculation in e100_get_regs_len (Jacob Keller)   
  - hwmon: (tmp421) fix rounding for negative values (Paul Fertser)   
  - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long)   
  - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap (Lorenzo Bianconi)   
  - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug (Chih-Kang Chang)   
  - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Andrea Claudi)   
  - mac80211: fix use-after-free in CCMP/GCMP RX (Johannes Berg)   
  - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (James Morse)   
  - cpufreq: schedutil: Use kobject release() method to free sugov_tunables (Kevin Hao)   
  - tty: Fix out-of-bound vmalloc access in imageblit (Igor Matheus Andrade Torrente)   
  - qnx4: work around gcc false positive warning bug (Linus Torvalds)   
  - xen/balloon: fix balloon kthread freezing (Juergen Gross)   
  - PCI: aardvark: Fix checking for PIO status (Evan Wang)   
  - PCI: aardvark: Fix checking for PIO Non-posted Request (Pali Rohár)   
  - arm64: dts: marvell: armada-37xx: Extend PCIe MEM space (Pali Rohár)   
  - spi: Fix tegra20 build with CONFIG_PM=n (Linus Torvalds)   
  - net: 6pack: Fix tx timeout and slot time (Guenter Roeck)   
  - alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile (Guenter Roeck)   
  - arm64: Mark __stack_chk_guard as __ro_after_init (Dan Li)   
  - parisc: Use absolute_pointer() to define PAGE0 (Helge Deller)   
  - qnx4: avoid stringop-overread errors (Linus Torvalds)   
  - sparc: avoid stringop-overread errors (Linus Torvalds)   
  - net: i825xx: Use absolute_pointer for memcpy from fixed memory location (Guenter Roeck)   
  - compiler.h: Introduce absolute_pointer macro (Guenter Roeck)   
  - xen/balloon: use a kernel thread instead a workqueue (Juergen Gross)   
  - m68k: Double cast io functions to unsigned long (Guenter Roeck)   
  - net: stmmac: allow CSR clock of 300MHz (Jesper Nilsson)   
  - net: macb: fix use after free on rmmod (Tong Zhang)   
  - blktrace: Fix uaf in blk_trace access after removing by sysfs (Zhihao Cheng)   
  - md: fix a lock order reversal in md_alloc (Christoph Hellwig)   
  - irqchip/gic-v3-its: Fix potential VPE leak on error (Kaige Fu)   
  - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() (Dan Carpenter)   
  - scsi: iscsi: Adjust iface sysfs attr detection (Baokun Li)   
  - net/mlx4_en: Don't allow aRFS for encapsulated packets (Aya Levin)   
  - bnxt_en: Fix TX timeout when TX ring size is set to the smallest (Michael Chan)   
  - net: hso: fix muxed tty registration (Johan Hovold)   
  - serial: mvebu-uart: fix driver's tx_empty callback (Pali Rohár)   
  - mcb: fix error handling in mcb_alloc_bus() (Dan Carpenter)   
  - USB: serial: option: add device id for Foxconn T99W265 (Slark Xiao)   
  - USB: serial: option: remove duplicate USB device ID (Krzysztof Kozlowski)   
  - USB: serial: option: add Telit LN920 compositions (Carlo Lobrano)   
  - USB: serial: mos7840: remove duplicated 0xac24 device ID (Krzysztof Kozlowski)   
  - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk (Julian Sikorski)   
  - staging: greybus: uart: fix tty use after free (Johan Hovold)   
  - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter (Uwe Brandt)   
  - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c (Ondrej Zary)   
  - xen/x86: fix PV trap handling on secondary processors (Jan Beulich)   
  - cifs: fix incorrect check for null pointer in header_assemble (Steve French)   
  - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() (Dan Carpenter)   
  - usb: gadget: r8a66597: fix a loop in set_feature() (Dan Carpenter)   
  - Linux 4.14.248 (Greg Kroah-Hartman)   
  - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV (Guenter Roeck)   
  - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() (Li Jinlin)   
  - pwm: rockchip: Don't modify HW state in .remove() callback (Uwe Kleine-König)   
  - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group (Nanyong Sun)   
  - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group (Nanyong Sun)   
  - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group (Nanyong Sun)   
  - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group (Nanyong Sun)   
  - nilfs2: fix NULL pointer in nilfs_##name##_attr_release (Nanyong Sun)   
  - nilfs2: fix memory leak in nilfs_sysfs_create_device_group (Nanyong Sun)   
  - ceph: lockdep annotations for try_nonblocking_invalidate (Jeff Layton)   
  - dmaengine: xilinx_dma: Set DMA mask for coherent APIs (Radhey Shyam Pandey)   
  - dmaengine: ioat: depends on !UML (Johannes Berg)   
  - parisc: Move pci_dev_is_behind_card_dino to where it is used (Guenter Roeck)   
  - Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (Lukas Bulwahn)   
  - pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered (Uwe Kleine-König)   
  - profiling: fix shift-out-of-bounds bugs (Pavel Skripkin)   
  - prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov)   
  - 9p/trans_virtio: Remove sysfs file on probe failure (Xie Yongji)   
  - thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() (Dan Carpenter)   
  - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ (Andy Shevchenko)   
  - sctp: add param size validation for SCTP_PARAM_SET_PRIMARY (Marcelo Ricardo Leitner)   
  - sctp: validate chunk size in __rcv_asconf_lookup (Marcelo Ricardo Leitner)   
  - crypto: talitos - fix max key size for sha384 and sha512 (Christophe Leroy)   
  - apparmor: remove duplicate macro list_entry_is_head() (Andy Shevchenko)   
  - rcu: Fix missed wakeup of exp_wq waiters (Neeraj Upadhyay)   
  - s390/bpf: Fix optimizing out zero-extensions (Ilya Leoshkevich)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.2.el7uek]
changelog:
  - rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Håkon Bugge)  [Orabug: 33538398]  
  - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo)  [Orabug: 33536948]  
  - nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields)  [Orabug: 33536948]  
  - xen/netfront: stop tx queues during live migration (Dongli Zhang)  [Orabug: 33536404]  
  - Linux 4.14.252 (Greg Kroah-Hartman)   
  - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Vegard Nossum)   
  - qed: Fix missing error code in qed_slowpath_start() (chongjiapeng)   
  - acpi/arm64: fix next_platform_timer() section mismatch error (Jackie Liu)   
  - drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling (Dan Carpenter)   
  - drm/msm: Fix null pointer dereference on pointer edp (Colin Ian King)   
  - pata_legacy: fix a couple uninitialized variable bugs (Dan Carpenter)   
  - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() (Ziyang Xuan)   
  - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() (Ziyang Xuan)   
  - nfc: fix error handling of nfc_proto_register() (Ziyang Xuan)   
  - ethernet: s2io: fix setting mac address during resume (Arnd Bergmann)   
  - net: encx24j600: check error in devm_regmap_init_encx24j600 (Nanyong Sun)   
  - net: korina: select CRC32 (Vegard Nossum)   
  - net: arc: select CRC32 (Vegard Nossum)   
  - iio: ssp_sensors: fix error code in ssp_print_mcu_debug() (Dan Carpenter)   
  - iio: ssp_sensors: add more range checking in ssp_parse_dataframe() (Dan Carpenter)   
  - iio: light: opt3001: Fixed timeout error when 0 lux (Jiri Valek - 2N)   
  - iio: adc128s052: Fix the error handling path of 'adc128_probe()' (Christophe JAILLET)   
  - iio: adc: aspeed: set driver data when adc probe. (Billy Tsai)   
  - x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Borislav Petkov)   
  - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Stephen Boyd)   
  - virtio: write back F_VERSION_1 before validate (Halil Pasic)   
  - USB: serial: option: add prod. id for Quectel EG91 (Tomaz Solc)   
  - USB: serial: option: add Telit LE910Cx composition 0x1204 (Daniele Palmas)   
  - USB: serial: option: add Quectel EC200S-CN module support (Yu-Tung Chang)   
  - USB: serial: qcserial: add EM9191 QDL support (Aleksander Morgado)   
  - Input: xpad - add support for another USB ID of Nacon GC-100 (Michael Cullen)   
  - usb: musb: dsps: Fix the probe error path (Miquel Raynal)   
  - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() (Zhang Jianhua)   
  - efi/cper: use stack buffer for error record decoding (Ard Biesheuvel)   
  - cb710: avoid NULL pointer subtraction (Arnd Bergmann)   
  - xhci: Enable trust tx length quirk for Fresco FL11 USB controller (Nikolay Martynov)   
  - xhci: Fix command ring pointer corruption while aborting a command (Pavankumar Kondeti)   
  - btrfs: check for error when looking up inode during dir entry replay (Filipe Manana)   
  - btrfs: deal with errors when adding inode reference during log replay (Filipe Manana)   
  - btrfs: deal with errors when replaying dir entry during log replay (Filipe Manana)   
  - s390: fix strrchr() implementation (Roberto Sassu)   
  - ALSA: seq: Fix a potential UAF by wrong private_free call order (Takashi Iwai)   
  - stable: clamp SUBLEVEL in 4.14 (Sasha Levin)   
  - Linux 4.14.251 (Greg Kroah-Hartman)   
  - sched: Always inline is_percpu_thread() (Peter Zijlstra)   
  - perf/x86: Reset destroy callback on event init failure (Anand K Mistry)   
  - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)   
  - scsi: ses: Fix unsigned comparison with less than zero (Jiapeng Chong)   
  - net: sun: SUNVNET_COMMON should depend on INET (Randy Dunlap)   
  - m68k: Handle arrivals of multiple signals correctly (Al Viro)   
  - mac80211: Drop frames from invalid MAC address in ad-hoc mode (YueHaibing)   
  - netfilter: ip6_tables: zero-initialize fragment offset (Jeremy Sowden)   
  - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS (Mizuho Mori)   
  - net: phy: bcm7xxx: Fixed indirect MMD operations (Florian Fainelli)   
  - i2c: acpi: fix resource leak in reconfiguration device addition (Jamie Iles)   
  - i40e: fix endless loop under rtnl (Jiri Benc)   
  - rtnetlink: fix if_nlmsg_stats_size() under estimation (Eric Dumazet)   
  - drm/nouveau/debugfs: fix file release memory leak (Yang Yingliang)   
  - netlink: annotate data races around nlk->bound (Eric Dumazet)   
  - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() (Eric Dumazet)   
  - ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence (Oleksij Rempel)   
  - ptp_pch: Load module automatically if ID matches (Andy Shevchenko)   
  - powerpc/fsl/dts: Fix phy-connection-type for fm1mac3 (Pali Rohár)   
  - net_sched: fix NULL deref in fifo_set_limit() (Eric Dumazet)   
  - phy: mdio: fix memory leak (Pavel Skripkin)   
  - bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu)   
  - xtensa: call irqchip_init only when CONFIG_USE_OF is selected (Max Filippov)   
  - bpf, mips: Validate conditional branch offsets (Piotr Krysiuk)   
  - bpf: add also cbpf long jump test cases with heavy expansion (Daniel Borkmann)   
  - ARM: dts: qcom: apq8064: use compatible which contains chipid (David Heidelberg)   
  - ARM: dts: omap3430-sdp: Fix NAND device node (Roger Quadros)   
  - xen/balloon: fix cancelled balloon action (Juergen Gross)   
  - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero (Trond Myklebust)   
  - ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)   
  - USB: cdc-acm: fix break reporting (Johan Hovold)   
  - USB: cdc-acm: fix racy tty buffer accesses (Johan Hovold)   
  - Partially revert "usb: Kconfig: using select for USB_COMMON dependency" (Ben Hutchings)   
  - Linux 4.14.250 (Greg Kroah-Hartman)   
  - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan)   
  - scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong)   
  - usb: dwc2: check return value after calling platform_get_resource() (Yang Yingliang)   
  - usb: testusb: Fix for showing the connection speed (Faizel K B)   
  - scsi: sd: Free scsi_disk device via put_device() (Ming Lei)   
  - ext2: fix sleeping in atomic bugs on error (Dan Carpenter)   
  - sparc64: fix pci_iounmap() when CONFIG_PCI is not set (Linus Torvalds)   
  - xen-netback: correct success/error reporting for the SKB-with-fraglist case (Jan Beulich)   
  - net: mdio: introduce a shutdown method to mdio device drivers (Vladimir Oltean)


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.510.3.el7uek]
changelog:
  - uek-rpm: Pensando: Enable CONFIG_DM_CRYPT=y (Dave Kleikamp)  [Orabug: 33585517]  
  - kernfs: don't create a negative dentry if inactive node exists (Ian Kent)  [Orabug: 33548754]  
  - kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao)  [Orabug: 33548754]  
  - kernfs: use simple_xattrs for security attributes (Ondrej Mosnacek)  [Orabug: 33548754]  
  - kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent)  [Orabug: 33548754]  
  - kernfs: use i_lock to protect concurrent inode updates (Ian Kent)  [Orabug: 33548754]  
  - kernfs: switch kernfs to use an rwsem (Ian Kent)  [Orabug: 33548754]  
  - kernfs: use VFS negative dentry caching (Ian Kent)  [Orabug: 33548754]  
  - kernfs: add a revision to identify directory node changes (Ian Kent)  [Orabug: 33548754]  
  - selftests: breakpoints: fix compile error on breakpoint_test_arm64 (Sumit Semwal)  [Orabug: 33577681]  
  - Revert "net/rds: Allocate pages on HCA NUMA nodeid" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Use the same vector for send & receive" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Get rid of tasklets" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Put more CPU cores to work" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Make workers use the designated CPU" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Fix "rds_ib_init" initialization order" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/mlx5: Fix MLX5_EQ_VEC_COMP_BASE usage" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/mlx5: Add new verb "ib_get_vector_irqn"" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Add "preferred_cpu" option to "rds_rdma.ko"" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Follow the observed CQ CPU affinity" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Throttle check for CQ CPU affinity" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "net/rds: Bring tasklets back for better latency" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "IB/mlx4: Implement backend callback for "ib_get_vector_irqn"" (Gerd Rausch)  [Orabug: 33561326]  
  - Revert "bnxt_en: Remove the setting of dev_port." (John Sobecki)  [Orabug: 33553100]  
  - xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster)  [Orabug: 33542386]  
  - xfs: fix reflink source file racing with directio writes (Darrick J. Wong)  [Orabug: 33542386]  
  - xfs: split up the xfs_reflink_end_cow work into smaller transactions (Darrick J. Wong)  [Orabug: 33542386]  
  - xfs: flush removing page cache in xfs_reflink_remap_prep (Dave Chinner)  [Orabug: 33542386]  
  - xfs: fix shared extent data corruption due to missing cow reservation (Brian Foster)  [Orabug: 33542386]  
  - xfs: fix pagecache truncation prior to reflink (Darrick J. Wong)  [Orabug: 33542386]  
  - xfs: fix fork selection in xfs_find_trim_cow_extent (Christoph Hellwig)  [Orabug: 33542386]  
  - xfs: remove the unused trimmed argument from xfs_reflink_trim_around_shared (Christoph Hellwig)  [Orabug: 33542386]  
  - xfs: skip delalloc COW blocks in xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33542386]  
  - xfs: fix transaction leak in xfs_reflink_allocate_cow() (Dave Chinner)  [Orabug: 33542386]  
  - xfs: cow unwritten conversion uses uninitialized dfops (Brian Foster)  [Orabug: 33542386]  
  - xfs: fix double ijoin in xfs_reflink_clear_inode_flag() (Dave Chinner)  [Orabug: 33542386]  
  - xfs: fix double ijoin in xfs_reflink_cancel_cow_range (Dave Chinner)  [Orabug: 33542386]  
  - xfs: minor cleanup for xfs_reflink_end_cow (Christoph Hellwig)  [Orabug: 33542386]  
  - xfs: fix transaction allocation deadlock in IO path (Dave Chinner)  [Orabug: 33542386]  
  - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui)  [Orabug: 33548143]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.4.1.el7uek]
changelog:
  - rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33670990]  
  - take care multiple extents in CoW extent converting (Wengang Wang)  [Orabug: 33647290]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.510.5.el7uek]
changelog:
  - net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33585476]  
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33501677]  
  - rds: ib: Ack seq not always received in monotonic increasing order (Håkon Bugge)  [Orabug: 33620419]  
  - net/rds: Refactor rds_ib_recv_refill_one (Freddy Carrillo)  [Orabug: 33265955]  
  - arm64: pcie: Intercept Pensando specific SError (Henry Willard)  [Orabug: 33590080]  
  - arm64: pcie: Change bad_mode hook to cap_pciep_access_in_progress() (Henry Willard)  [Orabug: 33590080]  
  - arm64: pcie: Remove Pensando SError trapping patch (Henry Willard)  [Orabug: 33590080]  
  - take care multiple extents in CoW extent converting (Wengang Wang)  [Orabug: 33473949]  
  - net/mlx5e: ethtool, Add support for EEPROM high pages query (Erez Alfasi)  [Orabug: 33525560]  
  - ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions (Erez Alfasi)  [Orabug: 33525560]  
  - net/mlx5: Remove unnecessary prints from mlx5_enter_error_state. (Anand Khoje)  [Orabug: 33651549]  
  - uek-rpm: Add _raw_spin_trylock to KABI (John Donnelly)  [Orabug: 33651431]  
  - x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora)  [Orabug: 33651433]  
  - x86/asm: add clzero based page clearing (Ankur Arora)  [Orabug: 33580825]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora)  [Orabug: 33580825]  
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (Kim Phillips)  [Orabug: 33580825]  
  - cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33651434]  
  - net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33651436]  
  - uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy)  [Orabug: 33651437]  
  - rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33651440]  
  - net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33651444]  
  - RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib)  [Orabug: 33651442]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.510.5.1.el7uek]
changelog:
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679805]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679805]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.5.2.el7uek]
changelog:
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33722441]  {CVE-2021-4155}


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.510.5.3.el7uek]
changelog:
  - panic: reinitialize logbuf locks before notifiers (Stephen Brennan)  [Orabug: 33703438]  
  - panic: disable optimistic spin after halting CPUs (Stephen Brennan)  [Orabug: 33703438]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.510.5.4.el7uek]
