# changelog

author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-950.el7]
changelog:
  - [kernel] posix-timer: Properly check sigevent->sigev_notify (Phil Auld) [1613711] {CVE-2017-18344}
  - [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593087] {CVE-2018-10902}
  - [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600953] {CVE-2018-13405}
  - [fs] pnfs: Layoutreturn must free the layout after the layout-private data (Scott Mayhew) [1625517]
  - [fs] sunrpc: Ensure we always close the socket after a connection shuts down (Steve Dickson) [1614950]
  - [fs] xfs: remove filestream item xfs_inode reference (Brian Foster) [1518623]
  - [mm] set IORESOURCE_SYSTEM_RAM to system RAM to fix memory hot-add failure (Larry Woodman) [1628349]
  - [firmware] efivars: Protect DataSize and Data in efivar_entry.var (Lenny Szubowicz) [1597868]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-951.el7]
changelog:
  - [fs] fanotify: fix logic of events on child (Miklos Szeredi) [1597738]
  - [fs] cifs: add a check for session expiry (Leif Sahlberg) [1626358]
  - [fs] xfs: completely disable per-inode DAX behavior (Eric Sandeen) [1623150]
  - [fs] fs: get_rock_ridge_filename(): handle malformed NM entries (Bill O'Donnell) [1340778] {CVE-2016-4913}
  - [md] fix 'allow faster resync only on non-rotational media' underneath dm (Nigel Croxon) [1561162]
  - [md] Revert "allow faster resync only on non-rotational media" (Nigel Croxon) [1561162]
  - [mm] madvise: fix madvise() infinite loop under special circumstances (Rafael Aquini) [1552982] {CVE-2017-18208}
  - [infiniband] srpt: Support HCAs with more than two ports (Don Dutile) [1616192]
  - [infiniband] overflow.h: Add allocation size calculation helpers (Don Dutile) [1616192]
  - [net] ip_tunnel: clean the GSO bits properly (Flavio Leitner) [1607907]
  - [kernel] revert cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1626943]
  - [s390] sclp: Change SCLP console default buffer-full behavior (Hendrik Brueckner) [1625350]
  - [x86] kvm: Take out __exit annotation in vmx_exit() (Waiman Long) [1626560]
  - [x86] mark coffeelake-s 8+2 as supported (David Arcari) [1575457]
  - [x86] kvm: vmx: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1619602]
  - [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1619602]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-952.el7]
changelog:
  - [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
  - [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
  - [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
  - [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
  - [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
  - [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
  - [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
  - [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
  - [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
  - [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-953.el7]
changelog:
  - [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
  - [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
  - [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
  - [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
  - [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
  - [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
  - [block] fix a crash caused by wrong API (Ming Lei) [1548261]
  - [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
  - [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
  - [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
  - [block] pass in queue to inflight accounting (Ming Lei) [1548261]
  - [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-954.el7]
changelog:
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
  - [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
  - [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
  - [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
  - [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
  - [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
  - [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
  - [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
  - [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-955.el7]
changelog:
  - [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
  - [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-956.el7]
changelog:
  - [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
  - [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-957.el7]
changelog:
  - [mm] mlock: avoid increase mm->locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.1.1.el7]
changelog:
  - [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
  - [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
  - [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
  - [kernel] cpuset: use trialcs->mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
  - [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
  - [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
  - [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
  - [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
  - [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
  - [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
  - [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
  - [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.1.2.el7]
changelog:
  - [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
  - [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}


author: Jianchao Wang <jianchao.w.wang@oracle.com> [3.10.0-957.1.3.0.3.el7.OL7]
changelog:
  - [x86/apic/x2apic] avoid allocate multiple irq vectors for a single interrupt on multiple
    cpu, otherwise irq vectors would be used up when there are only 2 cpu online per node.
    [orabug28691156]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.2.1.el7]
changelog:
  - [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
  - [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
  - [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
  - [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.3.1.el7]
changelog:
  - [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
  - [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm->vcpus (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
  - [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
  - [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
  - [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
  - [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
  - [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
  - [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
  - [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
  - [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.4.1.el7]
changelog:
  - [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
  - [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
  - [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
  - [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
  - [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
  - [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
  - [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
  - [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
  - [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
  - [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
  - [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
  - [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
  - [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
  - [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
  - [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
  - [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
  - [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
  - [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
  - [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
  - [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
  - [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
  - [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.5.1.el7]
changelog:
  - [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.7.1.el7]
changelog:
  - [scsi] lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
  - [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.8.1.el7]
changelog:
  - [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.9.1.el7]
changelog:
  - [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
  - [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.10.1.el7]
changelog:
  - [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
  - [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
  - [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
  - [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
  - [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
  - [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
  - [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
  - [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
  - [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
  - [powerpc] rtas: Fix a potential race between CPU-Offline & Migration (Steve Best) [1669044 1650249]
  - [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
  - [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
  - [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
  - [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
  - [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
  - [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
  - [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
  - [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
  - [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
  - [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
  - [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
  - [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
  - [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
  - [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
  - [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}


author: John Mcwalters <john.mcwalters@oracle.com> [3.10.0-957.10.1.0.1.el7.OL7]
changelog:
  - [xen/balloon] Support xend-based toolstack (orabug 28663970)
  - [x86/apic/x2apic] avoid allocate multiple irq vectors for a single interrupt on multiple
    cpu, otherwise irq vectors would be used up when there are only 2 cpu online per node.
   [orabug28691156]
  - [bonding] avoid repeated display of same link status change. [orabug 28109857]
  - [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug 22552377]
  - Oracle Linux certificates (Alexey Petrenko)
  - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
  - Update x509.genkey [bug 24817676]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.11.1.el7]
changelog:
  - [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
  - [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
  - [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.1.el7]
changelog:
  - [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
  - [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
  - [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
  - [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
  - [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
  - [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
  - [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
  - [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
  - [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
  - [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
  - [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
  - [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
  - [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
  - [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
  - [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
  - [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
  - [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
  - [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
  - [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
  - [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
  - [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
  - [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
  - [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
  - [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
  - [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
  - [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.2.el7]
changelog:
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}


author: Natalya Naumova <natalya.naumova@oracle.com> [3.10.0-957.12.2.0.1.el7.OL7]
changelog:
  - [xen/balloon] Support xend-based toolstack (orabug 28663970)
  - [x86/apic/x2apic] avoid allocate multiple irq vectors for a single interrupt on multiple
    cpu, otherwise irq vectors would be used up when there are only 2 cpu online per node.
    [orabug28691156]
  - [bonding] avoid repeated display of same link status change. [orabug 28109857]
  - [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug 22552377]
  - Oracle Linux certificates (Alexey Petrenko)
  - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
  - Update x509.genkey [bug 24817676]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.14.1.el7]
changelog:
  - [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
  - [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
  - [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
  - [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
  - [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
  - [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
  - [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
  - [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
  - [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.15.1.el7]
changelog:
  - [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
  - [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.16.1.el7]
changelog:
  - [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
  - [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
  - [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
  - [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
  - [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
  - [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
  - [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
  - [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
  - [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
  - [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.19.1.el7]
changelog:
  - [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
  - [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
  - [block] wakeup tasks blocked on q->mq_freeze_wq (Ming Lei) [1702921 1701348]
  - [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
  - [fs] xfs: hold xfs_buf locked between shortform->leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
  - [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
  - [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
  - [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
  - [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
  - [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
  - [security] xattr: Constify ->name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
  - [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
  - [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
  - [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
  - [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
  - [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
  - [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
  - [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
  - [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
  - [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
  - [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
  - [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
  - [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
  - [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
  - [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.20.1.el7]
changelog:
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.1.el7]
changelog:
  - [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.2.el7]
changelog:
  - [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.3.el7]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.22.1.el7]
changelog:
  - [md] raid: raid5 preserve the writeback action after the parity check (Nigel Croxon) [1698109 1701350]
  - [net] route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (Xin Long) [1709727 1630136]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.23.1.el7]
changelog:
  - [md] dm thin metadata: do not write metadata if no changes occurred (Mike Snitzer) [1713800 1710051]
  - [md] dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [1713800 1710051]
  - [md] dm thin metadata: check __commit_transaction()'s return (Mike Snitzer) [1713800 1710051]
  - [md] dm space map common: zero entire ll_disk (Mike Snitzer) [1713800 1710051]
  - [scsi] smartpqi: correct lun reset issues (Don Brace) [1709469 1641112]
  - [net] openvswitch: Remove padding from packet before L3+ conntrack processing (Eelco Chaudron) [1713562 1684518]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.26.1.el7]
changelog:
  - [x86] kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs (Eduardo Habkost) [1716306 1593190]
  - [x86] kvm/mmu: reset MMU context when 32-bit guest switches PAE (Vitaly Kuznetsov) [1702172 1703797]
  - [x86] kvm: x86: fix handling of role.cr4_pae and rename it to 'gpte_size' (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Do not inherit quadrant and invalid for the root shadow EPT (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: fix switch between root and guest MMUs (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: NMI-window and interrupt-window exiting should wake L2 from HLT (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: nsvm: fix switch to guest mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Fix race in emulated page table writes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx/nsvm: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: reintroduce pte_list_remove, but including mmu_spte_clear_track_bits (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: rename pte_list_remove to __pte_list_remove (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: check if MMU reconfiguration is needed in init_kvm_nested_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: check if tdp/shadow MMU reconfiguration is needed (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/nvmx: introduce source data cache for kvm_init_shadow_ept_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: make space for source data caching in struct kvm_mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: get rid of redundant kvm_mmu_setup() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: introduce guest_mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu.c: add kvm_mmu parameter to kvm_mmu_free_roots() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu.c: set get_pdptr hook in kvm_init_shadow_ept_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: make vcpu->mmu a pointer to the current MMU (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: move vmcs12 EPTP consistency check to check_vmentry_prereqs() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: move host EFER consistency checks to VMFail path (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: return 0 in case kvm_mmu_memory_cache has min number of objects (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Clear reserved bits of #DB exit qualification (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: restore host state in nested_vmx_vmexit for VMFail (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: fix entry with pending interrupt if APICv is enabled (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: hide flexpriority from guest when disabled at the module level (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: check for existence of secondary exec controls before accessing (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Wake blocked vCPU in guest-mode if pending interrupt in virtual APICv (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: don't reset root in kvm_mmu_setup() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/lapic: always disable MMIO interface in x2APIC mode (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix loss of pending IRQ/NMI before entering L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Skip pae_root shadow allocation if tdp enabled (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: Combine flushing remote tlb in mmu_set_spte() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add multi-entry LRU cache for previous CR3s (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Support selectively freeing either current or previous MMU root (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add a root_hpa parameter to kvm_mmu->invlpg() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add ability to skip TLB flush when switching CR3 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Use fast CR3 switch for nested VMX (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Support resetting the MMU context without resetting roots (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add support for fast CR3 switch across different MMU modes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Introduce KVM_REQ_LOAD_CR3 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Introduce kvm_mmu_calc_root_page_role() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add fast CR3 switch code path (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Avoid taking MMU lock in kvm_mmu_sync_roots if no sync is needed (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Make sync_page() flush remote TLBs once only (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Restore exit qual for VM-entry failure due to MSR loading (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Nested VM-entry prereqs for event inj (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Don't expose private memslots to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Add guest_mode to kvm_mmu_page_role (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Basic APIC virtualization controls have three settings (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Eliminate APIC access page sharing between L1 and L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Introduce lapic_mode enumeration (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Refactor mmu_free_roots() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: move MSR_IA32_TSC handling to x86.c (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: Properly update 'tsc_offset' to represent the running guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] Add check for APIC access address for vmentry of L2 guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Do not load EOI-exitmap while running L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: don't configure EPT identity map for unrestricted guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Update the exit_qualification access bits while walking an address (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Enforce NMI controls on vmentry of L2 guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Don't halt vcpu when L1 is injecting events to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: shadow more fields that are read/written on every vmexits (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix bug of injecting L2 exception into L1 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm mmu: check pending exception before injecting APF (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: prepare for new bit definition in nested_ctl (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Preserve read-only values in the redirection table (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Clear Remote IRR when entry is switched to edge-triggered (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Remove redundant check for Remote IRR in ioapic_set_irq (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Don't fire level irq when Remote IRR set (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix mmu context after VMLAUNCH/VMRESUME failure (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the IA32_BNDCFGS on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: extend usage of RET_MMIO_PF_* constants (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] arch/x86: remove redundant null checks before kmem_cache_destroy (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: cleanup init_rmode_identity_map() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: free_page can handle NULL (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix nested #PF intends to break L1's vmlauch/vmresume (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Handle deferred early VMLAUNCH/VMRESUME failure properly (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Handle VMLAUNCH/VMRESUME failure properly (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Remove nested_vmx_succeed after successful VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Fix #DF due to inject "Page not Present" and "Page Ready" exceptions simultaneously (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the virtual-APIC address on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix trying to cancel vmlauch/vmresume (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: use kvm_event_needs_reinjection (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Fix loss of exception which has not yet been injected (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: fix use of L1 MMIO areas in nested guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Avoid guest page table walk when gpa_available is set (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: simplify ept_misconfig (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Disallow illegal IA32_APIC_BASE MSR values (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Bail out immediately if there is no available mmu page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: validate eptp pointer (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Add support for fast unprotection of nested guest page tables (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: fixes to nested virt interrupt injection (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: do not fill vm_exit_intr_error_code in prepare_vmcs12 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Disallow VM-entry in MOV-SS shadow (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Force a nested vmexit if the injected #PF is async_pf (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Add L1 guest async_pf #PF vmexit handler (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Simplify kvm_x86_ops->queue_exception parameter list (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix nested_vmx_check_msr_bitmap_controls (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the I/O bitmaps on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Don't set vmcs12 to "launched" when VMLAUNCH fails (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate CR3 target count on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Flush TLB when the APIC-access address changes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: VMCLEAR should not cause the vCPU to shut down (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Use the hardware provided GPA instead of page walk (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Use the hardware provided GPA instead of page walk (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Add support for additional SVM NPF error codes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: CPUID.01H:EDX.APIC[bit 9] should mirror IA32_APIC_BASE[11] (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fetch VM_INSTRUCTION_ERROR from vmcs02 on vmx->fail (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/x86: Replace smp_mb() with smp_store_mb/release() in the walk_shadow_page_lockless_begin/end() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: coalesce more page zapping in mmu_sync_children (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: move zap/flush to kvm_mmu_get_page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: invert return value of mmu.sync_page and *kvm_sync_page* (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: cleanup __kvm_sync_page and its callers (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: use kvm_sync_page in kvm_sync_pages (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: move TLB flush out of __kvm_sync_page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: introduce kvm_mmu_flush_or_zap (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Fix ubsan warnings (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Remove unused parameter parent_pte from kvm_mmu_get_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Use for_each_rmap_spte macro instead of pte_list_walk() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Make mmu_set_spte() return emulate value (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Add helper function to clear a bit in unsync child bitmap (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] mce: Handle varying MCA bank counts (David Arcari) [1715868 1693352]
  - [drm] drm/i915/gvt: Fix mmap range check (Alex Williamson) [1713566 1713567] {CVE-2019-11085}
  - [nvme] cancel request synchronously (Ming Lei) [1715320 1688518]
  - [block] blk-mq: introduce blk_mq_complete_request_sync() (Ming Lei) [1715320 1688518]
  - [char] ipmi_si: fix use-after-free of resource->name (Tony Camuso) [1714407 1714408] {CVE-2019-11811}
  - [fs] sunrpc: make visible processing error in bc_svc_process() ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: remove unused xpo_prep_reply_hdr callback ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: remove svc_tcp_bc_class ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: replace svc_serv->sv_bc_xprt by boolean flag ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: use-after-free in svc_process_common() ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] svcauth_gss: Close connection when dropping an incoming message ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [tty] Fix low_latency BUG (Aristeu Rozanski) [1715331 1710039]
  - [tty] n_tty: Fix termios_rwsem lockdep false positive (Artem Savkov) [1715328 1712744]
  - [tty] Fix lock order in tty_do_resize() (Aristeu Rozanski) [1708063 1684982]
  - [tty] n_tty: Access termios values safely (Aristeu Rozanski) [1708063 1684982]
  - [tty] Convert termios_mutex to termios_rwsem (Aristeu Rozanski) [1708063 1684982]
  - [md] batch flush requests. (Xiao Ni) [1713564 1576466]
  - [md] revert "md: fix lock contention for flush bios" (Xiao Ni) [1713564 1576466]
  - [mm] tlb: Remove tlb_remove_table() non-concurrent condition (Vitaly Kuznetsov) [1712766 1448188]
  - [kernel] sched/fair: Do not re-read ->h_load_next during hierarchical load calculation (Phil Auld) [1712764 1707397]
  - [x86] livepatch: apply alternatives and paravirt patches after relocations (Artem Savkov) [1712761 1706733]
  - [block] blk-mq: fix IO accounting in case of none io scheduler (Ming Lei) [1711013 1669684]
  - [net] netfilter: ipv6: Don't preserve original oif for loopback address (Florian Westphal) [1709186 1701496]
  - [net] netfilter: ipv6: Preserve link scope traffic original oif (Florian Westphal) [1709186 1701496]
  - [x86] mce/amd, edac/mce_amd: Add new error descriptions for some SMCA bank types (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Add new McaTypes for CS, PSP, and SMU units (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Fix the thresholding machinery initialization order (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Read MCx_MISC block addresses on any CPU (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Cache SMCA MISC block addresses (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Carve out SMCA get_block_address() code (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Get address from already initialized block (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Enumerate Reserved SMCA bank type (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Pass the bank number to smca_get_bank_type() (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Define a function to get SMCA bank type (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Allow any CPU to initialize the smca_banks array (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Carve out SMCA bank configuration (David Arcari) [1712763 1676301]
  - [x86] mce: Convert threshold_bank.cpus from atomic_t to refcount_t (David Arcari) [1712763 1676301]
  - [x86] ras/amd: Make sysfs names of banks more user-friendly (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Make the init code more robust (David Arcari) [1712763 1676301]
  - [x86] ras: Hide SMCA bank names (David Arcari) [1712763 1676301]
  - [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add support for software count cache flush (Gustavo Duarte) [1708546 1694459]
  - [powerpc] Introduce asm-prototypes.h (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1708546 1694459]
  - [powerpc] asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1708546 1694459]
  - [powerpc] Add helper to check if offset is within relative branch range (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1708546 1694459]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Patch barrier_nospec in modules (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add barrier_nospec (Gustavo Duarte) [1708546 1694459]
  - [powerpc] reuse asm-generic/barrier.h (Gustavo Duarte) [1708546 1694459]
  - [x86] locking/arch: Rename set_mb() to smp_store_mb() (Waiman Long) [1708546 1522387]
  - [kernel] locking/arch: Add WRITE_ONCE() to set_mb() (Waiman Long) [1708546 1522387]
  - [kernel] rcu: Don't wake rcuc/X kthreads on NOCB CPUs (Daniel Bristot de Oliveira) [1711325 1626129]
  - [x86] Update stepping values for coffee lake desktop (David Arcari) [1710803 1704812]
  - [security] selinux: overhaul sidtab to fix bug and improve performance (Ondrej Mosnacek) [1710468 1335986]
  - [security] selinux: use separate table for initial SID lookup (Ondrej Mosnacek) [1710468 1335986]
  - [security] selinux: refactor sidtab conversion (Ondrej Mosnacek) [1710468 1335986]
  - [nvme] nvme-pci: fix memory leak on probe failure (David Milburn) [1710799 1689008]
  - [nvme] nvme-pci: limit max IO size and segments to avoid high order allocations (David Milburn) [1710799 1689008]
  - [lib] locking/rwsem: Prevent decrement of reader count before increment (Waiman Long) [1709704 1708667]
  - [fs] nfsd: COPY and CLONE operations require the saved filehandle to be set (Scott Mayhew) [1672147 1645353] {CVE-2018-16871}
  - [iommu] amd: Set exclusion range correctly (Jerry Snitselaar) [1698338 1702763]
  - [iommu] amd: Reserve exclusion range in iova-domain (Jerry Snitselaar) [1698338 1691196]
  - [nvdimm] libnvdimm, pmem: Fix badblocks population for 'raw' namespaces (Frank Ramsay) [1708548 1672302]
  - [netdrv] mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom (Stanislaw Gruszka) [1706698 1639674]
  - [net] nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT (Stanislaw Gruszka) [1706698 1639674]
  - [net] nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (Stanislaw Gruszka) [1706698 1639674]
  - [netdrv] mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (Stanislaw Gruszka) [1706698 1626463]
  - [md] dm cache metadata: Fix loading discard bitset (Mike Snitzer) [1703586 1701619]
  - [infiniband] hfi1: Close race condition on user context disable and close (Alex Estrin) [1705369 1680069]
  - [mm] thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Andrea Arcangeli) [1698108 1636066]
  - [mm] revert "mm: numa: defer TLB flush for THP migration as long as possible" (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp/migration: switch from flush_tlb_range to flush_pmd_tlb_range (Andrea Arcangeli) [1698108 1636066]
  - [mm] migrate.c: stabilise page count when migrating transparent hugepages (Andrea Arcangeli) [1698108 1636066]
  - [mm] numa: add migrated transhuge pages to LRU the same way as base pages (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix MADV_DONTNEED vs. MADV_FREE race (Andrea Arcangeli) [1698108 1636066]
  - [mm] memcg, slab: simplify synchronization scheme (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: do not schedule cache destruction when last page goes away (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: separate memcg vs root cache creation paths (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: cleanup memcg cache creation (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: RCU protect memcg_params for root caches (Aaron Tomlin) [1691428 1674401]
  - [mm] slab: do not panic if we fail to create memcg cache (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: get rid of kmem_cache_dup() (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: fix possible NULL deref while traversing memcg_slab_caches list (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: fix barrier usage when accessing memcg_caches (Aaron Tomlin) [1691428 1674401]
  - [mm] slab: clean up kmem_cache_create_memcg() error handling (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, kmem: use cache_from_memcg_idx instead of hard code (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: make memcg_update_cache_sizes() static (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: fix kmem_account_flags check in memcg_can_account_kmem() (Aaron Tomlin) [1691428 1674401]
  - [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.27.1.el7]
changelog:
  - [x86] Update stepping values for Whiskey Lake U/Y (David Arcari) [1718690 1704810]
  - [x86] perf/amd: Resolve NMI latency issues for active PMCs (David Arcari) [1721611 1696764]
  - [x86] perf/amd: Resolve race condition when disabling PMC (David Arcari) [1721611 1696764]
  - [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1720266 1705210]
  - [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1720266 1705210]
  - [edac] amd64: Recognize x16 symbol size (Gary Hook) [1720266 1705210]
  - [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1720266 1705210]
  - [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1720266 1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1720266 1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1720266 1670608]
  - [x86] mark AMD Rome processors supported (David Arcari) [1721604 1543509]
  - [x86] Mark AMD EPYC guests as supported (David Arcari) [1721604 1664507]
  - [x86] mark amd rome as unsupported (David Arcari) [1721604 1638504]
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.27.2.el7]
changelog:
  - [x86] hyper-v: fix hyperv.h UAPI header (Vitaly Kuznetsov) [1727109 1692492]
  - [iommu] hyper-v: Add Hyper-V stub IOMMU driver (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Set x2apic destination mode to physical when x2apic is available (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Consolidate code for converting cpumask to vpset (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Fix the circular dependency in IPI enlightenment (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Refactor hv_irq_unmask() to use cpumask_to_vpset() (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Replace hv_vp_set with hv_vpset (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Add __aligned(8) to struct retarget_msi_interrupt (Vitaly Kuznetsov) [1727109 1661654]
  - [hwmon] k10temp: Add support for AMD family 17h, model 30h CPUs (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add PCI device IDs for family 17h, model 30h (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add support for newer PCI topologies (Gary Hook) [1728000 1643292]
  - [hwmon] k10temp, x86/amd_nb: Consolidate shared device IDs (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Use API function to access System Management Network (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add support for Raven Ridge CPUs (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Add support for AMD Ryzen w/ Vega graphics (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Add temperature offset for Ryzen 2700X (Gary Hook) [1728000 1643292]
  - [x86] cpu/amd: Apply the Erratum 688 fix when the BIOS doesn't (Gary Hook) [1728000 1643292]


author: Kevin Lyons <kevin.x.lyons@oracle.com> [3.10.0-957.5.1.0.1.el7.OL7]
changelog:
  - [x86/apic/x2apic] avoid allocate multiple irq vectors for a single interrupt on multiple
    cpu, otherwise irq vectors would be used up when there are only 2 cpu online per node.
    [orabug28691156]
  - [bonding] avoid repeated display of same link status change. [orabug 28109857]
  - [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [orabug 22552377]
  - Oracle Linux certificates (Alexey Petrenko)
  - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
  - Update x509.genkey [bug 24817676]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-949.el7]
changelog:
  - [scsi] libsas: fix memory leak in sas_smp_get_phy_events() (Tomas Henzl) [1558582] {CVE-2018-7757}
  - [vhost] fix info leak due to uninitialized memory (Jason Wang) [1573705] {CVE-2018-1118}
  - [pci] Fix calculation of bridge window's size and alignment (Myron Stowe) [1623800]
  - [md] dm thin metadata: try to avoid ever aborting transactions (Mike Snitzer) [1614151]
  - [crypto] api: fix finding algorithm currently being tested (Herbert Xu) [1618701]
  - [sound] alsa: hda/realtek: Fix HP Headset Mic can't record (Jaroslav Kysela) [1622721]
  - [sound] alsa: hda/realtek - Fixup for HP x360 laptops with B&O speakers (Jaroslav Kysela) [1622721]
  - [sound] alsa: hda/realtek - Fixup mute led on HP Spectre x360 (Jaroslav Kysela) [1622721]
  - [target] scsi: tcmu: use u64 for dev_size (Xiubo Li) [1603363]
  - [target] scsi: tcmu: use match_int for dev params (Xiubo Li) [1603363]
  - [target] scsi: tcmu: do not set max_blocks if data_bitmap has been setup (Xiubo Li) [1603363]
  - [target] scsi: tcmu: unmap if dev is configured (Xiubo Li) [1603363]
  - [target] scsi: tcmu: check if dev is configured before block/reset (Xiubo Li) [1603363]
  - [target] scsi: tcmu: use lio core se_device configuration helper (Xiubo Li) [1603363]
  - [target] scsi: target: add helper to check if dev is configured (Xiubo Li) [1603363]
  - [target] scsi: tcmu: initialize list head (Xiubo Li) [1603363]
  - [target] scsi: target_core_user: fix double unlock (Xiubo Li) [1603363]
  - [s390] arch: Set IORESOURCE_SYSTEM_RAM flag for resources (Gary Hook) [1627889]
  - [x86] efi-bgrt: Switch all pr_err() to pr_notice() for invalid BGRT (Lenny Szubowicz) [1464241]
  - [x86] efi/bgrt: Don't ignore the BGRT if the 'valid' bit is 0 (Lenny Szubowicz) [1464241]
  - [x86] efi: Preface all print statements with efi* tag (Lenny Szubowicz) [1464241]
  - [x86] efi-bgrt: Switch pr_err() to pr_debug() for invalid BGRT (Lenny Szubowicz) [1464241]
  - [x86] efi-bgrt: Add error handling; inform the user when ignoring the BGRT (Lenny Szubowicz) [1464241]
  - [x86] efi: Check status field to validate BGRT header (Lenny Szubowicz) [1464241]