changelog:
  - net: macsec: Severe performance regression in "...preserve ordering" (Venkat Venkatsubra)  [Orabug: 33771165]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.510.5.5.el7uek]
changelog:
  - xfs: force the log offline when log intent item recovery fails (Darrick J. Wong)  [Orabug: 33757273]  
  - xfs: cancel intents immediately if process_intents fails (Darrick J. Wong)  [Orabug: 33757273]  
  - x86/vector: search CPU vector starts from last successfully assigned (Joe Jin)  [Orabug: 33290504]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.510.5.6.el7uek]
changelog:
  - ocfs2: fix data corruption on truncate (Jan Kara)  [Orabug: 33886144]  
  - ocfs2: fix data corruption after conversion from inline format (Jan Kara)  [Orabug: 33886144]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.511.0.el7uek]
changelog:
  - Linux 4.14.253 (Greg Kroah-Hartman)   
  - ASoC: DAPM: Cover regression by kctl change notification fix (Takashi Iwai)   
  - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG (Nick Desaulniers)   
  - tracing: Have all levels of checks prevent recursion (Steven Rostedt (VMware))   
  - net: mdiobus: Fix memory leak in __mdiobus_register (Yanfei Xu)   
  - ALSA: hda: avoid write to STATESTS if controller is in reset (Kai Vehmanen)   
  - platform/x86: intel_scu_ipc: Update timeout value in comment (Prashant Malani)   
  - isdn: mISDN: Fix sleeping function called from invalid context (Zheyu Ma)   
  - ARM: dts: spear3xx: Fix gmac node (Herve Codina)   
  - net: stmmac: add support for dwmac 3.40a (Herve Codina)   
  - btrfs: deal with errors when checking if a dir entry exists during log replay (Filipe Manana)   
  - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option (Vegard Nossum)   
  - isdn: cpai: check ctr->cnr to avoid array index out of bound (Xiaolong Huang)   
  - nfc: nci: fix the UAF of rf_conn_info object (Lin Ma)   
  - ASoC: DAPM: Fix missing kctl change notifications (Takashi Iwai)   
  - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (Brendan Grieve)   
  - vfs: check fd has read access in kernel_read_file_from_fd() (Matthew Wilcox (Oracle))   
  - elfcore: correct reference to CONFIG_UML (Lukas Bulwahn)   
  - ocfs2: mount fails with buffer overflow in strlen (Valentin Vidic)   
  - ocfs2: fix data corruption after conversion from inline format (Jan Kara)   
  - can: peak_pci: peak_pci_remove(): fix UAF (Zheyu Ma)   
  - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification (Stephane Grosjean)   
  - can: rcar_can: fix suspend/resume (Yoshihiro Shimoda)   
  - NIOS2: irqflags: rename a redefined register name (Randy Dunlap)   
  - netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart)   
  - NFSD: Keep existing listeners on portlist error (Benjamin Coddington)   
  - xtensa: xtfpga: Try software restart before simulating CPU reset (Guenter Roeck)   
  - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF (Max Filippov)   
  - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default (Eugen Hristev)   
  - uek-rpm: Add _raw_spin_trylock to KABI (John Donnelly)  [Orabug: 33557961]  
  - cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode (Giovanni Gherdovich)  [Orabug: 33581183]  
  - RDMA/rxe: Bump up default maximum values used via uverbs (Rao Shoaib)  [Orabug: 33615343]  
  - net: ipv6: Discard next-hop MTU less than minimum link MTU (Georg Kohmann)  [Orabug: 33615357]  
  - rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool (Praveen Kumar Kannoju)  [Orabug: 33611440]  
  - net/mlx5: Remove unnecessary prints from mlx5_enter_error_state. (Anand Khoje)  [Orabug: 33175315]  
  - net/rds: Don't pummel the subnet-manager (Gerd Rausch)  [Orabug: 33589568]  
  - x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora)  [Orabug: 33580825]  
  - x86/asm: add clzero based page clearing (Ankur Arora)  [Orabug: 33580825]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora)  [Orabug: 33580825]  
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (Kim Phillips)  [Orabug: 33580825]  
  - uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy)  [Orabug: 33590163]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.1.el7uek]
changelog:
  - uek-rpm: Update ol7 locklist with fnic symbols (Saeed Mirzamohammadi)  [Orabug: 33590914]  
  - mm, oom: dump stack of victim when reaping failed (David Rientjes)  [Orabug: 33647102]  
  - memcg: prohibit unconditional exceeding the limit of dying tasks (Vasily Averin)  [Orabug: 33647102]  
  - memcg: enable memcg oom-kill for __GFP_NOFAIL (Shakeel Butt)  [Orabug: 33647102]  
  - memcg, oom: no oom-kill for __GFP_RETRY_MAYFAIL (Shakeel Butt)  [Orabug: 33647102]  
  - memcg: killed threads should not invoke memcg OOM killer (Tetsuo Handa)  [Orabug: 33647102]  
  - memcg, oom: notify on oom killer invocation from the charge path (Michal Hocko)  [Orabug: 33647102]  
  - mm: memcontrol: print proper OOM header when no eligible victim left (Johannes Weiner)  [Orabug: 33647102]  
  - memcg, oom: move out_of_memory back to the charge path (Michal Hocko)  [Orabug: 33647102]  
  - rds/ib: Use both iova and key in free_mr socket call (aru kolappan)  [Orabug: 33671340]  
  - arm64: kexec: Suppress kexec on embedded systems (smartnics) (Henry Willard)  [Orabug: 33699776]  
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679805]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679805]  
  - xfs: remove all COW fork extents when remounting readonly (Darrick J. Wong)  [Orabug: 33676191]  
  - RDS/IB: Fix error when trying to unallocate ring buffers (Hans Westgaard Ry)  [Orabug: 33620350]  
  - net: macsec: Severe performance regression in "...preserve ordering" (Venkat Venkatsubra)  [Orabug: 33557957]  
  - Linux 4.14.256 (Greg Kroah-Hartman)   
  - soc/tegra: pmc: Fix imbalanced clock disabling in error code path (Dmitry Osipenko)   
  - usb: max-3421: Use driver data instead of maintaining a list of bound devices (Uwe Kleine-König)   
  - RDMA/netlink: Add __maybe_unused to static inline in C file (Leon Romanovsky)   
  - batman-adv: Don't always reallocate the fragmentation skb head (Sven Eckelmann)   
  - batman-adv: Reserve needed_*room for fragments (Sven Eckelmann)   
  - batman-adv: Consider fragmentation for needed_headroom (Sven Eckelmann)   
  - batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh (Linus Lüssing)   
  - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN (Linus Lüssing)   
  - perf/core: Avoid put_page() when GUP fails (Greg Thelen)   
  - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (hongao)   
  - drm/udl: fix control-message timeout (Johan Hovold)   
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (Nguyen Dinh Phi)   
  - parisc/sticon: fix reverse colors (Sven Schnelle)   
  - btrfs: fix memory ordering between normal and ordered work functions (Nikolay Borisov)   
  - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag (Rustam Kovhaev)   
  - hexagon: export raw I/O routines for modules (Nathan Chancellor)   
  - tun: fix bonding active backup with arp monitoring (Nicolas Dichtel)   
  - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server (Alexander Antonov)   
  - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server (Alexander Antonov)   
  - NFC: reorder the logic in nfc_{un,}register_device (Lin Ma)   
  - NFC: reorganize the functions in nci_request (Lin Ma)   
  - i40e: Fix NULL ptr dereference on VSI filter sync (Michal Maloszewski)   
  - net: virtio_net_hdr_to_skb: count transport header in UFO (Jonathan Davies)   
  - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (Christophe JAILLET)   
  - mips: lantiq: add support for clk_get_parent() (Randy Dunlap)   
  - mips: bcm63xx: add support for clk_get_parent() (Randy Dunlap)   
  - MIPS: generic/yamon-dt: fix uninitialized variable error (Colin Ian King)   
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Surabhi Boob)   
  - net: bnx2x: fix variable dereferenced before check (Pavel Skripkin)   
  - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() (Vincent Donnefort)   
  - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set (Randy Dunlap)   
  - sh: define __BIG_ENDIAN for math-emu (Randy Dunlap)   
  - sh: fix kconfig unmet dependency warning for FRAME_POINTER (Randy Dunlap)   
  - maple: fix wrong return value of maple_bus_init(). (Lu Wei)   
  - sh: check return code of request_irq (Nick Desaulniers)   
  - powerpc/dcr: Use cmplwi instead of 3-argument cmpli (Michael Ellerman)   
  - ALSA: gus: fix null pointer dereference on pointer block (Chengfeng Ye)   
  - powerpc/5200: dts: fix memory node unit name (Anatolij Gustschin)   
  - scsi: target: Fix alua_tg_pt_gps_count tracking (Mike Christie)   
  - scsi: target: Fix ordered tag handling (Mike Christie)   
  - MIPS: sni: Fix the build (Bart Van Assche)   
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Guanghui Feng)   
  - usb: host: ohci-tmio: check return value after calling platform_get_resource() (Yang Yingliang)   
  - ARM: dts: omap: fix gpmc,mux-add-data type (Roger Quadros)   
  - scsi: advansys: Fix kernel pointer leak (Guo Zhi)   
  - usb: musb: tusb6010: check return value after calling platform_get_resource() (Yang Yingliang)   
  - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() (James Smart)   
  - arm64: zynqmp: Fix serial compatible string (Michal Simek)   
  - PCI/MSI: Destroy sysfs before freeing entries (Thomas Gleixner)   
  - parisc/entry: fix trace test in syscall exit path (Sven Schnelle)   
  - tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT (Paul Burton)   
  - ext4: fix lazy initialization next schedule time computation in more granular unit (Shaoying Xu)   
  - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Pali Rohár)   
  - s390/cio: check the subchannel validity for dev_busid (Vineeth Vijayan)   
  - mm, oom: do not trigger out_of_memory from the #PF (Michal Hocko)   
  - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Vasily Averin)   
  - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 (Naveen N. Rao)   
  - powerpc/bpf: Validate branch ranges (Naveen N. Rao)   
  - powerpc/lib: Add helper to check if offset is within conditional branch range (Naveen N. Rao)   
  - ARM: 9156/1: drop cc-option fallbacks for architecture selection (Arnd Bergmann)   
  - ARM: 9155/1: fix early early_iounmap() (Michał Mirosław)   
  - USB: chipidea: fix interrupt deadlock (Johan Hovold)   
  - vsock: prevent unnecessary refcnt inc for nonblocking connect (Eiichi Tsukata)   
  - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails (Chengfeng Ye)   
  - llc: fix out-of-bound array index in llc_sk_dev_hash() (Eric Dumazet)   
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Miaohe Lin)   
  - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed (Huang Guobin)   
  - ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses (Hans de Goede)   
  - net: davinci_emac: Fix interrupt pacing disable (Maxim Kiselev)   
  - xen-pciback: Fix return in pm_ctrl_init() (YueHaibing)   
  - i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()' (Christophe JAILLET)   
  - scsi: qla2xxx: Turn off target reset during issue_lip (Quinn Tran)   
  - ar7: fix kernel builds for compiler test (Jackie Liu)   
  - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT (Ahmad Fatoum)   
  - m68k: set a default value for MEMORY_RESERVE (Randy Dunlap)   
  - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result` (Lars-Peter Clausen)   
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal)   
  - auxdisplay: ht16k33: Fix frame buffer device blanking (Geert Uytterhoeven)   
  - auxdisplay: ht16k33: Connect backlight to fbdev (Geert Uytterhoeven)   
  - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (Geert Uytterhoeven)   
  - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro (Claudiu Beznea)   
  - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare() (Evgeny Novikov)   
  - fs: orangefs: fix error return code of orangefs_revalidate_lookup() (Jia-Ju Bai)   
  - NFS: Fix deadlocks in nfs_scan_commit_list() (Trond Myklebust)   
  - PCI: aardvark: Don't spam about PIO Response Status (Marek Behún)   
  - drm/plane-helper: fix uninitialized variable reference (Alex Xu (Hello71))   
  - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (Baptiste Lepers)   
  - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined (Arnaud Pouliquen)   
  - apparmor: fix error check (Tom Rix)   
  - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error (Hans de Goede)   
  - mips: cm: Convert to bitfield API to fix out-of-bounds access (Geert Uytterhoeven)   
  - serial: xilinx_uartps: Fix race condition causing stuck TX (Anssi Hannula)   
  - ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (Richard Fitzgerald)   
  - ASoC: cs42l42: Correct some register default values (Richard Fitzgerald)   
  - RDMA/mlx4: Return missed an error if device doesn't support steering (Leon Romanovsky)   
  - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn() (Dan Carpenter)   
  - power: supply: rt5033_battery: Change voltage values to µV (Jakob Hauser)   
  - usb: gadget: hid: fix error code in do_config() (Dan Carpenter)   
  - serial: 8250_dw: Drop wrong use of ACPI_PTR() (Andy Shevchenko)   
  - video: fbdev: chipsfb: use memset_io() instead of memset() (Christophe Leroy)   
  - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe (Dongliang Mu)   
  - soc/tegra: Fix an error handling path in tegra_powergate_power_up() (Christophe JAILLET)   
  - arm: dts: omap3-gta04a4: accelerometer irq fix (Andreas Kemnade)   
  - ALSA: hda: Reduce udelay() at SKL+ position reporting (Takashi Iwai)   
  - JFS: fix memleak in jfs_mount (Dongliang Mu)   
  - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT (Jackie Liu)   
  - scsi: dc395: Fix error case unwinding (Tong Zhang)   
  - ARM: dts: at91: tse850: the emac<->phy interface is rmii (Peter Rosin)   
  - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc() (Jackie Liu)   
  - RDMA/rxe: Fix wrong port_cap_flags (Junji Wei)   
  - ibmvnic: Process crqs after enabling interrupts (Sukadev Bhattiprolu)   
  - crypto: pcrypt - Delay write to padata->info (Daniel Jordan)   
  - net: phylink: avoid mvneta warning when setting pause parameters (Russell King (Oracle))   
  - net: amd-xgbe: Toggle PLL settings during rate change (Shyam Sundar S K)   
  - libertas: Fix possible memory leak in probe and disconnect (Wang Hai)   
  - libertas_tf: Fix possible memory leak in probe and disconnect (Wang Hai)   
  - samples/kretprobes: Fix return value if register_kretprobe() failed (Tiezhu Yang)   
  - irq: mips: avoid nested irq_enter() (Mark Rutland)   
  - s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap() (David Hildenbrand)   
  - smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi (Tetsuo Handa)   
  - PM: hibernate: fix sparse warnings (Anders Roxell)   
  - phy: micrel: ksz8041nl: do not use power down mode (Stefan Agner)   
  - mwifiex: Send DELBA requests according to spec (Jonas Dreßler)   
  - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (Nathan Chancellor)   
  - mmc: mxs-mmc: disable regulator on error and in the remove function (Christophe JAILLET)   
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues() (Jakub Kicinski)   
  - drm/msm: uninitialized variable in msm_gem_import() (Dan Carpenter)   
  - ath10k: fix max antenna gain unit (Sven Eckelmann)   
  - hwmon: Fix possible memleak in __hwmon_device_register() (Yang Yingliang)   
  - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host() (Dan Carpenter)   
  - memstick: avoid out-of-range warning (Arnd Bergmann)   
  - b43: fix a lower bounds test (Dan Carpenter)   
  - b43legacy: fix a lower bounds test (Dan Carpenter)   
  - hwrng: mtk - Force runtime pm ops for sleep ops (Markus Schneider-Pargmann)   
  - crypto: qat - disregard spurious PFVF interrupts (Giovanni Cabiddu)   
  - crypto: qat - detect PFVF collision after ACK (Giovanni Cabiddu)   
  - ath9k: Fix potential interrupt storm on queue reset (Linus Lüssing)   
  - cpuidle: Fix kobject memory leaks in error paths (Anel Orazgaliyeva)   
  - media: cx23885: Fix snd_card_free call on null card pointer (Colin Ian King)   
  - media: si470x: Avoid card name truncation (Kees Cook)   
  - media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()' (Christophe JAILLET)   
  - media: dvb-usb: fix ununit-value in az6027_rc_query (Pavel Skripkin)   
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long)   
  - parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling (Sven Schnelle)   
  - task_stack: Fix end_of_stack() for architectures with upwards-growing stack (Helge Deller)   
  - parisc: fix warning in flush_tlb_all (Sven Schnelle)   
  - spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe() (Yang Yingliang)   
  - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 (Arnd Bergmann)   
  - gre/sit: Don't generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE (Stephen Suryaputra)   
  - ARM: clang: Do not rely on lr register for stacktrace (Masami Hiramatsu)   
  - smackfs: use __GFP_NOFAIL for smk_cipso_doi() (Tetsuo Handa)   
  - iwlwifi: mvm: disable RX-diversity in powersave (Johannes Berg)   
  - PM: hibernate: Get block device exclusively in swsusp_check() (Ye Bin)   
  - mwl8k: Fix use-after-free in mwl8k_fw_state_machine() (Zheyu Ma)   
  - tracing/cfi: Fix cmp_entries_* functions signature mismatch (Kalesh Singh)   
  - lib/xz: Validate the value before assigning it to an enum variable (Lasse Collin)   
  - lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression (Lasse Collin)   
  - memstick: r592: Fix a UAF bug when removing the driver (Zheyu Ma)   
  - leaking_addresses: Always print a trailing newline (Kees Cook)   
  - ACPI: battery: Accept charges over the design capacity as full (André Almeida)   
  - ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Tuo Li)   
  - tracefs: Have tracefs directories not set OTH permission bits by default (Steven Rostedt (VMware))   
  - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte() (Anant Thazhemadam)   
  - ACPICA: Avoid evaluating methods too early during system resume (Rafael J. Wysocki)   
  - ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK (Randy Dunlap)   
  - media: mceusb: return without resubmitting URB in case of -EPROTO error. (Rajat Asthana)   
  - media: s5p-mfc: Add checking to s5p_mfc_probe(). (Nadezda Lutovinova)   
  - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe() (Tuo Li)   
  - media: uvcvideo: Set capability in s_param (Ricardo Ribalda)   
  - media: netup_unidvb: handle interrupt properly according to the firmware (Zheyu Ma)   
  - media: mt9p031: Fix corrupted frame after restarting stream (Dirk Bender)   
  - mwifiex: Properly initialize private structure on interface type changes (Jonas Dreßler)   
  - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Jonas Dreßler)   
  - x86: Increase exception stack sizes (Peter Zijlstra)   
  - smackfs: Fix use-after-free in netlbl_catmap_walk() (Pawan Gupta)   
  - locking/lockdep: Avoid RCU-induced noinstr fail (Peter Zijlstra)   
  - MIPS: lantiq: dma: reset correct number of channel (Aleksander Jan Bajkowski)   
  - MIPS: lantiq: dma: add small delay after reset (Aleksander Jan Bajkowski)   
  - platform/x86: wmi: do not fail if disabling fails (Barnabás Pőcze)   
  - Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo)   
  - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (Takashi Iwai)   {CVE-2021-3640} 
  - USB: iowarrior: fix control-message timeouts (Johan Hovold)   
  - USB: serial: keyspan: fix memleak on probe errors (Wang Hai)   
  - iio: dac: ad5446: Fix ad5622_write() return value (Pekka Korpinen)   
  - pinctrl: core: fix possible memory leak in pinctrl_enable() (Yang Yingliang)   
  - quota: correct error number in free_dqentry() (Zhang Yi)   
  - quota: check block number when reading the block in quota file (Zhang Yi)   
  - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Marek Behún)   
  - PCI: aardvark: Fix return value of MSI domain .alloc() method (Marek Behún)   
  - PCI: aardvark: Do not unmask unused interrupts (Pali Rohár)   
  - PCI: aardvark: Do not clear status bits of masked interrupts (Pali Rohár)   
  - xen/balloon: add late_initcall_sync() for initial ballooning done (Juergen Gross)   
  - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume (Pavel Skripkin)   
  - ALSA: mixer: oss: Fix racy access to slots (Takashi Iwai)   
  - serial: core: Fix initializing and restoring termios speed (Pali Rohár)   
  - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found (Xiaoming Ni)   
  - power: supply: max17042_battery: use VFSOC for capacity when no rsns (Henrik Grimler)   
  - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold (Sebastian Krzyszkowiak)   
  - signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT (Eric W. Biederman)   
  - signal: Remove the bogus sigkill_pending in ptrace_stop (Eric W. Biederman)   
  - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP (Alok Prasad)   
  - wcn36xx: handle connection loss indication (Benjamin Li)   
  - libata: fix checking of DMA state (Reimar Döffinger)   
  - mwifiex: Read a PCI register after writing the TX ring write pointer (Jonas Dreßler)   
  - wcn36xx: Fix HT40 capability for 2Ghz band (Loic Poulain)   
  - evm: mark evm_fixmode as __ro_after_init (Austin Kim)   
  - rtl8187: fix control-message timeouts (Johan Hovold)   
  - PCI: Mark Atheros QCA6174 to avoid bus reset (Ingmar Klein)   
  - ath10k: fix division by zero in send path (Johan Hovold)   
  - ath10k: fix control-message timeout (Johan Hovold)   
  - ath6kl: fix control-message timeout (Johan Hovold)   
  - ath6kl: fix division by zero in send path (Johan Hovold)   
  - mwifiex: fix division by zero in fw download path (Johan Hovold)   
  - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (Eric Badger)   
  - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property (Krzysztof Kozlowski)   
  - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled (Krzysztof Kozlowski)   
  - hwmon: (pmbus/lm25066) Add offset coefficients (Zev Weiss)   
  - btrfs: fix lost error handling when replaying directory deletes (Filipe Manana)   
  - vmxnet3: do not stop tx queues after netif_device_detach() (Dongli Zhang)   
  - watchdog: Fix OMAP watchdog early handling (Walter Stoll)   
  - spi: spl022: fix Microwire full duplex mode (Thomas Perrot)   
  - bpf: Prevent increasing bpf_jit_limit above max (Lorenz Bauer)   
  - mmc: winbond: don't build on M68K (Randy Dunlap)   
  - hyperv/vmbus: include linux/bitops.h (Arnd Bergmann)   
  - sfc: Don't use netif_info before net_device setup (Erik Ekman)   
  - cavium: Fix return values of the probe function (Zheyu Ma)   
  - scsi: qla2xxx: Fix unmap of already freed sgl (Dmitry Bogdanov)   
  - cavium: Return negative value when pci_alloc_irq_vectors() fails (Zheyu Ma)   
  - x86/irq: Ensure PI wakeup handler is unregistered before module unload (Sean Christopherson)   
  - ALSA: timer: Unconditionally unlink slave instances, too (Takashi Iwai)   
  - ALSA: timer: Fix use-after-free problem (Wang Wensheng)   
  - ALSA: synth: missing check for possible NULL after the call to kstrdup (Austin Kim)   
  - ALSA: line6: fix control and interrupt message timeouts (Johan Hovold)   
  - ALSA: 6fire: fix control and bulk message timeouts (Johan Hovold)   
  - ALSA: ua101: fix division by zero at probe (Johan Hovold)   
  - media: ite-cir: IR receiver stop working after receive overflow (Sean Young)   
  - tpm: Check for integer overflow in tpm2_map_response_body() (Dan Carpenter)   
  - parisc: Fix ptrace check on syscall return (Helge Deller)   
  - mmc: dw_mmc: Dont wait for DRTO on Write RSP error (Christian Löhle)   
  - ocfs2: fix data corruption on truncate (Jan Kara)   
  - libata: fix read log timeout value (Damien Le Moal)   
  - Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Takashi Iwai)   
  - Input: elantench - fix misreporting trackpoint coordinates (Phoenix Huang)   
  - binder: use cred instead of task for selinux checks (Todd Kjos)   
  - binder: use euid from cred instead of using task (Todd Kjos)   
  - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay (Mathias Nyman)   
  - Linux 4.14.255 (Greg Kroah-Hartman)   
  - rsi: fix control-message timeout (Johan Hovold)   
  - staging: rtl8192u: fix control-message timeouts (Johan Hovold)   
  - staging: r8712u: fix control-message timeout (Johan Hovold)   
  - comedi: vmk80xx: fix bulk and interrupt message timeouts (Johan Hovold)   
  - comedi: vmk80xx: fix bulk-buffer overflow (Johan Hovold)   
  - comedi: vmk80xx: fix transfer-buffer overflows (Johan Hovold)   
  - comedi: ni_usb6501: fix NULL-deref in command paths (Johan Hovold)   
  - comedi: dt9812: fix DMA buffers on stack (Johan Hovold)   
  - isofs: Fix out of bound access for corrupted isofs image (Jan Kara)   
  - printk/console: Allow to disable console output by using console="" or console=null (Petr Mladek)   
  - usb-storage: Add compatibility quirk flags for iODD 2531/2541 (James Buren)   
  - usb: musb: Balance list entry in musb_gadget_queue (Viraj Shah)   
  - usb: gadget: Mark USB_FSL_QE broken on 64-bit (Geert Uytterhoeven)   
  - Revert "x86/kvm: fix vcpu-id indexed array sizes" (Juergen Gross)   
  - block: introduce multi-page bvec helpers (Ming Lei)   
  - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields (Mike Marciniszyn)   
  - IB/qib: Use struct_size() helper (Gustavo A. R. Silva)   
  - ARM: 9120/1: Revert "amba: make use of -1 IRQs warn" (Wang Kefeng)   
  - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed (Arnd Bergmann)   
  - mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS (Kirill A. Shutemov)   
  - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)   
  - scsi: core: Put LLD module refcnt after SCSI device is released (Ming Lei)   
  - Linux 4.14.254 (Greg Kroah-Hartman)   
  - sctp: add vtag check in sctp_sf_ootb (Xin Long)   
  - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long)   
  - sctp: add vtag check in sctp_sf_violation (Xin Long)   
  - sctp: fix the processing for COOKIE_ECHO chunk (Xin Long)   
  - sctp: use init_tag from inithdr for ABORT chunk (Xin Long)   
  - net: nxp: lpc_eth.c: avoid hang when bringing interface down (Trevor Woerner)   
  - nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST (Guenter Roeck)   
  - net: batman-adv: fix error handling (Pavel Skripkin)   
  - regmap: Fix possible double-free in regcache_rbtree_exit() (Yang Yingliang)   
  - net: lan78xx: fix division by zero in send path (Johan Hovold)   
  - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit (Haibo Chen)   
  - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 (Shawn Guo)   
  - mmc: dw_mmc: exynos: fix the finding clock sample value (Jaehoon Chung)   
  - mmc: vub300: fix control-message timeouts (Johan Hovold)   
  - ipv4: use siphash instead of Jenkins in fnhe_hashfun() (Eric Dumazet)   
  - Revert "net: mdiobus: Fix memory leak in __mdiobus_register" (Pavel Skripkin)   
  - nfc: port100: fix using -ERRNO as command type mask (Krzysztof Kozlowski)   
  - ata: sata_mv: Fix the error handling of mv_chip_id() (Zheyu Ma)   
  - usbnet: fix error return code in usbnet_probe() (Wang Hai)   
  - usbnet: sanity check for maxpacket (Oliver Neukum)   
  - ARM: 8819/1: Remove '-p' from LDFLAGS (Nathan Chancellor)   
  - powerpc/bpf: Fix BPF_MOD when imm == 1 (Naveen N. Rao)   
  - ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype (Arnd Bergmann)   
  - ARM: 9134/1: remove duplicate memcpy() definition (Arnd Bergmann)   
  - ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned (Nick Desaulniers)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.2.el7uek]
changelog:
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33756155]  {CVE-2021-4155} 
  - net/mlx5e: ethtool, Add support for EEPROM high pages query (Erez Alfasi)  [Orabug: 33755527]  
  - ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions (Erez Alfasi)  [Orabug: 33755527]  
  - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (George Kennedy)  [Orabug: 33731361]  
  - uek-rpm: configs: disable CONFIG_USB_GADGET (aloktiw)  [Orabug: 33730434]  
  - rds: ib: Incorporate the stat counter "ib_rdma_flush_mr_pool_avoided" in the structure "rds_ib_stat_names" (Praveen Kumar Kannoju)  [Orabug: 33720886]  
  - panic: reinitialize logbuf locks before notifiers (Stephen Brennan)  [Orabug: 33703438]  
  - panic: disable optimistic spin after halting CPUs (Stephen Brennan)  [Orabug: 33703438]  
  - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (Zekun Shen)  [Orabug: 33594985]  {CVE-2021-43975} 
  - x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Yazen Ghannam)  [Orabug: 33427596]  
  - EDAC/mce_amd: Add new error descriptions for existing types (Yazen Ghannam)  [Orabug: 33427596]  
  - x86/mce, EDAC/mce_amd: Print PPIN in machine check records (Smita Koralahalli)  [Orabug: 33427596]  
  - x86/mce/amd, edac: Remove report_gart_errors (Borislav Petkov)  [Orabug: 33427596]  
  - x86/mce/amd: Add PPIN support for AMD MCE (Wei Huang)  [Orabug: 33427596]  
  - x86/mce: Take action on UCNA/Deferred errors again (Jan H. Schönherr)  [Orabug: 33427596]  
  - xen/mcelog: add PPIN to record when available (Jan Beulich)  [Orabug: 33427596]  
  - xen/mcelog: drop __MC_MSR_MCGCAP (Jan Beulich)  [Orabug: 33427596]  
  - x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models (Yazen Ghannam)  [Orabug: 33427596]  
  - x86/MCE: Add an MCE-record filtering function (Yazen Ghannam)  [Orabug: 33427596]  
  - EDAC, mce_amd: Print ExtErrorCode and description on a single line (Yazen Ghannam)  [Orabug: 33427596]  
  - mstflint_access: Update driver code to v4.18.0-1 from Github (Sharath Srinivasan)  [Orabug: 33186485]  
  - mstflint_access: Update driver code to v4.17.0-1 from Github (Sharath Srinivasan)  [Orabug: 33186485]  
  - mstflint_access: Add README.txt (Sharath Srinivasan)  [Orabug: 33186485]  
  - Revert "Revert "net/mlx4_core: Add masking for a few queries on HCA caps"" (Freddy Carrillo)  [Orabug: 32603654]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.3.el7uek]
changelog:
  - scsi: vmw_pvscsi: Set residual data length conditionally (Alexey Makhalov)  [Orabug: 33761308]  
  - xfs: force the log offline when log intent item recovery fails (Darrick J. Wong)  [Orabug: 33757273]  
  - xfs: cancel intents immediately if process_intents fails (Darrick J. Wong)  [Orabug: 33757273]  
  - arm64/efi: remove spurious WARN_ON for !4K kernels (Mark Rutland)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Allow use of LPI tables in reserved memory (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Register LPI tables with EFI config table (Marc Zyngier)  [Orabug: 33749641]  
  - efi: add API to reserve memory persistently across kexec reboot (Ard Biesheuvel)  [Orabug: 33749641]  
  - efi/arm: libstub: add a root memreserve config table (Ard Biesheuvel)  [Orabug: 33749641]  
  - efi: honour memory reservations passed via a linux specific config table (Ard Biesheuvel)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Check that all RDs have the same property table (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump kernels (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Allow use of pre-programmed LPI tables (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Keep track of property table's PA and VA (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Move pending table allocation to init time (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Split property table clearing from allocation (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Change initialization ordering for LPIs (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Cap lpi_id_bits to reduce memory footprint (Jia He)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Make its_lock a raw_spin_lock_t (Sebastian Andrzej Siewior)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Honor hypervisor enforced LPI range (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3: Expose GICD_TYPER in the rdist structure (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Drop chunk allocation compatibility (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Move minimum LPI requirements to individual busses (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Use full range of LPIs (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Refactor LPI allocator (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Fix reprogramming of redistributors on CPU hotplug (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Only emit VSYNC if targetting a valid collection (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Only emit SYNC if targetting a valid collection (Marc Zyngier)  [Orabug: 33749641]  
  - irqchip/gic-v3: Ensure GICR_CTLR.EnableLPI=0 is observed before enabling (Shanker Donthineni)  [Orabug: 33749641]  
  - irqchip/gic-v3-its: Pass its_node pointer to each command builder (Marc Zyngier)  [Orabug: 33749641]  
  - tee: handle lookup of shm with reference count 0 (Jens Wiklander)  [Orabug: 33739583]  {CVE-2021-44733} 
  - rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33660978]  
  - net/mlx5: Fix eeprom support for SFP module (Eran Ben Elisha)  [Orabug: 33541468]  
  - x86/vector: search CPU vector starts from last successfully assigned (Joe Jin)  [Orabug: 33290504]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.511.4.el7uek]
changelog:
  - net/rds: Refactor rds_ib_recv_refill_one (Freddy Carrillo)  [Orabug: 33811840]  
  - net/rds: RDS connection shutdown stuck after CQ access violation error (aru kolappan)  [Orabug: 33811824]  
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33811779]  
  - rds: ib: Ack seq not always received in monotonic increasing order (Håkon Bugge)  [Orabug: 33810922]  
  - arm64: pcie: Intercept Pensando specific SError (Henry Willard)  [Orabug: 33811771]  
  - arm64: pcie: Change bad_mode hook to cap_pciep_access_in_progress() (Henry Willard)  [Orabug: 33811771]  
  - arm64: pcie: Remove Pensando SError trapping patch (Henry Willard)  [Orabug: 33811771]  
  - take care multiple extents in CoW extent converting (Wengang Wang)  [Orabug: 33811755]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.el7uek]
changelog:
  - irq/msi: add extra step when both old and new affinity are not current cpu (Joe Jin)  [Orabug: 33789982]  
  - Revert "rds/ib: Kernel change to extend rds-info functionality" (Rohit Nair)  [Orabug: 33795472]  
  - smp: always continue to process IRQ work (Stephen Brennan)  [Orabug: 33775326]  
  - scsi: libiscsi: Fix iscsi_task use after free() (Mike Christie)  [Orabug: 33674803]  
  - scsi: libiscsi: Drop taskqueuelock (Mike Christie)  [Orabug: 33674803]  
  - netfilter: fix regression in looped (broad|multi)cast's MAC handling (Ignacy Gawędzki)   
  - PM: hibernate: use correct mode for swsusp_close() (Thomas Zeitlhofer)   
  - tracefs: Set all files to the same group ownership as the mount option (Steven Rostedt (VMware))   
  - binder: fix test regression due to sender_euid change (Todd Kjos)   
  - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() (José Expósito)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.1.el7uek]
changelog:
  - arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (Ard Biesheuvel)  [Orabug: 33836770]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.2.el7uek]
changelog:
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33876756]  {CVE-2022-0492} 
  - scsi: libiscsi: Hold back_lock when calling iscsi_complete_task (Gulam Mohamed)  [Orabug: 33876755]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.511.5.3.el7uek]
changelog:
  - x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33910224]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.511.5.4.el7uek]
changelog:
  - x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33922122]  {CVE-2021-26341} 
  - Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26341} 
  - x86/speculation: Fix bug in retpoline mode on AMD with `spectre_v2=none` (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26341} 
  - bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33926438]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.511.5.4.el7uek]
changelog:
  - x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33922122]  {CVE-2021-26401} 
  - Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26401} 
  - x86/speculation: Fix bug in retpoline mode on AMD with `spectre_v2=none` (Patrick Colp)  [Orabug: 33922122]  {CVE-2021-26401} 
  - bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33926438]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.5.el7uek]
changelog:
  - rds: ib: Make selection of completion_vector QoS aware (Håkon Bugge)  [Orabug: 33937054]  
  - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 33937052]  
  - blk-stat: delete useless code (Shaohua Li)  [Orabug: 33937039]  
  - bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33926438]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.5.1.el7uek]
changelog:
  - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34018777]  {CVE-2022-1016}


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.511.5.5.3.el7uek]
changelog:
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26526968] [Orabug: 34142589]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26526923] [Orabug: 34142589]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.6.el7uek]
changelog:
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Max Kellermann)  [Orabug: 33942242]  {CVE-2022-0847}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.511.5.8.el7uek]
changelog:
  - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34048826]  {CVE-2022-1016}


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.512.0.el7uek]
changelog:
  - bpf: Disallow unprivileged bpf by default (Pawan Gupta)  [Orabug: 33734682]  
  - bpf: Add kconfig knob for disabling unpriv bpf by default (Daniel Borkmann)  [Orabug: 33734682]  
  - RDMA/rxe: Use correct sizing on buffers holding page DMA addresses (Shiraz Saleem)  [Orabug: 33676942]  
  - hwmon: (k10temp) Add support for Zen3 CPUs (Rahul Rohit)  [Orabug: 33782835]  
  - arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table (Ard Biesheuvel)  [Orabug: 33787546]  
  - uek-rpm: Pensando: Enable Elba EDAC (Dave Kleikamp)  [Orabug: 33831294]  
  - dsc-drivers: update for 1.15.9-C-64 (Dave Kleikamp)  [Orabug: 33831294]  
  - drivers/hwmon: Adding support LTC3888 (David Clear)  [Orabug: 33831294]  
  - drivers/edac: Add Elba EDAC support (David Clear)  [Orabug: 33831294]  
  - arm64/configs: Remove CONFIG_PENSANDO_SOC_CAPMEM_HUGEPAGE (David Clear)  [Orabug: 33831294]  
  - drivers/soc/pensando: Add reset cause driver (David Clear)  [Orabug: 33831294]  
  - net/rds: Fix memory leak in __rds_conn_create() on alloc_ordered_workqueue fail (Freddy Carrillo)  [Orabug: 33811475]  
  - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 33544127]  
  - Linux 4.14.259 (Greg Kroah-Hartman)   
  - xen/console: harden hvc_xen against event channel storms (Juergen Gross)   
  - Input: touchscreen - avoid bitwise vs logical OR warning (Nathan Chancellor)   
  - ARM: 8800/1: use choice for kernel unwinders (Stefan Agner)   
  - mwifiex: Remove unnecessary braces from HostCmd_SET_SEQ_NO_BSS_INFO (Nathan Chancellor)   
  - ARM: 8805/2: remove unneeded naked function usage (Nicolas Pitre)   
  - net: lan78xx: Avoid unnecessary self assignment (Nathan Chancellor)   
  - fuse: annotate lock in fuse_reverse_inval_entry() (Miklos Szeredi)   
  - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name (Fabio Estevam)   
  - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Sudeep Holla)   
  - net: systemport: Add global locking for descriptor lifecycle (Florian Fainelli)   
  - libata: if T_LENGTH is zero, dma direction should be DMA_NONE (George Kennedy)   
  - timekeeping: Really make sure wall_to_monotonic isn't positive (Yu Liao)   
  - USB: serial: option: add Telit FN990 compositions (Daniele Palmas)   
  - PCI/MSI: Mask MSI-X vectors only on success (Stefan Roese)   
  - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (Thomas Gleixner)   
  - USB: gadget: bRequestType is a bitfield, not a enum (Greg Kroah-Hartman)   
  - sit: do not call ipip6_dev_free() from sit_init_net() (Eric Dumazet)   
  - net/packet: rx_owner_map depends on pg_vec (Willem de Bruijn)   
  - ixgbe: set X550 MDIO speed before talking to PHY (Cyril Novikov)   
  - igbvf: fix double free in `igbvf_probe` (Letu Ren)   
  - soc/tegra: fuse: Fix bitwise vs. logical OR warning (Nathan Chancellor)   
  - dmaengine: st_fdma: fix MODULE_ALIAS (Alyssa Ross)   
  - ARM: socfpga: dts: fix qspi node compatible (Dinh Nguyen)   
  - x86/sme: Explicitly map new EFI memmap table as encrypted (Tom Lendacky)   
  - nfsd: fix use-after-free due to delegation race (J. Bruce Fields)   
  - audit: improve robustness of the audit queue handling (Paul Moore)   
  - dm btree remove: fix use after free in rebalance_children() (Joe Thornber)   
  - recordmcount.pl: look for jgnop instruction as well as bcrl on s390 (Jerome Marchand)   
  - mac80211: send ADDBA requests using the tid/queue of the aggregation session (Felix Fietkau)   
  - hwmon: (dell-smm) Fix warning on /proc/i8k creation error (Armin Wolf)   
  - bpf: fix panic due to oob in bpf_prog_test_run_skb (Daniel Borkmann)   
  - tracing: Fix a kmemleak false positive in tracing_map (Chen Jun)   
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Harshit Mogalapalli)   
  - i2c: rk3x: Handle a spurious start completion interrupt flag (Ondrej Jirman)   
  - parisc/agp: Annotate parisc agp init functions with __init (Helge Deller)   
  - net/mlx4_en: Update reported link modes for 1/10G (Erik Ekman)   
  - drm/msm/dsi: set default num_data_lanes (Philip Chen)   
  - nfc: fix segfault in nfc_genl_dump_devices_done (Tadeusz Struk)   
  - Linux 4.14.258 (Greg Kroah-Hartman)   
  - irqchip: nvic: Fix offset for Interrupt Priority Offsets (Vladimir Murzin)   
  - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL (Wudi Wang)   
  - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts (Pali Rohár)   
  - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() (Pali Rohár)   
  - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove (Yang Yingliang)   
  - iio: adc: axp20x_adc: fix charging current reporting on AXP22x (Evgeny Boger)   
  - iio: dln2: Check return value of devm_iio_trigger_register() (Lars-Peter Clausen)   
  - iio: dln2-adc: Fix lockdep complaint (Noralf Trønnes)   
  - iio: itg3200: Call iio_trigger_notify_done() on error (Lars-Peter Clausen)   
  - iio: kxsd9: Don't return error code in trigger handler (Lars-Peter Clausen)   
  - iio: ltr501: Don't return error code in trigger handler (Lars-Peter Clausen)   
  - iio: mma8452: Fix trigger reference couting (Lars-Peter Clausen)   
  - iio: stk3310: Don't return error code in interrupt handler (Lars-Peter Clausen)   
  - iio: trigger: stm32-timer: fix MODULE_ALIAS (Alyssa Ross)   
  - iio: trigger: Fix reference counting (Lars-Peter Clausen)   
  - usb: core: config: using bit mask instead of individual bits (Pavel Hofman)   
  - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending (Kai-Heng Feng)   
  - usb: core: config: fix validation of wMaxPacketValue entries (Pavel Hofman)   
  - USB: gadget: zero allocate endpoint 0 buffers (Greg Kroah-Hartman)   
  - USB: gadget: detect too-big endpoint 0 requests (Greg Kroah-Hartman)   
  - net/qla3xxx: fix an error code in ql_adapter_up() (Dan Carpenter)   
  - net, neigh: clear whole pneigh_entry at alloc time (Eric Dumazet)   
  - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() (Joakim Zhang)   
  - net: altera: set a couple error code in probe() (Dan Carpenter)   
  - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero (Lee Jones)   
  - qede: validate non LSO skb length (Manish Chopra)   
  - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (Davidlohr Bueso)   
  - tracefs: Set all files to the same group ownership as the mount option (Steven Rostedt (VMware))   
  - signalfd: use wake_up_pollfree() (Eric Biggers)   
  - binder: use wake_up_pollfree() (Eric Biggers)   
  - wait: add wake_up_pollfree() (Eric Biggers)   
  - libata: add horkage for ASMedia 1092 (Hannes Reinecke)   
  - can: m_can: Disable and ignore ELO interrupt (Brian Silverman)   
  - can: pch_can: pch_can_rx_normal: fix use after free (Vincent Mailhol)   
  - tracefs: Have new files inherit the ownership of their parent (Steven Rostedt (VMware))   
  - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() (Takashi Iwai)   
  - ALSA: pcm: oss: Limit the period size to 16MB (Takashi Iwai)   
  - ALSA: pcm: oss: Fix negative period/buffer sizes (Takashi Iwai)   
  - ALSA: ctl: Fix copy of updated id with element read/write (Alan Young)   
  - mm: bdi: initialize bdi_min_ratio when bdi is unregistered (Manjong Lee)   
  - IB/hfi1: Correct guard on eager buffer deallocation (Mike Marciniszyn)   
  - seg6: fix the iif in the IPv6 socket control block (Andrea Mayer)   
  - nfp: Fix memory leak in nfp_cpp_area_cache_add() (Jianglei Nie)   
  - bpf: Fix the off-by-two error in range markings (Maxim Mikityanskiy)   
  - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done (Krzysztof Kozlowski)   
  - can: sja1000: fix use after free in ems_pcmcia_add_card() (Dan Carpenter)   
  - HID: check for valid USB device for many HID drivers (Greg Kroah-Hartman)   
  - HID: wacom: fix problems when device is not a valid USB device (Greg Kroah-Hartman)   
  - HID: add USB_HID dependancy on some USB HID drivers (Greg Kroah-Hartman)   
  - HID: add USB_HID dependancy to hid-chicony (Greg Kroah-Hartman)   
  - HID: add USB_HID dependancy to hid-prodikeys (Greg Kroah-Hartman)   
  - HID: add hid_is_usb() function to make it simpler for USB detection (Greg Kroah-Hartman)   
  - Linux 4.14.257 (Greg Kroah-Hartman)   {CVE-2021-38199} 
  - parisc: Mark cr16 CPU clocksource unstable on all SMP machines (Helge Deller)   
  - serial: core: fix transmit-buffer reset and memleak (Johan Hovold)   
  - serial: pl011: Add ACPI SBSA UART match id (Pierre Gondois)   
  - tty: serial: msm_serial: Deactivate RX DMA for polling support (Sven Eckelmann)   
  - x86/64/mm: Map all kernel memory into trampoline_pgd (Joerg Roedel)   
  - usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect (Badhri Jagan Sridharan)   
  - xhci: Fix commad ring abort, write all 64 bits to CRCR register. (Mathias Nyman)   
  - vgacon: Propagate console boot parameters before calling `vc_resize' (Maciej W. Rozycki)   
  - parisc: Fix "make install" on newer debian releases (Helge Deller)   
  - parisc: Fix KBUILD_IMAGE for self-extracting kernel (Helge Deller)   
  - net/smc: Keep smc_close_final rc during active close (Tony Lu)   
  - net/rds: correct socket tunable error in rds_tcp_tune() (William Kucharski)   
  - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available (Sven Schuchmann)   
  - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() (Zhou Qingyang)   
  - siphash: use _unaligned version by default (Arnd Bergmann)   
  - net: mpls: Fix notifications when deleting a device (Benjamin Poirier)   
  - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() (Zhou Qingyang)   
  - natsemi: xtensa: fix section mismatch warnings (Randy Dunlap)   
  - sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl (Baokun Li)   
  - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl (Baokun Li)   
  - kprobes: Limit max data_size of the kretprobe instances (Masami Hiramatsu)   
  - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit (Stephen Suryaputra)   
  - perf hist: Fix memory leak of a perf_hpp_fmt (Ian Rogers)   
  - net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() (Teng Qi)   
  - net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound (zhangyue)   
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Teng Qi)   
  - scsi: iscsi: Unblock session then wake up error handler (Mike Christie)   
  - thermal: core: Reset previous low and high trip during thermal zone init (Manaf Meethalavalappu Pallikunhi)   
  - btrfs: check-integrity: fix a warning on write caching disabled disk (Wang Yugui)   
  - s390/setup: avoid using memblock_enforce_memory_limit (Vasily Gorbik)   
  - platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep (Slark Xiao)   
  - net: return correct error code (liuguoqiang)   
  - NFSv42: Fix pagecache invalidation after COPY/CLONE (Benjamin Coddington)   
  - ipc: WARN if trying to remove ipc object which is absent (Alexander Mikhalitsyn)   
  - shm: extend forced shm destroy to support objects from several IPC nses (Alexander Mikhalitsyn)   
  - tty: hvc: replace BUG_ON() with negative return value (Juergen Gross)   
  - xen: sync include/xen/interface/io/ring.h with Xen's newest version (Juergen Gross)   
  - fuse: release pipe buf after last use (Miklos Szeredi)   
  - NFC: add NCI_UNREG flag to eliminate the race (Lin Ma)   
  - arm64: dts: marvell: armada-37xx: Set pcie_reset_pin to gpio function (Marek Behún)   
  - arm64: dts: marvell: armada-37xx: declare PCIe reset pin (Miquel Raynal)   
  - pinctrl: armada-37xx: Correct PWM pins definitions (Marek Behún)   
  - pinctrl: armada-37xx: add missing pin: PCIe1 Wakeup (Gregory CLEMENT)   
  - pinctrl: armada-37xx: Correct mpp definitions (Marek Behún)   
  - PCI: aardvark: Fix checking for link up via LTSSM state (Pali Rohár)   
  - PCI: aardvark: Fix link training (Pali Rohár)   
  - PCI: aardvark: Fix PCIe Max Payload Size setting (Pali Rohár)   
  - PCI: aardvark: Configure PCIe resources from 'ranges' DT property (Pali Rohár)   
  - PCI: aardvark: Remove PCIe outbound window configuration (Evan Wang)   
  - PCI: aardvark: Update comment about disabling link training (Pali Rohár)   
  - PCI: aardvark: Move PCIe reset card code to advk_pcie_train_link() (Pali Rohár)   
  - PCI: aardvark: Fix compilation on s390 (Pali Rohár)   
  - PCI: aardvark: Don't touch PCIe registers if no card connected (Pali Rohár)   
  - PCI: aardvark: Introduce an advk_pcie_valid_device() helper (Thomas Petazzoni)   
  - PCI: aardvark: Indicate error in 'val' when config read fails (Pali Rohár)   
  - PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros (Pali Rohár)   
  - PCI: aardvark: Issue PERST via GPIO (Pali Rohár)   
  - PCI: aardvark: Improve link training (Marek Behún)   
  - PCI: aardvark: Train link immediately after enabling training (Pali Rohár)   
  - PCI: aardvark: Wait for endpoint to be ready before training link (Remi Pommarel)   
  - PCI: aardvark: Fix a leaked reference by adding missing of_node_put() (Wen Yang)   
  - PCI: aardvark: Fix I/O space page leak (Sergei Shtylyov)   
  - s390/mm: validate VMA in PGSTE manipulation functions (David Hildenbrand)   
  - tracing: Check pid filtering when creating events (Steven Rostedt (VMware))   
  - vhost/vsock: fix incorrect used length reported to the guest (Stefano Garzarella)   
  - net/smc: Don't call clcsock shutdown twice when smc shutdown (Tony Lu)   
  - MIPS: use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48 (Huang Pei)   
  - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows (Eric Dumazet)   
  - net/smc: Ensure the active closing peer first closes clcsock (Tony Lu)   
  - ipv6: fix typos in __ip6_finish_output() (Eric Dumazet)   
  - drm/vc4: fix error code in vc4_create_object() (Dan Carpenter)   
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test (Sreekanth Reddy)   
  - ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (Takashi Iwai)   
  - NFSv42: Don't fail clone() unless the OP_CLONE operation failed (Trond Myklebust)   
  - net: ieee802154: handle iftypes as u32 (Alexander Aring)   
  - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)   
  - ARM: dts: BCM5301X: Add interrupt properties to GPIO node (Florian Fainelli)   
  - ARM: dts: BCM5301X: Fix I2C controller interrupt (Florian Fainelli)   
  - netfilter: ipvs: Fix reuse connection if RS weight is 0 (yangxingwu)   
  - tracing: Fix pid filtering when triggers are attached (Steven Rostedt (VMware))   
  - xen: detect uninitialized xenbus in xenbus_init (Stefano Stabellini)   
  - xen: don't continue xenstore initialization in case of errors (Stefano Stabellini)   
  - fuse: fix page stealing (Miklos Szeredi)   
  - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (Dan Carpenter)   
  - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts (Jason Gerecke)   
  - media: cec: copy sequence field for the reply (Hans Verkuil)   
  - ALSA: ctxfi: Fix out-of-range access (Takashi Iwai)   
  - usb: hub: Fix locking issues with address0_mutex (Mathias Nyman)   
  - usb: hub: Fix usb enumeration issue due to address0 race (Mathias Nyman)   
  - USB: serial: option: add Fibocom FM101-GL variants (Mingjie Zhang)   
  - USB: serial: option: add Telit LE910S1 0x9200 composition (Daniele Palmas)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.512.1.el7uek]
changelog:
  - Revert "stable: clamp SUBLEVEL in 4.14" (Alan Maguire)  [Orabug: 33861950]  
  - tipc: improve size validations for received domain records (Jon Maloy)  [Orabug: 33850803]  {CVE-2022-0435} {CVE-2022-0435} 
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825688]  {CVE-2022-0492} 
  - blk-stat: delete useless code (Shaohua Li)  [Orabug: 33772945]  
  - DMA/rxe: Update default value of RXE_MAX_PDN (Rao Shoaib)  [Orabug: 33676598]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.512.2.el7uek]
changelog:
  - Linux 4.14.261 (Greg Kroah-Hartman)   
  - sctp: use call_rcu to free endpoint (Xin Long)   
  - net: fix use-after-free in tw_timer_handler (Muchun Song)   
  - Input: spaceball - fix parsing of movement data packets (Leo L. Schwab)   
  - Input: appletouch - initialize work before device registration (Pavel Skripkin)   
  - binder: fix async_free_space accounting for empty parcels (Todd Kjos)   
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (Vincent Pelletier)   
  - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. (Mathias Nyman)   
  - uapi: fix linux/nfc.h userspace compilation errors (Dmitry V. Levin)   
  - nfc: uapi: use kernel size_t to fix user-space builds (Krzysztof Kozlowski)   
  - fsl/fman: Fix missing put_device() call in fman_port_probe (Miaoqian Lin)   
  - NFC: st21nfca: Fix memory leak in device probe and remove (Wei Yongjun)   
  - net: usb: pegasus: Do not drop long Ethernet frames (Matthias-Christian Ott)   
  - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (Dan Carpenter)   
  - selinux: initialize proto variable in selinux_ip_postroute_compat() (Tom Rix)   
  - recordmcount.pl: fix typo in s390 mcount regex (Heiko Carstens)   
  - platform/x86: apple-gmux: use resource_size() with res (Wang Qing)   
  - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option (Hans de Goede)   
  - Linux 4.14.260 (Greg Kroah-Hartman)   
  - phonet/pep: refuse to enable an unbound pipe (Rémi Denis-Courmont)   
  - hamradio: improve the incomplete fix to avoid NPD (Lin Ma)   
  - hamradio: defer ax25 kfree after unregister_netdev (Lin Ma)   
  - ax25: NPD bug when detaching AX25 device (Lin Ma)   
  - hwmon: (lm90) Do not report 'busy' status bit as alarm (Guenter Roeck)   
  - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state (Sean Christopherson)   
  - usb: gadget: u_ether: fix race in setting MAC address in setup phase (Marian Postevca)   
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (Chao Yu)   
  - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (Ard Biesheuvel)   
  - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines (Fabien Dessenne)   
  - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (Andrew Cooper)   
  - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (José Expósito)   
  - ALSA: drivers: opl3: Fix incorrect use of vp->state (Colin Ian King)   
  - ALSA: jack: Check the return value of kstrdup() (Xiaoke Wang)   
  - hwmon: (lm90) Fix usage of CONFIG2 register in detect function (Guenter Roeck)   
  - sfc: falcon: Check null pointer of rx_queue->page_ring (Jiasheng Jiang)   
  - drivers: net: smc911x: Check for error irq (Jiasheng Jiang)   
  - fjes: Check for error irq (Jiasheng Jiang)   
  - bonding: fix ad_actor_system option setting to default (Fernando Fernandez Mancera)   
  - net: skip virtio_net_hdr_set_proto if protocol already set (Willem de Bruijn)   