author: Guru Anbalagane <guru.anbalagane@oracle.com> [3.8.13-118.2.1.el7uek]
changelog:
  - ipc/sem.c: fully initialize sem_array before making it visible (Manfred Spraul)  [Orabug: 22277382]  {CVE-2015-7613} 
  - ipc: fix msg newqueue add (Guru Anbalagane)  [Orabug: 22277382]  {CVE-2015-7613}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.3.1.el7uek]
changelog:
  - Revert "xen-netfront: set max_queue default to 8" (Brian Maly)  [Orabug: 22096098]  
  - net/sunrpc: xpt_auth_cache should be ignored when expired. (NeilBrown)  [Orabug: 21287382]  
  - Prevent syncing frozen file system -- part 2 (Tariq Saeed)  [Orabug: 21807344]  
  - Prevent syncing frozen file system (Tariq Saeed)  [Orabug: 21807344]  
  - KEYS: Fix UID check in keyctl_get_persistent() (David Howells)   
  - mlx4_vnic: Release lock when flush is not needed (Yuval Shaia)  [Orabug: 22173261]  
  - IPoIB: restore uniqueness check for child interfaces (Santosh Shilimkar)  [Orabug: 22257430]  
  - block: bump BLK_DEF_MAX_SECTORS to 2560 (Jeff Moyer)  [Orabug: 22488554]  
  - Revert "block: remove artifical max_hw_sectors cap" (Jeff Moyer)  [Orabug: 22488554]  
  - KEYS: Fix keyring ref leak in join_session_keyring() (Yevgeny Pats)  [Orabug: 22563965]  {CVE-2016-0728} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872} 
  - dcache: Handle escaped paths in prepend_path (Eric W. Biederman)  [Orabug: 22373283]  
  - vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman)  [Orabug: 22249875]  
  - KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872} 
  - KEYS: Fix race between key destruction and finding a keyring by name (David Howells)  [Orabug: 22373442]  
  - KVM: svm: unconditionally intercept #DB (Paolo Bonzini)  [Orabug: 22333698]  {CVE-2015-8104} 
  - KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup)  [Orabug: 22333689]  {CVE-2015-5307} {CVE-2015-5307} 
  - KVM: x86: Defining missing x86 vectors (Nadav Amit)  [Orabug: 22333689]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.4.1.el7uek]
changelog:
  - xen-blkback: replace work_pending with work_busy in purge_persistent_gnt() (Bob Liu)  [Orabug: 22463905]  
  - coredump: add new %PATCH variable in core_pattern (Herbert van den Bergh)  [Orabug: 22666980]  
  - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. (Vijay Pandurangan)  [Orabug: 22725572]  
  - libiscsi: Fix host busy blocking during connection teardown (John Soni Jose)  [Orabug: 22735756]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22868366]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22868366]  
  - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Reorder nested NMI checks (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Improve nested NMI comments (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Switch stacks on userspace NMI entry (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/paravirt: Replace the paravirt nop with a bona fide empty function (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.5.1.el7uek]
changelog:
  - x86_64: expand kernel stack to 16K (Minchan Kim)  [Orabug: 21140371]  
  - iommu/vt-d: add quirk for broken interrupt remapping on 55XX chipsets (Neil Horman)  [Orabug: 22534160]  
  - xen: remove unneeded variables and one constant (Daniel Kiper)  [Orabug: 22288700]  
  - Revert "x86/xen: delay construction of mfn_list_list" (Daniel Kiper)  [Orabug: 22288700]  
  - ocfs2/dlm: fix misuse of list_move_tail() in dlm_run_purge_list() (Tariq Saeed)  [Orabug: 22898384]  
  - ocfs2/dlm: do not purge lockres that is queued for assert master (Xue jiufei)  [Orabug: 22898384]  
  - pipe: Fix buffer offset after partially failed read (Ben Hutchings)  [Orabug: 22985903]  {CVE-2016-0774} {CVE-2015-1805} {CVE-2016-0774}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.6.1.el7uek]
changelog:
  - skbuff: skb_segment: orphan frags before copying (Dongli Zhang)  [Orabug: 23018911]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22888920]  
  - mlx4_core: Introduce restrictions for PD update (Ajaykumar Hotchandani)   
  - filename should be destroyed via final_putname() instead of __putname() (John Sobecki)  [Orabug: 22346320]  
  - RDS: Fix the atomicity for congestion map update (Wengang Wang)  [Orabug: 23141554]  
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222753]  {CVE-2015-8767}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.7.1.el7uek]
changelog:
  - megaraid_sas : Update threshold based reply post host index register (Sumit.Saxena@avagotech.com)  [Orabug: 23562756]  
  - xen/events: Don't move disabled irqs (Ross Lagerwall)  [Orabug: 23055234]  
  - xen/events: Mask a moving irq (Boris Ostrovsky)  [Orabug: 23055234]  
  - xen/pciback: Save the number of MSI-X entries to be copied later. (Dongli Zhang)  [Orabug: 23202410]  
  - xen/pciback: Save xen_pci_op commands before processing it (Dongli Zhang)  [Orabug: 23202410]  
  - xen-blkback: read from indirect descriptors only once (Dongli Zhang)  [Orabug: 23202410]  
  - xen-blkback: only read request operation from shared ring once (Dongli Zhang)  [Orabug: 23202410]  
  - xen-netback: use RING_COPY_REQUEST() throughout (Dongli Zhang)  [Orabug: 23202410]  
  - xen-netback: don't use last request to determine minimum Tx credit (Dongli Zhang)  [Orabug: 23202410]  
  - xen: Add RING_COPY_REQUEST() (Dongli Zhang)  [Orabug: 23202410]  
  - IB/security: Restrict use of the write() interface (Jason Gunthorpe)  [Orabug: 23283925]  {CVE-2016-4565} 
  - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells)  [Orabug: 23279020]  {CVE-2016-0758} 
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 23267997]  {CVE-2015-8543} {CVE-2015-8543} 
  - ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner)  [Orabug: 23263252]  {CVE-2015-8215} 
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262276]  {CVE-2013-4312} {CVE-2013-4312}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.9.1.el7uek]
changelog:
  - mlx4: Increase SYNC_TPT command timeout (Mukesh Kacker)  [Orabug: 22895790]  
  - neigh: do not modify unlinked entries (Julian Anastasov)  [Orabug: 23072705]  
  - mm/slab: Improve performance of slabinfo stats gathering (Aruna Ramakrishna)  [Orabug: 23720437]  
  - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23703901]  {CVE-2016-2117} {CVE-2016-2117}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.10.1.el7uek]
changelog:
  - ocfs2: call ocfs2_journal_access_di() before ocfs2_journal_dirty() in ocfs2_write_end_nolock() (yangwenfang)  [Orabug: 19601200]  
  - ocfs2: improve recovery performance (Junxiao Bi)  [Orabug: 24395691]  
  - KEYS: potential uninitialized variable (Dan Carpenter)  [Orabug: 24393864]  {CVE-2016-4470}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.10.2.el7uek]
changelog:
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010012] [Orabug: 2401010]  {CVE-2016-5696}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.11.1.el7uek]
changelog:
  - rds: schedule local connection activity in proper workqueue (Ajaykumar Hotchandani)  [Orabug: 24624195]  
  - ib_core: make wait_event uninterruptible in ib_flush_fmr_pool() (Avinash Repaka)  [Orabug: 24655952]  
  - net/mlx4: Support shutdown() interface (Gavin Shan)  [Orabug: 24624181]  
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010012] [Orabug: 2401010]  {CVE-2016-5696}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.11.2.el7uek]
changelog:
  - Btrfs: fix truncation of compressed and inlined extents (Ashish Samant)  [Orabug: 22307285]  {CVE-2015-8374} 
  - Btrfs: fix file corruption and data loss after cloning inline extents (Divya Indi)  [Orabug: 22307285]  {CVE-2015-8374} 
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.12.1.el7uek]
changelog:
  - scsi_sysfs: protect against double execution of __scsi_remove_device() (Vitaly Kuznetsov)  [Orabug: 23720563]  
  - ocfs2: Fix double put of recount tree in ocfs2_lock_refcount_tree() (Ashish Samant)  [Orabug: 24691666]  
  - netfilter: x_tables: speed up jump target validation (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: remove unused comefrom hookmask argument (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: introduce and use xt_copy_counters_from_user (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: do compat validation via translate_table (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: xt_compat_match_from_user doesn't need a retval (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: ip6_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: ip_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: arp_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: don't reject valid target size on some architectures (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: validate all offsets and sizes in a rule (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: check for bogus target offset (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: check standard target size too (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: add compat version of xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: assert minimum target size (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: kill check_entry helper (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: add and use xt_check_entry_offsets (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: don't move to non-existent next rule (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - netfilter: x_tables: check for size overflow (Florian Westphal)  [Orabug: 24690304]  {CVE-2016-3134} 
  - NFSv4: Fail I/O if the state recovery fails irrevocably (Trond Myklebust)  [Orabug: 24681407]  
  - rds: skip rx/tx work when destroying connection (Wengang Wang)  [Orabug: 24395795]  
  - ocfs2: Fix start offset to ocfs2_zero_range_for_truncate() (Ashish Samant)  [Orabug: 23747627]  
  - sched/core: Clear the root_domain cpumasks in init_rootdomain() (Xunlei Pang)  [Orabug: 23518545]  
  - ocfs2: move dquot_initialize() in ocfs2_delete_inode() somewhat later (Jan Kara)  [Orabug: 23097098]  
  - fuse: fix typo while displaying fuse numa mount option (Ashish Samant)   
  - IB/mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Wengang Wang)  [Orabug: 22570521]  
  - ocfs2: return non-zero st_blocks for inline data (John Haxby)  [Orabug: 22218260]  
  - watchdog: update watchdog_thresh properly (Michal Hocko)  [Orabug: 21868337]  
  - Btrfs: fix truncation of compressed and inlined extents (Ashish Samant)  [Orabug: 22307285]  {CVE-2015-8374} 
  - Btrfs: fix file corruption and data loss after cloning inline extents (Divya Indi)  [Orabug: 22307285]  {CVE-2015-8374} 
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682074]  {CVE-2016-4997} {CVE-2016-4998}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.13.2.el7uek]
changelog:
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24798695]  {CVE-2016-5829}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.14.1.el7uek]
changelog:
  - ecryptfs: forbid opening files without mmap handler (Jann Horn)  [Orabug: 24971919]  {CVE-2016-1583} 
  - RDS: IB: fix panic with handlers running post teardown (Santosh Shilimkar)  [Orabug: 24395795]  
  - mm, gup: close FOLL MAP_PRIVATE race (Linus Torvalds)  [Orabug: 24928591]  {CVE-2016-5195} 
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24798695]  {CVE-2016-5829}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.14.2.el7uek]
changelog:
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060050]  {CVE-2016-6480} {CVE-2016-6480} 
  - IB/srpt: Simplify srpt_handle_tsk_mgmt() (Bart Van Assche)  [Orabug: 25060011]  {CVE-2016-6327} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059945]  {CVE-2016-6136} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059899]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059899]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059753]  {CVE-2016-4569} 
  - acpi: Disable ACPI table override if securelevel is set (Linn Crosetto)  [Orabug: 25058991]  {CVE-2016-3699} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058903]  {CVE-2015-8956} 
  - ASN.1: Fix non-match detection failure on data overrun (David Howells)  [Orabug: 25059046]  {CVE-2016-2053} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059194]  {CVE-2016-3070}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.15.1.el7uek]
changelog:
  - Revert "i40e: Set defport behavior for the Main VSI when in promiscuous mode" (Jack Vogel)  [Orabug: 22683573]  
  - mlx4: avoid multiple free on id_map_ent (Wengang Wang)   
  - xen-netfront: cast grant table reference first to type int (Dongli Zhang)   
  - xen-netfront: do not cast grant table reference to signed short (Dongli Zhang)   
  - RDS: Drop the connection as part of cancel to avoid hangs (Avinash Repaka)  [Orabug: 25045360]  
  - sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner)  [Orabug: 25142879]  {CVE-2016-9555} 
  - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (Andrey Ryabinin)  [Orabug: 25154098]  {CVE-2016-8650} {CVE-2016-8650} 
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060050]  {CVE-2016-6480} {CVE-2016-6480} 
  - IB/srpt: Simplify srpt_handle_tsk_mgmt() (Bart Van Assche)  [Orabug: 25060011]  {CVE-2016-6327} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059945]  {CVE-2016-6136} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059899]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059899]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059753]  {CVE-2016-4569} 
  - acpi: Disable ACPI table override if securelevel is set (Linn Crosetto)  [Orabug: 25058991]  {CVE-2016-3699} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058903]  {CVE-2015-8956} 
  - ASN.1: Fix non-match detection failure on data overrun (David Howells)  [Orabug: 25059046]  {CVE-2016-2053} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059194]  {CVE-2016-3070}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.15.2.el7uek]
changelog:
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 25269176]  {CVE-2016-3157} {CVE-2016-3157} 
  - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo)  [Orabug: 25298611]  {CVE-2016-7117}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.15.3.el7uek]
changelog:
  - uek-rpm ol7: change uek-rpm/ol7/update-el release value from 7.1 to 7.3 (Brian Maly)  [Orabug: 25348336]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.16.1.el7uek]
changelog:
  - nvme: Limit command retries (Ashok Vairavan)  [Orabug: 25374794]  
  - tcp: fix use after free in tcp_xmit_retransmit_queue() (Eric Dumazet)  [Orabug: 25374371]  {CVE-2016-6828} 
  - logging errors that get masked to EIO inside drivers/block/loop.c (Manjunath Patil)  [Orabug: 22505535]  
  - ALSA: pcm : Call kill_fasync() in stream lock (Takashi Iwai)  [Orabug: 25203963]  {CVE-2016-9794} 
  - packet: fix race condition in packet_set_ring (Philip Pettersson)  [Orabug: 25217756]  {CVE-2016-8655} 
  - x86: kvmclock: zero initialize pvclock shared memory area (Igor Mammedov)  [Orabug: 25218431]  
  - KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells)  [Orabug: 25306373]  {CVE-2016-7042} 
  - uek-rpm ol7: change uek-rpm/ol7/update-el release value from 7.1 to 7.3 (Brian Maly)  [Orabug: 25348336]  
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 25269176]  {CVE-2016-3157} {CVE-2016-3157} 
  - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo)  [Orabug: 25298611]  {CVE-2016-7117}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.16.2.el7uek]
changelog:
  - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet)  [Orabug: 25203623]  {CVE-2016-9793}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.16.3.el7uek]
changelog:
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417805]  {CVE-2016-8646} 
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462760]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462807]  {CVE-2016-4485} 
  - af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat)  [Orabug: 25463996]  {CVE-2013-7446} 
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 25463996]  {CVE-2013-7446}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.17.1.el7uek]
changelog:
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25696686]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25696686]  {CVE-2017-2636} 
  - drivers/tty/n_hdlc.c: replace kmalloc/memset by kzalloc (Fabian Frederick)  [Orabug: 25696686]  {CVE-2017-2636} 
  - x86: bpf_jit: fix compilation of large bpf programs (Alexei Starovoitov)  [Orabug: 21305080]  {CVE-2015-4700} 
  - net: filter: return -EINVAL if BPF_S_ANC* operation is not supported (Daniel Borkmann)  [Orabug: 22187148]  
  - KEYS: request_key() should reget expired keys rather than give EKEYEXPIRED (David Howells)   
  - KEYS: Increase root_maxkeys and root_maxbytes sizes (Steve Dickson)   
  - firewire: net: guard against rx buffer overflows (Stefan Richter)  [Orabug: 25451530]  {CVE-2016-8633} 
  - x86/mm/32: Enable full randomization on i386 and X86_32 (Hector Marco-Gisbert)  [Orabug: 25463927]  {CVE-2016-3672} 
  - x86 get_unmapped_area: Access mmap_legacy_base through mm_struct member (Radu Caragea)  [Orabug: 25463927]  {CVE-2016-3672} 
  - pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (WANG Cong)  [Orabug: 25490335]  {CVE-2015-8569} 
  - sg_start_req(): make sure that there's not too many elements in iovec (Al Viro)  [Orabug: 25490372]  {CVE-2015-5707} 
  - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (Jim Mattson)  [Orabug: 25507195]  {CVE-2016-9588} 
  - tcp: take care of truncations done by sk_filter() (Eric Dumazet)  [Orabug: 25507230]  {CVE-2016-8645} 
  - rose: limit sk_filter trim to payload (Willem de Bruijn)  [Orabug: 25507230]  {CVE-2016-8645} 
  - fix minor infoleak in get_user_ex() (Al Viro)  [Orabug: 25507281]  {CVE-2016-9178} 
  - scsi: arcmsr: Simplify user_len checking (Borislav Petkov)  [Orabug: 25507328]  {CVE-2016-7425} 
  - scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (Dan Carpenter)  [Orabug: 25507328]  {CVE-2016-7425} 
  - net: fix a kernel infoleak in x25 module (Kangjie Lu)  [Orabug: 25512413]  {CVE-2016-4580} 
  - USB: digi_acceleport: do sanity checking for the number of ports (Oliver Neukum)  [Orabug: 25512471]  {CVE-2016-3140} 
  - ipv4: keep skb->dst around in presence of IP options (Eric Dumazet)  [Orabug: 25543892]  {CVE-2017-5970} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25682430]  {CVE-2017-6345} 
  - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov)   {CVE-2017-6074} 
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417805]  {CVE-2016-8646} 
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462760]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462807]  {CVE-2016-4485} 
  - af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat)  [Orabug: 25463996]  {CVE-2013-7446} 
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 25463996]  {CVE-2013-7446} 
  - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet)  [Orabug: 25203623]  {CVE-2016-9793}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.17.2.el7uek]
changelog:
  - ipv6: stop sending PTB packets for MTU < 1280 (Hagen Paul Pfeifer)  [Orabug: 25765776]  {CVE-2016-10142} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765445]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751996]  {CVE-2017-7187}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.17.3.el7uek]
changelog:
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766911]  {CVE-2016-8399}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.18.1.el7uek]
changelog:
  - fnic: Update fnic driver version to 1.6.0.24 (John Sobecki)  [Orabug: 24448585]  
  - xen-netfront: Rework the fix for Rx stall during OOM and network stress (Dongli Zhang)  [Orabug: 25450703]  
  - xen-netfront: Fix Rx stall during network stress and OOM (Dongli Zhang)  [Orabug: 25450703]  
  - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki)   
  - uek-rpm: enable CONFIG_KSPLICE. (Jamie Iles)  [Orabug: 25549809]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 25549809]  
  - signal: protect SIGNAL_UNKILLABLE from unintentional clearing. (Jamie Iles)  [Orabug: 25549809]  
  - VSOCK: Fix lockdep issue. (Dongli Zhang)  [Orabug: 25559937]  
  - VSOCK: sock_put wasn't safe to call in interrupt context (Dongli Zhang)  [Orabug: 25559937]  
  - IB/CORE: sync the resouce access in fmr_pool (Wengang Wang)  [Orabug: 25677469]  
  - KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini)  [Orabug: 25719675]  {CVE-2017-2583} {CVE-2017-2583} 
  - ext4: validate s_first_meta_bg at mount time (Eryu Guan)  [Orabug: 25719738]  {CVE-2016-10208} 
  - sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)  [Orabug: 25719810]  {CVE-2017-5986} 
  - tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)  [Orabug: 25720813]  {CVE-2017-6214} 
  - lpfc cannot establish connection with targets that send PRLI under P2P mode (Joe Jin)  [Orabug: 25759083]  
  - USB: visor: fix null-deref at probe (Johan Hovold)  [Orabug: 25796594]  {CVE-2016-2782} 
  - ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso)  [Orabug: 25797012]  {CVE-2017-5669} 
  - vhost: actually track log eventfd file (Marc-André Lureau)  [Orabug: 25797052]  {CVE-2015-6252} 
  - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft)  [Orabug: 25814663]  {CVE-2017-7184} 
  - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)  [Orabug: 25814663]  {CVE-2017-7184} 
  - KEYS: Remove key_type::match in favour of overriding default by match_preparse (Aniket Alshi)  [Orabug: 25823962]  {CVE-2017-2647} {CVE-2017-2647} 
  - USB: whiteheat: fix potential null-deref at probe (Johan Hovold)  [Orabug: 25825105]  {CVE-2015-5257} {CVE-2015-5257} 
  - udf: Check path length when reading symlink (Jan Kara)  [Orabug: 25871102]  {CVE-2015-9731} 
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25876655]  {CVE-2016-10229} 
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25877530]  {CVE-2016-7910} 
  - Revert "fix minor infoleak in get_user_ex()" (Brian Maly)  [Orabug: 25790392]  {CVE-2016-9644} 
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766911]  {CVE-2016-8399} 
  - ipv6: stop sending PTB packets for MTU < 1280 (Hagen Paul Pfeifer)  [Orabug: 25765776]  {CVE-2016-10142} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765445]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751996]  {CVE-2017-7187}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.18.2.el7uek]
changelog:
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986990]  {CVE-2017-7895}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.18.4.el7uek]
changelog:
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 26143552]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 26143552]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 26143552]  {CVE-2017-7308}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.1.el7uek]
changelog:
  - selinux: quiet the filesystem labeling behavior message (Paul Moore)  [Orabug: 25290650]  
  - HID: hid-cypress: validate length of report (Greg Kroah-Hartman)  [Orabug: 25891907]  {CVE-2017-7273} 
  - udf: Remove repeated loads blocksize (Jan Kara)  [Orabug: 25905721]  {CVE-2015-4167} 
  - udf: Check length of extended attributes and allocation descriptors (Jan Kara)  [Orabug: 25905721]  {CVE-2015-4167} 
  - udf: Verify i_size when loading inode (Jan Kara)  [Orabug: 25905721]  {CVE-2015-4167} 
  - btrfs: drop unused parameter from btrfs_item_nr (Ross Kirk)  [Orabug: 25948098]  {CVE-2014-9710} 
  - Btrfs: cleanup of function where fixup_low_keys() is called (Tsutomu Itoh)  [Orabug: 25948098]  {CVE-2014-9710} 
  - Btrfs: remove unused argument of fixup_low_keys() (Tsutomu Itoh)  [Orabug: 25948098]  {CVE-2014-9710} 
  - Btrfs: remove unused argument of btrfs_extend_item() (Tsutomu Itoh)  [Orabug: 25948098]  {CVE-2014-9710} 
  - Btrfs: add support for asserts (Josef Bacik)  [Orabug: 25948098]  {CVE-2014-9710} 
  - Btrfs: make xattr replace operations atomic (Filipe Manana)  [Orabug: 25948098]  {CVE-2014-9710} 
  - net: validate the range we feed to iov_iter_init() in sys_sendto/sys_recvfrom (Al Viro)  [Orabug: 25948145]  {CVE-2015-2686} 
  - PCI: Prevent VPD access for QLogic ISP2722 (Ethan Zhao)  [Orabug: 25975506]  
  - PCI: Prevent VPD access for buggy devices (Babu Moger)  [Orabug: 25975506]  
  - xsigo: [backport](UEK3)-Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 26007560]  
  - ipv4: try to cache dst_entries which would cause a redirect (Hannes Frederic Sowa)  [Orabug: 26032372]  {CVE-2015-1465} 
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26139385]  
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 26143552]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 26143552]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 26143552]  {CVE-2017-7308} 
  - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)  [Orabug: 26108571]  {CVE-2017-8890} 
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986990]  {CVE-2017-7895}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.2.el7uek]
changelog:
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366022]  {CVE-2017-7645}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.3.el7uek]
changelog:
  - posix_acl: Clear SGID bit when setting file permissions (Jan Kara)  [Orabug: 25507344]  {CVE-2016-7097} {CVE-2016-7097}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.4.el7uek]
changelog:
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586047]  {CVE-2016-10200} 
  - xfs: fix two memory leaks in xfs_attr_list.c error paths (Mateusz Guzik)  [Orabug: 26586022]  {CVE-2016-9685} 
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585994]  {CVE-2016-9604} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578198]  {CVE-2017-9242}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.5.el7uek]
changelog:
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26638921]  {CVE-2017-1000365} {CVE-2017-1000365}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.7.el7uek]
changelog:
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796364]  {CVE-2017-1000251}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.8.el7uek]
changelog:
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26883934]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26883934]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.9.el7uek]
changelog:
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011273]  {CVE-2017-7542} 
  - packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)  [Orabug: 27002450]  {CVE-2017-1000111}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.11.el7uek]
changelog:
  - nvme: Handle PM1725 HIL reset (Martin K. Petersen)  [Orabug: 26277600]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403940]  {CVE-2017-1000363} 
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: fix NULL pointer dereference in read()/ioctl() race (Vegard Nossum)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix negative queue usage by racy accesses (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race at concurrent reads (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race among timer ioctls (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26404005]  {CVE-2017-9077} 
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26427126]  
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26427126]  
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540286]  {CVE-2017-2671} 
  - aio: mark AIO pseudo-fs noexec (Jann Horn)  [Orabug: 26643598]  {CVE-2016-10044} 
  - vfs: Commit to never having exectuables on proc and sysfs. (Eric W. Biederman)  [Orabug: 26643598]  {CVE-2016-10044} 
  - vfs, writeback: replace FS_CGROUP_WRITEBACK with SB_I_CGROUPWB (Tejun Heo)  [Orabug: 26643598]  {CVE-2016-10044} 
  - x86/acpi: Prevent out of bound access caused by broken ACPI tables (Seunghun Han)  [Orabug: 26643645]  {CVE-2017-11473} 
  - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)  [Orabug: 26650883]  {CVE-2017-9075} 
  - [media] saa7164: fix double fetch PCIe access condition (Steven Toth)  [Orabug: 26675142]  {CVE-2017-8831} 
  - [media] saa7164: fix sparse warnings (Hans Verkuil)  [Orabug: 26675142]  {CVE-2017-8831} 
  - fs: __generic_file_splice_read retry lookup on AOP_TRUNCATED_PAGE (Abhi Das)  [Orabug: 26797306]  
  - timerfd: Protect the might cancel mechanism proper (Thomas Gleixner)  [Orabug: 26899787]  {CVE-2017-10661} 
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988627]  {CVE-2017-14489}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.19.12.el7uek]
changelog:
  - nvme: Drop nvmeq->q_lock before dma_pool_alloc(), so as to prevent hard lockups (Aruna Ramakrishna)  [Orabug: 25409587]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-111.el7uek]
changelog:
  - qla2xxx: Update driver version to 8.07.00.26.39.0-k. (Sawan Chandak)  [Orabug: 21946579]  
  - qla2xxx: Add pci device id 0x2261. (Sawan Chandak)  [Orabug: 21946579]  
  - qla2xxx: Fix missing device login retries. (Arun Easi)  [Orabug: 21946579]  
  - qla2xxx: do not clear slot in outstanding cmd array (Himanshu Madhani)  [Orabug: 21946579]  
  - qla2xxx: Remove decrement of sp reference count in abort handler. (Chad Dupuis)  [Orabug: 21946579]  
  - qla2xxx: Add support to show MPI and PEP FW version for ISP27xx. (Sawan Chandak)  [Orabug: 21946579]  
  - qla2xxx: Do not reset ISP for error entry with an out of range handle. (Chad Dupuis)  [Orabug: 21946579]  
  - qla2xxx: Do not reset adapter if SRB handle is in range. (Chad Dupuis)  [Orabug: 21946579]  
  - qla2xxx: Do not crash system for sp ref count zero (Hiral Patel)  [Orabug: 21946579]  
  - qla2xxx: Pause risc before manipulating risc semaphore. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Use ssdid to gate semaphore manipulation. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Handle AEN8014 incoming port logout. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Add serdes register read/write support for ISP25xx. (Joe Carnuccio)  [Orabug: 21946579]  
  - qla2xxx: Remove dead code (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Remove a superfluous test (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Avoid that sparse complains about duplicate [noderef] attributes (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Remove __constant_ prefix (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Replace two macros with an inline function (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Remove set-but-not-used variables (Bart Van Assche)  [Orabug: 21946579]  
  - qla2xxx: Declare local functions static (Bart Van Assche)  [Orabug: 21946579]  
  - bnx2i: rebase 2.11.2.0 (Brian Maly)  [Orabug: 21955132]  
  - bnx2fc: update to 2.9.6 (Brian Maly)  [Orabug: 21955132]  
  - bnx2x: update to 1.713.01 (Brian Maly)  [Orabug: 21955132]  
  - bnx2: update to 2.2.5p (Brian Maly)  [Orabug: 21955132]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-112.el7uek]
changelog:
  - i40e/i40evf: Bump i40e to 1.3.21 and i40evf to 1.3.13 (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e/i40evf: add get AQ result command to nvmupdate utility (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add exec_aq command to nvmupdate utility (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add wait states to NVM state machine (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add GetStatus command for nvmupdate (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: add handling of writeback descriptor (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: save aq writeback for future inspection (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: rename variable to prevent clash of understanding (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: Set defport behavior for the Main VSI when in promiscuous mode (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Bump i40e to 1.3.9 and i40evf to 1.3.5 (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e/i40evf: Cache the CEE TLV status returned from firmware (Neerav Parikh)  [Orabug: 21539654]  
  - i40e/i40evf: add VIRTCHNL_VF_OFFLOAD flag (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Remove redundant and unneeded messages (Greg Rose)  [Orabug: 21539654]  
  - i40evf: Remove PF specific register definitions from the VF (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40evf: Use the correct defines to match the VF registers (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Fix comment for ethtool diagnostic link test (Greg Rose)  [Orabug: 21539654]  
  - i40e/i40evf: Add capability to gather VEB per TC stats (Neerav Parikh)  [Orabug: 21539654]  
  - i40e: Fix ethtool offline diagnostic with netqueues (Greg Rose)  [Orabug: 21539654]  
  - i40e: Fix legacy interrupt mode in the driver (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Move function calls to i40e_shutdown instead of i40e_suspend (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e: add RX to port CRC errors label (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: don't degrade __le16 (Mitch Williams)  [Orabug: 21539654]  
  - i40e: Add AQ commands for NVM Update for X722 (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: Add ATR HW eviction support for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Add IWARP support for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add TX/RX outer UDP checksum support for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add support for writeback on ITR feature for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Update register.h file for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Update FW API with X722 support (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add flags for X722 capabilities (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add device ids for X722 (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: use BIT and BIT_ULL macros (Jesse Brandeburg)  [Orabug: 21539654]  
  - i40e: clean up error status messages (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: clean up error status messages (Shannon Nelson)  [Orabug: 21539654]  
  - i40e: provide correct API version to older VF drivers (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: support virtual channel API version 1.1 (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: handle big resets (Mitch Williams)  [Orabug: 21539654]  
  - i40e: support virtual channel API 1.1 (Mitch Williams)  [Orabug: 21539654]  
  - i40e/i40evf: add macros for virtual channel API version and device capability (Mitch Williams)  [Orabug: 21539654]  
  - i40e: add VF capabilities to virtual channel interface (Mitch Williams)  [Orabug: 21539654]  
  - i40e: clean up unneeded gotos (Shannon Nelson)  [Orabug: 21539654]  
  - i40e/i40evf: Fix and refactor dynamic ITR code (Carolyn Wyborny)  [Orabug: 21539654]  
  - i40e: only report generic filters in get_ts_info (Jacob Keller)  [Orabug: 21539654]  
  - i40e/i40evf: Bump version to 1.3.6 for i40e and 1.3.2 for i40evf (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e: Refine an error message to avoid confusion (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add support for pre-allocated pages for PD (Faisal Latif)  [Orabug: 21539654]  
  - i40evf: add MAC address filter in open, not init (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: don't delete all the filters (Mitch Williams)  [Orabug: 21539654]  
  - i40e: un-disable VF after reset (Mitch Williams)  [Orabug: 21539654]  
  - i40e: do a proper reset when disabling a VF (Mitch Williams)  [Orabug: 21539654]  
  - i40e: correctly program filters for VFs (Mitch Williams)  [Orabug: 21539654]  
  - i40e/i40evf: Update the admin queue command header (Greg Rose)  [Orabug: 21539654]  
  - i40e: ignore duplicate port VLAN requests (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: Allow for an abundance of vectors (Mitch Williams)  [Orabug: 21539654]  
  - i40e/i40evf: Update Flex-10 related device/function capabilities (Pawel Orlowski)  [Orabug: 21539654]  
  - i40e/i40evf: Add stats to track FD ATR and SB dynamic enable state (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40evf: don't configure unused RSS queues (Mitch Williams)  [Orabug: 21539654]  
  - i40evf: fix panic during MTU change (Mitch Williams)  [Orabug: 21539654]  
  - i40e: Bump version to 1.3.4 (Catherine Sullivan)  [Orabug: 21539654]  
  - i40e/i40evf: remove time_stamp member (Jesse Brandeburg)  [Orabug: 21539654]  
  - i40e/i40evf: force inline transmit functions (Jesse Brandeburg)  [Orabug: 21539654]  
  - i40e: Move the FD ATR/SB messages to a higher debug level (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: fix unrecognized FCOE EOF case (Vasu Dev)  [Orabug: 21539654]  
  - i40e: Remove unnecessary pf members (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add stats to count Tunnel ATR hits (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e/i40evf: Add ATR support for tunneled TCP/IPv4/IPv6 packets. (Anjali Singhai Jain)  [Orabug: 21539654]  
  - i40e: Disable offline diagnostics if VFs are enabled (Greg Rose)  [Orabug: 21539654]  
  - i40e: Collect PFC XOFF RX stats even in single TC case (Neerav Parikh)  [Orabug: 21539654]  
  - i40e/i40evf: Fix mixed size frags and linearization (Anjali Singhai Jain)  [Orabug: 21539654]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-113.el7uek]
changelog:
  - mlx4_core: Release counters while releasing slave resources (Wengang Wang)  [Orabug: 21116780]  
  - IB/ipoib: Disable TSO in connected mode (Yuval Shaia)  [Orabug: 21684386]  
  - Revert "IB/ipoib: Disable TSO in connected mode" (Yuval Shaia)  [Orabug: 21968983]  
  - Revert "IB/ipoib: Disable TSO in connected mode" (Yuval Shaia)  [Orabug: 21968983]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-114.el7uek]
changelog:
  - rds: revert commit 4348013 (Rama Nichanamatlu)  [Orabug: 22039425]  
  - qlcnic: Fix mailbox completion handling in spurious interrupt (Rajesh Borundia)   
  - xen-netfront: set max_queue default to 8 (Joe Jin)  [Orabug: 21981690]  
  - xen-netfront: update num_queues to real created (Joe Jin)  [Orabug: 21981690]  
  - lpfc: Update version to 11.0.0.1 for patch set (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix default RA_TOV and ED_TOV in the FC/FCoE driver  for all topologies (James Smart)  [Orabug: 21860804]  
  - lpfc: The linux driver does not reinitiate discovery after a failed FLOGI (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix for discovery failure in PT2PT when FLOGI's ELS  ACC response gets aborted (James Smart)  [Orabug: 21860804]  
  - lpfc: Add support for Lancer G6 and 32G FC links (James Smart)  [Orabug: 21860804]  
  - fix: lpfc_send_rscn_event sends bigger buffer size (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix possible use-after-free and double free (James Smart)  [Orabug: 21860804]  
  - lpfc: remove set but not used variables (James Smart)  [Orabug: 21860804]  
  - lpfc: Make the function lpfc_sli4_mbox_completions_pending static (James Smart)  [Orabug: 21860804]  
  - Fix kmalloc overflow in LPFC driver at large core count (James Smart)  [Orabug: 21860804]  
  - lpfc: Destroy lpfc_hba_index IDR on module exit (James Smart)  [Orabug: 21860804]  
  - lpfc: in sli3 use configured sg_seg_cnt for sg_tablesize (James Smart)  [Orabug: 21860804]  
  - lpfc: Remove unnessary cast (James Smart)  [Orabug: 21860804]  
  - lpfc: fix model description (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix to drop PLOGIs from fabric node till LOGO proce ssing completes (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix scsi task management error message. (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix cq_id masking problem. (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix scsi prep dma buf error. (James Smart)  [Orabug: 21860804]  
  - lpfc: Add support for using block multi-queue (James Smart)  [Orabug: 21860804]  
  - lpfc: Devices are not discovered during takeaway/giveback  testing. (James Smart)  [Orabug: 21860804]  
  - lpfc: Fix vport deletion failure. (James Smart)  [Orabug: 21860804]  
  - lpfc: Check for active portpeerbeacon. (James Smart)  [Orabug: 21860804]  
  - RDS: fix race condition when sending a message on unbound socket. (Quentin Casasnovas)  [Orabug: 21882586]  {CVE-2015-6937} 
  - RDS: make send_batch_count tunable effective (Santosh Shilimkar)  [Orabug: 21882586]  
  - RDS: make use of kfree_rcu() and avoid the call_rcu() chain (Santosh Shilimkar)  [Orabug: 21882586]  
  - RDS: verify the underlying transport exists before creating a connection (Sasha Levin)  [Orabug: 21882586]  
  - RDS: Disable broken APM feature code (Santosh Shilimkar)  [Orabug: 22045256]  
  - RDS: return EMSGSIZE for oversize requests before processing/queueing (Mukesh Kacker)  [Orabug: 21882586]  
  - RDS: Make active bonding parameters names consistent (Santosh Shilimkar)  [Orabug: 21882586]  
  - IB/mlx4: Use vmalloc for WR buffers when needed (Wengang Wang)  [Orabug: 21835374]  
  - mm: move kvfree to mm/util (Wengang Wang)  [Orabug: 21835374]  
  - x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map (Malcolm Crossley)   
  - netdev: fix NETIF_F_GSO_UDP_TUNNEL_BIT enum shift in i40e driver import (Todd Vierling)  [Orabug: 21958024]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-115.el7uek]
changelog:
  - Disable VLAN 0 tagging for none VLAN traffic (Joe Jin)  [Orabug: 20832922]  
  - x86/efi: Make efi virtual runtime map passing more robust (Borislav Petkov)  [Orabug: 22020990]  
  - IB/rds_rdma: unloading of ofed stack causes page fault panic (Rama Nichanamatlu)  [Orabug: 22039748]  
  - xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing) (Cathy Avery)  [Orabug: 21924428]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-116.el7uek]
changelog:
  - team: check return value of team_get_port_by_index_rcu() for NULL (Jiri Pirko)  [Orabug: 21944235]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-117.el7uek]
changelog:
  - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang)  [Orabug: 22145600]  {CVE-2015-5156} 
  - team: check return value of team_get_port_by_index_rcu() for NULL (Jiri Pirko)  [Orabug: 21944235]  
  - team: check return value of team_get_port_by_index_rcu() for NULL (Jiri Pirko)  [Orabug: 21944235]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.el7uek]
changelog:
  - Update ql2400/ql2500 firmware version to 8.02.00 (Dan Duval)  [Orabug: 22159505]  
  - update qla2400/ql2500 firmware version to 8.02.00 (Dan Duval)  [Orabug: 22159505]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.1.1.el7uek]
changelog:
  - sctp: fix race on protocol/netns initialization (Marcelo Ricardo Leitner)  [Orabug: 22249981]  {CVE-2015-5283} 
  - Initialize msg/shm IPC objects before doing ipc_addid() (Linus Torvalds)  [Orabug: 22250045]  {CVE-2015-7613} 
  - ixgbe: reset copper phy power mode (Ethan Zhao)  [Orabug: 22271769]