  - qlcnic: potential dereference null pointer of rx_queue->page_ring (Jiasheng Jiang)   
  - spi: change clk_disable_unprepare to clk_unprepare (Dongliang Mu)   
  - HID: holtek: fix mouse probing (Benjamin Tissoires)   
  - can: kvaser_usb: get CAN clock frequency from device (Jimmy Assarsson)   
  - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Greg Jesionowski)   
  - x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33937656]  {CVE-2021-26341} 
  - Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26341} 
  - x86/speculation: Fix bug in retpoline mode on AMD with `spectre_v2=none` (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26341} 
  - ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33925502]  
  - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917057]  {CVE-2020-36516} 
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917057]  {CVE-2020-36516} 
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Max Kellermann)  [Orabug: 33910800]  
  - x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33890092]  
  - udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870267]  {CVE-2022-0617} 
  - udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870267]  {CVE-2022-0617} 
  - scsi: libiscsi: Hold back_lock when calling iscsi_complete_task (Gulam Mohamed)  [Orabug: 33851182]  
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Mathias Krause)  [Orabug: 33840433]  {CVE-2022-22942} 
  - drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835811]  {CVE-2022-0330} 
  - proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)  [Orabug: 33832650]  
  - rds/ib: recover rds connection from stuck rx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820767]  
  - rds: ib: Make selection of completion_vector QoS aware (Håkon Bugge)  [Orabug: 33819408]  
  - Enable CONFIG_DM_DUST and nano for UEK5 (Gulam Mohamed)  [Orabug: 33653698]  
  - dm dust: use dust block size for badblocklist index (Bryan Gurney)  [Orabug: 33653698]  
  - dm dust: Make dm_dust_init and dm_dust_exit static (YueHaibing)  [Orabug: 33653698]  
  - dm dust: remove redundant unsigned comparison to less than zero (Colin Ian King)  [Orabug: 33653698]  
  - dm: add dust target (Bryan Gurney)  [Orabug: 33653698]  
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)  [Orabug: 33617219]  {CVE-2021-4002} 
  - rds/ib: handle posted ACK during connection shutdown (Nagappan Ramasamy Palaniappan)  [Orabug: 33820747]  
  - rds/ib: reap tx completions during connection shutdown (Nagappan Ramasamy Palaniappan)  [Orabug: 33820747]  
  - rds/ib: recover rds connection from stuck tx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820747]  
  - rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821341]  
  - uek-rpm: Add missing symbols to kabi_lockedlist (Stephen Brennan)  [Orabug: 33871558]


author: John Donnelly <john.p.donnelly@oracle.com> [4.14.35-2047.512.3.el7uek]
changelog:
  - lib/timerqueue: Rely on rbtree semantics for next timer (Davidlohr Bueso)  [Orabug: 33406086]  {CVE-2021-20317} {CVE-2021-20317} 
  - rds/ib: Resize CQ if send-/recv-ring-size are changed (Hans Westgaard Ry)  [Orabug: 33940520]  
  - uek-rpm: remove uek-rpm/ol8 (John Donnelly)  [Orabug: 33665655]  
  - uek-rpm: Enable config CONFIG_SCSI_MQ_DEFAULT (Saeed Mirzamohammadi)  [Orabug: 33973455]  
  - sched: restore the sliding search window for select_idle_cpu() (Libo Chen)  [Orabug: 33965297]  
  - NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)  [Orabug: 33958155]  {CVE-2022-24448} 
  - Linux 4.14.261 (Greg Kroah-Hartman)   
  - sctp: use call_rcu to free endpoint (Xin Long)   
  - net: fix use-after-free in tw_timer_handler (Muchun Song)   
  - Input: spaceball - fix parsing of movement data packets (Leo L. Schwab)   
  - Input: appletouch - initialize work before device registration (Pavel Skripkin)   
  - binder: fix async_free_space accounting for empty parcels (Todd Kjos)   
  - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. (Vincent Pelletier)   
  - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. (Mathias Nyman)   
  - uapi: fix linux/nfc.h userspace compilation errors (Dmitry V. Levin)   
  - nfc: uapi: use kernel size_t to fix user-space builds (Krzysztof Kozlowski)   
  - fsl/fman: Fix missing put_device() call in fman_port_probe (Miaoqian Lin)   
  - NFC: st21nfca: Fix memory leak in device probe and remove (Wei Yongjun)   
  - net: usb: pegasus: Do not drop long Ethernet frames (Matthias-Christian Ott)   
  - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (Dan Carpenter)   
  - selinux: initialize proto variable in selinux_ip_postroute_compat() (Tom Rix)   
  - recordmcount.pl: fix typo in s390 mcount regex (Heiko Carstens)   
  - platform/x86: apple-gmux: use resource_size() with res (Wang Qing)   
  - HID: asus: Add depends on USB_HID to HID_ASUS Kconfig option (Hans de Goede)   
  - Linux 4.14.260 (Greg Kroah-Hartman)   
  - phonet/pep: refuse to enable an unbound pipe (Rémi Denis-Courmont)   
  - hamradio: improve the incomplete fix to avoid NPD (Lin Ma)   
  - hamradio: defer ax25 kfree after unregister_netdev (Lin Ma)   
  - ax25: NPD bug when detaching AX25 device (Lin Ma)   
  - hwmon: (lm90) Do not report 'busy' status bit as alarm (Guenter Roeck)   
  - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state (Sean Christopherson)   
  - usb: gadget: u_ether: fix race in setting MAC address in setup phase (Marian Postevca)   
  - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (Chao Yu)   
  - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (Ard Biesheuvel)   
  - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines (Fabien Dessenne)   
  - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (Andrew Cooper)   
  - Input: atmel_mxt_ts - fix double free in mxt_read_info_block (José Expósito)   
  - ALSA: drivers: opl3: Fix incorrect use of vp->state (Colin Ian King)   
  - ALSA: jack: Check the return value of kstrdup() (Xiaoke Wang)   
  - hwmon: (lm90) Fix usage of CONFIG2 register in detect function (Guenter Roeck)   
  - sfc: falcon: Check null pointer of rx_queue->page_ring (Jiasheng Jiang)   
  - drivers: net: smc911x: Check for error irq (Jiasheng Jiang)   
  - fjes: Check for error irq (Jiasheng Jiang)   
  - bonding: fix ad_actor_system option setting to default (Fernando Fernandez Mancera)   
  - net: skip virtio_net_hdr_set_proto if protocol already set (Willem de Bruijn)   
  - qlcnic: potential dereference null pointer of rx_queue->page_ring (Jiasheng Jiang)   
  - spi: change clk_disable_unprepare to clk_unprepare (Dongliang Mu)   
  - HID: holtek: fix mouse probing (Benjamin Tissoires)   
  - can: kvaser_usb: get CAN clock frequency from device (Jimmy Assarsson)   
  - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Greg Jesionowski)   
  - x86/speculation: Add knob for eibrs_retpoline_enabled (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Extend our code to properly support eibrs+lfence and eibrs+retpoline (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Update link to AMD speculation whitepaper (Kim Phillips)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Use generic retpoline by default on AMD (Kim Phillips)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Josh Poimboeuf)  [Orabug: 33937656]  {CVE-2021-26401} 
  - Documentation/hw-vuln: Update spectre doc (Peter Zijlstra)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Add eIBRS + Retpoline options (Peter Zijlstra)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Peter Zijlstra (Intel))  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() (Borislav Petkov)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Update ALTERNATIVEs to (more closely) match upstream (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26401} 
  - x86/speculation: Fix bug in retpoline mode on AMD with `spectre_v2=none` (Patrick Colp)  [Orabug: 33937656]  {CVE-2021-26401} 
  - ACPICA: Enable sleep button on ACPI legacy wake (Anchal Agarwal)  [Orabug: 33925502]  
  - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917057]  {CVE-2020-36516} 
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917057]  {CVE-2020-36516} 
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Max Kellermann)  [Orabug: 33910800]  {CVE-2022-0847} 
  - x86/speculation: The choice of retpoline mode is sometimes ignored (Patrick Colp)  [Orabug: 33890092]  
  - udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870267]  {CVE-2022-0617} 
  - udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870267]  {CVE-2022-0617} 
  - scsi: libiscsi: Hold back_lock when calling iscsi_complete_task (Gulam Mohamed)  [Orabug: 33851182]  
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy (Mathias Krause)  [Orabug: 33840433]  {CVE-2022-22942} 
  - drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835811]  {CVE-2022-0330} 
  - proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand)  [Orabug: 33832650]  
  - rds/ib: recover rds connection from stuck rx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820767]  
  - rds: ib: Make selection of completion_vector QoS aware (Håkon Bugge)  [Orabug: 33819408]  
  - Enable CONFIG_DM_DUST and nano for UEK5 (Gulam Mohamed)  [Orabug: 33653698]  
  - dm dust: use dust block size for badblocklist index (Bryan Gurney)  [Orabug: 33653698]  
  - dm dust: Make dm_dust_init and dm_dust_exit static (YueHaibing)  [Orabug: 33653698]  
  - dm dust: remove redundant unsigned comparison to less than zero (Colin Ian King)  [Orabug: 33653698]  
  - dm: add dust target (Bryan Gurney)  [Orabug: 33653698]  
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)  [Orabug: 33617219]  {CVE-2021-4002} 
  - rds/ib: handle posted ACK during connection shutdown (Nagappan Ramasamy Palaniappan)  [Orabug: 33820747]  
  - rds/ib: reap tx completions during connection shutdown (Nagappan Ramasamy Palaniappan)  [Orabug: 33820747]  
  - rds/ib: recover rds connection from stuck tx path (Nagappan Ramasamy Palaniappan)  [Orabug: 33820747]  
  - rds/ib: Kernel change to extend rds-info functionality (Rohit Nair)  [Orabug: 33821341]  
  - uek-rpm: Add missing symbols to kabi_lockedlist (Stephen Brennan)  [Orabug: 33871558]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.512.4.el7uek]
changelog:
  - Linux 4.14.265 (Greg Kroah-Hartman)   
  - ext4: fix error handling in ext4_restore_inline_data() (Ritesh Harjani)   
  - EDAC/xgene: Fix deferred probing (Sergey Shtylyov)   
  - EDAC/altera: Fix deferred probing (Sergey Shtylyov)   
  - rtc: cmos: Evaluate century appropriate (Riwen Lu)   
  - selftests: futex: Use variable MAKE instead of make (Muhammad Usama Anjum)   
  - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. (Dai Ngo)   
  - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (John Meneghini)   
  - ASoC: fsl: Add missing error handling in pcm030_fabric_probe (Miaoqian Lin)   
  - drm/i915/overlay: Prevent divide by zero bugs in scaling (Dan Carpenter)   
  - net: macsec: Verify that send_sci is on when setting Tx sci explicitly (Lior Nahmanson)   
  - net: ieee802154: Return meaningful error codes from the netlink helpers (Miquel Raynal)   
  - net: ieee802154: ca8210: Stop leaking skb's (Miquel Raynal)   
  - spi: meson-spicc: add IRQ check in meson_spicc_probe (Miaoqian Lin)   
  - spi: mediatek: Avoid NULL pointer crash in interrupt (Benjamin Gaignard)   
  - spi: bcm-qspi: check for valid cs before applying chip select (Kamal Dasu)   
  - iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() (Joerg Roedel)   
  - iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() (Guoqing Jiang)   
  - RDMA/mlx4: Don't continue event handler after memory allocation failure (Leon Romanovsky)   
  - block: bio-integrity: Advance seed correctly for larger interval sizes (Martin K. Petersen)   
  - drm/nouveau: fix off by one in BIOS boundary checking (Nick Lopez)   
  - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() (Mark Brown)   
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() (Mark Brown)   
  - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() (Mark Brown)   
  - audit: improve audit queue handling when "audit=1" on cmdline (Paul Moore)   
  - af_packet: fix data-race in packet_setsockopt / packet_setsockopt (Eric Dumazet)   
  - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (Eric Dumazet)   
  - net: amd-xgbe: Fix skb data length underflow (Shyam Sundar S K)   
  - net: amd-xgbe: ensure to reset the tx_timer_active flag (Raju Rangoju)   
  - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (Georgi Valkov)   
  - netfilter: nat: limit port clash resolution attempts (Florian Westphal)   
  - netfilter: nat: remove l4 protocol port rovers (Florian Westphal)   
  - bpf: fix truncated jump targets on heavy expansions (Daniel Borkmann)   
  - ipv4: raw: lock the socket in raw_bind() (Eric Dumazet)   
  - yam: fix a memory leak in yam_siocdevprivate() (Hangyu Hua)   
  - ibmvnic: don't spin in tasklet (Sukadev Bhattiprolu)   
  - drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable (José Expósito)   
  - drm/msm: Fix wrong size calculation (Xianting Tian)   
  - net-procfs: show net devices bound packet types (Jianguo Wu)   
  - NFSv4: nfs_atomic_open() can race when looking up a non-regular file (Trond Myklebust)   
  - NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)   
  - hwmon: (lm90) Reduce maximum conversion rate for G781 (Guenter Roeck)   
  - ping: fix the sk_bound_dev_if match in ping_lookup (Xin Long)   
  - net: fix information leakage in /proc/net/ptype (Saeed Mirzamohammadi)   
  - ipv6_tunnel: Rate limit warning messages (Ido Schimmel)   
  - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (John Meneghini)   
  - rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev (Matthias Kaehlcke)   
  - rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev (Sujit Kautkar)   
  - i40e: fix unsigned stat widths (Joe Damato)   
  - i40e: Increase delay to 1 s after global EMP reset (Jedrzej Jagielski)   
  - lkdtm: Fix content of section containing lkdtm_rodata_do_nothing() (Christophe Leroy)   
  - powerpc/32: Fix boot failure with GCC latent entropy plugin (Christophe Leroy)   
  - net: sfp: ignore disabled SFP node (Marek Behún)   
  - usb: typec: tcpm: Do not disconnect while receiving VBUS off (Badhri Jagan Sridharan)   
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern)   
  - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS (Pavankumar Kondeti)   
  - usb: common: ulpi: Fix crash in ulpi_match() (Jon Hunter)   
  - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge (Alan Stern)   
  - tty: Add support for Brainboxes UC cards. (Cameron Williams)   
  - tty: n_gsm: fix SW flow control encoding/handling (daniel.starke@siemens.com)   
  - serial: stm32: fix software flow control transfer (Valentin Caron)   
  - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments (Pablo Neira Ayuso)   
  - PM: wakeup: simplify the output logic of pm_show_wakelocks() (Greg Kroah-Hartman)   
  - scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices (Steffen Maier)   
  - s390/hypfs: include z/VM guests with access control group set (Vasily Gorbik)   
  - Bluetooth: refactor malicious adv data check (Brian Gix)   
  - Linux 4.14.264 (Greg Kroah-Hartman)   
  - can: bcm: fix UAF of bcm op (Ziyang Xuan)   
  - Linux 4.14.263 (Greg Kroah-Hartman)   
  - gianfar: fix jumbo packets+napi+rx overrun crash (Michael Braun)   
  - gianfar: simplify FCS handling and fix memory leak (Andy Spencer)   
  - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie)   
  - mips,s390,sh,sparc: gup: Work around the "COW can break either way" issue (Ben Hutchings)   
  - lib82596: Fix IRQ check in sni_82596_probe (Miaoqian Lin)   
  - scripts/dtc: dtx_diff: remove broken example from help text (Matthias Schiffer)   
  - bcmgenet: add WOL IRQ check (Sergey Shtylyov)   
  - net_sched: restore "mpu xxx" handling (Kevin Bracey)   
  - dmaengine: at_xdmac: Fix at_xdmac_lld struct definition (Tudor Ambarus)   
  - dmaengine: at_xdmac: Fix lld view setting (Tudor Ambarus)   
  - dmaengine: at_xdmac: Print debug message after realeasing the lock (Tudor Ambarus)   
  - dmaengine: at_xdmac: Don't start transactions at tx_submit level (Tudor Ambarus)   
  - libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route() (Guillaume Nault)   
  - netns: add schedule point in ops_exit_list() (Eric Dumazet)   
  - net: axienet: fix number of TX ring slots for available check (Robert Hancock)   
  - net: axienet: Wait for PhyRstCmplt after core reset (Robert Hancock)   
  - af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (Eric Dumazet)   
  - parisc: pdc_stable: Fix memory leak in pdcs_register_pathentries (Miaoqian Lin)   
  - net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module (Tobias Waldekranz)   
  - powerpc/fsl/dts: Enable WA for erratum A-009885 on fman3l MDIO buses (Tobias Waldekranz)   
  - powerpc/cell: Fix clang -Wimplicit-fallthrough warning (Anders Roxell)   
  - RDMA/rxe: Fix a typo in opcode name (Chengguang Xu)   
  - RDMA/hns: Modify the mapping attribute of doorbell to device (Yixing Liu)   
  - Documentation: refer to config RANDOMIZE_BASE for kernel address-space randomization (Lukas Bulwahn)   
  - firmware: Update Kconfig help text for Google firmware (Ben Hutchings)   
  - drm/radeon: fix error handling in radeon_driver_open_kms (Christian König)   
  - crypto: stm32/crc32 - Fix kernel BUG triggered in probe() (Marek Vasut)   
  - ext4: don't use the orphan list when migrating an inode (Theodore Ts'o)   
  - ext4: Fix BUG_ON in ext4_bread when write quota data (Ye Bin)   
  - ext4: set csum seed in tmp inode while migrating to extents (Luís Henriques)   
  - ext4: make sure quota gets properly shutdown on error (Jan Kara)   
  - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds (Ilan Peer)   
  - cputime, cpuacct: Include guest time in user time in cpuacct.stat (Andrey Ryabinin)   
  - serial: Fix incorrect rs485 polarity on uart open (Lukas Wunner)   
  - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (Petr Cvachoucek)   
  - power: bq25890: Enable continuous conversion for ADC at charging (Yauhen Kharuzhy)   
  - ASoC: mediatek: mt8173: fix device_node leak (Tzung-Bi Shih)   
  - scsi: sr: Don't use GFP_DMA (Christoph Hellwig)   
  - MIPS: Octeon: Fix build errors using clang (Tianjia Zhang)   
  - i2c: designware-pci: Fix to change data types of hcnt and lcnt parameters (Lakshmi Sowjanya D)   
  - MIPS: OCTEON: add put_device() after of_find_device_by_node() (Ye Guojin)   
  - ALSA: seq: Set upper limit of processed events (Takashi Iwai)   
  - w1: Misuse of get_user()/put_user() reported by sparse (Christophe Leroy)   
  - i2c: mpc: Correct I2C reset procedure (Joakim Tjernlund)   
  - powerpc/smp: Move setup_profiling_timer() under CONFIG_PROFILING (Michael Ellerman)   