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.2.2.el7uek]
changelog:
  - KVM: svm: unconditionally intercept #DB (Paolo Bonzini)  [Orabug: 22333698]  {CVE-2015-8104} 
  - KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup)  [Orabug: 22333689]  {CVE-2015-5307} {CVE-2015-5307} 
  - KVM: x86: Defining missing x86 vectors (Nadav Amit)  [Orabug: 22333689]


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.2.3.el7uek]
changelog:
  - dcache: Handle escaped paths in prepend_path (Eric W. Biederman)  [Orabug: 22373283]  
  - vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman)  [Orabug: 22249875]  
  - KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872} 
  - KEYS: Fix race between key destruction and finding a keyring by name (David Howells)  [Orabug: 22373442]


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.2.4.el7uek]
changelog:
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 22373442]  {CVE-2015-7872}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.2.5.el7uek]
changelog:
  - KEYS: Fix keyring ref leak in join_session_keyring() (Yevgeny Pats)  [Orabug: 22563965]  {CVE-2016-0728}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.1.el7uek]
changelog:
  - tty: Fix race in pty_write() leading to NULL deref (Todd Vierling)  [Orabug: 25392692]  
  - ocfs2/dlm: ignore cleaning the migration mle that is inuse (xuejiufei)  [Orabug: 26479780]  
  - KEYS: fix dereferencing NULL payload with nonzero length (Eric Biggers)  [Orabug: 26592025]  
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)  [Orabug: 26649818]  
  - mm: Tighten x86 /dev/mem with zeroing reads (Kees Cook)  [Orabug: 26675925]  {CVE-2017-7889} 
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27058468]  
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069042]  {CVE-2017-12190} 
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069042]  {CVE-2017-12190} 
  - nvme: Drop nvmeq->q_lock before dma_pool_alloc(), so as to prevent hard lockups (Aruna Ramakrishna)  [Orabug: 25409587]  
  - nvme: Handle PM1725 HIL reset (Martin K. Petersen)  [Orabug: 26277600]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403940]  {CVE-2017-1000363} 
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: fix NULL pointer dereference in read()/ioctl() race (Vegard Nossum)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix negative queue usage by racy accesses (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race at concurrent reads (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race among timer ioctls (Takashi Iwai)  [Orabug: 26403956]  {CVE-2017-1000380} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26404005]  {CVE-2017-9077} 
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26427126]  
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26427126]  
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540286]  {CVE-2017-2671} 
  - aio: mark AIO pseudo-fs noexec (Jann Horn)  [Orabug: 26643598]  {CVE-2016-10044} 
  - vfs: Commit to never having exectuables on proc and sysfs. (Eric W. Biederman)  [Orabug: 26643598]  {CVE-2016-10044} 
  - vfs, writeback: replace FS_CGROUP_WRITEBACK with SB_I_CGROUPWB (Tejun Heo)  [Orabug: 26643598]  {CVE-2016-10044} 
  - x86/acpi: Prevent out of bound access caused by broken ACPI tables (Seunghun Han)  [Orabug: 26643645]  {CVE-2017-11473} 
  - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)  [Orabug: 26650883]  {CVE-2017-9075} 
  - [media] saa7164: fix double fetch PCIe access condition (Steven Toth)  [Orabug: 26675142]  {CVE-2017-8831} 
  - [media] saa7164: fix sparse warnings (Hans Verkuil)  [Orabug: 26675142]  {CVE-2017-8831} 
  - fs: __generic_file_splice_read retry lookup on AOP_TRUNCATED_PAGE (Abhi Das)  [Orabug: 26797306]  
  - timerfd: Protect the might cancel mechanism proper (Thomas Gleixner)  [Orabug: 26899787]  {CVE-2017-10661} 
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988627]  {CVE-2017-14489} 
  - mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang)  [Orabug: 26643556]  {CVE-2017-11176} 
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011273]  {CVE-2017-7542} 
  - packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)  [Orabug: 27002450]  {CVE-2017-1000111} 
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26883934]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26883934]  
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796364]  {CVE-2017-1000251} 
  - xen: fix bio vec merging (Roger Pau Monne)  [Orabug: 26645550]  {CVE-2017-12134} 
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26638921]  {CVE-2017-1000365} {CVE-2017-1000365} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586047]  {CVE-2016-10200} 
  - xfs: fix two memory leaks in xfs_attr_list.c error paths (Mateusz Guzik)  [Orabug: 26586022]  {CVE-2016-9685} 
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585994]  {CVE-2016-9604} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578198]  {CVE-2017-9242} 
  - posix_acl: Clear SGID bit when setting file permissions (Jan Kara)  [Orabug: 25507344]  {CVE-2016-7097} {CVE-2016-7097} 
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366022]  {CVE-2017-7645}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.2.el7uek]
changelog:
  - x86: Add another set of MSR accessor functions (Borislav Petkov)  [Orabug: 27444923]  {CVE-2017-5753} 
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - x86/rsb: add comment specifying why we skip STUFF_RSB (Ankur Arora)  [Orabug: 27451658]  {CVE-2017-5715} 
  - x86/rsb: make STUFF_RSB jmp labels more robust (Ankur Arora)  [Orabug: 27451658]  {CVE-2017-5715} 
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - Add set_ibrs_disabled and set_ibpb_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/spec: Don't print the Missing arguments for option spectre_v2 (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86, boot: Carve out early cmdline parsing function (Borislav Petkov)  [Orabug: 27376697]  
  - x86: Add command-line options 'spectre_v2' and 'nospectre_v2' (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Fix kABI build breakage (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Brian Maly)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Display correct settings for the SPECTRE_V[12] bug (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5715} {CVE-2017-5753} 
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27376697]  {CVE-2017-5715} {CVE-2017-5753} 
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27376697]  {CVE-2017-5715} {CVE-2017-5754} 
  - x86, cpu: Expand cpufeature facility to include cpu bugs (Borislav Petkov)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5754} 
  - x86/entry: STUFF_RSB only after switching to kernel CR3 (Ankur Arora)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Use IBRS for firmware update path (David Woodhouse)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS features on microcode reload (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/feature: Detect the x86 IBRS feature to control Speculation (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27333764]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27333764] [Orabug: 27333760]  {CVE-2017-5754} {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Lepton Wu)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: x86: Fix NMI handling (Jiri Kosina)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: move paravirt clock vsyscall mapping out of kaiser_init (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: disable if xen PARAVIRT (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/alternatives: add asm ALTERNATIVE macro (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: alloc_ldt_struct() use get_zeroed_page() (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86: kvmclock: Disable use from vDSO if KPTI is enabled (Ben Hutchings)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: Fix build with CONFIG_FUNCTION_GRAPH_TRACER (Kees Cook)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm/kaiser: re-enable vsyscalls (Andrea Arcangeli)  [Orabug: 27333764]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kprobes: Prohibit probing on .entry.text code (Masami Hiramatsu)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Fix flush_tlb_page() on Xen (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Disable preemption during CR3 read+write (Sebastian Andrzej Siewior)  [Orabug: 27333764]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86: Clean up cr4 manipulation (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/ldt: Make modify_ldt synchronous (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} {CVE-2015-5157}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.3.el7uek]
changelog:
  - gre: fix a possible skb leak (Eric Dumazet)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26403972]  {CVE-2017-9074} 
  - tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)  [Orabug: 26813390]  {CVE-2017-14106} 
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26880517]  {CVE-2017-7482} {CVE-2017-7482} 
  - xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables mapping (Zhenzhong Duan)  [Orabug: 26883322]  
  - KVM: x86: fix deadlock in clock-in-progress request handling (Marcelo Tosatti)  [Orabug: 27065995]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 27099835]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206837]  {CVE-2017-16525} 
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206897]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206928]  {CVE-2017-16529} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207240]  {CVE-2017-16531} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207983]  {CVE-2017-16535} 
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290301]  {CVE-2017-8824}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.4.el7uek]
changelog:
  - Drivers: hv: fcopy: set .owner reference for file operations (Joe Jin)  [Orabug: 21191022]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148281]  {CVE-2017-16527} 
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207929]  {CVE-2017-16533} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208072]  {CVE-2017-16536} 
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215201]  {CVE-2017-16649} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343577]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343577]  
  - Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket (Al Viro)  [Orabug: 27344793]  {CVE-2017-15868} 
  - Bluetooth: hidp: verify l2cap sockets (David Herrmann)  [Orabug: 27344793]  {CVE-2017-15868} 
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344843]  {CVE-2017-0861} {CVE-2017-0861} 
  - ptrace: use fsuid, fsgid, effective creds for fs access checks (Jann Horn)  [Orabug: 27364691]  {CVE-2017-14140} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27387001]  {CVE-2017-15115} 
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - Revert "x86/mitigation/spectre_v2: Add reporting of 'lfence'" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spectre: bring spec_ctrl management logic closer to UEK4 (Ankur Arora)  [Orabug: 27516512]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27516357]  {CVE-2017-5715} 
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86: intel-family.h: Add GEMINI_LAKE SOC (Len Brown)  [Orabug: 27516419]  
  - x86/cpu/intel: Introduce macros for Intel family numbers (Dave Hansen)  [Orabug: 27516419]  
  - x86/spectre: expose 'stibp' (Konrad Rzeszutek Wilk)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27516379]  {CVE-2017-5715} 
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27516379]  {CVE-2017-5715} 
  - x86/spectre: fix spectre_v1 mitigation indicators (Ankur Arora)  [Orabug: 27509932]  {CVE-2017-5715} 
  - x86/ia32/syscall: Clear extended registers %r8-%r15 (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/ia32/syscall: Save full stack frame throughout the entry code (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/ia32/syscall: cleanup trailing whitespace (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/syscall: Clear callee saved registers (%r12-%r15, %rbp, %rbx) (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/syscall: Save callee saved registers on syscall entrance (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.5.el7uek]
changelog:
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27806667]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27806667]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27806667]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.20.6.el7uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947608]  {CVE-2018-100199}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.21.1.el7uek]
changelog:
  - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav)  [Orabug: 27208380]  {CVE-2017-16537} 
  - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)  [Orabug: 27215090]  {CVE-2017-16643} 
  - usb: usbtest: fix NULL pointer dereference (Alan Stern)  [Orabug: 27602324]  {CVE-2017-16532} 
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)   
  - fuse: fix deadlock caused by wrong locking order (Junxiao Bi)  [Orabug: 27760268]  
  - jbd: don't wait (forever) for stale tid caused by wraparound (Jan Kara)  [Orabug: 27842289]  
  - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal)  [Orabug: 27774015]  {CVE-2018-1068} 
  - RDS: IB: Fix null pointer issue (hui.han)  [Orabug: 27843171]  
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)  [Orabug: 27854376]  {CVE-2018-1093} {CVE-2018-1093} 
  - USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)  [Orabug: 27898074]  {CVE-2017-17558} 
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27898167]  {CVE-2017-17448} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913332]  {CVE-2017-15299} 
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 27934073]  {CVE-2018-5332} 
  - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski)   {CVE-2018-8897} 
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947608]  {CVE-2018-100199} 
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27806667]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27806667]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27806667]  
  - Drivers: hv: fcopy: set .owner reference for file operations (Joe Jin)  [Orabug: 21191022]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148281]  {CVE-2017-16527} 
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207929]  {CVE-2017-16533} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208072]  {CVE-2017-16536} 
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215201]  {CVE-2017-16649} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343577]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343577]  
  - Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket (Al Viro)  [Orabug: 27344793]  {CVE-2017-15868} 
  - Bluetooth: hidp: verify l2cap sockets (David Herrmann)  [Orabug: 27344793]  {CVE-2017-15868} 
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344843]  {CVE-2017-0861} {CVE-2017-0861} 
  - ptrace: use fsuid, fsgid, effective creds for fs access checks (Jann Horn)  [Orabug: 27364691]  {CVE-2017-14140} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27387001]  {CVE-2017-15115} 
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - Revert "x86/mitigation/spectre_v2: Add reporting of 'lfence'" (Ankur Arora)  [Orabug: 27601787]  {CVE-2017-5715} 
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spectre: bring spec_ctrl management logic closer to UEK4 (Ankur Arora)  [Orabug: 27516512]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27516357]  {CVE-2017-5715} 
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86: intel-family.h: Add GEMINI_LAKE SOC (Len Brown)  [Orabug: 27516419]  
  - x86/cpu/intel: Introduce macros for Intel family numbers (Dave Hansen)  [Orabug: 27516419]  
  - x86/spectre: expose 'stibp' (Konrad Rzeszutek Wilk)  [Orabug: 27516419]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27516379]  {CVE-2017-5715} 
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27516379]  {CVE-2017-5715} 
  - x86/spectre: fix spectre_v1 mitigation indicators (Ankur Arora)  [Orabug: 27509932]  {CVE-2017-5715} 
  - x86/ia32/syscall: Clear extended registers %r8-%r15 (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/ia32/syscall: Save full stack frame throughout the entry code (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/ia32/syscall: cleanup trailing whitespace (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/syscall: Clear callee saved registers (%r12-%r15, %rbp, %rbx) (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - x86/syscall: Save callee saved registers on syscall entrance (Ankur Arora)  [Orabug: 27452028]  {CVE-2017-5715} 
  - gre: fix a possible skb leak (Eric Dumazet)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26403972]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26403972]  {CVE-2017-9074} 
  - tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)  [Orabug: 26813390]  {CVE-2017-14106} 
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26880517]  {CVE-2017-7482} {CVE-2017-7482} 
  - xen/mmu: Call xen_cleanhighmap() with 4MB aligned for page tables mapping (Zhenzhong Duan)  [Orabug: 26883322]  
  - KVM: x86: fix deadlock in clock-in-progress request handling (Marcelo Tosatti)  [Orabug: 27065995]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 27099835]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206837]  {CVE-2017-16525} 
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206897]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206928]  {CVE-2017-16529} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207240]  {CVE-2017-16531} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207983]  {CVE-2017-16535} 
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290301]  {CVE-2017-8824} 
  - x86: Add another set of MSR accessor functions (Borislav Petkov)  [Orabug: 27444923]  {CVE-2017-5753} 
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27444923]  {CVE-2017-5753} 
  - x86/rsb: add comment specifying why we skip STUFF_RSB (Ankur Arora)  [Orabug: 27451658]  {CVE-2017-5715} 
  - x86/rsb: make STUFF_RSB jmp labels more robust (Ankur Arora)  [Orabug: 27451658]  {CVE-2017-5715} 
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - Add set_ibrs_disabled and set_ibpb_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/spec: Don't print the Missing arguments for option spectre_v2 (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86, boot: Carve out early cmdline parsing function (Borislav Petkov)  [Orabug: 27376697]  
  - x86: Add command-line options 'spectre_v2' and 'nospectre_v2' (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Fix kABI build breakage (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Brian Maly)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Display correct settings for the SPECTRE_V[12] bug (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5715} {CVE-2017-5753} 
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27376697]  {CVE-2017-5715} {CVE-2017-5753} 
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest (Konrad Rzeszutek Wilk)  [Orabug: 27376697]  {CVE-2017-5715} 
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27376697]  {CVE-2017-5715} {CVE-2017-5754} 
  - x86, cpu: Expand cpufeature facility to include cpu bugs (Borislav Petkov)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27376697]  {CVE-2017-5754} 
  - x86/entry: STUFF_RSB only after switching to kernel CR3 (Ankur Arora)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86: Use IBRS for firmware update path (David Woodhouse)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS features on microcode reload (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/feature: Detect the x86 IBRS feature to control Speculation (Tim Chen)  [Orabug: 27376697]  {CVE-2017-5715} 
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27333764]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27333764] [Orabug: 27333760]  {CVE-2017-5754} {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Lepton Wu)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: x86: Fix NMI handling (Jiri Kosina)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: move paravirt clock vsyscall mapping out of kaiser_init (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: disable if xen PARAVIRT (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/alternatives: add asm ALTERNATIVE macro (Mike Kravetz)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: alloc_ldt_struct() use get_zeroed_page() (Hugh Dickins)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86: kvmclock: Disable use from vDSO if KPTI is enabled (Ben Hutchings)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kaiser: Fix build with CONFIG_FUNCTION_GRAPH_TRACER (Kees Cook)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm/kaiser: re-enable vsyscalls (Andrea Arcangeli)  [Orabug: 27333764]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27333764]  {CVE-2017-5754} 
  - kprobes: Prohibit probing on .entry.text code (Masami Hiramatsu)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Fix flush_tlb_page() on Xen (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Disable preemption during CR3 read+write (Sebastian Andrzej Siewior)  [Orabug: 27333764]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86: Clean up cr4 manipulation (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27333764]  {CVE-2017-5754} 
  - x86/ldt: Make modify_ldt synchronous (Andy Lutomirski)  [Orabug: 27333764]  {CVE-2017-5754} {CVE-2015-5157}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.21.2.el7uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947608]  {CVE-2018-1000199} 
  - Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" (Brian Maly)  [Orabug: 27947608]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.21.3.el7uek]
changelog:
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27951287]  {CVE-2017-17741} {CVE-2017-17741} 
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27989498]  {CVE-2018-10323} 
  - Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)  [Orabug: 28030520]  {CVE-2017-1000410} {CVE-2017-1000410} 
  - ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2549} 
  - ALSA: timer: Harden slave timer list handling (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2547} {CVE-2016-2548} 
  - ALSA: timer: Fix double unlink of active_list (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2545} 
  - ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2543} 
  - ALSA: seq: Fix race at timer setup and close (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2544} 
  - ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)  [Orabug: 28058229]  {CVE-2016-2384}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.22.1.el7uek]
changelog:
  - dm: fix race between dm_get_from_kobject() and __dm_destroy() (Hou Tao)   {CVE-2017-18203} 
  - drm: udl: Properly check framebuffer mmap offsets (Greg Kroah-Hartman)  [Orabug: 27986407]  {CVE-2018-8781} 
  - kernel/exit.c: avoid undefined behaviour when calling wait4() wait4(-2147483648, 0x20, 0, 0xdd0000) triggers: UBSAN: Undefined behaviour in kernel/exit.c:1651:9 (mridula shastry)  [Orabug: 27875488]  {CVE-2018-10087} 
  - kernel/signal.c: avoid undefined behaviour in kill_something_info When running kill(72057458746458112, 0) in userspace I hit the following issue. (mridula shastry)   {CVE-2018-10124} 
  - bluetooth: Validate socket address length in sco_sock_bind(). (mlevatic)  [Orabug: 28130293]  {CVE-2015-8575} 
  - dccp: check sk for closed state in dccp_sendmsg() (Alexey Kodanev)  [Orabug: 28220402]  {CVE-2017-8824} {CVE-2018-1130} 
  - sctp: verify size of a new chunk in _sctp_make_chunk() (Alexey Kodanev)  [Orabug: 28240075]  {CVE-2018-5803} 
  - mm/mempolicy.c: fix error handling in set_mempolicy and mbind. (Chris Salls)  [Orabug: 28242478]  {CVE-2017-7616} 
  - xfrm: policy: check policy direction value (Vladis Dronov)  [Orabug: 28264121]  {CVE-2017-11600} {CVE-2017-11600} 
  - x86/fpu: Make eager FPU default (Mihai Carabas)  [Orabug: 28156176]  {CVE-2018-3665} 
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27951287]  {CVE-2017-17741} {CVE-2017-17741} 
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27989498]  {CVE-2018-10323} 
  - Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)  [Orabug: 28030520]  {CVE-2017-1000410} {CVE-2017-1000410} 
  - ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2549} 
  - ALSA: timer: Harden slave timer list handling (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2547} {CVE-2016-2548} 
  - ALSA: timer: Fix double unlink of active_list (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2545} 
  - ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2543} 
  - ALSA: seq: Fix race at timer setup and close (Takashi Iwai)  [Orabug: 28058229]  {CVE-2016-2544} 
  - ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)  [Orabug: 28058229]  {CVE-2016-2384} 
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947608]  {CVE-2018-1000199} 
  - Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" (Brian Maly)  [Orabug: 27947608]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.23.1.el7uek]
changelog:
  - xen/blkback: free requests on disconnection (Dongli Zhang)  [Orabug: 22111941]  
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 27986376]  {CVE-2018-5333} 
  - ACPI: sbshc: remove raw pointer from printk() message (Greg Kroah-Hartman)  [Orabug: 27986392]  {CVE-2018-5750} 
  - futex: Prevent overflow by strengthen input validation (Li Jinyue)  [Orabug: 27986395]  {CVE-2018-6927}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.24.1.el7uek]
changelog:
  - mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang)  [Orabug: 28022108]  {CVE-2018-10675} 
  - Fix up non-directory creation in SGID directories (Linus Torvalds)  [Orabug: 28459478]  {CVE-2018-13405} 
  - ALSA: seq: Make ioctls race-free (Takashi Iwai)  [Orabug: 28459729]  {CVE-2018-7566} 
  - ALSA: seq: Fix racy pool initializations (Takashi Iwai)  [Orabug: 28459729]  {CVE-2018-7566} 
  - posix-timer: Properly check sigevent->sigev_notify (Thomas Gleixner)  [Orabug: 28481409]  {CVE-2017-18344}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.24.2.el7uek]
changelog:
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm, fremap: mitigate L1TF in remap_file_pages (Daniel Jordan)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation: Don't mark cpu_no_l1tf __initconst (Boris Ostrovsky)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers (Matt Fleming)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm/pagewalk.c: prevent positive return value of walk_page_test() from being passed to callers (Naoya Horiguchi)  [Orabug: 28505476]  {CVE-2018-3620} 
  - pagewalk: improve vma handling (Naoya Horiguchi)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm/pagewalk: remove pgd_entry() and pud_entry() (Naoya Horiguchi)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm/pagewalk.c: fix walk_page_range() access of wrong PTEs (Chen LinX)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/cpu/intel: Add Knights Mill to Intel family (Piotr Luc)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm: Fix swap entry comment and macro (Dave Hansen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm: Move swap offset/type up in PTE to work around erratum (Dave Hansen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm: x86 pgtable: drop unneeded preprocessor ifdef (Cyrill Gorcunov)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm: Fix regression with huge pages on PAE (Kirill A. Shutemov)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/asm: Move PUD_PAGE macros to page_types.h (Toshi Kani)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation: sort X86_BUG_* with X86_FEATURE_* (Daniel Jordan)  [Orabug: 28505476]  {CVE-2018-3620} 
  - Disable kaiser if the cpu is not vulnerable to X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27958074]  
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27958074]  
  - x86/msr: Add definitions for IA32_ARCH_CAPABILITIES MSR (Kanth Ghatraju)  [Orabug: 27958074]  
  - x86/cpufeatures: Add Intel feature bit for IA32_ARCH_CAPABILITIES supported (Kanth Ghatraju)  [Orabug: 27958074]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.24.3.el7uek]
changelog:
  - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook)  [Orabug: 28710010]  {CVE-2018-14634}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.25.1.el7uek]
changelog:
  - x86/spectre_v2: Don't check microcode versions when running under hypervisors (Konrad Rzeszutek Wilk)  [Orabug: 27959785]  
  - rds: CVE-2018-7492: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 28552792]  {CVE-2018-7492} 
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)  [Orabug: 28664530]  {CVE-2018-16658} 
  - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Seunghun Han)  [Orabug: 28664579]  {CVE-2017-13695} 
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28680238]  
  - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook)  [Orabug: 28710010]  {CVE-2018-14634} 
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm, fremap: mitigate L1TF in remap_file_pages (Daniel Jordan)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation: Don't mark cpu_no_l1tf __initconst (Boris Ostrovsky)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers (Matt Fleming)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm/pagewalk.c: prevent positive return value of walk_page_test() from being passed to callers (Naoya Horiguchi)  [Orabug: 28505476]  {CVE-2018-3620} 
  - pagewalk: improve vma handling (Naoya Horiguchi)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm/pagewalk: remove pgd_entry() and pud_entry() (Naoya Horiguchi)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm/pagewalk.c: fix walk_page_range() access of wrong PTEs (Chen LinX)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/cpu/intel: Add Knights Mill to Intel family (Piotr Luc)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm: Fix swap entry comment and macro (Dave Hansen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm: Move swap offset/type up in PTE to work around erratum (Dave Hansen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - mm: x86 pgtable: drop unneeded preprocessor ifdef (Cyrill Gorcunov)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Kleen)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/mm: Fix regression with huge pages on PAE (Kirill A. Shutemov)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/asm: Move PUD_PAGE macros to page_types.h (Toshi Kani)  [Orabug: 28505476]  {CVE-2018-3620} 
  - x86/speculation: sort X86_BUG_* with X86_FEATURE_* (Daniel Jordan)  [Orabug: 28505476]  {CVE-2018-3620} 
  - Disable kaiser if the cpu is not vulnerable to X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27958074]  
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27958074]  
  - x86/msr: Add definitions for IA32_ARCH_CAPABILITIES MSR (Kanth Ghatraju)  [Orabug: 27958074]  
  - x86/cpufeatures: Add Intel feature bit for IA32_ARCH_CAPABILITIES supported (Kanth Ghatraju)  [Orabug: 27958074]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.26.1.el7uek]
changelog:
  - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet)  [Orabug: 27896807]  {CVE-2017-18017} 
  - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan)  [Orabug: 27927692]  {CVE-2018-7757}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.28.1.el7uek]
changelog:
  - udf: Check component length before reading it (Jan Kara)  [Orabug: 21193696]  {CVE-2014-9728} 
  - udf: Verify i_size when loading inode (Shan Hai)  [Orabug: 21193696]  {CVE-2014-9728} 
  - intel_pstate: Fix overflow in busy_scaled due to long delay (mridula shastry)  [Orabug: 28005134]  
  - scsi: libsas: defer ata device eh commands to libata (Jason Yan)  [Orabug: 28459689]  {CVE-2018-10021} 
  - nfsd: silence sparse warning about accessing credentials (Jeff Layton)  [Orabug: 28824742]  {CVE-2017-13168} 
  - scsi: sg: mitigate read/write abuse (Jann Horn)  [Orabug: 28824742]  {CVE-2017-13168} 
  - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko)  [Orabug: 28892683]  {CVE-2018-1000204} 
  - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai)  [Orabug: 28898650]  {CVE-2018-10902} 
  - KVM: MTRR: remove MSR 0x2f8 (Andy Honig)  [Orabug: 28901657]  {CVE-2016-3713} {CVE-2016-3713} 
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28929777]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710} 
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)   {CVE-2018-7755} {CVE-2018-7755} 
  - crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers)  [Orabug: 28976585]  {CVE-2017-17805} 
  - crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers)  [Orabug: 28976654]  {CVE-2017-17806}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.29.1.el7uek]
changelog:
  - Copy secure_boot flag in boot params across kexec reboot (Dave Young)  [Orabug: 22066352]  {CVE-2015-7837} 
  - ipv6: tcp: add rcu locking in tcp_v6_send_synack() (Eric Dumazet)  [Orabug: 25059183]  {CVE-2016-3841} 
  - ipv6: add complete rcu protection around np->opt (Eric Dumazet)  [Orabug: 25059183]  {CVE-2016-3841} 
  - scsi: qla2xxx: Fix an integer overflow in sysfs code (Dan Carpenter)  [Orabug: 28220420]  {CVE-2017-14051} 
  - ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o)  [Orabug: 28220433]  {CVE-2018-1092} {CVE-2018-1092} 
  - certs: Add Oracle's new X509 cert into the kernel keyring (Eric Snowberg)  [Orabug: 28926205]  
  - ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai)  [Orabug: 29005190]  {CVE-2018-1000004} 
  - netfilter: xt_osf: Add missing permission checks (Kevin Cernekee)  [Orabug: 29037832]  {CVE-2017-17450} 
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 29060697]  {CVE-2018-5848} 
  - HID: debug: check length before copy_to_user() (Daniel Rosenberg)  [Orabug: 29128167]  {CVE-2018-9516} 
  - x86/MCE: Serialize sysfs changes (Seunghun Han)  [Orabug: 29152249]  {CVE-2018-7995} 
  - Input: i8042 - fix crash at boot time (Chen Hong)  [Orabug: 29152329]  {CVE-2017-18079}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.3.2.el7uek]
changelog:
  - x86/nmi/64: Use DF to avoid userspace RSP confusing nested NMI detection (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Reorder nested NMI checks (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Improve nested NMI comments (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/nmi/64: Switch stacks on userspace NMI entry (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157} 
  - x86/paravirt: Replace the paravirt nop with a bona fide empty function (Andy Lutomirski)  [Orabug: 22742507]  {CVE-2015-5157}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.30.1.el7uek]
changelog:
  - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o)  [Orabug: 28220451]  {CVE-2018-1094} 
  - ext4: always initialize the crc32c checksum driver (Theodore Ts'o)  [Orabug: 28220451]  {CVE-2018-1094} {CVE-2018-1094} 
  - vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells)  [Orabug: 28220451]  {CVE-2018-1094} 
  - ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen)  [Orabug: 28852830]  {CVE-2017-18204} 
  - Make file credentials available to the seqfile interfaces (Linus Torvalds)  [Orabug: 29114878]  {CVE-2018-17972} 
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114878]  {CVE-2018-17972} 
  - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (Qu Wenruo)  [Orabug: 29301105]  {CVE-2018-14609}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.31.1.el7uek]
changelog:
  - alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner)  [Orabug: 29269167]  {CVE-2018-13053} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 29304552]  {CVE-2017-17807} 
  - KEYS: add missing permission check for request_key() destination (Eric Biggers)  [Orabug: 29304552]  {CVE-2017-17807} 
  - ext4: only look at the bg_flags field if it is valid (Theodore Ts'o)  [Orabug: 29409425]  {CVE-2018-10876} {CVE-2018-10876} 
  - net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch)  [Orabug: 29422740]  {CVE-2018-9568} 
  - ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o)  [Orabug: 29428608]  {CVE-2018-10878} 
  - ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o)  [Orabug: 29428608]  {CVE-2018-10878}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.32.1.el7uek]
changelog:
  - x86/fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Oleg Nesterov)  [Orabug: 29012034]  
  - x86/fpu: Always allow FPU in interrupt if use_eager_fpu() (Oleg Nesterov)  [Orabug: 29012034]  
  - x86/fpu: Fix 32-bit signal frame handling (Dave Hansen)  [Orabug: 29012034]  
  - x86/fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Oleg Nesterov)  [Orabug: 29012034]  
  - x86/fpu: Don't reset fpu_counter (Oleg Nesterov)  [Orabug: 29012034]  
  - x86, fpu: Fix math_state_restore() race with kernel_fpu_begin() (Oleg Nesterov)  [Orabug: 29012034]  
  - x86, fpu: Introduce per-cpu in_kernel_fpu state (Oleg Nesterov)  [Orabug: 29012034]  
  - x86, fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Oleg Nesterov)  [Orabug: 29012034]  
  - x86: Allow FPU to be used at interrupt time even with eagerfpu (Pekka Riikonen)  [Orabug: 29012034]  
  - can: gw: ensure DLC boundaries after CAN frame modification (Oliver Hartkopp)  [Orabug: 29215300]  {CVE-2019-3701} {CVE-2019-3701} 
  - ext4: verify the depth of extent tree in ext4_find_extent() (Theodore Ts'o)  [Orabug: 29396713]  {CVE-2018-10877} {CVE-2018-10877} 
  - ext4: always verify the magic number in xattr blocks (Theodore Ts'o)  [Orabug: 29437128]  {CVE-2018-10879} {CVE-2018-10879} 
  - ext4: add corruption check in ext4_xattr_set_entry() (Theodore Ts'o)  [Orabug: 29437128]  {CVE-2018-10879} {CVE-2018-10879} 
  - ext4: clear i_data in ext4_inode_info when removing inline data (Theodore Ts'o)  [Orabug: 29540710]  {CVE-2018-10881} {CVE-2018-10881} 
  - ext4: add more inode number paranoia checks (Theodore Ts'o)  [Orabug: 29545567]  {CVE-2018-10882} {CVE-2018-10882}


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.33.1.el7uek]
changelog:
  - x86/mds: Add empty commit for CVE-2019-11091 (Patrick Colp)  [Orabug: 29721936]  {CVE-2019-11091} 
  - x86/speculation/mds: Fix comment (Boris Ostrovsky)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Allow runtime checking of CPU features (Patrick Colp)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Consolidate CPU whitelists (Thomas Gleixner)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Chuck Anderson <chuck.anderson@oracle.com> [3.8.13-118.33.2.el7uek]
changelog:
  - x86/speculation/mds: Make cpu_matches() __cpuinit (Patrick Colp)  [Orabug: 29751729]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091} 
  - x86/speculation/mds: Only worry about firmware loaded microcode (Patrick Colp)  [Orabug: 29641784]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.34.1.el7uek]
changelog:
  - Input: wacom - move the USB (now hid) Wacom driver in drivers/hid (Benjamin Tissoires)  [Orabug: 25512494]  {CVE-2016-3139} 
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215229]  {CVE-2017-16650} 
  - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data (Hui Peng)  [Orabug: 29605987]  {CVE-2018-19985} {CVE-2018-19985} 
  - KEYS: encrypted: fix buffer overread in valid_master_desc() (Eric Biggers)  [Orabug: 29605993]  {CVE-2017-13305} 
  - ecryptfs: don't allow mmap when the lower fs doesn't support it (Jeff Mahoney)  [Orabug: 29666607]  {CVE-2016-1583} {CVE-2016-1583} 
  - Revert "ecryptfs: forbid opening files without mmap handler" (Brian Maly)  [Orabug: 29666607]  {CVE-2016-1583} 
  - binfmt_elf: switch to new creds when switching to new mm (Linus Torvalds)  [Orabug: 29677234]  {CVE-2019-11190}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.35.1.el7uek]
changelog:
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786787]  {CVE-2011-1079} {CVE-2019-11884} 
  - x86/speculation/mds: Fix verw usage to use memory operand (Patrick Colp)  [Orabug: 29791038]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091} 
  - x86/speculation/mds: Make cpu_vuln_whitelist __cpuinitconst (Patrick Colp)  [Orabug: 29792023]  
  - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner)  [Orabug: 29792061]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2019-11091}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.35.2.el7uek]
changelog:
  - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet)  [Orabug: 29886600]  {CVE-2019-11477} 
  - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet)  [Orabug: 29884307]  {CVE-2019-11479} 
  - tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet)  [Orabug: 29884307]  {CVE-2019-11478} 
  - tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins)  [Orabug: 29890831]  {CVE-2019-11477} 
  - tcp: limit payload size of sacked skbs (Eric Dumazet)  [Orabug: 29884307]  {CVE-2019-11477}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.36.1.el7uek]
changelog:
  - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang)  [Orabug: 29925557]  {CVE-2018-7191}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.37.1.el7uek]
changelog:
  - Input: gtco - bounds check collection indent level (Grant Hernandez)  [Orabug: 30074414]  {CVE-2019-13631}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.38.1.el7uek]
changelog:
  - x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner)  [Orabug: 30165288]  {CVE-2019-1125} 
  - x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 30165288]  {CVE-2019-1125} 
  - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 30165288]  {CVE-2019-1125}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.39.1.el7uek]
changelog:
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)  [Orabug: 30240134]  {CVE-2019-15239} 
  - cx24116: fix a buffer overflow when checking userspace params (Mauro Carvalho Chehab)  [Orabug: 30254282]  {CVE-2015-9289} 
  - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov)  [Orabug: 30318220]  {CVE-2019-14283} 
  - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner)  [Orabug: 30324140]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.39.1.1.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to TSX cmdline parameter (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86/tsx: Add TSX cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86: Add helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135} 
  - x86/tsx: Add enumeration support for IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30419232]  {CVE-2019-11135}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.4.2.el7uek]
changelog:
  - pipe: Fix buffer offset after partially failed read (Ben Hutchings)  [Orabug: 22985903]  {CVE-2016-0774} {CVE-2015-1805} {CVE-2016-0774}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.40.1.el7uek]
changelog:
  - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 30045797]  {CVE-2018-20169} 
  - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 30393902]  {CVE-2017-14991} 
  - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 30412151]  {CVE-2017-15102} 
  - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447844]  {CVE-2019-14284} 
  - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Jeremy Compostella)  [Orabug: 30468842]  {CVE-2017-18551}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.41.1.el7uek]
changelog:
  - x86/speculation: Determine swapgs before alternative instructions are set (Patrick Colp)  [Orabug: 30379626]  
  - ieee802154: enforce CAP_NET_RAW for raw sockets (Allen Pais)  [Orabug: 30444947]  {CVE-2019-17053} 
  - mISDN: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30445159]  {CVE-2019-17055} 
  - net: sit: fix memory leak in sit_init_net() (Mao Wenan)  [Orabug: 30445307]  {CVE-2019-16994} 
  - media: dvb: usb: fix use after free in dvb_usb_device_exit (Oliver Neukum)  [Orabug: 30490492]  {CVE-2019-15213} 
  - media: cpia2_usb: first wake up, then free in disconnect (Oliver Neukum)  [Orabug: 30511742]  {CVE-2019-15215} 
  - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Vandana BN)  [Orabug: 30532775]  {CVE-2019-15217} 
  - USB: sisusbvga: fix oops in error path of sisusb_probe (Oliver Neukum)  [Orabug: 30548566]  {CVE-2019-15219}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.42.1.el7uek]
changelog:
  - scsi: libsas: delete sas port if expander discover failed (Jason Yan)  [Orabug: 30580688]  {CVE-2019-15807}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.43.1.el7uek]
changelog:
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)  [Orabug: 30864534]  {CVE-2019-15291}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.44.1.el7uek]
changelog:
  - net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost)  [Orabug: 31055328]  {CVE-2019-18806} 
  - swiotlb: clean up reporting (Kees Cook)  [Orabug: 31085018]  {CVE-2018-5953}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.45.1.el7uek]
changelog:
  - HID: hiddev: do cleanup in failure of opening a device (Hillf Danton)  [Orabug: 31206361]  {CVE-2019-19527} 
  - HID: hiddev: avoid opening a disconnected device (Hillf Danton)  [Orabug: 31206361]  {CVE-2019-19527} 
  - HID: Fix assumption that devices have inputs (Alan Stern)  [Orabug: 31208623]  {CVE-2019-19532} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 31224360]  {CVE-2017-7261} 
  - brcmfmac: add subtype check for event handling in data path (John Donnelly)  [Orabug: 31234676]  {CVE-2019-9503}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.46.1.el7uek]
changelog:
  - ipv6: only static routes qualify for equal cost multipathing (Hannes Frederic Sowa)  [Orabug: 30977687]  {CVE-2013-4125} 
  - USB: adutux: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31240296]  {CVE-2019-19523} 
  - USB: core: Fix races in character device registration and deregistraion (Alan Stern)  [Orabug: 31317668]  {CVE-2019-19537} 
  - USB: iowarrior: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31351063]  {CVE-2019-19528} 
  - usb: iowarrior: fix deadlock on disconnect (Oliver Neukum)  [Orabug: 31351063]  {CVE-2019-19528} 
  - mremap: properly flush TLB before releasing the page (Linus Torvalds)  [Orabug: 31352012]  {CVE-2018-18281}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.47.1.el7uek]
changelog:
  - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (Tomas Bortoli)  [Orabug: 31351121]  {CVE-2019-19533} 
  - can: peak_usb: fix slab info leak (Johan Hovold)  [Orabug: 31351143]  {CVE-2019-19534} 
  - ALSA: core: Fix card races between register and disconnect (Takashi Iwai)  [Orabug: 31351893]  {CVE-2019-15214}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.47.2.el7uek]
changelog:
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31602633]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.48.1.el7uek]
changelog:
  - crypto: user - fix memory leak in crypto_report (Navid Emamdoost)  [Orabug: 31351641]  {CVE-2019-19062} 
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351673]  {CVE-2019-19054}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.49.1.el7uek]
changelog:
  - sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin)  [Orabug: 31351996]  {CVE-2018-16884} 
  - sunrpc: use-after-free in svc_process_common() (Vasily Averin)  [Orabug: 31351996]  {CVE-2018-16884} 
  - af_packet: set defaule value for tmo (Mao Wenan)  [Orabug: 31439108]  {CVE-2019-20812} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705122]  {CVE-2020-14331} {CVE-2020-14331} 
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783152]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.50.1.el7uek]
changelog:
  - USB: serial: omninet: fix reference leaks at open (Mark Nicholson)  [Orabug: 30484762]  {CVE-2017-8925} 
  - GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob Peterson)  [Orabug: 30254252]  {CVE-2016-10905} 
  - GFS2: Fix rgrp end rounding problem for bsize < page size (Bob Peterson)  [Orabug: 30254252]  {CVE-2016-10905} 
  - GFS2: Use range based functions for rgrp sync/invalidation (Steven Whitehouse)  [Orabug: 30254252]  {CVE-2016-10905} 
  - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (YueHaibing)  [Orabug: 30732940]  {CVE-2019-20054} 
  - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (YueHaibing)  [Orabug: 30732940]  {CVE-2019-20054} 
  - scsi: libsas: stop discovering if oob mode is disconnected (Jason Yan)  [Orabug: 30770914]  {CVE-2019-19965} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351573]  {CVE-2019-19073} 
  - USB: serial: io_ti: fix information leak in completion handler (Johan Hovold)  [Orabug: 31352085]  {CVE-2017-8924} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884241]  {CVE-2020-25285} 
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895332]  {CVE-2020-14314}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [3.8.13-118.51.1.el7uek]
changelog:
  - usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neukum)  [Orabug: 31351090]  {CVE-2019-19530} 
  - kexec: Validate pe files against the system_lacklist_keyring (Eric Snowberg)  [Orabug: 31961121]  {CVE-2020-26541} 
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31974695]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.51.2.el7uek]
changelog:
  - Revert "kexec: Validate pe files against the system_lacklist_keyring" (John Donnelly)  [Orabug: 32171714]  {CVE-2020-26541} {CVE-2020-26541}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [3.8.13-118.52.1.el7uek]
changelog:
  - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers)  [Orabug: 31535530]  {CVE-2020-10769} 
  - crypto: authenc - Export key parsing helper function (Mathias Krause)  [Orabug: 31535530]  {CVE-2020-10769}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [3.8.13-118.53.1.el7uek]
changelog:
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176267]  
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176267]  {CVE-2020-28915} 
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187751]  {CVE-2020-28974}


author: visuman <vijayendra.suman@oracle.com> [3.8.13-118.54.1.el7uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349209]  {CVE-2020-36158}


author: visuman <vijayendra.suman@oracle.com> [3.8.13-118.55.1.el7uek]
changelog:
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498827]  
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349209]  {CVE-2020-36158} 
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176267]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176267]  {CVE-2020-28915} 
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187751]  {CVE-2020-28974}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-118.6.2.el7uek]
changelog:
  - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells)  [Orabug: 23279020]  {CVE-2016-0758} 
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 23267997]  {CVE-2015-8543} {CVE-2015-8543} 
  - ipv6: addrconf: validate new MTU before applying it (Marcelo Leitner)  [Orabug: 23263252]  {CVE-2015-8215} 
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262276]  {CVE-2013-4312} {CVE-2013-4312}


author: Brian Maly <brian.maly@oracle.com> [3.8.13-109.el7uek]
changelog:
  - mm: check if section present during memory block registering (Yinghai Lu)  [Orabug: 20382859]  
  - be2net: post buffers before destroying RXQs in Lancer (Kalesh AP)   
  - be2net: enable IFACE filters only after creating RXQs (Kalesh AP)   
  - be2net: bump up the driver version to 10.6.0.3 (Sathya Perla)   
  - be2net: make SET_LOOPBACK_MODE cmd asynchrounous (Suresh Reddy)   
  - be2net: return error status from be_mcc_notify() (Suresh Reddy)   
  - ipoib/ib: fix merge of Orabug 19468224 fix from uek2 into uek3 resulting in ipoib not functioning. (Rama Nichanamatlu)  [Orabug: 21897912]  
  - mlx4: indicate memory resource exhaustion (Ajaykumar Hotchandani)  [Orabug: 21549766]  
  - be2iscsi: Bump the driver version (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: Fix updating the next pointer during WRB posting (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: add obsolete warning messages (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: ownership change (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi: update MAINTAINERS list (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi : Logout of FW Boot Session (Jitendra Bhivare)  [Orabug: 21903294]  
  - be2iscsi : Fix memory check before unmapping. (Jitendra Bhivare)  [Orabug: 21903294]


author: Brian Maly <brian.maly@oracle.com> [3.8.13-110.el7uek]
changelog:
  - xen-netfront: respect user provided max_queues (Wei Liu)  [Orabug: 21976319]  
  - net/xen-netfront: only napi_synchronize() if running (Chas Williams)  [Orabug: 21976319]  
  - net/xen-netfront: only clean up queues if present (Chas Williams)  [Orabug: 21976319]  
  - xen-netfront: Remove the meaningless code (Li, Liang Z)  [Orabug: 21976319]  
  - net/xen-netfront: Correct printf format in xennet_get_responses (Julien Grall)  [Orabug: 21976319]  
  - xen-netfront: properly destroy queues when removing device (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: Use setup_timer (Vaishali Thakkar)  [Orabug: 21976319]  
  - xen-netfront: transmit fully GSO-sized packets (Jonathan Davies)  [Orabug: 21976319]  
  - xen-netfront: Use static attribute groups for sysfs entries (Takashi Iwai)  [Orabug: 21976319]  
  - xen-netfront: use different locks for Rx and Tx stats (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: refactor making Tx requests (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: refactor skb slot counting (David Vrabel)  [Orabug: 21976319]  
  - drivers: net: xen-netfront: remove residual dead code (Vincenzo Maffione)  [Orabug: 21976319]  
  - xen-netfront: use napi_complete() correctly to prevent Rx stalling (David Vrabel)  [Orabug: 21976319]  
  - xen-netfront: always keep the Rx ring full of requests (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: respect user provided max_queues (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: require fewer guest Rx slots when not using GSO (David Vrabel)  [Orabug: 21976319]  
  - xen/netback: Wake dealloc thread after completing zerocopy work (Ross Lagerwall)  [Orabug: 21976319]  
  - xen-netback: Allocate fraglist early to avoid complex rollback (Ross Lagerwall)  [Orabug: 21976319]  
  - net/xen-netback: off by one in BUG_ON() condition (Dan Carpenter)  [Orabug: 21976319]  
  - xen-netback: remove duplicated function definition (Li, Liang Z)  [Orabug: 21976319]  
  - xen-netback: fix a BUG() during initialization (Palik, Imre)  [Orabug: 21976319]  
  - net/xen-netback: Don't mix hexa and decimal with 0x in the printf format (Julien Grall)  [Orabug: 21976319]  
  - net/xen-netback: Remove unused code in xenvif_rx_action (Julien Grall)  [Orabug: 21976319]  
  - xen: netback: read hotplug script once at start of day. (Ian Campbell)  [Orabug: 21976319]  
  - xen: netback: fix printf format string warning (Ian Campbell)  [Orabug: 21976319]  
  - xen/netback: Properly initialize credit_bytes (Ross Lagerwall)  [Orabug: 21976319]  
  - net:xen-netback - Change 1 to true for bool type variable. (Shailendra Verma)  [Orabug: 21976319]  
  - xen-netback: notify immediately after pushing Tx response. (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: making the bandwidth limiter runtime settable (Palik, Imre)  [Orabug: 21976319]  
  - xen-netback: refactor xenvif_handle_frag_list() (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: return correct ethtool stats (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: release pending index before pushing Tx responses (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: fix sparse warning (Lad, Prabhakar)  [Orabug: 21976319]  
  - xen-netback: always fully coalesce guest Rx packets (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: stop the guest rx thread after a fatal error (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: fixing the propagation of the transmit shaper timeout (Palik, Imre)  [Orabug: 21976319]  
  - xen-netback: support frontends without feature-rx-notify again (David Vrabel)  [Orabug: 21976319]  
  - netback: don't store invalid vif pointer (Jan Beulich)  [Orabug: 21976319]  
  - xen-netback: do not report success if backend_create_xenvif() fails (Alexey Khoroshilov)  [Orabug: 21976319]  
  - xen-netback: remove unconditional __pskb_pull_tail() in guest Tx path (Malcolm Crossley)  [Orabug: 21976319]  
  - xen-netback: reintroduce guest Rx stall detection (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: fix unlimited guest Rx internal queue and carrier flapping (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: make feature-rx-notify mandatory (David Vrabel)  [Orabug: 21976319]  
  - xen-netback: Remove __GFP_COLD (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Disable NAPI after disabling interrupts (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: move netif_napi_add before binding interrupt (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: remove loop waiting function (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: don't stop dealloc kthread too early (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: move NAPI add/remove calls (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: fix debugfs entry creation (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: fix debugfs write length check (Wei Liu)  [Orabug: 21976319]  
  - xen-netback: Don't deschedule NAPI when carrier off (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix vif->disable handling (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Turn off the carrier if the guest is not able to receive (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Using a new state bit instead of carrier (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix pointer incrementation to avoid incorrect logging (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix releasing header slot on error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix releasing frag_list skbs in error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Fix handling frag_list on grant op error path (Zoltan Kiss)  [Orabug: 21976319]  
  - xen-netback: Adding debugfs "io_ring_qX" files (Zoltan Kiss)  [Orabug: 21976319]


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-30.el7uek]
changelog:
  - Btrfs: add mount option to force UUID tree checking (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: check UUID tree during mount if required (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: introduce uuid-tree-gen field (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: fill UUID tree initially (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: maintain subvolume items in the UUID tree (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: create UUID tree if required (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: support printing UUID tree elements (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: introduce a tree for items that map UUIDs to something (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: don't allow a subvol to be deleted if it is the default subovl (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix a crash of clone with inline extents's split (Liu Bo)  [Orabug: 18383584]  
  - Btrfs: use right clone root offset for compressed extents (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix max_inline mount option (Mitch Harder)  [Orabug: 18383584]  
  - Btrfs: fix data corruption when reading/updating compressed extents (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: setup inode location during btrfs_init_inode_locked (Chris Mason)  [Orabug: 18383584]  
  - Btrfs: improve inode hash function/inode lookup (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: don't use ram_bytes for uncompressed inline items (Chris Mason)  [Orabug: 18383584]  
  - Btrfs: fix btrfs_search_slot_for_read backwards iteration (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: add a reschedule point in btrfs_find_all_roots() (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: make send's file extent item search more efficient (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix protection between walking backrefs and root deletion (Wang Shilong)  [Orabug: 18383584]  
  - btrfs: fix warning while merging two adjacent extents (Gui Hecheng)  [Orabug: 18383584]  
  - btrfs: fix defrag 32-bit integer overflow (Justin Maggard)  [Orabug: 18383584]  
  - btrfs: call permission checks earlier in ioctls and return EPERM (David Sterba)  [Orabug: 18383584]  
  - Btrfs: change the members' order of btrfs_space_info structure to reduce the cache miss (Miao Xie)  [Orabug: 18383584]  
  - Btrfs: fix wrong search path initialization before searching tree root (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: flush the dirty pages of the ordered extent aggressively during logging csum (Miao Xie)  [Orabug: 18383584]  
  - Btrfs: faster file extent item search in clone ioctl (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix an oops when we fail to relocate tree blocks (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: reduce btree node locking duration on item update (Filipe David Borba Manana)  [Orabug: 18383584]  
  - fs/btrfs: Integer overflow in btrfs_ioctl_resize() (Wenliang Fan)  [Orabug: 18383584]  
  - Btrfs: fix a warning when iput a file (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: fix deadlock when iterating inode refs and running delayed inodes (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: more efficient push_leaf_right (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix pass of transid with wrong endianness in send.c (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix extent_map block_len after merging (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix max dir item size calculation (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: more efficient extent state insertions (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: add missing extent state caching calls (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: faster and more efficient extent map insertion (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix extent boundary check in bio_readpage_error (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: avoid unnecessary ordered extent cache resets (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix very slow inode eviction and fs unmount (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: eliminate the exceptional root_tree refs=0 (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: improve forever loop when doing balance relocation (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: fix ordered extent check in btrfs_punch_hole (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: skip building backref tree for uuid and quota tree when doing balance relocation (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: fix an oops when doing balance relocation (Wang Shilong)  [Orabug: 18383584]  
  - Btrfs: don't clear the default compression type (Miao Xie)  [Orabug: 18383584]  
  - btrfs: fix bio_size_ok() for max_sectors > 0xffff (Akinobu Mita)  [Orabug: 18383584]  
  - Btrfs: don't wait for ordered data outside desired range (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: avoid heavy operations in btrfs_commit_super (Liu Bo)  [Orabug: 18383584]  
  - Btrfs: fix __btrfs_start_workers retval (Ilya Dryomov)  [Orabug: 18383584]  
  - Btrfs: only drop modified extents if we logged the whole inode (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: make sure to copy everything if we rename (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: don't BUG_ON() if we get an error walking backrefs (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: don't wait for all the async delalloc when shrinking delalloc (Miao Xie)  [Orabug: 18383584]  
  - Btrfs: fix the confusion between delalloc bytes and metadata bytes (Miao Xie)  [Orabug: 18383584]  
  - Btrfs: pick up the code for the item number calculation in flush_space() (Miao Xie)  [Orabug: 18383584]  
  - Btrfs: wait for the ordered extent only when we want (Miao Xie)  [Orabug: 18383584]  
  - Btrfs: check file extent type before anything else (Josef Bacik)  [Orabug: 18383584]  
  - btrfs: Pack struct btrfs_device (Dulshani Gunawardhana)  [Orabug: 18383584]  
  - btrfs: Replace multiple atomic_inc() with atomic_add() (Rashika)  [Orabug: 18383584]  
  - Btrfs: fix csum search offset/length calculation in log tree (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: wait on ordered extents at the last possible moment (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix verification of dir_item (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: make sure the delalloc workers actually flush compressed writes (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: do not bug_on if we try to cow a free space cache inode (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: stop using vfs_read in send (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: Don't allocate inode that is already in use (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: fix btrfs_prev_leaf() previous key computation (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: btrfs_add_ordered_operation: Fix last modified transaction comparison. (chandan)  [Orabug: 18383584]  
  - Btrfs: init device stats for new devices (Stefan Behrens)  [Orabug: 18383584]  
  - Btrfs: disallow 'btrfs {balance,replace} cancel' on ro mounts (Ilya Dryomov)  [Orabug: 18383584]  
  - Btrfs: don't leak ioctl args in btrfs_ioctl_dev_replace (Ilya Dryomov)  [Orabug: 18383584]  
  - Btrfs: nuke a bogus rw_devices decrement in __btrfs_close_devices (Ilya Dryomov)  [Orabug: 18383584]  
  - btrfs: Fix memory leakage in the tree-log.c (Geyslan G. Bem)  [Orabug: 18383584]  
  - Btrfs: fix up seek_hole/seek_data handling (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix hole check in log_one_extent (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: handle a missing extent for the first file extent (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix memory leaks on transaction commit failure (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix the dev-replace suspend sequence (Ilya Dryomov)  [Orabug: 18383584]  
  - Btrfs: fix a use-after-free bug in btrfs_dev_replace_finishing (Ilya Dryomov)  [Orabug: 18383584]  
  - Btrfs: eliminate races in worker stopping code (Ilya Dryomov)  [Orabug: 18383584]  
  - Btrfs: limit delalloc pages outside of find_delalloc_range (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix crash of compressed writes (Liu Bo)  [Orabug: 18383584]  
  - Btrfs: actually limit the size of delalloc range (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fixup error handling in btrfs_reloc_cow (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix race between removing a dev and writing sbs (Filipe David Borba Manana)  [Orabug: 18383584]  
  - Btrfs: fix send to deal with sparse files properly (Josef Bacik)  [Orabug: 18383584]  
  - Btrfs: fix memory leak of orphan block rsv (Filipe David Borba Manana)  [Orabug: 18383584]  
  - sparc: report correct hw capabilities for athena (Jose Marchesi)  [Orabug: 18314966]  
  - xen-netback: reset network header before passing skb to checksum funtion (Annie Li)  [Orabug: 18379272]  
  - xen-netfront: reset skb network header before checksum (Wei Liu)  [Orabug: 18379272]  
  - xen-netfront: handle backend CLOSED without CLOSING (David Vrabel)  [Orabug: 18379272]  
  - xen-netfront: add support for IPv6 offloads (Paul Durrant)  [Orabug: 18379272]  
  - xen-netfront: fix missing rx_refill_timer when allocate memory failed (Ma JieYue)  [Orabug: 18379272]  
  - xen-netback: Fix Rx stall due to race condition (Zoltan Kiss)  [Orabug: 18379272]  
  - xen-netfront: use new skb_checksum_setup function (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: use new skb_checksum_setup function (Paul Durrant)  [Orabug: 18379272]  
  - net: add skb_checksum_setup (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: stop vif thread spinning if frontend is unresponsive (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: Include header for vmalloc (Josh Boyer)  [Orabug: 18379272]  
  - xen-netback: fix guest-receive-side array sizes (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: fix some error return code (Wei Yongjun)  [Orabug: 18379272]  
  - xen-netback: add gso_segs calculation (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: fix fragments error handling in checksum_setup_ip() (Wei Yongjun)  [Orabug: 18379272]  
  - xen-netback: fix gso_prefix check (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: napi: don't prematurely request a tx event (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: napi: fix abuse of budget (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: make sure skb linear area covers checksum field (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: improve guest-receive-side flow control (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: fix fragment detection in checksum setup (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: clear vif->task on disconnect (Paul Durrant)  [Orabug: 18379272]  
  - xen-netback: include definition of csum_ipv6_magic (Andy Whitcroft)  [Orabug: 18379272]  
  - xen-netback: stop the VIF thread before unbinding IRQs (David Vrabel)  [Orabug: 18379272]  
  - xen-netback: use jiffies_64 value to calculate credit timeout (Wei Liu)  [Orabug: 18379272]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-31.el7uek]
changelog:
  - SPEC: remove device-mapper-multipath version dependency from ol7 kernel-uek.spec (Guangyu Sun)  [Orabug: 18438931]  
  - netfilter: nf_conntrack_dccp: fix skb_header_pointer API usages (Daniel Borkmann)  [Orabug: 18421673]  {CVE-2014-2523} 
  - cifs: ensure that uncached writes handle unmapped areas correctly (Jeff Layton)  [Orabug: 18461067]  {CVE-2014-0069} {CVE-2014-0069} 
  - net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable (Daniel Borkmann)  [Orabug: 18461065]  {CVE-2014-0101} 
  - vhost-net: insufficient handling of error conditions in get_rx_bufs() (Guangyu Sun)  [Orabug: 18461050]  {CVE-2014-0055} 
  - rds/rdma_cm: send RDMA_CM_EVENT_ADDR_CHANGE event for active bonding (Ajaykumar Hotchandani)  [Orabug: 18421511]  
  - dtrace: don't use ktime_get() in dtrace_gethrtime() (Kris Van Hees)  [Orabug: 18376038]  
  - Xen-netback: Fix issue caused by using gso_type wrongly (Annie Li)  [Orabug: 18347192]