  - i2c: i801: Don't silently correct invalid transfer size (Heiner Kallweit)   
  - powerpc/watchdog: Fix missed watchdog reset due to memory ordering race (Nicholas Piggin)   
  - powerpc/btext: add missing of_node_put (Julia Lawall)   
  - powerpc/cell: add missing of_node_put (Julia Lawall)   
  - powerpc/powernv: add missing of_node_put (Julia Lawall)   
  - powerpc/6xx: add missing of_node_put (Julia Lawall)   
  - parisc: Avoid calling faulthandler_disabled() twice (John David Anglin)   
  - serial: core: Keep mctrl register state and cached copy in sync (Lukas Wunner)   
  - serial: pl010: Drop CR register reset on set_termios (Lukas Wunner)   
  - net: phy: marvell: configure RGMII delays for 88E1118 (Russell King (Oracle))   
  - dm space map common: add bounds check to sm_ll_lookup_bitmap() (Joe Thornber)   
  - dm btree: add a defensive bounds check to insert_at() (Joe Thornber)   
  - mac80211: allow non-standard VHT MCS-10/11 (Ping-Ke Shih)   
  - net: mdio: Demote probed message to debug print (Florian Fainelli)   
  - btrfs: remove BUG_ON(!eie) in find_parent_nodes (Josef Bacik)   
  - btrfs: remove BUG_ON() in find_parent_nodes() (Josef Bacik)   
  - ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5 (Kirill A. Shutemov)   
  - ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R() (Rafael J. Wysocki)   
  - ACPICA: Utilities: Avoid deleting the same object twice in a row (Rafael J. Wysocki)   
  - ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions (Mark Langsdorf)   
  - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (Kyeong Yoo)   
  - um: registers: Rename function names to avoid conflicts and build problems (Randy Dunlap)   
  - iwlwifi: remove module loading failure message (Johannes Berg)   
  - iwlwifi: fix leaks/bad data after failed firmware load (Johannes Berg)   
  - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream (Zekun Shen)   
  - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0 (Kai-Heng Feng)   
  - arm64: tegra: Adjust length of CCPLEX cluster MMIO region (Thierry Reding)   
  - mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO (Ulf Hansson)   
  - media: saa7146: hexium_gemini: Fix a NULL pointer dereference in hexium_attach() (Zhou Qingyang)   
  - media: igorplugusb: receiver overflow should be reported (Sean Young)   
  - bpf: Do not WARN in bpf_warn_invalid_xdp_action() (Paolo Abeni)   
  - net: bonding: debug: avoid printing debug logs when bond is not notifying peers (Suresh Kumar)   
  - ath10k: Fix tx hanging (Sebastian Gottschall)   
  - iwlwifi: mvm: synchronize with FW after multicast commands (Johannes Berg)   
  - media: m920x: don't use stack on USB reads (Mauro Carvalho Chehab)   
  - media: saa7146: hexium_orion: Fix a NULL pointer dereference in hexium_attach() (Zhou Qingyang)   
  - media: uvcvideo: Increase UVC_CTRL_CONTROL_TIMEOUT to 5 seconds. (James Hilliard)   
  - floppy: Add max size check for user space request (Xiongwei Song)   
  - usb: uhci: add aspeed ast2600 uhci support (Neal Liu)   
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (Zekun Shen)   
  - HSI: core: Fix return freed object in hsi_new_client (Chengfeng Ye)   
  - gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use (Hans de Goede)   
  - drm/bridge: megachips: Ensure both bridges are probed before registration (Martyn Welch)   
  - mlxsw: pci: Add shutdown method in PCI driver (Danielle Ratson)   
  - media: b2c2: Add missing check in flexcop_pci_isr: (Zheyu Ma)   
  - HID: apple: Do not reset quirks when the Fn key is not found (José Expósito)   
  - usb: gadget: f_fs: Use stream_open() for endpoint files (Pavankumar Kondeti)   
  - drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR (Ben Skeggs)   
  - ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply (Zekun Shen)   
  - fs: dlm: filter user dlm messages for kernel locks (Alexander Aring)   
  - Bluetooth: Fix debugfs entry leak in hci_register_dev() (Wei Yongjun)   
  - RDMA/cxgb4: Set queue pair state when being queried (Kamal Heib)   
  - mips: bcm63xx: add support for clk_set_parent() (Randy Dunlap)   
  - mips: lantiq: add support for clk_set_parent() (Randy Dunlap)   
  - misc: lattice-ecp3-config: Fix task hung when firmware load failed (Wei Yongjun)   
  - ASoC: samsung: idma: Check of ioremap return value (Jiasheng Jiang)   
  - iommu/iova: Fix race between FQ timeout and teardown (Xiongfeng Wang)   
  - dmaengine: pxa/mmp: stop referencing config->slave_id (Arnd Bergmann)   
  - RDMA/core: Let ib_find_gid() continue search even after empty entry (Avihai Horon)   
  - scsi: ufs: Fix race conditions related to driver data (Bart Van Assche)   
  - char/mwave: Adjust io port register size (Kees Cook)   
  - ALSA: oss: fix compile error when OSS_DEBUG is enabled (Bixuan Cui)   
  - powerpc/prom_init: Fix improper check of prom_getprop() (Peiwei Hu)   
  - RDMA/hns: Validate the pkey index (Kamal Heib)   
  - ALSA: hda: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)   
  - ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)   
  - ALSA: jack: Add missing rwsem around snd_ctl_remove() calls (Takashi Iwai)   
  - ext4: avoid trim error on fs with small groups (Jan Kara)   
  - net: mcs7830: handle usb read errors properly (Pavel Skripkin)   
  - pcmcia: fix setting of kthread task states (Dominik Brodowski)   
  - can: xilinx_can: xcan_probe(): check for error irq (Jiasheng Jiang)   
  - can: softing: softing_startstop(): fix set but not used variable warning (Marc Kleine-Budde)   
  - tpm: add request_locality before write TPM_INT_ENABLE (Chen Jun)   
  - spi: spi-meson-spifc: Add missing pm_runtime_disable() in meson_spifc_probe (Miaoqian Lin)   
  - fsl/fman: Check for null pointer after calling devm_ioremap (Jiasheng Jiang)   
  - ppp: ensure minimum packet size in ppp_write() (Eric Dumazet)   
  - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in nonstatic_find_mem_region() (Zhou Qingyang)   
  - pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in __nonstatic_find_io_region() (Zhou Qingyang)   
  - x86/mce/inject: Avoid out-of-bounds write when setting flags (Zhang Zixun)   
  - usb: ftdi-elan: fix memory leak on device disconnect (Wei Yongjun)   
  - media: msi001: fix possible null-ptr-deref in msi001_probe() (Wang Hai)   
  - media: dw2102: Fix use after free (Anton Vasilyev)   
  - sched/rt: Try to restart rt period timer when rt runtime exceeded (Li Hua)   
  - media: si2157: Fix "warm" tuner state detection (Robert Schlabbach)   
  - media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach() (Zhou Qingyang)   
  - media: dib8000: Fix a memleak in dib8000_init() (Zhou Qingyang)   
  - floppy: Fix hang in watchdog when disk is ejected (Tasos Sahanidis)   
  - serial: amba-pl011: do not request memory region twice (Lino Sanfilippo)   
  - drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() (Zhou Qingyang)   
  - drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() (Zhou Qingyang)   
  - arm64: dts: qcom: msm8916: fix MMC controller aliases (Dmitry Baryshkov)   
  - netfilter: bridge: add support for pppoe filtering (Florian Westphal)   
  - media: mtk-vcodec: call v4l2_m2m_ctx_release first when file is released (Dafna Hirschfeld)   
  - tty: serial: atmel: Call dma_async_issue_pending() (Tudor Ambarus)   
  - tty: serial: atmel: Check return code of dmaengine_submit() (Tudor Ambarus)   
  - crypto: qce - fix uaf on qce_ahash_register_one (Chengfeng Ye)   
  - media: dmxdev: fix UAF when dvb_register_device() fails (Wang Hai)   
  - Bluetooth: stop proccessing malicious adv data (Pavel Skripkin)   
  - media: em28xx: fix memory leak in em28xx_init_dev (Dongliang Mu)   
  - wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND (Bryan O'Donoghue)   
  - clk: bcm-2835: Remove rounding up the dividers (Maxime Ripard)   
  - clk: bcm-2835: Pick the closest clock rate (Maxime Ripard)   
  - Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails (Wang Hai)   
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller (Yifeng Li)   
  - shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode (Gang Li)   
  - can: softing_cs: softingcs_probe(): fix memleak on registration failure (Johan Hovold)   
  - media: stk1160: fix control-message timeouts (Johan Hovold)   
  - media: pvrusb2: fix control-message timeouts (Johan Hovold)   
  - media: redrat3: fix control-message timeouts (Johan Hovold)   
  - media: dib0700: fix undefined behavior in tuner shutdown (Michael Kuron)   
  - media: s2255: fix control-message timeouts (Johan Hovold)   
  - media: cpia2: fix control-message timeouts (Johan Hovold)   
  - media: em28xx: fix control-message timeouts (Johan Hovold)   
  - media: mceusb: fix control-message timeouts (Johan Hovold)   
  - media: flexcop-usb: fix control-message timeouts (Johan Hovold)   
  - rtc: cmos: take rtc_lock while reading from CMOS (Mateusz Jończyk)   
  - nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind() (Krzysztof Kozlowski)   
  - HID: wacom: Avoid using stale array indicies to read contact count (Jason Gerecke)   
  - HID: wacom: Ignore the confidence flag when a touch is removed (Jason Gerecke)   
  - HID: uhid: Fix worker destroying device without any protection (Jann Horn)   
  - Bluetooth: fix init and cleanup of sco_conn.timeout_work (Desmond Cheong Zhi Xi)   
  - Bluetooth: schedule SCO timeouts with delayed_work (Desmond Cheong Zhi Xi)   
  - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (Larry Finger)   
  - media: uvcvideo: fix division by zero at stream start (Johan Hovold)   
  - orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc() (Christophe JAILLET)   
  - drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() (Nathan Chancellor)   
  - staging: wlan-ng: Avoid bitwise vs logical OR warning in hfa384x_usb_throttlefn() (Nathan Chancellor)   
  - random: fix data race on crng init time (Eric Biggers)   
  - random: fix data race on crng_node_pool (Eric Biggers)   
  - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} (Brian Silverman)   
  - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data (Marc Kleine-Budde)   
  - mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() (Andy Shevchenko)   
  - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status (Alan Stern)   
  - USB: core: Fix bug in resuming hub's handling of wakeup requests (Alan Stern)   
  - Bluetooth: bfusb: fix division by zero in send path (Johan Hovold)   
  - Linux 4.14.262 (Greg Kroah-Hartman)   
  - mISDN: change function names to avoid conflicts (wolfgang huang)   
  - net: udp: fix alignment problem in udp4_seq_show() (yangxingwu)   
  - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate (William Zhao)   
  - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() (Lixiaokeng)   
  - ipv6: Do cleanup if attribute validation fails in multipath route (David Ahern)   
  - ipv6: Continue processing multipath route even if gateway attribute is invalid (David Ahern)   
  - phonet: refcount leak in pep_sock_accep (Hangyu Hua)   
  - rndis_host: support Hytera digital radios (Thomas Toye)   
  - power: reset: ltc2952: Fix use of floating point literals (Nathan Chancellor)   
  - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc (Eric Dumazet)   
  - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route (David Ahern)   
  - ipv6: Check attribute length for RTA_GATEWAY in multipath route (David Ahern)   
  - i40e: Fix incorrect netdev's real number of RX/TX queues (Jedrzej Jagielski)   
  - i40e: fix use-after-free in i40e_sync_filters_subtask() (Di Zhu)   
  - mac80211: initialize variable have_higher_than_11mbit (Tom Rix)   
  - RDMA/core: Don't infoleak GRH fields (Leon Romanovsky)   
  - ieee802154: atusb: fix uninit value in atusb_set_extended_addr (Pavel Skripkin)   
  - virtio_pci: Support surprise removal of virtio pci device (Parav Pandit)   
  - tracing: Tag trace_percpu_buffer as a percpu pointer (Naveen N. Rao)   
  - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() (Naveen N. Rao)   
  - Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models (Takashi Iwai)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.512.5.el7uek]
changelog:
  - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34012925]  {CVE-2022-1016} 
  - rds: Fix incorrect initialization order (Håkon Bugge)  [Orabug: 33923372]  
  - btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)  [Orabug: 33997138]  {CVE-2021-4149} 
  - sr9700: sanity check for packet length (Oliver Neukum)  [Orabug: 33962706]  {CVE-2022-26966}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.512.6.el7uek]
changelog:
  - Revert "rds/ib: recover rds connection from stuck rx path" (Rohit Nair)  [Orabug: 34039271]  
  - uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33993774]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.513.0.el7uek]
changelog:
  - rds: ib: Initialize SG table properly (Håkon Bugge)  [Orabug: 34031914]  
  - rds: ib: Fix racy credit tracepoints (Håkon Bugge)  [Orabug: 33980856]  
  - net/rds: Fix math on error code (Freddy Carrillo)  [Orabug: 33945366]  
  - ice: Add E810-XXV pci device ids to UEK5 (John Donnelly)  [Orabug: 33750110]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.513.1.el7uek]
changelog:
  - mm/page-writeback: Fix performance when BDI's share of ratio is 0. (Chi Wu)  [Orabug: 34050050]  
  - esp: Fix possible buffer overflow in ESP transformation (Steffen Klassert)  [Orabug: 33997301]  {CVE-2022-27666}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.513.2.el7uek]
changelog:
  - Revert "rds/ib: recover rds connection from stuck tx path" (Nagappan Ramasamy Palaniappan)  [Orabug: 34124234]  
  - Revert "rds/ib: reap tx completions during connection shutdown" (Nagappan Ramasamy Palaniappan)  [Orabug: 34124234]  
  - Revert "rds/ib: handle posted ACK during connection shutdown" (Nagappan Ramasamy Palaniappan)  [Orabug: 34124234]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.513.2.1.el7uek]
changelog:
  - perf: Fix sys_perf_event_open() race against self (Peter Zijlstra)  [Orabug: 34175592]  {CVE-2022-1729}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.514.0.el7uek]
changelog:
  - memstick: rtsx_usb_ms: fix UAF (Tong Zhang)  [Orabug: 34132125]  {CVE-2022-0487} 
  - A/A Bonding: Allow setting rdmaip_active_bonding_failback param (Sharath Srinivasan)  [Orabug: 34130294]  
  - drm/vgem: Close use-after-free race in vgem_gem_create (Daniel Vetter)  [Orabug: 34111756]  
  - drm/vgem: Reclassify buffer creation debug message (Chris Wilson)  [Orabug: 34111756]  
  - nbd: Fix NULL pointer in flush_workqueue (Sun Ke)  [Orabug: 34111753]  
  - IB/cma: Allow XRC INI QPs to set their local ACK timeout (Håkon Bugge)  [Orabug: 34094202]  
  - vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong)  [Orabug: 34084997]  
  - xfs: prevent UAF in xfs_log_item_in_current_chkpt (Darrick J. Wong)  [Orabug: 34084997]  
  - xfs: check sb_meta_uuid for dabuf buffer recovery (Dave Chinner)  [Orabug: 34084997]  
  - xfs: only run COW extent recovery when there are no live extents (Darrick J. Wong)  [Orabug: 34084997]  
  - rds/ib: Fix ib_rx_total_frags while freeing frags (Praveen Kumar Kannoju)  [Orabug: 34066623]  
  - rds: ib: Force 16-byte alignment on rds_ib_device (Håkon Bugge)  [Orabug: 34043118]  
  - rds: ib: INFO: trying to register non-static key during rmmod (Freddy Carrillo)  [Orabug: 34041727]  
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26526968] [Orabug: 33602562]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26526923] [Orabug: 33602562]  
  - Linux 4.14.276 (Greg Kroah-Hartman)   
  - i2c: pasemi: Wait for write xfers to finish (Martin Povišer)   
  - smp: Fix offline cpu check in flush_smp_call_function_queue() (Nadav Amit)   
  - ARM: davinci: da850-evm: Avoid NULL pointer dereference (Nathan Chancellor)   
  - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" (Fabio M. De Francesco)   
  - gcc-plugins: latent_entropy: use /dev/urandom (Jason A. Donenfeld)   
  - mm: kmemleak: take a full lowmem check in kmemleak_*_phys() (Patrick Wang)   
  - mm, page_alloc: fix build_zonerefs_node() (Juergen Gross)   
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)   
  - scsi: mvsas: Add PCI ID of RocketRaid 2640 (Alexey Galakhov)   
  - gpu: ipu-v3: Fix dev_dbg frequency output (Leo Ruan)   
  - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs (Christian Lamparter)   
  - net: micrel: fix KS8851_MLL Kconfig (Randy Dunlap)   
  - scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 (Tyrel Datwyler)   
  - scsi: target: tcmu: Fix possible page UAF (Xiaoguang Wang)   
  - Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer (Michael Kelley)   
  - drm/amdkfd: Check for potential null return of kmalloc_array() (QintaoShen)   
  - drm/amd: Add USBC connector ID (Aurabindo Pillai)   
  - cifs: potential buffer overflow in handling symlinks (Harshit Mogalapalli)   
  - nfc: nci: add flush_workqueue to prevent uaf (Lin Ma)   
  - net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link (Dinh Nguyen)   
  - mlxsw: i2c: Fix initialization error flow (Vadim Pasternak)   
  - gpiolib: acpi: use correct format characters (Linus Torvalds)   
  - veth: Ensure eth header is in skb's linear part (Guillaume Nault)   
  - memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe (Miaoqian Lin)   
  - xfrm: policy: match with both mark and mask on user interfaces (Xin Long)   
  - cgroup: Use open-time cgroup namespace for process migration perm checks (Tejun Heo)   
  - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (Tejun Heo)   
  - cgroup: Use open-time credentials for process migraton perm checks (Tejun Heo)   
  - mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning (Waiman Long)   
  - arm64: module: remove (NOLOAD) from linker script (Fangrui Song)   
  - mm: don't skip swap entry even if zap_details specified (Peter Xu)   
  - dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error" (Vinod Koul)   
  - tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts (Arnaldo Carvalho de Melo)   
  - perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - arm64: patch_text: Fixup last cpu should be master (Guo Ren)   
  - btrfs: fix qgroup reserve overflow the qgroup limit (Ethan Lien)   
  - x86/speculation: Restore speculation related MSRs during S3 resume (Pawan Gupta)   
  - x86/pm: Save the MSR validity status at context setup (Pawan Gupta)   
  - mm/mempolicy: fix mpol_new leak in shared_policy_replace (Miaohe Lin)   
  - mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) (Paolo Bonzini)   
  - Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning" (Pali Rohár)   
  - drbd: Fix five use after free bugs in get_initial_state (Lv Yunlong)   
  - drm/imx: Fix memory leak in imx_pd_connector_get_modes (José Expósito)   
  - net: stmmac: Fix unset max_speed difference between DT and non-DT platforms (Chen-Yu Tsai)   
  - scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (Christophe JAILLET)   
  - drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire() (Dan Carpenter)   
  - mm: fix race between MADV_FREE reclaim and blkdev direct IO read (Mauricio Faria de Oliveira)   
  - net: add missing SOF_TIMESTAMPING_OPT_ID support (Willem de Bruijn)   
  - ipv6: add missing tx timestamping on IPPROTO_RAW (Willem de Bruijn)   
  - parisc: Fix CPU affinity for Lasi, WAX and Dino chips (Helge Deller)   
  - jfs: prevent NULL deref in diFree (Haimin Zhang)   
  - virtio_console: eliminate anonymous module_init & module_exit (Randy Dunlap)   
  - serial: samsung_tty: do not unlock port->lock for uart_write_wakeup() (Jiri Slaby)   
  - NFS: swap-out must always use STABLE writes. (NeilBrown)   
  - NFS: swap IO handling is slightly different for O_DIRECT IO (NeilBrown)   
  - SUNRPC/call_alloc: async tasks mustn't block waiting for memory (NeilBrown)   
  - w1: w1_therm: fixes w1_seq for ds28ea00 sensors (Lucas Denefle)   
  - init/main.c: return 1 from handled __setup() functions (Randy Dunlap)   
  - Bluetooth: Fix use after free in hci_send_acl (Luiz Augusto von Dentz)   
  - xtensa: fix DTC warning unit_address_format (Max Filippov)   
  - usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm (H. Nikolaus Schaller)   
  - scsi: libfc: Fix use after free in fc_exch_abts_resp() (Jianglei Nie)   
  - MIPS: fix fortify panic when copying asm exception handlers (Alexander Lobakin)   
  - bnxt_en: Eliminate unintended link toggle during FW reset (Michael Chan)   
  - macvtap: advertise link netns via netlink (Sven Eckelmann)   
  - net/smc: correct settings of RMB window update limit (Dust Li)   
  - scsi: aha152x: Fix aha152x_setup() __setup handler return value (Randy Dunlap)   
  - scsi: pm8001: Fix pm8001_mpi_task_abort_resp() (Damien Le Moal)   
  - dm ioctl: prevent potential spectre v1 gadget (Jordy Zomer)   
  - iommu/arm-smmu-v3: fix event handling soft lockup (Zhou Guanghui)   
  - PCI: aardvark: Fix support for MSI interrupts (Pali Rohár)   
  - powerpc: Set crashkernel offset to mid of RMA region (Sourabh Jain)   
  - power: supply: axp20x_battery: properly report current when discharging (Evgeny Boger)   
  - scsi: bfa: Replace snprintf() with sysfs_emit() (Yang Guang)   
  - scsi: mvsas: Replace snprintf() with sysfs_emit() (Yang Guang)   
  - powerpc: dts: t104xrdb: fix phy type for FMAN 4/5 (Maxim Kiselev)   
  - ptp: replace snprintf with sysfs_emit (Yang Guang)   
  - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (Zekun Shen)   
  - KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs (Jim Mattson)   
  - ARM: 9187/1: JIVE: fix return value of __setup handler (Randy Dunlap)   
  - rtc: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - ubifs: Rectify space amount budget for mkdir/tmpfile operations (Zhihao Cheng)   
  - KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated (Vitaly Kuznetsov)   
  - openvswitch: Fixed nd target mask field in the flow dump. (Martin Varghese)   
  - ARM: dts: spear13xx: Update SPI dma properties (Kuldeep Singh)   
  - ARM: dts: spear1340: Update serial node properties (Kuldeep Singh)   
  - ASoC: topology: Allow TLV control to be either read or write (Amadeusz Sławiński)   
  - ubi: fastmap: Return error code if memory allocation fails in add_aeb() (Zhihao Cheng)   
  - mm/memcontrol: return 1 from cgroup.memory __setup() handler (Randy Dunlap)   
  - mm/mmap: return 1 from stack_guard_gap __setup() handler (Randy Dunlap)   
  - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data (Rafael J. Wysocki)   
  - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (Baokun Li)   
  - pinctrl: pinconf-generic: Print arguments for bias-pull-* (Chen-Yu Tsai)   
  - gfs2: Make sure FITRIM minlen is rounded up to fs block size (Andrew Price)   
  - can: mcba_usb: properly check endpoint type (Pavel Skripkin)   
  - can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path (Hangyu Hua)   
  - ubifs: rename_whiteout: correct old_dir size computing (Baokun Li)   
  - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (Zhihao Cheng)   
  - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (Zhihao Cheng)   
  - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (Zhihao Cheng)   
  - KVM: Prevent module exit until all VMs are freed (David Matlack)   
  - scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (Saurav Kashyap)   
  - powerpc/lib/sstep: Fix build errors with newer binutils (Anders Roxell)   
  - powerpc/lib/sstep: Fix 'sthcx' instruction (Anders Roxell)   
  - mmc: host: Return an error when ->enable_sdio_irq() ops is missing (Ulf Hansson)   
  - media: hdpvr: initialize dev->worker at hdpvr_register_videodev (Dongliang Mu)   
  - video: fbdev: sm712fb: Fix crash in smtcfb_write() (Zheyu Ma)   
  - ARM: mmp: Fix failure to remove sram device (Uwe Kleine-König)   
  - ARM: tegra: tamonten: Fix I2C3 pad setting (Richard Leitner)   
  - media: cx88-mpeg: clear interrupt status register before streaming video (Daniel González Cabanelas)   
  - ASoC: soc-core: skip zero num_dai component in searching dai name (Shengjiu Wang)   
  - video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf() (Jing Yao)   
  - video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf() (Jing Yao)   
  - ARM: dts: bcm2837: Add the missing L1/L2 cache information (Richard Schleich)   
  - ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960 (David Heidelberg)   
  - video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit (Yang Guang)   
  - video: fbdev: cirrusfb: check pixclock to avoid divide by zero (George Kennedy)   
  - video: fbdev: w100fb: Reset global state (Evgeny Novikov)   
  - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow (Tim Gardner)   
  - ntfs: add sanity check on allocation size (Dongliang Mu)   
  - ext4: don't BUG if someone dirty pages without asking ext4 first (Theodore Ts'o)   
  - spi: tegra20: Use of_device_get_match_data() (Minghao Chi)   
  - PM: core: keep irq flags in device_pm_check_callbacks() (Dmitry Baryshkov)   
  - ACPI/APEI: Limit printable size of BERT table data (Darren Hart)   
  - ACPICA: Avoid walking the ACPI Namespace if it is not there (Rafael J. Wysocki)   
  - irqchip/nvic: Release nvic_base upon failure (Souptick Joarder (HPE))   
  - Fix incorrect type in assignment of ipv6 port for audit (Casey Schaufler)   
  - loop: use sysfs_emit() in the sysfs xxx show() (Chaitanya Kulkarni)   
  - selinux: use correct type for context length (Christian Göttsche)   
  - lib/test: use after free in register_test_dev_kmod() (Dan Carpenter)   
  - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Trond Myklebust)   
  - net/x25: Fix null-ptr-deref caused by x25_disconnect (Duoming Zhou)   
  - qlcnic: dcb: default to returning -EOPNOTSUPP (Tom Rix)   
  - net: phy: broadcom: Fix brcm_fet_config_init() (Florian Fainelli)   
  - xen: fix is_xen_pmu() (Juergen Gross)   
  - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Pablo Neira Ayuso)   
  - jfs: fix divide error in dbNextAG (Pavel Skripkin)   
  - kgdbts: fix return value of __setup handler (Randy Dunlap)   
  - kgdboc: fix return value of __setup handler (Randy Dunlap)   
  - tty: hvc: fix return value of __setup handler (Randy Dunlap)   
  - pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe (Miaoqian Lin)   
  - pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe (Miaoqian Lin)   
  - pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init (Miaoqian Lin)   
  - NFS: remove unneeded check in decode_devicenotify_args() (Alexey Khoroshilov)   
  - clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver (Miaoqian Lin)   
  - clk: clps711x: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - clk: loongson1: Terminate clk_div_table with sentinel element (Jonathan Neuschäfer)   
  - remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region (Miaoqian Lin)   
  - clk: qcom: clk-rcg2: Update the frac table for pixel clock (Taniya Das)   
  - iio: adc: Add check for devm_request_threaded_irq (Jiasheng Jiang)   
  - serial: 8250: Fix race condition in RTS-after-send handling (Uwe Kleine-König)   
  - serial: 8250_mid: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - staging:iio:adc:ad7280a: Fix handing of device address bit reversing. (Jonathan Cameron)   
  - pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add() (Uwe Kleine-König)   
  - mxser: fix xmit_buf leak in activate when LSR == 0xff (Jiri Slaby)   
  - mfd: asic3: Add missing iounmap() on error asic3_mfd_probe (Miaoqian Lin)   
  - tcp: ensure PMTU updates are processed during fastopen (Jakub Kicinski)   
  - i2c: mux: demux-pinctrl: do not deactivate a master that is not active (Peter Rosin)   
  - af_netlink: Fix shift out of bounds in group mask calculation (Petr Machata)   
  - USB: storage: ums-realtek: fix error code in rts51x_read_mem() (Dan Carpenter)   
  - mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init (Xin Xiong)   
  - MIPS: RB532: fix return value of __setup handler (Randy Dunlap)   
  - vxcan: enable local echo for sent CAN frames (Oliver Hartkopp)   
  - mfd: mc13xxx: Add check for mc13xxx_irq_request (Jiasheng Jiang)   
  - powerpc/sysdev: fix incorrect use to determine if list is empty (Jakob Koschel)   
  - power: supply: wm8350-power: Add missing free in free_charger_irq (Jiasheng Jiang)   
  - power: supply: wm8350-power: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - i2c: xiic: Make bus names unique (Robert Hancock)   
  - KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (Hou Wenlong)   
  - KVM: x86: Fix emulation in writing cr8 (Zhenzhong Duan)   
  - power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return (Hans de Goede)   
  - drm/tegra: Fix reference leak in tegra_dsi_ganged_probe (Miaoqian Lin)   
  - ext2: correct max file size computing (Zhang Yi)   
  - TOMOYO: fix __setup handlers return values (Randy Dunlap)   
  - scsi: pm8001: Fix abort all task initialization (Damien Le Moal)   
  - scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (Damien Le Moal)   
  - scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (Damien Le Moal)   
  - scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (Damien Le Moal)   
  - dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS (Aashish Sharma)   
  - iwlwifi: Fix -EIO error code that is never returned (Colin Ian King)   
  - HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports (Dmitry Torokhov)   
  - power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init (Miaoqian Lin)   
  - ray_cs: Check ioremap return value (Jiasheng Jiang)   
  - power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe (Miaoqian Lin)   
  - ath9k_htc: fix uninit value bugs (Pavel Skripkin)   
  - drm/edid: Don't clear formats if using deep color (Maxime Ripard)   
  - mtd: onenand: Check for error irq (Jiasheng Jiang)   
  - ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe (Miaoqian Lin)   
  - ASoC: imx-es8328: Fix error return code in imx_es8328_probe() (Wang Wensheng)   
  - ASoC: mxs: Fix error handling in mxs_sgtl5000_probe (Miaoqian Lin)   
  - ASoC: dmaengine: do not use a NULL prepare_slave_config() callback (Codrin Ciubotariu)   
  - video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of (Miaoqian Lin)   
  - ASoC: fsi: Add check for clk_enable (Jiasheng Jiang)   
  - ASoC: wm8350: Handle error for wm8350_register_irq (Jiasheng Jiang)   
  - ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe (Miaoqian Lin)   
  - media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (Dafna Hirschfeld)   
  - ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction (Takashi Sakamoto)   
  - memory: emif: check the pointer temp in get_device_details() (Jia-Ju Bai)   
  - memory: emif: Add check for setup_interrupts (Jiasheng Jiang)   
  - ASoC: atmel_ssc_dai: Handle errors for clk_enable (Jiasheng Jiang)   
  - ASoC: mxs-saif: Handle errors for clk_enable (Jiasheng Jiang)   
  - printk: fix return value of printk.devkmsg __setup handler (Randy Dunlap)   
  - arm64: dts: broadcom: Fix sata nodename (Frank Wunderlich)   
  - arm64: dts: ns2: Fix spi-cpol and spi-cpha property (Kuldeep Singh)   
  - ALSA: spi: Add check for clk_enable() (Jiasheng Jiang)   
  - ASoC: ti: davinci-i2s: Add check for clk_enable() (Jiasheng Jiang)   
  - media: usb: go7007: s2250-board: fix leak in probe() (Dan Carpenter)   
  - soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe (Miaoqian Lin)   
  - ARM: dts: qcom: ipq4019: fix sleep clock (Pavel Kubelun)   
  - video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name() (Dan Carpenter)   
  - video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe() (Wang Hai)   
  - media: coda: Fix missing put_device() call in coda_get_vdoa_data (Miaoqian Lin)   
  - perf/x86/intel/pt: Fix address filter config for 32-bit kernel (Adrian Hunter)   
  - perf/core: Fix address filter parser for multiple filters (Adrian Hunter)   
  - sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa (Bharata B Rao)   
  - clocksource: acpi_pm: fix return value of __setup handler (Randy Dunlap)   
  - hwmon: (pmbus) Add Vin unit off handling (Brandon Wyman)   
  - crypto: ccp - ccp_dmaengine_unregister release dma channels (Dāvis Mosāns)   
  - ACPI: APEI: fix return value of __setup handlers (Randy Dunlap)   
  - crypto: vmx - add missing dependencies (Petr Vorel)   
  - hwrng: atmel - disable trng on failure path (Claudiu Beznea)   
  - PM: suspend: fix return value of __setup handler (Randy Dunlap)   
  - PM: hibernate: fix __setup handler error handling (Randy Dunlap)   
  - hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING (Armin Wolf)   
  - hwmon: (pmbus) Add mutex to regulator ops (Patrick Rudolph)   
  - spi: pxa2xx-pci: Balance reference count for PCI DMA device (Andy Shevchenko)   
  - selftests/x86: Add validity check and allow field splitting (Muhammad Usama Anjum)   
  - spi: tegra114: Add missing IRQ check in tegra_spi_probe (Miaoqian Lin)   
  - crypto: mxs-dcp - Fix scatterlist processing (Tomas Paukrt)   
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Herbert Xu)   
  - PCI: pciehp: Clear cmd_busy bit in polling mode (Liguang Zhang)   
  - brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio (Hector Martin)   
  - brcmfmac: firmware: Allocate space for default boardrev in nvram (Hector Martin)   
  - media: davinci: vpif: fix unbalanced runtime PM get (Johan Hovold)   
  - DEC: Limit PMAX memory probing to R3k systems (Maciej W. Rozycki)   
  - lib/raid6/test: fix multiple definition linking error (Dirk Müller)   
  - thermal: int340x: Increase bitmap size (Srinivas Pandruvada)   
  - carl9170: fix missing bit-wise or operator for tx_params (Colin Ian King)   
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5420 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: add missing HDMI supplies on SMDK5250 (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (Krzysztof Kozlowski)   
  - ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (Tudor Ambarus)   
  - video: fbdev: atari: Atari 2 bpp (STe) palette bugfix (Michael Schmitz)   
  - video: fbdev: sm712fb: Fix crash in smtcfb_read() (Helge Deller)   
  - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() (Duoming Zhou)   
  - ACPI: properties: Consistently return -ENOENT if there are no more references (Sakari Ailus)   
  - drbd: fix potential silent data corruption (Lars Ellenberg)   
  - ALSA: cs4236: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads" (José Expósito)   
  - qed: validate and restrict untrusted VFs vlan promisc mode (Manish Chopra)   
  - qed: display VF trust config (Manish Chopra)   
  - scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands (Damien Le Moal)   
  - mempolicy: mbind_range() set_policy() after vma_merge() (Hugh Dickins)   
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Alistair Popple)   
  - jffs2: fix memory leak in jffs2_scan_medium (Baokun Li)   
  - jffs2: fix memory leak in jffs2_do_mount_fs (Baokun Li)   
  - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (Baokun Li)   
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)   
  - pinctrl: samsung: drop pin banks references on error paths (Krzysztof Kozlowski)   
  - NFSD: prevent underflow in nfssvc_decode_writeargs() (Dan Carpenter)   
  - SUNRPC: avoid race between mod_timer() and del_timer_sync() (NeilBrown)   
  - Documentation: update stable tree link (Bagas Sanjaya)   
  - Documentation: add link to stable release candidate tree (Bagas Sanjaya)   
  - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Jann Horn)   
  - clk: uniphier: Fix fixed-rate initialization (Kunihiko Hayashi)   
  - iio: inkern: make a best effort on offset calculation (Liam Beguin)   
  - iio: inkern: apply consumer scale when no channel scale is available (Liam Beguin)   
  - iio: inkern: apply consumer scale on IIO_VAL_INT cases (Liam Beguin)   
  - coresight: Fix TRCCONFIGR.QE sysfs interface (James Clark)   
  - USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c (Alan Stern)   
  - virtio-blk: Use blk_validate_block_size() to validate block size (Xie Yongji)   
  - block: Add a helper to validate the block size (Xie Yongji)   
  - tpm: fix reference counting for struct tpm_chip (Lino Sanfilippo)   
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)   
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)   
  - spi: Fix erroneous sgs value with min_t() (Biju Das)   
  - spi: Fix invalid sgs value (Biju Das)   
  - ethernet: sun: Free the coherent when failing in probing (Zheyu Ma)   
  - virtio_console: break out of buf poll on remove (Michael S. Tsirkin)   
  - netdevice: add the case if dev is NULL (Yajun Deng)   
  - USB: serial: simple: add Nokia phone driver (Johan Hovold)   
  - USB: serial: pl2303: add IBM device IDs (Eddie James)   
  - Linux 4.14.275 (Greg Kroah-Hartman)   
  - arm64: add ID_AA64ISAR2_EL1 sys register (James Morse)   
  - arm64: entry: Add macro for reading symbol addresses from the trampoline (James Morse)   
  - arm64: entry: Add vectors that have the bhb mitigation sequences (James Morse)   
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (James Morse)   
  - arm64: entry: Make the kpti trampoline's kpti sequence optional (James Morse)   
  - arm64: entry: Move trampoline macros out of ifdef'd section (James Morse)   
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors (James Morse)   
  - arm64: entry: Move the trampoline data page before the text page (James Morse)   
  - arm64: entry: Make the trampoline cleanup optional (James Morse)   
  - arm64: entry.S: Add ventry overflow sanity checks (James Morse)   
  - arm64: Add Cortex-X2 CPU part definition (Anshuman Khandual)   
  - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Suzuki K Poulose)   