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-32.el7uek]
changelog:
  - mm / dtrace: Allow DTrace to entirely disable page faults. (Nick Alcock)  [Orabug: 18412802]  
  - mm: allow __get_user_pages() callers to avoid triggering page faults. (Nick Alcock)  [Orabug: 18412802]  
  - config: enable nfs client support for rdma (Jerry Snitselaar)  [Orabug: 18560595]  
  - NFS: Fix negative overflow in SETATTR timestamps (Chuck Lever)  [Orabug: 18476361]  
  - NFS: Transfer full int64 for NFSv4 SETATTR timestamps (Chuck Lever)  [Orabug: 18476361]  
  - NFS: Block file size updates during async READ (Chuck Lever)  [Orabug: 18391310]  
  - NFS: Use an RPC/RDMA long request for NFS symlink operations (Chuck Lever)  [Orabug: 18261861]  
  - SUNRPC: Support long RPC/RDMA requests (Chuck Lever)  [Orabug: 18261861]  
  - xprtrdma: Split the completion queue (Chuck Lever)  [Orabug: 18560595]  
  - xprtrdma: Make rpcrdma_ep_destroy() return void (Chuck Lever)  [Orabug: 18560595]  
  - xprtrdma: Simplify rpcrdma_deregister_external() synopsis (Chuck Lever)  [Orabug: 18560595]  
  - xprtrdma: Remove support for MEMWINDOWS registration mode (Chuck Lever)  [Orabug: 18560595]  
  - xprtrdma: Disable ALLPHYSICAL mode by default (Chuck Lever)  [Orabug: 18560595]  
  - xprtrdma: Remove BOUNCEBUFFERS memory registration mode (Chuck Lever)  [Orabug: 18560595]  
  - SUNRPC: RPC/RDMA must invoke xprt_wake_pending_tasks() in process context (Chuck Lever)  [Orabug: 18560595]  
  - xprtrdma: add separate Kconfig options for NFSoRDMA client and server support (Jeff Layton)  [Orabug: 18560595]  
  - NFS: incorrect "port=" value in /proc/mounts (Chuck Lever)  [Orabug: 18560595]  
  - NFS: advertise only supported callback netids (Chuck Lever)  [Orabug: 18560595]  
  - SUNRPC: remove KERN_INFO from dprintk() call sites (Chuck Lever)  [Orabug: 18560595]  
  - SUNRPC: Fix large reads on NFS/RDMA (Chuck Lever)  [Orabug: 18560595]  
  - fnic: Failing to queue aborts due to Q full cause terminate driver timeout (Simha)  [Orabug: 18548644]  
  - net: enic: include irq.h for irqreturn_t definitions (Josh Boyer)  [Orabug: 18548634]  
  - enic: Call dev_kfree_skb_any instead of dev_kfree_skb. (Eric W. Biederman)  [Orabug: 18548634]  
  - enic: Don't receive packets when the napi budget == 0 (Eric W. Biederman)  [Orabug: 18548634]  
  - net: enic: slight optimization of addr compare (dingtianhong)  [Orabug: 18548634]  
  - net: enic: remove unnecessary pci_set_drvdata() (Jingoo Han)  [Orabug: 18548634]  
  - driver/net: enic: update enic maintainers and driver (govindarajulu.v)  [Orabug: 18548634]  
  - driver/net: enic: Exposing symbols for Cisco's low latency driver (govindarajulu.v)  [Orabug: 18548634]  
  - driver/net: enic: Try DMA 64 first, then failover to DMA (govindarajulu.v)  [Orabug: 18548634]  
  - driver/net: enic: record q_number and rss_hash for skb (govindarajulu.v)  [Orabug: 18548634]  
  - driver/net: enic: Add multi tx support for enic (govindarajulu.v)  [Orabug: 18548634]  
  - drivers/net: enic: Generate notification of hardware crash (Neel Patel)  [Orabug: 18548634]  
  - drivers/net: enic: Add an interface for USNIC to interact with firmware (Neel Patel)  [Orabug: 18548634]  
  - drivers/net: enic: Adding support for Cisco Low Latency NIC (Neel Patel)  [Orabug: 18548634]  
  - drivers/net: enic: Move ethtool code to a separate file (Neel Patel)  [Orabug: 18548634]  
  - drivers/net: enic: release rtnl_lock on error-path (Konstantin Khlebnikov)  [Orabug: 18548634]  
  - enic: be less verbose about non-critical firmware errors (Stefan Assmann)  [Orabug: 18548634]  
  - enic: change sprintf() to snprintf() (Dan Carpenter)  [Orabug: 18548634]  
  - dtrace: implement omni-present cyclics (Kris Van Hees)  [Orabug: 18323501]  
  - Update .gitignore with generated SDT files. (Nick Alcock)  [Orabug: 17851716]  
  - dtrace: avoid unreliable entries in stack() output (Kris Van Hees)  [Orabug: 18323450]  
  - drm/i915: hsw: replace !is_pch_edp() with port==PORT_A (Imre Deak)  [Orabug: 18429992]  
  - drm/i915: IVB/HSW have 32 fence register (Ville Syrjälä)  [Orabug: 18429992]  
  - drm/i915: Configure GAM_ECOCHK appropriatly for Gen7 (Ville Syrjälä)  [Orabug: 18429992]  
  - drm/i915: use lower aux clock divider on non-ULT HSW (Jani Nikula)  [Orabug: 18429992]  
  - drm/i915: HSW PM Frequency bits fix (Rodrigo Vivi)  [Orabug: 18429992]  
  - drm/i915: there's no PIPESTAT on HAS_PCH_SPLIT platforms (Paulo Zanoni)  [Orabug: 18429992]  
  - drm/i915: there's no DSPPOS register on gen4+ (Paulo Zanoni)  [Orabug: 18429992]  
  - drm/i915: reorganize intel_lvds_supported (Paulo Zanoni)  [Orabug: 18429992]  
  - drm/i915: fix DSPADDR Gen check (Paulo Zanoni)  [Orabug: 18429992]  
  - drm/i915: there's no DSPADDR register on Haswell (Paulo Zanoni)  [Orabug: 18429992]  
  - drm/i915: there's no DSPSIZE register on gen4+ (Paulo Zanoni)  [Orabug: 18429992]  
  - drm/i915: Use cpu_transcoder for HSW_TVIDEO_DIP_* instead of pipe (Rodrigo Vivi)  [Orabug: 18429992]  
  - PM: intel_powerclamp: enable driver in defconfigs (Brian Maly)  [Orabug: 18429987]  
  - intel_powerclamp: Fix cstate counter detection. (Yuxuan Shui)  [Orabug: 18429987]  
  - thermal/intel_powerclamp: Add newer CPU models (Jacob Pan)  [Orabug: 18429987]  
  - PM: Introduce Intel PowerClamp Driver (Jacob Pan)  [Orabug: 18429987]  
  - tick: export nohz tick idle symbols for module use (Jacob Pan)  [Orabug: 18429987]  
  - x86/nmi: export local_touch_nmi() symbol for modules (Jacob Pan)  [Orabug: 18429987]  
  - ioatdma: disable RAID on non-Atom platforms and reenable unaligned copies (Brice Goglin)  [Orabug: 18430022]  
  - ioatdma: ioat3_alloc_sed can be static (Fengguang Wu)  [Orabug: 18430022]  
  - ioatdma: Adding write back descriptor error status support for ioatdma 3.3 (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: S1200 platforms ioatdma channel 2 and 3 falsely advertise RAID cap (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: Adding support for 16 src PQ ops and super extended descriptors (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: skip silicon bug workaround for pq_align for cb3.3 (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: Removing PQ val disable for cb3.3 (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: channel reset scheme fixup on Intel Atom S1200 platforms (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: Add 64bit chansts register read for ioat v3.3. (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: Adding PCI IDs for Intel Atom S1200 product family ioatdma devices (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: Adding Haswell devid for ioatdma (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: allow all channels to have irq coalescing support (Dave Jiang)  [Orabug: 18430022]  
  - ioatdma: make debug output more readable (Dave Jiang)  [Orabug: 18430022]  
  - ioat/dca: Update DCA BIOS workarounds to use TAINT_FIRMWARE_WORKAROUND (Alexander Duyck)  [Orabug: 18430022]  
  - dmaengine: ioat - fix spare sparse complain (Fengguang Wu)  [Orabug: 18430022]  
  - ioatdma: fix race between updating ioat->head and IOAT_COMPLETION_PENDING (Dave Jiang)  [Orabug: 18430022]  
  - ioat: remove chanerr mask setting for IOAT v3.x (Dave Jiang)  [Orabug: 18430022]  
  - PCI: Remove Intel Haswell D3 delays (Todd E Brandt)  [Orabug: 18559933]  
  - hyperv-fb: kick off efifb early (Gerd Hoffmann)  [Orabug: 18276803]  
  - hyperv-fb: add support for generation 2 virtual machines. (Gerd Hoffmann)  [Orabug: 18276803]  
  - vmbus: use resource for hyperv mmio region (Gerd Hoffmann)  [Orabug: 18276803]  
  - vmbus: add missing breaks (Gerd Hoffmann)  [Orabug: 18276803]  
  - Drivers: hv: fcopy_open() can be static (Fengguang Wu)  [Orabug: 18276803]  
  - Drivers: hv: Implement the file copy service (K. Y. Srinivasan)  [Orabug: 18276803]  
  - hv: Add hyperv.h to uapi headers (Bjarke Istrup Pedersen)  [Orabug: 18276803]  
  - Drivers: hv: Ballon: Make pressure posting thread sleep interruptibly (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Cleanup the packet send path (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Extract the mmio information from DSDT (K. Y. Srinivasan)  [Orabug: 18276803]  
  - add support for Hyper-V reference time counter (Vadim Rozenfeld)  [Orabug: 18276803]  
  - hyperv: enable framebuffer and keyboard drivers (Jerry Snitselaar)  [Orabug: 18276803]  
  - Drivers: hv: remove HV_DRV_VERSION (Olaf Hering)  [Orabug: 18276803]  
  - x86, hyperv: Move a variable to avoid an unused variable warning (H. Peter Anvin)  [Orabug: 18276803]  
  - x86, hyperv: Fix build error due to missing <asm/apic.h> include (David Rientjes)  [Orabug: 18276803]  
  - x86, hyperv: Correctly guard the local APIC calibration code (K. Y. Srinivasan)  [Orabug: 18276803]  
  - x86, hyperv: Get the local APIC timer frequency from the hypervisor (K. Y. Srinivasan)  [Orabug: 18276803]  
  - x86: Correctly detect hypervisor (Jason Wang)  [Orabug: 18276803]  
  - x86, hyperv: Handle Xen emulation of Hyper-V more gracefully (K. Y. Srinivasan)  [Orabug: 18276803]  
  - X86: Handle Hyper-V vmbus interrupts as special hypervisor interrupts (K. Y. Srinivasan)  [Orabug: 18276803]  
  - X86: Add a check to catch Xen emulation of Hyper-V (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Input: hyperv-keyboard - pass through 0xE1 prefix (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Input: add a driver to support Hyper-V synthetic keyboard (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: NULL pointer dereference fix (Ales Novak)  [Orabug: 18276803]  
  - [SCSI] storvsc: Increase the value of STORVSC_MAX_IO_REQUESTS (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: Support FC devices (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Add the GUID fot synthetic fibre channel device (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: Implement multi-channel support (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: Update the storage protocol to win8 level (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: Increase the value of scsi timeout for storvsc devices (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: Handle dynamic resizing of the device (K. Y. Srinivasan)  [Orabug: 18276803]  
  - [SCSI] storvsc: Restructure error handling code on command completion (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: scsi: storvsc: Use the consolidated GUID definition (K. Y. Srinivasan)  [Orabug: 18276803]  
  - HID: hyperv: make sure input buffer is big enough (David Herrmann)  [Orabug: 18276803]  
  - HID: hyperv: convert alloc+memcpy to memdup (Thomas Meyer)  [Orabug: 18276803]  
  - Drivers: hid: hid-hyperv: Use consolidated GUID definitions (K. Y. Srinivasan)  [Orabug: 18276803]  
  - hyperv: Move state setting for link query (Haiyang Zhang)  [Orabug: 18276803]  
  - hyperv: Fix the carrier status setting (Haiyang Zhang)  [Orabug: 18276803]  
  - hyperv: Fix race between probe and open calls (Haiyang Zhang)  [Orabug: 18276803]  
  - hyperv: Fix the NETIF_F_SG flag setting in netvsc (Haiyang Zhang)  [Orabug: 18276803]  
  - Fix the VLAN_TAG_PRESENT in netvsc_recv_callback() (Haiyang Zhang)  [Orabug: 18276803]  
  - hyperv: Fix vlan_proto setting in netvsc_recv_callback() (Haiyang Zhang)  [Orabug: 18276803]  
  - hyperv: Fix a compiler warning in netvsc_send() (Haiyang Zhang)  [Orabug: 18276803]  
  - hyperv: Fix a kernel warning from netvsc_linkstatus_callback() (Haiyang Zhang)  [Orabug: 18276803]  
  - Drivers: net: hyperv: Use the consolidated GUID definition (K. Y. Srinivasan)  [Orabug: 18276803]  
  - hyperv-fb: add blanking support (Gerd Hoffmann)  [Orabug: 18276803]  
  - hyperv-fb: add pci stub (Gerd Hoffmann)  [Orabug: 18276803]  
  - drivers/video: add Hyper-V Synthetic Video Frame Buffer Driver (Haiyang Zhang)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Don't timeout during the initial connection with host (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Specify the target CPU that should receive notification (K. Y. Srinivasan)  [Orabug: 18276803]  
  - hyperv: Add support for physically discontinuous receive buffer (Haiyang Zhang)  [Orabug: 18276803]  
  - drivers: hv: Mark the function hv_synic_free_cpu() as static in hv.c (Rashika Kheria)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Fix a bug in channel rescind code (K. Y. Srinivasan)  [Orabug: 18276803]  
  - drivers: hv: Fix wrong check for synic_event_page (Felipe Pena)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Terminate vmbus version negotiation on timeout (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: util: Correctly support ws2008R2 and earlier (K. Y. Srinivasan)  [Orabug: 18276803]  
  - hv: vmbus: fix vmbus_recvpacket_raw() return code (Dan Carpenter)  [Orabug: 18276803]  
  - hv: Change variable type to bool (Peter Senna Tschudin)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Do not attempt to negoatiate a new version prematurely (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Fix a bug in the handling of channel offers (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Do not post pressure status if interrupted (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Fix a bug in the hot-add code (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: incorrect device name is printed when child device is unregistered (Fernando Soto)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Initialize the transaction ID just before sending the packet (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: util: Fix a bug in version negotiation code for util services (K. Y. Srinivasan)  [Orabug: 18276803]  
  - drivers: hv: allocate synic structures before hv_synic_init() (Jason Wang)  [Orabug: 18276803]  
  - drivers: hv: check interrupt mask before read_index (Jason Wang)  [Orabug: 18276803]  
  - drivers: hv: switch to use mb() instead of smp_mb() (Jason Wang)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Implement multi-channel support (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Fix a bug in get_vp_index() (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Fix a bug in hv_need_to_signal() (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Notify the host of permanent hot-add failures (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Support 2M page allocations for ballooning (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Permit Linux to specify hot-add alignment requirements (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: make local functions static (Wei Yongjun)  [Orabug: 18276803]  
  - Drivers: hv: Add a new driver to support host initiated backup (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Handle channel rescind message correctly (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Implement hot-add functionality (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Make the balloon driver not unloadable (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Execute hot-add code in a separate context (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Execute balloon inflation in a separate context (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Do not request completion notification (K. Y. Srinivasan)  [Orabug: 18276803]  
  - driver: hv: remove cast for kmalloc return value (Zhang Yanfei)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Use the new infrastructure for delivering VMBUS interrupts (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Prevent the host from ballooning the guest too low (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Add a parameter to delay pressure reporting (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: balloon: Make adjustments to the pressure report (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Use consolidated GUID definitions (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus: Consolidate all offer GUID definitions in hyperv.h (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Bind all vmbbus interrupts to the boot CPU (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: vmbus_flow_handler() can be static (Fengguang Wu)  [Orabug: 18276803]  
  - Drivers: hv: remove unused variable in vmbus_recvpacket_raw() (Wei Yongjun)  [Orabug: 18276803]  
  - Drivers: hv: Cleanup and consolidate reporting of build/version info (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Capture the host build information (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Implement flow management on the send side (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Enable protocol negotiation with win8 hosts (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Add a check to deal with spurious interrupts (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Handle vmbus interrupts concurrently on all cpus (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Manage event tasklets on per-cpu basis (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Get rid of unnecessary request for offers (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Get rid of the unused global signaling state (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Add code to distribute channel interrupt load (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Modify the interrupt handling code to support win8 and beyond (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Add state to manage incoming channel interrupt load (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Setup a mapping for Hyper-V's notion cpu ID (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Cleanup vmbus_set_event() to support win7 and beyond (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Manage signaling state on a per-connection basis (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Move vmbus version definitions to hyperv.h (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Change the signature of vmbus_set_event() (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Change the signature for hv_signal_event() (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Save and export negotiated vmbus version (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Extend/modify vmbus_channel_offer_channel for win7 and beyond (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Update the ring buffer structure to match win8 functionality (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Support handling multiple VMBUS versions (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Get rid of hv_get_ringbuffer_interrupt_mask() (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Optimize the signaling on the write path (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Optimize signaling in the read path (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Turn off batched reading for util drivers (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Add state to manage batched reading (K. Y. Srinivasan)  [Orabug: 18276803]  
  - Drivers: hv: Implement routines for read side signaling optimization (K. Y. Srinivasan)  [Orabug: 18276803]  
  - hv: hv_balloon: remove duplicated include from hv_balloon.c (Wei Yongjun)  [Orabug: 18276803]  
  - x86, kvm: Switch to use hypervisor_cpuid_base() (Jason Wang)  [Orabug: 18276803]  
  - x86: Introduce hypervisor_cpuid_base() (Jason Wang)  [Orabug: 18276803]  
  - x86, mm: Create slow_virt_to_phys() (Dave Hansen)  [Orabug: 18276803]  
  - x86, mm: Pagetable level size/shift/mask helpers (Dave Hansen)  [Orabug: 18276803]  
  - mm: export split_page() (K. Y. Srinivasan)  [Orabug: 18276803]  
  - x86, hyperv: HYPERV depends on X86_LOCAL_APIC (H. Peter Anvin)  [Orabug: 18276803]  
  - qla2xxx: Update the driver version to 8.07.00.08.39.0-k1. (Saurav Kashyap)  [Orabug: 18524767]  
  - qla2xxx: Remove ISP8044 ID from the pci table. (Saurav Kashyap)  [Orabug: 18524767]  
  - qla2xxx: Remove mapped vp index iterator macro dead code. (Himanshu Madhani)  [Orabug: 18524767]  
  - qla2xxx: Add MBC option for fast SFP data access. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Fix ISPFX00 not displaying the correct FW version after FW update through sysfs Interface. (Armen Baloyan)  [Orabug: 18524767]  
  - qla2xxx: Fix beacon blink logic for ISP26xx/83xx. (Himanshu Madhani)  [Orabug: 18524767]  
  - qla2xxx: Don't check for firmware hung during the reset context for ISP82XX. (Tej Prakash)  [Orabug: 18524767]  
  - qla2xxx: Fixup looking for a space in the outstanding_cmds array in qla2x00_alloc_iocbs(). (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Delay driver unload if there is any pending activity going on. (Sawan Chandak)  [Orabug: 18524767]  
  - qla2xxx: ISP27xx queue index shadow registers. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: ISP27xx firmware dump template spec updates (including T274). (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Reduce the time we wait for a command to complete during SCSI error handling. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Check the QLA8044_CRB_DRV_ACTIVE_INDEX register when we are not the owner of the reset. (Hiral Patel)  [Orabug: 18524767]  
  - qla2xxx: Clear loop_id for ports that are marked lost during fabric scanning. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Adjust adapter reset routine to the changes in firmware specification for ISPFx00. (Armen Baloyan)  [Orabug: 18524767]  
  - qla2xxx: Avoid escalating the SCSI error handler if the command is not found in firmware. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: IOCB data should be copied to I/O mem using memcpy_toio. (Atul Deshmukh)  [Orabug: 18524767]  
  - qla2xxx: Use proper log message for flash lock failed error for ISP82XX. (Atul Deshmukh)  [Orabug: 18524767]  
  - qla2xxx: Remove configure VFs mailbox command call. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: ISP8044 poll ipmdio bus timeout improvement. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Poll during initialization for ISP25xx and ISP83xx. (Giridhar Malavali)  [Orabug: 18524767]  
  - qla2xxx: Fix build errors related to invalid print fields on some architectures. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Include <delay.h> file for msleep declartion in qla_nx2.c file. (Atul Deshmukh)  [Orabug: 18524767]  
  - qla2xxx: Use proper log message for flash lock failed error. (Atul Deshmukh)  [Orabug: 18524767]  
  - qla2xxx: Decrease pci access for response queue processing for ISPFX00. (Armen Baloyan)  [Orabug: 18524767]  
  - qla2xxx: Use jiffies instead of struct timeval and gettimeofday(). (Atul Deshmukh)  [Orabug: 18524767]  
  - qla2xxx: Update entry type 270 to match spec update. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Enable fw_dump_size for helga (Hiral Patel)  [Orabug: 18524767]  
  - qla2xxx: Remove unnecessary code from qlafx00_intr_handler (Hiral Patel)  [Orabug: 18524767]  
  - qla2xxx: Introduce fw_dump_flag to track fw dump progress (Hiral Patel)  [Orabug: 18524767]  
  - qla2xxx: Remove unnecessary delays from fw dump code path (Hiral Patel)  [Orabug: 18524767]  
  - qla2xxx: Track the process when the ROM_LOCK failure happens (Hiral Patel)  [Orabug: 18524767]  
  - qla2xxx: Correction to 27xx template entry types 256 and 258. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Add 8044 serdes bsg interface. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Fix P3P max debug ID. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Check for peg alive counter and clear any outstanding mailbox command. (Giridhar Malavali)  [Orabug: 18524767]  
  - qla2xxx: Support of new Helga minidump opcodes QLA8044_RDDFE(38), QLA8044_RDMDIO(39),QLA8044_POLLWR(40). (Pratik Mohanty)  [Orabug: 18524767]  
  - qla2xxx: Allow the next firmware dump if the previous dump capture fails for ISP8044. (Saurav Kashyap)  [Orabug: 18524767]  
  - qla2xxx: Add pci device id 0x2271. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Issue abort command for outstanding commands during cleanup when only firmware is alive. (Giridhar Malavali)  [Orabug: 18524767]  
  - qla2xxx: Log when device state is moved to failed state. (Giridhar Malavali)  [Orabug: 18524767]  
  - qla2xxx: Fix sparse warnings in qla_mr.c (Armen Baloyan)  [Orabug: 18524767]  
  - qla2xxx: Correct operations for ISP27xx template types 270 and 271. (Joe Carnuccio)  [Orabug: 18524767]  
  - qla2xxx: Add and use 32Gbps FC-GS definitions. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Do not schedule reset when one is already active when receiving an invalid status handle. (Chad Dupuis)  [Orabug: 18524767]  
  - qla2xxx: Add IOCB Abort command asynchronous handling (Armen Baloyan)  [Orabug: 18524767]  
  - qla2xxx: Add ISP2701 to PCI ID table. (Sawan Chandak)  [Orabug: 18524767]  
  - Update qlge driver to v1.00.00.34 (Sucheta Chakraborty)  [Orabug: 18552225]  
  - [SCSI] hpsa: update driver version to 3.4.4-1 (Stephen M. Cameron)  [Orabug: 18524766]  
  - [SCSI] hpsa: fix bad endif placement in RAID 5 mapper code (Stephen M. Cameron)  [Orabug: 18524766]  
  - [SCSI] hpsa: Do not zero fields of ioaccel2 command structure twice (Stephen M. Cameron)  [Orabug: 18524766]  
  - [SCSI] hpsa: Add hba mode to the hpsa driver (Stephen M. Cameron)  [Orabug: 18524766]  
  - [SCSI] hpsa: remove unused struct request from CommandList (Stephen M. Cameron)  [Orabug: 18524766]  
  - [SCSI] hpsa: increase the probability of a reported success after a device reset (Tomas Henzl)  [Orabug: 18524766]  
  - [SCSI] hpsa: bring format-in-progress drives online when ready (Stephen M. Cameron)  [Orabug: 18524766]  
  - [SCSI] hpsa: remove unused kthread.h header (Stephen M. Cameron)  [Orabug: 18524766]  
  - bonding: Inactive slaves should keep inactive flag's value (zheng.li)  [Orabug: 18345482]  
  - dtrace: fix leaking psinfo objects (Kris Van Hees)  [Orabug: 18383027]  
  - xen/pvhvm: Support more than 32 VCPUs when migrating. (Konrad Rzeszutek Wilk)  [Orabug: 18552664]  
  - xen/microcode: Only load under initial domain. (Konrad Rzeszutek Wilk)  [Orabug: 18379824]  
  - audit: Make testing for a valid loginuid explicit. (Eric W. Biederman)  [Orabug: 18346901]  
  - audit: make validity checking generic (Eric Paris)  [Orabug: 18346901]  
  - audit: allow checking the type of audit message in the user filter (Eric Paris)  [Orabug: 18346901]  
  - i40e: enable CONFIG_I40E by default (Brian Maly)  [Orabug: 18429973]  
  - i40e: add kcompat calls (Brian Maly)  [Orabug: 18429973]  
  - i40e: include i40e in kernel proper (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: debugfs interface (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: init code and hardware support (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: implement virtual device interface (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: driver core headers (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: driver ethtool core (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: transmit, receive, and NAPI (Jesse Brandeburg)  [Orabug: 18429973]  
  - i40e: main driver core (Jesse Brandeburg)  [Orabug: 18429973]  
  -     ocfs2: pass "new" parameter to ocfs2_init_xattr_bucket (Wengang Wang)  [Orabug: 18447765]  
  - qlcnic: make Kconfig changes to enable HWMON feature (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: sysfs interface for PCI BAR access (Sony Chacko)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.55.6 (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Optimize MAC learning code (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.55.5 (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Update QLogic application/driver interface for virtual NIC configuration (Jitendra Kalsaria)  [Orabug: 18524762]  
  - qlcnic: Fix NULL pointer dereference bug (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Add hwmon-sysfs interface to export board temperature. (Harish Patil)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.55.4 (Giri Reddy)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.55.3 (Jitendra Kalsaria)  [Orabug: 18524762]  
  - qlcnic: Fix PVID configuration on eSwitch port. (Jitendra Kalsaria)  [Orabug: 18524762]  
  - qlcnic: Optimize ring count validations (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Limit VNIC support in legacy interrupt mode (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Add driver logs in error path. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Fix panic due to uninitialzed delayed_work struct in use. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Allow setting TX interrupt coalescing parameters from VF. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.55.2 (Jitendra Kalsaria)  [Orabug: 18524762]  
  - qlcnic: Re-factor firmware minidump template header handling (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix virtual NIC function count. (Jitendra Kalsaria)  [Orabug: 18524762]  
  - qlcnic: Fix semaphore lock access failure error msg (Harish Patil)  [Orabug: 18524762]  
  - qlcnic: reset firmware API lock at driver load (Sony Chacko)  [Orabug: 18524762]  
  - qlcnic: Allow vlan0 traffic (Rajesh Borundia)  [Orabug: 18524762]  
  - qlcnic: Fix mixed mode interrupt related change (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.55.1 (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix number of rings when we fall back from msix to legacy. (Rajesh Borundia)  [Orabug: 18524762]  
  - qlcnic: Allow newer QCC to work with 8 NPAR function. (Jitendra Kalsaria)  [Orabug: 18524762]  
  - qlcnic: Use use_msi and use_msi_x module parameteres correctly (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix driver log message. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Allow any VLAN to be configured from VF. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: update version to 5.3.55 (Himanshu Madhani)  [Orabug: 18524762]  
  - qlcnic: Fix loopback test failure (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix tx timeout. (Rajesh Borundia)  [Orabug: 18524762]  
  - qlcnic: Fix initialization of vlan list. (Rajesh Borundia)  [Orabug: 18524762]  
  - qlcnic: Correct off-by-one errors in bounds checks (Manish Chopra)  [Orabug: 18524762]  
  - qlcnic: Enhance logic to calculate msix vectors. (Himanshu Madhani)  [Orabug: 18524762]  
  - qlcnic: Refactor interrupt coalescing code for all adapters. (Himanshu Madhani)  [Orabug: 18524762]  
  - qlcnic: Update poll controller code path (Manish chopra)  [Orabug: 18524762]  
  - qlcnic: Interrupt code cleanup (Manish chopra)  [Orabug: 18524762]  
  - qlcnic: Enhance Tx timeout debugging. (Himanshu Madhani)  [Orabug: 18524762]  
  - qlcnic: Use bool for rx_mac_learn. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: fix sparse warnings (Fengguang Wu)  [Orabug: 18524762]  
  - qlcnic: remove unused code (stephen hemminger)  [Orabug: 18524762]  
  - qlcnic: make local functions static (stephen hemminger)  [Orabug: 18524762]  
  - net: qlcnic: fix warning for incorrect type in argument (dingtianhong)  [Orabug: 18524762]  
  - qlcnic: Update version to 5.3.54 (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Enable IPv6 LRO even if IP address is not programmed (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix SR-IOV cleanup code path (Manish Chopra)  [Orabug: 18524762]  
  - qlcnic: Enable beaconing for 83xx/84xx Series adapter. (Himanshu Madhani)  [Orabug: 18524762]  
  - qlcnic: Do MAC learning for SRIOV PF. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Turn on promiscous mode for SRIOV PF. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Enable VF flood bit on PF. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Restrict VF from configuring any VLAN mode. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Convert vmalloc/memset to kcalloc (Joe Perches)  [Orabug: 18524762]  
  - qlcnic: Fix ethtool statistics length calculation (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix bug in TX statistics (Manish Chopra)  [Orabug: 18524762]  
  - qlcnic: Fix bug in Tx completion path (Shahed Shaikh)  [Orabug: 18524762]  
  - qlcnic: Fix resource allocation for TX queues (Manish Chopra)  [Orabug: 18524762]  
  - qlcnic: Fix loopback diagnostic test (Manish Chopra)  [Orabug: 18524762]  
  - net: qlcnic: slight optimization of addr compare (dingtianhong)  [Orabug: 18524762]  
  - drivers: net: Mark functions as static in qlcnic_83xx_hw.c (Rashika Kheria)   
  - drivers: net: Mark functions as static in qlcnic_io.c (Rashika Kheria)   
  - qlcnic: update version to 5.3.53 (Manish Chopra)  [Orabug: 18524762]  
  - qlcnic: Refactor support for 16 virtual NIC patch. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: sriov vlan code refactor. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Allow single Tx/Rx queue for all adapters. (Himanshu Madhani)  [Orabug: 18524762]  
  - qlcnic: Refactor initialize nic code path. (Sucheta Chakraborty)  [Orabug: 18524762]  
  - qlcnic: Dump mailbox registers when mailbox command times out. (Manish chopra)  [Orabug: 18524762]  
  - qlcnic: Fix mailbox processing during diagnostic test (Manish chopra)  [Orabug: 18524762]  
  - qlcnic: Allow firmware dump collection when auto firmware recovery is disabled (Manish Chopra)  [Orabug: 18524762]  
  - qlcnic: Fix usage of netif_tx_{wake, stop} api during link change. (Himanshu Madhani)  [Orabug: 18524762]  
  - treewide: Fix typo in printk (Masanari Iida)  [Orabug: 18524762]  
  - qlcnic: Revert sysfs interface patch for PCI BAR access (Sucheta Chakraborty)  [Orabug: 18524762]  
  - xen-netback: disable rogue vif in kthread context (Wei Liu)  [Orabug: 18528832]  
  - bfa: brocade bfa driver version 3.2.23.0 (Chuck Anderson)  [Orabug: 18552345]  
  - bna: brocade bna driver version 3.2.23.0 (Chuck Anderson)  [Orabug: 18552390]  
  - benet: Call dev_kfree_skby_any instead of kfree_skb. (Eric W. Biederman)  [Orabug: 18531060]  
  - be2net: update driver version to 10.2 (Sathya Perla)  [Orabug: 18531060]  
  - be2net: Fix vlans_added counter (Vasundhara Volam)  [Orabug: 18531060]  
  - be2net: Create multiple TXQs on RSS capable multi-channel BE3-R interfaces (Vasundhara Volam)  [Orabug: 18531060]  
  - be2net: fix pmac_id[] allocation size (Ravikumar Nelavelli)  [Orabug: 18531060]  
  - be2net: log LPVID used in multi-channel configs (Ravikumar Nelavelli)  [Orabug: 18531060]  
  - be2net: Use GET_PROFILE_CONFIG cmd for BE3-R to query max-vfs (Suresh Reddy)  [Orabug: 18531060]  
  - be2net: do external loopback test only when it is requested (Ivan Vecera)  [Orabug: 18531060]  
  - be2net: dma_sync each RX frag before passing it to the stack (Sathya Perla)  [Orabug: 18531060]  
  - be2net: isolate TX workarounds not applicable to Skyhawk-R (Vasundhara Volam)  [Orabug: 18531060]  
  - be2net: Fix skb double free in be_xmit_wrokarounds() failure path (Vasundhara Volam)  [Orabug: 18531060]  
  - be2net: clear promiscuous bits in adapter->flags while disabling promiscuous mode (Somnath kotur)  [Orabug: 18531060]  
  - be2net: Fix to reset transparent vlan tagging (Somnath Kotur)  [Orabug: 18531060]  
  - be2net: refactor multi-channel config code for Skyhawk-R chip (Vasundhara Volam)  [Orabug: 18531060]  
  - be2net: Update copyright year (Vasundhara Volam)  [Orabug: 18531060]  
  - be2net: Log a kernel message when UE is detected in BE & Skyhawk (Somnath Kotur)  [Orabug: 18531060]  
  - qla4xxx: Check for correct return status (Vikas Chaudhary)  [Orabug: 18552248]  
  - qla4xxx: qla4xxx: Move qla4_8xxx_ms_mem_write_128b to ql4_nx.c (Vikas Chaudhary)  [Orabug: 18552248]  
  - qla4xxx: Added PEX DMA Support for ISP8022 Adapter (Tej Parkash)  [Orabug: 18552248]  
  - qla4xxx: Add support of 0xFF capture mask for minidump (Tej Parkash)  [Orabug: 18552248]  
  - qla4xxx: Change default capture to firmware defined capture mask (Tej Parkash)  [Orabug: 18552248]  
  - qla4xxx: Do not wait for IO completion, after issuing stop_firmware (Tej Parkash)  [Orabug: 18552248]  
  - tg3: update from 3.134f to 3.136e (Jerry Snitselaar)  [Orabug: 18505595]  
  - bnx2x: update from 1.78.80 to 1.710.10 (Jerry Snitselaar)  [Orabug: 18505568]  
  - bnx2fc: update from 2.4.1e to 2.4.2e (Jerry Snitselaar)  [Orabug: 18505607]  
  - cnic: update from 2.5.18c to 2.5.18d (Jerry Snitselaar)  [Orabug: 18505589]  
  - bnx2: update from 2.2.4g to 2.2.5f (Jerry Snitselaar)  [Orabug: 18505581]  
  - SPEC: add version dependency for dracut on ol6 (Jerry Snitselaar)  [Orabug: 18438953]  
  - SPEC: don't build kernel-uek-headers (Jerry Snitselaar)  [Orabug: 12321095]  
  - NVMe: Retry failed commands with non-fatal errors (Keith Busch)   
  - NVMe: Add getgeo to block ops (Keith Busch)   
  - NVMe: Start-stop nvme_thread during device add-remove. (Dan McLeran)   
  - NVMe: Make I/O timeout a module parameter (Keith Busch)   
  - NVMe: CPU hot plug notification (Keith Busch)   
  - NVMe: per-cpu io queues (Keith Busch)   
  - NVMe: Replace DEFINE_PCI_DEVICE_TABLE (Matthew Wilcox)   
  - NVMe: Fix divide-by-zero in nvme_trans_io_get_num_cmds (Keith Busch)   
  - NVMe: IOCTL path RCU protect queue access (Keith Busch)   
  - NVMe: RCU protected access to io queues (Keith Busch)   
  - NVMe: Initialize device reference count earlier (Keith Busch)   
  - NVMe: Add CONFIG_PM_SLEEP to suspend/resume functions (Jingoo Han)   
  - NVMe: Namespace use after free on surprise removal (Keith Busch)   
  - NVMe: Correct uses of INIT_WORK (Matthew Wilcox)   
  - NVMe: Include device and queue numbers in interrupt name (Matthew Wilcox)   
  - NVMe: Add a pci_driver shutdown method (Keith Busch)   
  - NVMe: Disable admin queue on init failure (Keith Busch)   
  - NVMe: Dynamically allocate partition numbers (Matthew Wilcox)   
  - NVMe: Async IO queue deletion (Keith Busch)   
  - NVMe: Surprise removal handling (Keith Busch)   
  - NVMe: Abort timed out commands (Keith Busch)   
  - NVMe: Schedule reset for failed controllers (Keith Busch)   
  - NVMe: Device resume error handling (Keith Busch)   
  - NVMe: Cache dev->pci_dev in a local pointer (Matthew Wilcox)   
  - NVMe: Fix lockdep warnings (Matthew Wilcox)   
  - NVMe: compat SG_IO ioctl (Keith Busch)   
  - NVMe: Avoid shift operation when writing cq head doorbell (Haiyan Hu)   
  - NVMe: Split header file into user-visible and kernel-visible pieces (Matthew Wilcox)   
  - ixgbevf: Don't output NIC name before registered. (Ethan Zhao)  [Orabug: 18451591]  
  - Btrfs: create the uuid tree on remount rw (Josef Bacik)  [Orabug: 18414854]  
  - RDS: Fix slowdown when doing massively parallel workload (Bang Nguyen)  [Orabug: 18362849]  
  - PCI: Drop "irq" param from *_restore_msi_irqs() (Zhenzhong Duan)  [Orabug: 18355744]  
  - PCI: Add x86_msi.msi_mask_irq() and msix_mask_irq() (Zhenzhong Duan)  [Orabug: 18355746]  
  - pciehp: only wait command complete for really hotplug control (Yinghai Lu)  [Orabug: 18308863]  
  - ocfs2: dlm: fix recovery hung (Junxiao Bi)  [Orabug: 18285345]  
  - IPC: bugfix for msgrcv with msgtyp < 0 (Svenning Sørensen)  [Orabug: 18251383]  
  - reboot: migrate shutdown/reboot to boot cpu (Robin Holt)  [Orabug: 18380043]  
  - CPU hotplug: provide a generic helper to disable/enable CPU hotplug (Srivatsa S. Bhat)  [Orabug: 18380043]  
  - sparc64: don't treat 64-bit syscall return codes as 32-bit (Dave Kleikamp)  [Orabug: 18471474]


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-33.el7uek]
changelog:
  - dtrace: ensure one can try to get user pages without locking or faulting (Kris Van Hees)  [Orabug: 18653173]  
  - ipv6: don't set DST_NOCOUNT for remotely added routes (Sabrina Dubroca)  [Orabug: 18681501]  {CVE-2014-2309} 
  - kvm: x86: fix emulator buffer overflow (CVE-2014-0049) (Andrew Honig)  [Orabug: 18681519]  {CVE-2014-0049} 
  - ib_core: fmr pool hard lock up when cache enabled (Shamir Rabinovitch)  [Orabug: 18408531]  
  - bnx2x: disable PTP clock support (Jerry Snitselaar)  [Orabug: 18605376]  
  - x86, mm: Revert back good_end setting for 64bit (Brian Maly)  [Orabug: 17648536]  
  - IB/sdp: disable APM by default (Shamir Rabinovitch)  [Orabug: 18443201]  
  - vxlan: kernel panic when bringing up vxlan (Venkat Venkatsubra)  [Orabug: 18295741]  
  - ocfs2: call ocfs2_update_inode_fsync_trans when updating any inode (Darrick J. Wong)  [Orabug: 18257094]  
  - ocfs2: improve fsync efficiency and fix deadlock between aio_write and sync_file (Darrick J. Wong)  [Orabug: 18257094]  
  - Revert "ocfs2: fix i_mutex deadlock between aio_write and sync_file" (Jerry Snitselaar)  [Orabug: 18257094]  
  - config: align with rhck (Jerry Snitselaar)  [Orabug: 18685975]  
  - config: disable atmel drivers for ol7 (Jerry Snitselaar)  [Orabug: 18665656]  
  - config: enable support for squashfs features (Jerry Snitselaar)  [Orabug: 18655723]  
  - qla4xxx: Update driver verion to v5.04.00.05.06.02-uek3 (Tej Parkash)  [Orabug: 18552248]  
  - net: ipv4: current group_info should be put after using. (Wang, Xiaoming)  [Orabug: 18603519]  {CVE-2014-2851}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-34.el7uek]
changelog:
  - aacraid: missing capable() check in compat ioctl (Dan Carpenter)  [Orabug: 18721960]  {CVE-2013-6383} 
  - vhost: fix total length when packets are too short (Michael S. Tsirkin)  [Orabug: 18721975]  {CVE-2014-0077}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-35.el7uek]
changelog:
  - n_tty: Fix n_tty_write crash when echoing in raw mode (Peter Hurley)  [Orabug: 18754908]  {CVE-2014-0196} {CVE-2014-0196}


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-35.1.1.el7uek]
changelog:
  - futex: Make lookup_pi_state more robust (Thomas Gleixner)  [Orabug: 18918552]  {CVE-2014-3153} 
  - futex: Always cleanup owner tid in unlock_pi (Thomas Gleixner)  [Orabug: 18918552]  {CVE-2014-3153} 
  - futex: Validate atomic acquisition in futex_lock_pi_atomic() (Thomas Gleixner)  [Orabug: 18918552]  {CVE-2014-3153} 
  - futex: Forbid uaddr == uaddr2 in futex_requeue(..., requeue_pi=1) (Thomas Gleixner)  [Orabug: 18918552]  {CVE-2014-3153} {CVE-2014-3153}


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-35.2.1.el7uek]
changelog:
  - spec: fix symbolic link to build directory (Jerry Snitselaar)  [Orabug: 18973099]  
  - config ol7: enable netfilter reverse path filter support (Jerry Snitselaar)  [Orabug: 18973079]


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-35.3.1.el7uek]
changelog:
  - selinux: correctly label /proc inodes in use before the policy is loaded (Paul Moore)  [Orabug: 19064376]  
  - modsign: Ksplice certificate for module signing (Sasha Levin)  [Orabug: 18999924]  
  - net: fix kernel deadlock with interface rename and netdev name retrieval. (Nicolas Schichan)  [Orabug: 18969316]  
  - floppy: don't write kernel-only members to FDRAWCMD ioctl output (Matthew Daley)  [Orabug: 19028443]  {CVE-2014-1738} 
  - floppy: ignore kernel-only members in FDRAWCMD ioctl input (Matthew Daley)  [Orabug: 19028436]  {CVE-2014-1737}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-35.3.2.el7uek]
changelog:
  - l2tp: fix an unprivileged user to kernel privilege escalation (Sasha Levin)  [Orabug: 19229497]  {CVE-2014-4943} {CVE-2014-4943} 
  - ptrace,x86: force IRET path after a ptrace_stop() (Tejun Heo)  [Orabug: 19230689]  {CVE-2014-4699} 
  - net: flow_dissector: fail on evil iph->ihl (Jason Wang)  [Orabug: 19231234]  {CVE-2013-4348}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-35.3.3.el7uek]
changelog:
  - filter: prevent nla extensions to peek beyond the end of the message (Mathias Krause)  [Orabug: 19315781]  {CVE-2014-3144} {CVE-2014-3145} 
  - mac80211: fix AP powersave TX vs. wakeup race (Emmanuel Grumbach)  [Orabug: 19316457]  {CVE-2014-2706}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-35.3.5.el7uek]
changelog:
  - net: Use netlink_ns_capable to verify the permisions of netlink messages (Eric W. Biederman)  [Orabug: 19404231]  {CVE-2014-0181} 
  - net: Add variants of capable for use on netlink messages (Eric W. Biederman)  [Orabug: 19404231]  
  - net: Add variants of capable for use on on sockets (Eric W. Biederman)  [Orabug: 19404231]  
  - netlink: Rename netlink_capable netlink_allowed (Eric W. Biederman)  [Orabug: 19404231]  
  - sctp: Fix sk_ack_backlog wrap-around problem (Xufeng Zhang)  [Orabug: 19404244]  {CVE-2014-4667}


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-36.el7uek]
changelog:
  - ocfs2: make ocfs2 do not log ENOENT error (Xiaowei.Hu)   
  - Btrfs: return EPERM when deleting a default subvolume (Guangyu Sun)  [Orabug: 17661944]  
  - i2c: i801: SMBus patch for Intel Avoton DeviceIDs (Seth Heasley)  [Orabug: 17983409]  
  - ata_piix: IDE-mode SATA patch for Intel Avoton DeviceIDs (Seth Heasley)  [Orabug: 17983409]  
  - i2c: iSMT: add Intel Avoton DeviceIDs (Seth Heasley)  [Orabug: 17983409]  
  - allow for more than one data extent when creating xattr (Tariq Saeed)  [Orabug: 18108070]  
  - tools / power turbostat: Support Silvermont (Len Brown)  [Orabug: 18349316]  
  - intel_idle: Support Intel Atom Processor C2000 Product Family (Len Brown)  [Orabug: 18349316]  
  - ocfs2: quorum: add a log for node not fenced (Junxiao Bi)  [Orabug: 18363396]  
  - ocfs2: o2net: set tcp user timeout to max value (Junxiao Bi)  [Orabug: 18363396]  
  - ocfs2: o2net: don't shutdown connection when idle timeout (Junxiao Bi)  [Orabug: 18363396]  
  - fix ext4_sync_file deadlock in uek3 (Darrick J. Wong)  [Orabug: 18389351]  
  - block: properly stack underlying max_segment_size to DM device (Mike Snitzer)  [Orabug: 18611974]  
  - Revert "tcp: tsq: restore minimal amount of queueing" (Guangyu Sun)  [Orabug: 18621531]  
  - x86, mm: Probe memory block size for generic x86 64bit (Yinghai Lu)  [Orabug: 18650337]  
  - memblock, numa: binary search node id (Yinghai Lu)  [Orabug: 18650337]  
  - mm: speedup in __early_pfn_to_nid (Russ Anderson)  [Orabug: 18650337]  
  - netfilter: nf_nat: fix access to uninitialized buffer in IRC NAT helper (Daniel Borkmann)  [Orabug: 18681787]  {CVE-2014-1690} 
  - ath9k_htc: properly set MAC address and BSSID mask (Mathy Vanhoef)  [Orabug: 18681788]  {CVE-2013-4579} 
  - perf/ftrace: Fix paranoid level for enabling function tracer (Steven Rostedt)  [Orabug: 18681870]  {CVE-2013-2930} 
  - ext4: fix memory leakage in mext_check_coverage (Dmitry Monakhov)  [Orabug: 18684170]  
  - ext4: defragmentation code cleanup (Dmitry Monakhov)  [Orabug: 18684170]  
  - block: Enable sysfs nomerge control for I/O requests in the plug list (Alireza Haghdoost)  [Orabug: 18736016]  
  - config ol7: enable netfilter reverse path filter support (Jerry Snitselaar)  [Orabug: 18845282]  
  - spec: fix symbolic link to build directory (Jerry Snitselaar)  [Orabug: 18835306]


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-37.el7uek]
changelog:
  - e1000: fix possible reset_task running after adapter down (Vladimir Davydov)  [Orabug: 18257498]  
  - e1000: fix lockdep warning in e1000_reset_task (Vladimir Davydov)  [Orabug: 18257474]  
  - e1000: prevent oops when adapter is being closed and reset simultaneously (yzhu1)  [Orabug: 18257442]  
  - tools/power turbostat: display C8, C9, C10 residency (Kristen Carlson Accardi)  [Orabug: 18520774]  
  - turbostat: run on HSX (Len Brown)  [Orabug: 18520774]  
  - tools/power turbostat: support Haswell (Jerry Snitselaar)  [Orabug: 18520774]  
  - net: fix kernel deadlock with interface rename and netdev name retrieval. (Nicolas Schichan)  [Orabug: 18906608]  
  - dtrace: ensure that building outside src tree works (Kris Van Hees)  [Orabug: 18691341]  
  - futex: Make lookup_pi_state more robust (Thomas Gleixner)  [Orabug: 18918595]  {CVE-2014-3153} 
  - futex: Always cleanup owner tid in unlock_pi (Thomas Gleixner)  [Orabug: 18918595]  {CVE-2014-3153} 
  - futex: Validate atomic acquisition in futex_lock_pi_atomic() (Thomas Gleixner)  [Orabug: 18918595]  {CVE-2014-3153} 
  - futex: Forbid uaddr == uaddr2 in futex_requeue(..., requeue_pi=1) (Thomas Gleixner)  [Orabug: 18918595]  {CVE-2014-3153} {CVE-2014-3153} 
  - futex: Prevent attaching to kernel threads (Thomas Gleixner)  [Orabug: 18923481]  
  - futex: Add another early deadlock detection check (Thomas Gleixner)  [Orabug: 18923479]  
  - lockd: ensure we tear down any live sockets when socket creation fails during lockd_up (Jeff Layton)  [Orabug: 18918179]  
  - libceph: resend all writes after the osdmap loses the full flag (Josh Durgin)  [Orabug: 18918180]  
  - dm thin: fix dangling bio in process_deferred_bios error path (Mike Snitzer)  [Orabug: 18918178]  
  - dm transaction manager: fix corruption due to non-atomic transaction commit (Joe Thornber)  [Orabug: 18918177]  
  - locks: allow __break_lease to sleep even when break_time is 0 (Jeff Layton)  [Orabug: 18918176]  
  - iwlwifi: dvm: take mutex when sending SYNC BT config command (Emmanuel Grumbach)  [Orabug: 18918175]  
  - virtio_balloon: don't softlockup on huge balloon changes. (Rusty Russell)  [Orabug: 18918174]  
  - drivers/tty/hvc: don't free hvc_console_setup after init (Tomoki Sekiyama)  [Orabug: 18918173]  
  - usb: musb: avoid NULL pointer dereference (Felipe Balbi)  [Orabug: 18918172]  
  - ext4: use i_size_read in ext4_unaligned_aio() (Theodore Ts'o)  [Orabug: 18918171]  
  - ext4: fix jbd2 warning under heavy xattr load (Jan Kara)  [Orabug: 18918169]  
  - ocfs2: do not put bh when buffer_uptodate failed (alex chen)  [Orabug: 18918168]  
  - hung_task: check the value of "sysctl_hung_task_timeout_sec" (Liu Hua)  [Orabug: 18918167]  
  - mm: hugetlb: fix softlockup when a large number of hugepages are freed. (Mizuma, Masayoshi)  [Orabug: 18918166]  
  - mm: try_to_unmap_cluster() should lock_page() before mlocking (Vlastimil Babka)  [Orabug: 18918165]  
  - reiserfs: fix race in readdir (Jeff Mahoney)  [Orabug: 18918164]  
  - x86/efi: Correct EFI boot stub use of code32_start (Matt Fleming)  [Orabug: 18918162]  
  - iscsi-target: Fix ERL=2 ASYNC_EVENT connection pointer bug (Nicholas Bellinger)  [Orabug: 18918161]  
  - nfsd: set timeparms.to_maxval in setup_callback_client (Jeff Layton)  [Orabug: 18918160]  
  - NFSD: Traverse unconfirmed client through hash-table (Kinglong Mee)  [Orabug: 18918158]  
  - nfsd4: fix setclientid encode size (J. Bruce Fields)  [Orabug: 18918157]  
  - nfsd: check passed socket's net matches NFSd superblock's one (Stanislav Kinsbursky)  [Orabug: 18918156]  
  - nfsd: notify_change needs elevated write count (J. Bruce Fields)  [Orabug: 18918155]  
  - nfsd4: fix test_stateid error reply encoding (J. Bruce Fields)  [Orabug: 18918154]  
  - nfsd4: buffer-length check for SUPPATTR_EXCLCREAT (J. Bruce Fields)  [Orabug: 18918153]  
  - nfsd4: session needs room for following op to error out (J. Bruce Fields)  [Orabug: 18918152]  
  - USB: fix crash during hotplug of PCI USB controller card (Alan Stern)  [Orabug: 18918151]  
  - ftrace/x86: One more missing sync after fixup of function modification failure (Petr Mladek)  [Orabug: 18918150]  
  - wait: fix reparent_leader() vs EXIT_DEAD->EXIT_ZOMBIE race (Oleg Nesterov)  [Orabug: 18918148]  
  - sparc: PCI: Fix incorrect address calculation of PCI Bridge windows on Simba-bridges (oftedal)  [Orabug: 18918147]  
  - jffs2: remove from wait queue after schedule() (Li Zefan)  [Orabug: 18918146]  
  - jffs2: avoid soft-lockup in jffs2_reserve_space_gc() (Li Zefan)  [Orabug: 18918144]  
  - jffs2: Fix crash due to truncation of csize (Ajesh Kunhipurayil Vijayan)  [Orabug: 18918143]  
  - jffs2: Fix segmentation fault found in stress test (Kamlakant Patel)  [Orabug: 18918142]  
  - ext4: fix error return from ext4_ext_handle_uninitialized_extents() (Eric Whitney)  [Orabug: 18918141]  
  - pid_namespace: pidns_get() should check task_active_pid_ns() != NULL (Oleg Nesterov)  [Orabug: 18918139]  
  - Char: ipmi_bt_sm, fix infinite loop (Jiri Slaby)  [Orabug: 18918137]  
  - isdnloop: several buffer overflows (Dan Carpenter)  [Orabug: 18918136]  
  - vxlan: fix potential NULL dereference in arp_reduce() (David Stevens)  [Orabug: 18918133]  
  - net: socket: error on a negative msg_namelen (Matthew Leach)  [Orabug: 18918132]  
  - tcp: tcp_release_cb() should release socket ownership (Eric Dumazet)  [Orabug: 18918130]  
  - inet: frag: make sure forced eviction removes all frags (Florian Westphal)  [Orabug: 18918129]  
  - bridge: multicast: add sanity check for query source addresses (Linus Lüssing)  [Orabug: 18918127]  
  - net: sctp: fix skb leakage in COOKIE ECHO path of chunk->auth_chunk (Daniel Borkmann)  [Orabug: 18918126]  
  - cpuidle: Check the result of cpuidle_get_driver() against NULL (Daniel Fu)  [Orabug: 18918124]  
  - mm: close PageTail race (David Rientjes)  [Orabug: 18918123]  
  - ext4: atomically set inode->i_flags in ext4_set_inode_flags() (Theodore Ts'o)  [Orabug: 18918122]  
  - sched/autogroup: Fix race with task_groups list (Gerald Schaefer)  [Orabug: 18918121]  
  - e100: Fix "disabling already-disabled device" warning (Michele Baldessari)  [Orabug: 18918120]  
  - KVM: VMX: fix use after free of vmx->loaded_vmcs (Marcelo Tosatti)  [Orabug: 18918119]  
  - KVM: x86: handle invalid root_hpa everywhere (Marcelo Tosatti)  [Orabug: 18918117]  
  - KVM: MMU: handle invalid root_hpa at __direct_map (Marcelo Tosatti)  [Orabug: 18918116]  
  - Fix mountpoint reference leakage in linkat (Oleg Drokin)  [Orabug: 18917998]  
  - jiffies: Avoid undefined behavior from signed overflow (Paul E. McKenney)  [Orabug: 18917997]  
  - x86, fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Suresh Siddha)  [Orabug: 18917996]  
  - SCSI: isci: correct erroneous for_each_isci_host macro (Lukasz Dorau)  [Orabug: 18917994]  
  - SCSI: isci: fix reset timeout handling (Dan Williams)  [Orabug: 18917993]  
  - mm/compaction: break out of loop on !PageBuddy in isolate_freepages_block (Laura Abbott)  [Orabug: 18917992]  
  - vmxnet3: fix netpoll race condition (Neil Horman)  [Orabug: 18917990]  
  - NFS: Fix a delegation callback race (Trond Myklebust)  [Orabug: 18917989]  
  - firewire: net: fix use after free (Stefan Richter)  [Orabug: 18917988]  
  - cpuset: fix a race condition in __cpuset_node_allowed_softwall() (Li Zefan)  [Orabug: 18917986]  
  - genirq: Remove racy waitqueue_active check (Chuansheng Liu)  [Orabug: 18917985]  
  - x86/amd/numa: Fix northbridge quirk to assign correct NUMA node (Daniel J Blueman)  [Orabug: 18917984]  
  - drm/ttm: don't oops if no invalidate_caches() (Rob Clark)  [Orabug: 18917982]  
  - mac80211: clear sequence/fragment number in QoS-null frames (Johannes Berg)  [Orabug: 18917981]  
  - mac80211: fix AP powersave TX vs. wakeup race (Emmanuel Grumbach)  [Orabug: 18917979]  
  - sfc: check for NULL efx->ptp_data in efx_ptp_event (Edward Cree)  [Orabug: 18917978]  
  - sched: Fix double normalization of vruntime (George McCollister)  [Orabug: 18917977]  
  - ocfs2 syncs the wrong range... (Al Viro)  [Orabug: 18917976]  
  - ocfs2: fix quota file corruption (Jan Kara)  [Orabug: 18917975]  
  - dm thin: fix the error path for the thin device constructor (Mike Snitzer)  [Orabug: 18917974]  
  - i7300_edac: Fix device reference count (Jean Delvare)  [Orabug: 18917973]  
  - quota: Fix race between dqput() and dquot_scan_active() (Jan Kara)  [Orabug: 18917972]  
  - perf: Fix hotplug splat (Peter Zijlstra)  [Orabug: 18917971]  
  - workqueue: ensure @task is valid across kthread_stop() (Lai Jiangshan)  [Orabug: 18917969]  
  - usb: ehci: fix deadlock when threadirqs option is used (Stanislaw Gruszka)  [Orabug: 18917967]  
  - i7core_edac: Fix PCI device reference count (Jean Delvare)  [Orabug: 18917966]  
  - ACPI / PCI: Fix memory leak in acpi_pci_irq_enable() (Tomasz Nowicki)  [Orabug: 18917965]  
  - cpufreq: powernow-k8: Initialize per-cpu data-structures properly (Srivatsa S. Bhat)  [Orabug: 18917964]  
  - perf/x86: Fix event scheduling (Peter Zijlstra)  [Orabug: 18917963]  
  - x86: dma-mapping: fix GFP_ATOMIC macro usage (Marek Szyprowski)  [Orabug: 18917962]  
  - SUNRPC: Fix races in xs_nospace() (Trond Myklebust)  [Orabug: 18917961]  
  - net: use __GFP_NORETRY for high order allocations (Eric Dumazet)  [Orabug: 18917959]  
  - ipv4: fix counter in_slow_tot (Duan Jiong)  [Orabug: 18917958]  
  - bonding: 802.3ad: make aggregator_identifier bond-private (Jiri Bohac)  [Orabug: 18917957]  
  - tcp: tsq: fix nonagle handling (John Ogness)  [Orabug: 18917955]  
  - net: fix 'ip rule' iif/oif device rename (Maciej Żenczykowski)  [Orabug: 18917953]  
  - ipv4: Fix runtime WARNING in rtmsg_ifa() (Geert Uytterhoeven)  [Orabug: 18917949]  
  - 9p/trans_virtio.c: Fix broken zero-copy on vmalloc() buffers (Richard Yao)  [Orabug: 18917946]  
  - CIFS: Fix too big maxBuf size for SMB3 mounts (Pavel Shilovsky)  [Orabug: 18917864]  
  - ext4: don't leave i_crtime.tv_sec uninitialized (Theodore Ts'o)  [Orabug: 18917863]  
  - ext4: fix online resize with a non-standard blocks per group setting (Theodore Ts'o)  [Orabug: 18917862]  
  - ext4: fix online resize with very large inode tables (Theodore Ts'o)  [Orabug: 18917643]  
  - modsign: Ksplice certificate for module signing (Sasha Levin)  [Orabug: 18793405]