  - arm64: Add part number for Arm Cortex-A77 (Rob Herring)   
  - arm64: Add part number for Neoverse N1 (Marc Zyngier)   
  - arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT (Marc Zyngier)   
  - arm64: Add silicon-errata.txt entry for ARM erratum 1188873 (Marc Zyngier)   
  - arm64: arch_timer: avoid unused function warning (Arnd Bergmann)   
  - arm64: arch_timer: Add workaround for ARM erratum 1188873 (Marc Zyngier)   
  - Linux 4.14.274 (Greg Kroah-Hartman)   
  - llc: only change llc->dev when bind() succeeds (Eric Dumazet)   
  - mac80211: fix potential double free on mesh join (Linus Lüssing)   
  - crypto: qat - disable registration of algorithms (Giovanni Cabiddu)   
  - ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU (Werner Sembach)   
  - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 (Maximilian Luz)   
  - ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board (Mark Cilissen)   
  - drivers: net: xgene: Fix regression in CRC stripping (Stephane Graber)   
  - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec (Giacomo Guiduzzi)   
  - ALSA: cmipci: Restore aux vol on suspend/resume (Jonathan Teh)   
  - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB (Lars-Peter Clausen)   
  - ALSA: pcm: Add stream lock during PCM reset ioctl operations (Takashi Iwai)   
  - llc: fix netdevice reference leaks in llc_ui_bind() (Eric Dumazet)   
  - thermal: int340x: fix memory leak in int3400_notify() (Chuansheng Liu)   
  - staging: fbtft: fb_st7789v: reset display before initialization (Oliver Graute)   
  - net: ipv6: fix skb_over_panic in __ip6_append_data (Tadeusz Struk)   
  - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (Jordy Zomer)   
  - Linux 4.14.273 (Greg Kroah-Hartman)   
  - perf symbols: Fix symbol size calculation condition (Michael Petlan)   
  - Input: aiptek - properly check endpoint type (Pavel Skripkin)   
  - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver (Alan Stern)   
  - usb: gadget: rndis: prevent integer overflow in rndis_set_response() (Dan Carpenter)   
  - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - atm: eni: Add check for dma_map_single (Jiasheng Jiang)   
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)   
  - efi: fix return value of __setup handlers (Randy Dunlap)   
  - fs: sysfs_emit: Remove PAGE_SIZE alignment check (Lucas Wei)   
  - kselftest/vm: fix tests build with old libc (Chengming Zhou)   
  - sfc: extend the locking on mcdi->seqno (Niels Dossche)   
  - tcp: make tcp_read_sock() more robust (Eric Dumazet)   
  - nl80211: Update bss channel on channel switch for P2P_CLIENT (Sreeramya Soratkal)   
  - atm: firestream: check the return value of ioremap() in fs_init() (Jia-Ju Bai)   
  - can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready (Lad Prabhakar)   
  - ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE (Julian Braha)   
  - MIPS: smp: fill in sibling and core maps earlier (Alexander Lobakin)   
  - ARM: dts: rockchip: fix a typo on rk3288 crypto-controller (Corentin Labbe)   
  - arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity (Jakob Unterwurzacher)   
  - xfrm: Fix xfrm migrate issues when address family changes (Yan Yan)   
  - sctp: fix the processing for INIT_ACK chunk (Xin Long)   
  - sctp: fix the processing for INIT chunk (Xin Long)   
  - Linux 4.14.272 (Greg Kroah-Hartman)   
  - ext4: add check to prevent attempting to resize an fs with sparse_super2 (Josh Triplett)   
  - ARM: fix Thumb2 regression with Spectre BHB (Russell King (Oracle))   
  - virtio: acknowledge all features before access (Michael S. Tsirkin)   
  - virtio: unexport virtio_finalize_features (Michael S. Tsirkin)   
  - staging: gdm724x: fix use after free in gdm_lte_rx() (Dan Carpenter)   
  - ARM: Spectre-BHB: provide empty stub for non-config (Randy Dunlap)   
  - selftests/memfd: clean up mapping in mfd_fail_write (Mike Kravetz)   
  - tracing: Ensure trace buffer is at least 4096 bytes large (Sven Schnelle)   
  - Revert "xen-netback: Check for hotplug-status existence before watching" (Marek Marczykowski-Górecki)   
  - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" (Marek Marczykowski-Górecki)   
  - net-sysfs: add check for netdevice being present to speed_show (suresh kumar)   
  - sctp: fix kernel-infoleak for SCTP sockets (Eric Dumazet)   
  - gpio: ts4900: Do not set DAT and OE together (Mark Featherston)   
  - NFC: port100: fix use-after-free in port100_send_complete (Pavel Skripkin)   
  - net/mlx5: Fix size field in bufferx_reg struct (Mohammad Kabat)   
  - ax25: Fix NULL pointer dereference in ax25_kill_by_device (Duoming Zhou)   
  - net: ethernet: lpc_eth: Handle error for clk_enable (Jiasheng Jiang)   
  - net: ethernet: ti: cpts: Handle error for clk_enable (Jiasheng Jiang)   
  - ethernet: Fix error handling in xemaclite_of_probe (Miaoqian Lin)   
  - qed: return status of qed_iov_get_link (Tom Rix)   
  - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (Jia-Ju Bai)   
  - Linux 4.14.271 (Greg Kroah-Hartman)   
  - xen/9p: use alloc/free_pages_exact() (Juergen Gross)   {CVE-2022-23041} 
  - xen/gntalloc: don't use gnttab_query_foreign_access() (Juergen Gross)   {CVE-2022-23039} 
  - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (Juergen Gross)   {CVE-2022-23038} 
  - xen/grant-table: add gnttab_try_end_foreign_access() (Juergen Gross)   {CVE-2022-23036} {CVE-2022-23038} 
  - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (Juergen Gross)   {CVE-2022-23040} 
  - ARM: fix build warning in proc-v7-bugs.c (Russell King (Oracle))   
  - ARM: Do not use NOCROSSREFS directive with ld.lld (Nathan Chancellor)   
  - ARM: fix co-processor register typo (Russell King (Oracle))   
  - ARM: fix build error when BPF_SYSCALL is disabled (Emmanuel Gil Peyrot)   
  - ARM: include unprivileged BPF status in Spectre V2 reporting (Russell King (Oracle))   
  - ARM: Spectre-BHB workaround (Russell King (Oracle))   
  - ARM: use LOADADDR() to get load address of sections (Russell King (Oracle))   
  - ARM: early traps initialisation (Russell King (Oracle))   
  - ARM: report Spectre v2 status through sysfs (Russell King (Oracle))   
  - arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit() (Mark Rutland)   
  - arm/arm64: Provide a wrapper for SMCCC 1.1 calls (Steven Price)   
  - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Josh Poimboeuf)   
  - Linux 4.14.270 (Greg Kroah-Hartman)   
  - hamradio: fix macro redefine warning (Huang Pei)   
  - net: dcb: disable softirqs in dcbnl_flush_dev() (Vladimir Oltean)   
  - memfd: fix F_SEAL_WRITE after shmem huge page allocated (Hugh Dickins)   
  - HID: add mapping for KEY_ALL_APPLICATIONS (William Mahon)   
  - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume (Hans de Goede)   
  - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() (Hans de Goede)   
  - nl80211: Handle nla_memdup failures in handle_nan_filter (Jiasheng Jiang)   
  - net: chelsio: cxgb3: check the return value of pci_find_capability() (Jia-Ju Bai)   
  - soc: fsl: qe: Check of ioremap return value (Jiasheng Jiang)   
  - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions (Randy Dunlap)   
  - can: gs_usb: change active_channels's type from atomic_t to u8 (Vincent Mailhol)   
  - efivars: Respect "block" flag in efivar_entry_set_safe() (Jann Horn)   
  - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() (Zheyu Ma)   
  - net: sxgbe: fix return value of __setup handler (Randy Dunlap)   
  - net: stmmac: fix return value of __setup handler (Randy Dunlap)   
  - mac80211: fix forwarded mesh frames AC & queue selection (Nicolas Escande)   
  - firmware: qemu_fw_cfg: fix kobject leak in probe error path (Johan Hovold)   
  - firmware: Fix a reference count leak. (Qiushi Wu)   
  - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server (D. Wythe)   
  - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client (D. Wythe)   
  - net: dcb: flush lingering app table entries for unregistered devices (Vladimir Oltean)   
  - batman-adv: Don't expect inter-netns unique iflink indices (Sven Eckelmann)   
  - batman-adv: Request iflink once in batadv_get_real_netdevice (Sven Eckelmann)   
  - batman-adv: Request iflink once in batadv-on-batadv check (Sven Eckelmann)   
  - netfilter: nf_queue: fix possible use-after-free (Florian Westphal)   
  - netfilter: nf_queue: don't assume sk is full socket (Florian Westphal)   
  - xfrm: enforce validity of offload input flags (Leon Romanovsky)   
  - netfilter: fix use-after-free in __nf_register_net_hook() (Eric Dumazet)   
  - xfrm: fix MTU regression (Jiri Bohac)   
  - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min (Marek Vasut)   
  - ALSA: intel_hdmi: Fix reference to PCM buffer address (Zhen Ni)   
  - ata: pata_hpt37x: fix PCI clock detection (Sergey Shtylyov)   
  - usb: gadget: clear related members when goto fail (Hangyu Hua)   
  - usb: gadget: don't release an existing dev->buf (Hangyu Hua)   
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 (Daniele Palmas)   
  - i2c: qup: allow COMPILE_TEST (Wolfram Sang)   
  - i2c: cadence: allow COMPILE_TEST (Wolfram Sang)   
  - dmaengine: shdma: Fix runtime PM imbalance on error (Yongzhi Liu)   
  - cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg)   
  - Input: clear BTN_RIGHT/MIDDLE on buttonpads (José Expósito)   
  - i2c: bcm2835: Avoid clock stretching timeouts (Eric Anholt)   
  - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work (JaeMan Park)   
  - mac80211_hwsim: report NOACK frames in tx_status (Benjamin Beichler)   
  - Linux 4.14.269 (Greg Kroah-Hartman)   
  - fget: clarify and improve __fget_files() implementation (Linus Torvalds)   
  - memblock: use kfree() to release kmalloced memblock regions (Miaohe Lin)   
  - Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR" (Karol Herbst)   
  - tty: n_gsm: fix proper link termination after failed open (daniel.starke@siemens.com)   
  - tty: n_gsm: fix encoding of control signal octet bit DV (daniel.starke@siemens.com)   
  - xhci: Prevent futile URB re-submissions due to incorrect return value. (Hongyu Xie)   
  - xhci: re-initialize the HC during resume if HCE was set (Puma Hsu)   
  - usb: dwc3: gadget: Let the interrupt handler disable bottom halves. (Sebastian Andrzej Siewior)   
  - USB: serial: option: add Telit LE910R1 compositions (Daniele Palmas)   
  - USB: serial: option: add support for DW5829e (Slark Xiao)   
  - tracefs: Set the group ownership in apply_options() not parse_options() (Steven Rostedt (Google))   
  - USB: gadget: validate endpoint index for xilinx udc (Szymon Heidrich)   
  - usb: gadget: rndis: add spinlock for rndis response list (Daehwan Jung)   
  - Revert "USB: serial: ch341: add new Product ID for CH341A" (Dmytro Bagrii)   
  - ata: pata_hpt37x: disable primary channel on HPT371 (Sergey Shtylyov)   
  - iio: adc: men_z188_adc: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - RDMA/ib_srp: Fix a deadlock (Bart Van Assche)   
  - configfs: fix a race in configfs_{,un}register_subsystem() (ChenXiaoSong)   
  - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure (Gal Pressman)   
  - drm/edid: Always set RGB444 (Maxime Ripard)   
  - openvswitch: Fix setting ipv6 fields causing hw csum failure (Paul Blakey)   
  - gso: do not skip outer ip header in case of ipip and net_failover (Tao Liu)   
  - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends (Eric Dumazet)   
  - ping: remove pr_err from ping_lookup (Xin Long)   
  - serial: 8250: of: Fix mapped region size when using reg-offset property (Robert Hancock)   
  - USB: zaurus: support another broken Zaurus (Oliver Neukum)   
  - parisc/unaligned: Fix ldw() and stw() unalignment handlers (Helge Deller)   
  - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel (Helge Deller)   
  - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing (Stefano Garzarella)   
  - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Zhang Qiao)   
  - Linux 4.14.268 (Greg Kroah-Hartman)   
  - net: macb: Align the dma and coherent dma masks (Marc St-Amand)   
  - net: usb: qmi_wwan: Add support for Dell DW5829e (Slark Xiao)   
  - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (JaeSang Yoo)   
  - ata: libata-core: Disable TRIM on M88V29 (Zoltán Böszörményi)   
  - ARM: OMAP2+: hwmod: Add of_node_put() before break (Wan Jiabing)   
  - NFS: Do not report writeback errors in nfs_getattr() (Trond Myklebust)   
  - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW (Jim Mattson)   
  - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status (david regan)   
  - mtd: rawnand: brcmnand: Refactored code to introduce helper functions (Kamal Dasu)   
  - i2c: brcmstb: fix support for DSL and CM variants (Rafał Miłecki)   
  - dmaengine: sh: rcar-dmac: Check for error num after setting mask (Jiasheng Jiang)   
  - net: sched: limit TC_ACT_REPEAT loops (Eric Dumazet)   
  - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() (Eliav Farber)   
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)   
  - powerpc/lib/sstep: fix 'ptesync' build error (Anders Roxell)   
  - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() (Mark Brown)   
  - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() (Mark Brown)   
  - ALSA: hda: Fix missing codec probe on Shenker Dock 15 (Takashi Iwai)   
  - ALSA: hda: Fix regression on forced probe mask option (Takashi Iwai)   
  - libsubcmd: Fix use-after-free for realloc(..., 0) (Kees Cook)   
  - bonding: fix data-races around agg_select_timer (Eric Dumazet)   
  - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit (Eric Dumazet)   
  - ping: fix the dif and sdif check in ping_lookup (Xin Long)   
  - net: ieee802154: ca8210: Fix lifs/sifs periods (Miquel Raynal)   
  - iwlwifi: pcie: gen2: fix locking when "HW not ready" (Johannes Berg)   
  - iwlwifi: pcie: fix locking when "HW not ready" (Johannes Berg)   
  - vsock: remove vsock from connected table when connect is interrupted by a signal (Seth Forshee)   
  - taskstats: Cleanup the use of task->exit_code (Eric W. Biederman)   
  - xfrm: Don't accidentally set RTO_ONLINK in decode_session4() (Guillaume Nault)   
  - drm/radeon: Fix backlight control on iMac 12,1 (Nicholas Bishop)   
  - iwlwifi: fix use-after-free (Johannes Berg)   
  - Revert "module, async: async_synchronize_full() on module init iff async is used" (Igor Pylypiv)   
  - quota: make dquot_quota_sync return errors from ->sync_fs (Darrick J. Wong)   
  - vfs: make freeze_super abort when sync_filesystem returns error (Darrick J. Wong)   
  - ax25: improve the incomplete fix to avoid UAF and NPD bugs (Duoming Zhou)   
  - selftests/zram: Adapt the situation that /dev/zram0 is being used (Yang Xu)   
  - selftests/zram01.sh: Fix compression ratio calculation (Yang Xu)   
  - selftests/zram: Skip max_comp_streams interface on newer kernel (Yang Xu)   
  - net: ieee802154: at86rf230: Stop leaking skb's (Miquel Raynal)   
  - btrfs: send: in case of IO error log it (Dāvis Mosāns)   
  - parisc: Fix sglist access in ccio-dma.c (John David Anglin)   
  - parisc: Fix data TLB miss in sba_unmap_sg (John David Anglin)   
  - serial: parisc: GSC: fix build when IOSAPIC is not set (Randy Dunlap)   
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)   
  - Makefile.extrawarn: Move -Wunaligned-access to W=1 (Nathan Chancellor)   
  - Linux 4.14.267 (Greg Kroah-Hartman)   
  - perf: Fix list corruption in perf_cgroup_switch() (Song Liu)   
  - hwmon: (dell-smm) Speed up setting of fan speed (Armin Wolf)   
  - seccomp: Invalidate seccomp mode to catch death failures (Kees Cook)   
  - USB: serial: cp210x: add CPI Bulk Coin Recycler id (Johan Hovold)   
  - USB: serial: cp210x: add NCR Retail IO box id (Johan Hovold)   
  - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices (Stephan Brunner)   
  - USB: serial: option: add ZTE MF286D modem (Pawel Dembicki)   
  - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 (Cameron Williams)   
  - usb: gadget: rndis: check size of RNDIS_MSG_SET command (Greg Kroah-Hartman)   
  - USB: gadget: validate interface OS descriptor requests (Szymon Heidrich)   
  - usb: dwc3: gadget: Prevent core from processing stale TRBs (Udipto Goswami)   
  - usb: ulpi: Call of_node_put correctly (Sean Anderson)   
  - usb: ulpi: Move of_node_put to ulpi_dev_release (Sean Anderson)   
  - n_tty: wake up poll(POLLRDNORM) on receiving data (TATSUKAWA KOSUKE (立川 江介))   
  - vt_ioctl: add array_index_nospec to VT_ACTIVATE (Jakob Koschel)   
  - vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)   
  - net: amd-xgbe: disable interrupts during pci removal (Raju Rangoju)   
  - tipc: rate limit warning for received illegal binding update (Jon Maloy)   
  - net: fix a memleak when uncloning an skb dst and its metadata (Antoine Tenart)   
  - net: do not keep the dst cache when uncloning an skb dst and its metadata (Antoine Tenart)   
  - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (Eric Dumazet)   
  - bonding: pair enable_port with slave_arr_updates (Mahesh Bandewar)   
  - usb: f_fs: Fix use-after-free for epfile (Udipto Goswami)   
  - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect (Fabio Estevam)   
  - staging: fbtft: Fix error path in fbtft_driver_module_init() (Uwe Kleine-König)   
  - ARM: dts: meson: Fix the UART compatible strings (Martin Blumenstingl)   
  - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group (Fabio Estevam)   
  - Revert "net: axienet: Wait for PhyRstCmplt after core reset" (Sasha Levin)   
  - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() (Jisheng Zhang)   
  - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend (Amelie Delaunay)   
  - scsi: target: iscsi: Make sure the np under each tpg is unique (ZouMingzhe)   
  - NFSv4 expose nfs_parse_server_name function (Olga Kornievskaia)   
  - NFSv4 remove zero number of fs_locations entries error check (Olga Kornievskaia)   
  - NFSv4.1: Fix uninitialised variable in devicenotify (Trond Myklebust)   
  - nfs: nfs4clinet: check the return value of kstrdup() (Xiaoke Wang)   
  - NFSv4 only print the label when its queried (Olga Kornievskaia)   
  - NFSD: Clamp WRITE offsets (Chuck Lever)   
  - NFS: Fix initialisation of nfs_client cl_flags field (Trond Myklebust)   
  - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs (Pavel Parkhomenko)   
  - mmc: sdhci-of-esdhc: Check for error num after setting mask (Jiasheng Jiang)   
  - ima: Allow template selection with ima_template[_fmt]= after ima_hash= (Roberto Sassu)   
  - ima: Remove ima_policy file before directory (Stefan Berger)   
  - integrity: check the return value of audit_log_start() (Xiaoke Wang)   
  - Linux 4.14.266 (Greg Kroah-Hartman)   
  - moxart: fix potential use-after-free on remove path (Greg Kroah-Hartman)