author: Jerry Snitselaar <jerry.snitselaar@oracle.com> [3.8.13-38.el7uek]
changelog:
  - NVMe: Fix START_STOP_UNIT Scsi->NVMe translation. (Dan McLeran)  [Orabug: 18940591]  
  - NVMe: Use Log Page constants in SCSI emulation (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Define Log Page constants (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Fix hot cpu notification dead lock (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Rename io_timeout to nvme_io_timeout (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Use last bytes of f/w rev SCSI Inquiry (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Adhere to request queue block accounting enable/disable (Sam Bradshaw)  [Orabug: 18940591]  
  - NVMe: Fix nvme get/put queue semantics (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Delete NVME_GET_FEAT_TEMP_THRESH (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Make admin timeout a module parameter (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Make iod bio timeout a parameter (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Prevent possible NULL pointer dereference (Santosh Y)  [Orabug: 18940591]  
  - NVMe: Fix the buffer size passed in GetLogPage(CDW10.NUMD) (Indraneel Mukherjee)  [Orabug: 18940591]  
  - NVMe: Enable BUILD_BUG_ON checks (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Add tracepoints (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Protect against badly formatted CQEs (Keith Busch)  [Orabug: 18940591]  
  - NVMe: Improve error messages (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Update copyright headers (Matthew Wilcox)  [Orabug: 18940591]  
  - NVMe: Implement PCIe reset notification callback (Martin K. Petersen)  [Orabug: 18940591]  
  - PCI: Notify driver before and after device reset (Martin K. Petersen)  [Orabug: 18940591]  
  - floppy: don't write kernel-only members to FDRAWCMD ioctl output (Matthew Daley)  [Orabug: 19028442]  {CVE-2014-1738} 
  - floppy: ignore kernel-only members in FDRAWCMD ioctl input (Matthew Daley)  [Orabug: 19028435]  {CVE-2014-1737} 
  - [SCSI] sd: notify block layer when using temporary change to cache_type (Vaughan Cao)  [Orabug: 18829236]  
  - [SCSI] sd: Fix parsing of 'temporary ' cache mode prefix (Ben Hutchings)  [Orabug: 18829236]  
  - drivers: net: xen-netfront: fix array initialization bug (Vincenzo Maffione)   
  - xen-netback: Fix handling of skbs requiring too many slots (Zoltan Kiss)   
  - xen-netback: fix race between napi_complete() and interrupt handler (David Vrabel)   
  - xen-netback: Fix grant ref resolution in RX path (Zoltan Kiss)   
  - xen-netback: Trivial format string fix (Zoltan Kiss)   
  - xen-netback: Grant copy the header instead of map and memcpy (Zoltan Kiss)   
  - xen-netback: Rename map ops (Zoltan Kiss)   
  - xen-netback: BUG_ON in xenvif_rx_action() not catching overflow (Paul Durrant)   
  - Revert "xen/mmu: Move the setting of pvops.write_cr3 to later phase in bootup." (Konrad Rzeszutek Wilk)   
  - xen-netback: worse-case estimate in xenvif_rx_action is underestimating (Paul Durrant)   
  - xen-netback: remove pointless clause from if statement (Paul Durrant)   
  - xen-netback: Functional follow-up patch for grant mapping series (Zoltan Kiss)   
  - xen-netback: Non-functional follow-up patch for grant mapping series (Zoltan Kiss)   
  - xen-netback: Stop using xenvif_tx_pending_slots_available (Zoltan Kiss)   
  - xen-netback: Proper printf format for ptrdiff_t is 't'. (David S. Miller)   
  - Revert "xen-netback: Aggregate TX unmap operations" (Zoltan Kiss)   
  - xen-netback: use skb_is_gso in xenvif_start_xmit (Wei Liu)   
  - Xen-netback: Fix issue caused by using gso_type wrongly (Annie Li)   
  - xen-netback: Aggregate TX unmap operations (Zoltan Kiss)   
  - xen-netback: Timeout packets in RX path (Zoltan Kiss)   
  - xen-netback: Handle guests with too many frags (Zoltan Kiss)   
  - xen-netback: Add stat counters for zerocopy (Zoltan Kiss)   
  - xen-netback: Remove old TX grant copy definitons and fix indentations (Zoltan Kiss)   
  - xen-netback: Introduce TX grant mapping (Zoltan Kiss)   
  - xen-netback: Handle foreign mapped pages on the guest RX path (Zoltan Kiss)   
  - xen-netback: Minor refactoring of netback code (Zoltan Kiss)   
  - xen-netback: Use skb->cb for pending_idx (Zoltan Kiss)   
  - Revert "Xen-netback: Fix issue caused by using gso_type wrongly" (Annie Li)   
  - arm64: introduce virt_to_pfn (Stefano Stabellini)   
  - xen/events/fifo: correctly align bitops (Vladimir Murzin)   
  - arm/xen: Remove definiition of virt_to_pfn in asm/xen/page.h (Julien Grall)   
  - xen/manage: Poweroff forcefully if user-space is not yet up. (Konrad Rzeszutek Wilk)   
  - xen/xenbus: Avoid synchronous wait on XenBus stalling shutdown/restart. (Konrad Rzeszutek Wilk)   
  - xen-pciback: silence an unwanted debug printk (Dan Carpenter)   
  - xen: fix memory leak in __xen_pcibk_add_pci_dev() (Daeseok Youn)   
  - xen/acpi-processor: fix enabling interrupts on syscore_resume (Stanislaw Gruszka)   
  - xen/grant-table: Refactor gnttab_[un]map_refs to avoid m2p_override (Zoltan Kiss)   
  - xen: remove XEN_PRIVILEGED_GUEST (Michael Opdenacker)   
  - xen/xenbus: remove unused xenbus_bind_evtchn() (David Vrabel)   
  - xen/events: remove unnecessary call to bind_evtchn_to_cpu() (David Vrabel)   
  - xen/events: remove the unused resend_irq_on_evtchn() (David Vrabel)   
  - drivers:xen-selfballoon:reset 'frontswap_inertia_counter' after frontswap_shrink (Bob Liu)   
  - drivers: xen: Include appropriate header file in pcpu.c (Rashika Kheria)   
  - drivers: xen: Mark function as static in platform-pci.c (Rashika Kheria)   
  - xen-blkif: drop struct blkif_request_segment_aligned (Roger Pau Monne)   
  - xen-blkback: fix shutdown race (Roger Pau Monne)   
  - xen/balloon: flush persistent kmaps in correct position (Wei Liu)   
  - ia64/xen: Remove Xen support for ia64 even more (Paul Bolle)   
  - xen: install xen/gntdev.h and xen/gntalloc.h (David Vrabel)   
  - xen/events: bind all new interdomain events to VCPU0 (David Vrabel)   
  - xen/pvh: set CR4 flags for APs (Mukesh Rathor)   
  - Revert "xen/grant-table: Avoid m2p_override during mapping" (Konrad Rzeszutek Wilk)   
  - xen/pvh: Fix misplaced kfree from xlated_setup_gnttab_pages (Dave Jones)   
  - drivers: xen: deaggressive selfballoon driver (Bob Liu)   
  - xen/grant-table: Avoid m2p_override during mapping (Zoltan Kiss)   
  - xen/gnttab: Use phys_addr_t to describe the grant frame base address (Julien Grall)   
  - xen: swiotlb: handle sizeof(dma_addr_t) != sizeof(phys_addr_t) (Ian Campbell)   
  - arm/xen: Initialize event channels earlier (Julien Grall)   
  - xen/pvh: Set X86_CR0_WP and others in CR0 (v2) (Roger Pau Monne)   
  - MAINTAINERS: add git repository for Xen (David Vrabel)   
  - xen/pvh: Use 'depend' instead of 'select'. (Konrad Rzeszutek Wilk)   
  - xen: delete new instances of __cpuinit usage (Paul Gortmaker)   
  - xen/fb: allow xenfb initialization for hvm guests (Stefano Stabellini)   
  - xen/evtchn_fifo: fix error return code in evtchn_fifo_setup() (Wei Yongjun)   
  - xen-platform: fix error return code in platform_pci_init() (Wei Yongjun)   
  - xen/pvh: remove duplicated include from enlighten.c (Wei Yongjun)   
  - xen/pvh: Fix compile issues with xen_pvh_domain() (Konrad Rzeszutek Wilk)   
  - xen: Use dev_is_pci() to check whether it is pci device (Yijing Wang)   
  - xen/grant-table: Force to use v1 of grants. (Konrad Rzeszutek Wilk)   
  - xen/pvh: Support ParaVirtualized Hardware extensions (v3). (Mukesh Rathor)   
  - xen/pvh: Piggyback on PVHVM XenBus. (Mukesh Rathor)   
  - xen/pvh: Piggyback on PVHVM for grant driver (v4) (Konrad Rzeszutek Wilk)   
  - xen/grant: Implement an grant frame array struct (v3). (Konrad Rzeszutek Wilk)   
  - xen/grant-table: Refactor gnttab_init (Konrad Rzeszutek Wilk)   
  - xen/grants: Remove gnttab_max_grant_frames dependency on gnttab_init. (Konrad Rzeszutek Wilk)   
  - xen/pvh: Piggyback on PVHVM for event channels (v2) (Mukesh Rathor)   
  - xen/pvh: Update E820 to work with PVH (v2) (Mukesh Rathor)   
  - xen/pvh: Secondary VCPU bringup (non-bootup CPUs) (Mukesh Rathor)   
  - xen/pvh: Load GDT/GS in early PV bootup code for BSP. (Mukesh Rathor)   
  - xen/pvh: Setup up shared_info. (Mukesh Rathor)   
  - xen/pvh/mmu: Use PV TLB instead of native. (Mukesh Rathor)   
  - xen/pvh: MMU changes for PVH (v2) (Mukesh Rathor)   
  - xen/mmu: Cleanup xen_pagetable_p2m_copy a bit. (Konrad Rzeszutek Wilk)   
  - xen/mmu/p2m: Refactor the xen_pagetable_init code (v2). (Konrad Rzeszutek Wilk)   
  - xen/pvh: Don't setup P2M tree. (Konrad Rzeszutek Wilk)   
  - xen/pvh: Early bootup changes in PV code (v4). (Mukesh Rathor)   
  - xen/pvh/x86: Define what an PVH guest is (v3). (Mukesh Rathor)   
  - xen/p2m: Check for auto-xlat when doing mfn_to_local_pfn. (Mukesh Rathor)   
  - xen/events: use the FIFO-based ABI if available (David Vrabel)   
  - xen/x86: set VIRQ_TIMER priority to maximum (David Vrabel)   
  - xen/events: allow event channel priority to be set (David Vrabel)   
  - xen/events: Add the hypervisor interface for the FIFO-based event channels (David Vrabel)   
  - xen/evtchn: support more than 4096 ports (David Vrabel)   
  - xen/events: add xen_evtchn_mask_all() (David Vrabel)   
  - xen/events: Refactor evtchn_to_irq array to be dynamically allocated (David Vrabel)   
  - xen/events: add a evtchn_op for port setup (David Vrabel)   
  - xen/events: allow setup of irq_info to fail (David Vrabel)   
  - xen/events: add struct evtchn_ops for the low-level port operations (David Vrabel)   
  - xen/events: move 2-level specific code into its own file (David Vrabel)   
  - xen/events: move drivers/xen/events.c into drivers/xen/events/ (David Vrabel)   
  - xen/events: replace raw bit ops with functions (Wei Liu)   
  - xen/events: introduce test_and_set_mask() (Wei Liu)   
  - xen/events: remove unnecessary init_evtchn_cpu_bindings() (David Vrabel)   
  - xen/events: refactor retrigger_dynirq() and resend_irq_on_evtchn() (David Vrabel)   
  - xen/pci: Fix build on non-x86 (Ben Hutchings)   
  - xen: simplify balloon_first_page() with list_first_entry_or_null() (Jie Liu)   
  - asm/xen/page.h: remove redundant semicolon (Wei Liu)   
  - xen: balloon: enable for ARM (Ian Campbell)   
  - xen/pvhvm: Remove the xen_platform_pci int. (Konrad Rzeszutek Wilk)   
  - xen/pvhvm: If xen_platform_pci=0 is set don't blow up (v4). (Konrad Rzeszutek Wilk)   
  - Revert "xen-blkback: fix shutdown race" (Konrad Rzeszutek Wilk)   
  - block: xen-blkfront: Fix possible NULL ptr dereference (Felipe Pena)   
  - xen-blkfront: Silence pfn maybe-uninitialized warning (Tim Gardner)   
  - xen-blkfront: restore the non-persistent data path (Roger Pau Monne)   
  - xen/balloon: Seperate the auto-translate logic properly (v2) (Konrad Rzeszutek Wilk)   
  - xen/block: Correctly define structures in public headers on ARM32 and ARM64 (Julien Grall)   
  - arm: xen: foreign mapping PTEs are special. (Ian Campbell)   
  - xen/arm64: do not call the swiotlb functions twice (Stefano Stabellini)   
  - xen: privcmd: do not return pages which we have failed to unmap (Ian Campbell)   
  - XEN: Grant table address, xen_hvm_resume_frames, is a phys_addr not a pfn (Eric Trudeau)   
  - xen/gnttab: leave lazy MMU mode in the case of a m2p override failure (Matt Wilson)   
  - xen/arm: p2m_init and p2m_lock should be static (Stefano Stabellini)   
  - arm/xen: Export phys_to_mach to fix Xen module link errors (Josh Boyer)   
  - swiotlb-xen: add missing xen_dma_map_page call (Stefano Stabellini)   
  - xen/arm: pfn_to_mfn and mfn_to_pfn return the argument if nothing is in the p2m (Stefano Stabellini)   
  - arm,arm64/include/asm/io.h: define struct bio_vec (Stefano Stabellini)   
  - swiotlb-xen: missing include dma-direction.h (Stefano Stabellini)   
  - pci-swiotlb-xen: call pci_request_acs only ifdef CONFIG_PCI (Stefano Stabellini)   
  - xen: delete new instances of added __cpuinit (Paul Gortmaker)   
  - xen/mcfg: Call PHYSDEVOP_pci_mmcfg_reserved for MCFG areas. (Konrad Rzeszutek Wilk)   
  - xen: remove deprecated IRQF_DISABLED (Michael Opdenacker)   
  - x86/xen: remove deprecated IRQF_DISABLED (Michael Opdenacker)   
  - swiotlb-xen: fix error code returned by xen_swiotlb_map_sg_attrs (Stefano Stabellini)   
  - swiotlb-xen: static inline xen_phys_to_bus, xen_bus_to_phys, xen_virt_to_bus and range_straddles_page_boundary (Stefano Stabellini)   
  - grant-table: call set_phys_to_machine after mapping grant refs (Stefano Stabellini)   
  - arm,arm64: do not always merge biovec if we are running on Xen (Stefano Stabellini)   
  - swiotlb: print a warning when the swiotlb is full (Stefano Stabellini)   
  - swiotlb-xen: use xen_dma_map/unmap_page, xen_dma_sync_single_for_cpu/device (Stefano Stabellini)   
  - xen: introduce xen_dma_map/unmap_page and xen_dma_sync_single_for_cpu/device (Stefano Stabellini)   
  - tracing/events: Fix swiotlb tracepoint creation (Thierry Reding)   
  - swiotlb-xen: use xen_alloc/free_coherent_pages (Stefano Stabellini)   
  - xen: introduce xen_alloc/free_coherent_pages (Stefano Stabellini)   
  - arm64/xen: get_dma_ops: return xen_dma_ops if we are running as xen_initial_domain (Stefano Stabellini)   
  - arm/xen: get_dma_ops: return xen_dma_ops if we are running as xen_initial_domain (Stefano Stabellini)   
  - swiotlb-xen: introduce xen_swiotlb_set_dma_mask (Stefano Stabellini)   
  - xen/arm,arm64: enable SWIOTLB_XEN (Stefano Stabellini)   
  - xen: make xen_create_contiguous_region return the dma address (Stefano Stabellini)   
  - xen/x86: allow __set_phys_to_machine for autotranslate guests (Stefano Stabellini)   
  - arm/xen,arm64/xen: introduce p2m (Stefano Stabellini)   
  - arm64: define DMA_ERROR_CODE (Stefano Stabellini)   
  - arm: make SWIOTLB available (Stefano Stabellini)   
  - tracing/events: Add bounce tracing to swiotbl (Zoltan Kiss)   
  - xen/hvc: If we use xen_raw_printk let it also work on HVM guests. (Konrad Rzeszutek Wilk)   
  - xen/mmu: Correct PAT MST setting. (Konrad Rzeszutek Wilk)   
  - balloon/pv-superpage: We shouldn't enable this on HVM guests (Konrad Rzeszutek Wilk)   
  - Fix balloon driver to work properly with balloon_hugepages but no superpage flag (Dave McCracken)   
  - Add support for pv hugepages and support for huge balloon pages. (Dave McCracken)   
  - xen: Fix possible user space selector corruption (Frediano Ziglio)   
  - xen/balloon: don't alloc page while non-preemptible (David Vrabel)   
  - xen/balloon: remove BUG_ON in increase_reservation (Wei Liu)   
  - xen/balloon: ensure preemption is disabled when using a scratch page (David Vrabel)   
  - xen/smp: Update pv_lock_ops functions before alternative code starts under PVHVM (Konrad Rzeszutek Wilk)   
  - xen/spinlock: Fix locking path engaging too soon under PVHVM. (Konrad Rzeszutek Wilk)   
  - xen/arm: disable cpuidle and cpufreq when linux is running as dom0 (Julien Grall)   
  - xen/p2m: Don't call get_balloon_scratch_page() twice, keep interrupts disabled for multicalls (Boris Ostrovsky)   
  - hvc_xen: Remove unnecessary __GFP_ZERO from kzalloc (Joe Perches)   
  - xen/balloon: don't set P2M entry for auto translated guest (Wei Liu)   
  - xen/evtchn: double free on error (Dan Carpenter)   
  - Xen: Fix retry calls into PRIVCMD_MMAPBATCH*. (Andres Lagar-Cavilla)   
  - xen/m2p: use GNTTABOP_unmap_and_replace to reinstate the original mapping (Stefano Stabellini)   
  - xen: fix ARM build after 6efa20e4 (Stefano Stabellini)   
  - MAINTAINERS: Remove Jeremy from the Xen subsystem. (Konrad Rzeszutek Wilk)   
  - xen/events: document behaviour when scanning the start word for events (David Vrabel)   
  - x86/xen: during early setup, only 1:1 map the ISA region (David Vrabel)   
  - x86/xen: disable premption when enabling local irqs (David Vrabel)   
  - swiotlb-xen: replace dma_length with sg_dma_len() macro (Stefano Stabellini)   
  - swiotlb: replace dma_length with sg_dma_len() macro (EunBong Song)   
  - xen/balloon: set a mapping for ballooned out pages (Stefano Stabellini)   
  - Revert "Add support for pv hugepages and support for huge balloon pages." (Konrad Rzeszutek Wilk)   
  - Revert "Fix balloon driver to work properly with balloon_hugepages but no superpage flag" (Konrad Rzeszutek Wilk)   
  - xen/evtchn: improve scalability by using per-user locks (David Vrabel)   
  - xen/p2m: avoid unneccesary TLB flush in m2p_remove_override() (David Vrabel)   
  - MAINTAINERS: Add in two extra co-maintainers of the Xen tree. (Konrad Rzeszutek Wilk)   
  - MAINTAINERS: Update the Xen subsystem's with proper mailing list. (Konrad Rzeszutek Wilk)   
  - xen: replace strict_strtoul() with kstrtoul() (Jingoo Han)   
  - xen: Support 64-bit PV guest receiving NMIs (Konrad Rzeszutek Wilk)   
  - xen-blkfront: improve aproximation of required grants per request (Roger Pau Monne)   
  - xen-blkfront: revoke foreign access for grants not mapped by the backend (Roger Pau Monne)   
  - xen/microcode: Fix compile warning. (Konrad Rzeszutek Wilk)   
  - xen/events: mask events when changing their VCPU binding (David Vrabel)   
  - xen/events: initialize local per-cpu mask for all possible events (David Vrabel)   
  - x86/xen: do not identity map UNUSABLE regions in the machine E820 (David Vrabel)   
  - xen/tmem: do not allow XEN_TMEM on ARM64 (Stefano Stabellini)   
  - xen/arm: enable PV control for ARM (Julien Grall)   
  - xen/arm64: Don't compile cpu hotplug (Julien Grall)   
  - xenbus: frontend resume cleanup (Aurelien Chartier)


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-39.el7uek]
changelog:
  - PCI: Work around Ivytown NTB BAR size issue (Jon Mason)  [Orabug: 18127862]  
  - cgroup: make cgroup_path() not print double slashes (Tejun Heo)  [Orabug: 18510637]  
  - xen: Introduce 'xen_nopv' to disable PV extensions for HVM guests. (Konrad Rzeszutek Wilk)  [Orabug: 19033747]  
  - spec: reenable pesign module signing (Guangyu Sun)  [Orabug: 19065003]  
  - [ocfs2]: refcount: take rw_lock in ocfs2_reflink (Wengang Wang)  [Orabug: 19154247]  
  - cifs: bugfix for unreclaimed writeback pages in cifs_writev_requeue() (Ouyang Maochun)  [Orabug: 18447168]  
  - xfs: add CRCs to attr leaf blocks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRCs to dir2/da node blocks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: shortform directory offsets change for dir3 format (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRC checking to dir2 leaf blocks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRC checking to dir2 data blocks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRC checking to dir2 free blocks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRC checks to block format directory blocks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRC checks to remote symlinks (Dave Chinner)  [Orabug: 18504299]  
  - xfs: split out symlink code into it's own file. (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add version 3 inode format with CRCs (Christoph Hellwig)  [Orabug: 18504299]  
  - xfs: add CRC checks for quota blocks (Christoph Hellwig)  [Orabug: 18504299]  
  - xfs: add CRC checks to the AGI (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add CRC checks to the AGFL (Christoph Hellwig)  [Orabug: 18504299]  
  - xfs: add CRC checks to the AGF (Dave Chinner)  [Orabug: 18504299]  
  - xfs: add support for large btree blocks (Christoph Hellwig)  [Orabug: 18504299]  
  - xfs: xfs_iomap_prealloc_size() tracepoint (Brian Foster)  [Orabug: 18504299]  
  - xfs: add quota-driven speculative preallocation throttling (Brian Foster)  [Orabug: 18504299]  
  - xfs: xfs_dquot prealloc throttling watermarks and low free space (Brian Foster)  [Orabug: 18504299]  
  - xfs: pass xfs_dquot to xfs_qm_adjust_dqlimits() instead of xfs_disk_dquot_t (Brian Foster)  [Orabug: 18504299]  
  - xfs: push rounddown_pow_of_two() to after prealloc throttle (Brian Foster)  [Orabug: 18504299]  
  - xfs: reorganize xfs_iomap_prealloc_size to remove indentation (Brian Foster)  [Orabug: 18504299]  
  - xfs: take inode version into account in XFS_LITINO (Christoph Hellwig)  [Orabug: 18504299]  
  - xfs: rearrange some code in xfs_bmap for better locality (Dave Chinner)  [Orabug: 18504299]  
  - xfs: don't verify buffers after IO errors (Dave Chinner)  [Orabug: 18504299]  
  - xfs: limit speculative prealloc size on sparse files (Dave Chinner)  [Orabug: 18504299]  
  - xfs: memory barrier before wake_up_bit() (Alex Elder)  [Orabug: 18504299]  
  - xfs: refactor space log reservation for XFS_TRANS_ATTR_SET (Jeff Liu)  [Orabug: 18504299]  
  - xfs: make use of XFS_SB_LOG_RES() at xfs_fs_log_dummy() (Jeff Liu)  [Orabug: 18504299]  
  - xfs: make use of XFS_SB_LOG_RES() at xfs_mount_log_sb() (Jeff Liu)  [Orabug: 18504299]  
  - xfs: make use of XFS_SB_LOG_RES() at xfs_log_sbcount() (Jeff Liu)  [Orabug: 18504299]  
  - xfs: introduce XFS_SB_LOG_RES() for transactions that modify sb on disk (Jeff Liu)  [Orabug: 18504299]  
  - xfs: calculate XFS_TRANS_QM_QUOTAOFF_END space log reservation at mount time (Jeff Liu)  [Orabug: 18504299]  
  - xfs: calculate XFS_TRANS_QM_QUOTAOFF space log reservation at mount time (Jeff Liu)  [Orabug: 18504299]  
  - xfs: calculate XFS_TRANS_QM_DQALLOC space log reservation at mount time (Jeff Liu)  [Orabug: 18504299]  
  - xfs: calcuate XFS_TRANS_QM_SETQLIM space log reservation at mount time (Jeff Liu)  [Orabug: 18504299]  
  - xfs: calculate xfs_qm_write_sb_changes() space log reservation at mount time (Jeff Liu)  [Orabug: 18504299]  
  - xfs: calculate XFS_TRANS_QM_SBCHANGE space log reservation at mount time (Jeff Liu)  [Orabug: 18504299]  
  - xfs: make use of xfs_calc_buf_res() in xfs_trans.c (Jeff Liu)  [Orabug: 18504299]  
  - xfs: add a helper to figure out the space log reservation per item (Jeff Liu)  [Orabug: 18504299]  
  - xfs: fix fs/xfs/xfs_log.c:1740:39: error: 'B_TRUE' undeclared (Ben Myers)  [Orabug: 18504299]  
  - xfs: Remove boolean_t typedef completely. (Thiago Farina)  [Orabug: 18504299]  
  - fs/xfs remove obsolete simple_strto<foo> (Abhijit Pawar)  [Orabug: 18504299]  
  - xfs: don't zero structure members after a memset(0) (Eric Sandeen)  [Orabug: 18504299]  
  - xfs remove the XFS_TRANS_DEBUG routines (Mark Tinguely)  [Orabug: 18504299]  
  - spec: list linux-firmware as a dependency (Guangyu Sun)  [Orabug: 18539100]  
  - kbuild/ctf: Fix out-of-tree module build when CONFIG_CTF=n. (Nick Alcock)  [Orabug: 19078361]  
  - dtrace: support order-only-prerequisites for sdtstub generation (Kris Van Hees)  [Orabug: 18906444]  
  - qlcnic: Add SRIOV helper function to determine if VFs are assigned to guest (Vaughan Cao)  [Orabug: 19167877]  
  - qlcnic: make Kconfig changes (Vaughan Cao)  [Orabug: 19167877]  
  - qlcnic: sysfs interface for PCI BAR access (Sony Chacko)  [Orabug: 19167877]  
  - qlcnic: Update version to 5.3.59 (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Collect firmware dump using DMA on 82xx adapters (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Add mac learning support to SR-IOV VF. (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Add support to process commands in atomic context (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Allow SR-IOV VF probe in hypervisor. (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Set real_num_{tx|rx}_queues properly (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Fix panic while dumping TX queues on TX timeout (Manish Chopra)  [Orabug: 19167877]  
  - qlcnic: Update version to 5.3.58 (Jitendra Kalsaria)  [Orabug: 19167877]  
  - qlcnic: Limit vNIC support in legacy interrupt mode (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qlcnic: Add driver logs in error path. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qlcnic: Allow setting TX interrupt coalescing parameters from VF. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qlcnic: Add hwmon-sysfs interface to export board temperature. (Harish Patil)  [Orabug: 19167877]  
  - qlcnic: Optimize MAC learning code (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Fix memory leak. (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Reset firmware API lock at driver load time (Sony Chacko)  [Orabug: 19167877]  
  - qlcnic: Fix MSI-X initialization code (Alexander Gordeev)  [Orabug: 19167877]  
  - qlcnic: Do not disable SR-IOV when VFs are assigned to VMs (Manish Chopra)  [Orabug: 19167877]  
  - qlcnic: Fix QLogic application/driver interface for virtual NIC configuration (Jitendra Kalsaria)  [Orabug: 19167877]  
  - qlcnic: Fix PVID configuration on eSwitch port. (Jitendra Kalsaria)  [Orabug: 19167877]  
  - qlcnic: Fix max ring count calculation (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Fix to send INIT_NIC_FUNC as first mailbox. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qlcnic: Fix panic due to uninitialzed delayed_work struct in use. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - net: qlcnic: include irq.h for irq definitions (Josh Boyer)  [Orabug: 19167877]  
  - qlcnic: Remove casts of pointer to same type (Joe Perches)  [Orabug: 19167877]  
  - qlcnic: Update version to 5.3.57 (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: dcb: a couple off by one bugs (Dan Carpenter)  [Orabug: 19167877]  
  - qlcnic: Fix number of rings when we fall back from msix to legacy. (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Allow any VLAN to be configured from VF. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qlcnic: Fix usage of use_msi and use_msi_x module parameters (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Fix function return error check (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Update version to 5.3.56 (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Enhance semaphore lock access failure error message (Harish Patil)  [Orabug: 19167877]  
  - qlcnic: Allow vlan0 traffic (Rajesh Borundia)  [Orabug: 19167877]  
  - qlcnic: Enhance driver message in failed state. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qlcnic: Updates to QLogic application/driver interface for virtual NIC configuration (Jitendra Kalsaria)  [Orabug: 19167877]  
  - qlcnic: Re-factor firmware minidump template header handling (Shahed Shaikh)  [Orabug: 19167877]  
  - qlcnic: Cleanup qlcnic_enable_msix() return values (Alexander Gordeev)  [Orabug: 19167877]  
  - qlcnic: Reverse patches till 5.3.55. (Sucheta Chakraborty)  [Orabug: 19167877]  
  - qla4xxx: Update driver verion to v5.04.00.06.06.02-uek3 (Tej Parkash)  [Orabug: 19144350]  
  - qla4xxx: Use kmemdup instead of kmalloc + memcpy (Benoit Taine)  [Orabug: 19144350]  
  - qla4xxx: Fix smatch warning in func qla4xxx_conn_get_param (Adheer Chandravanshi)  [Orabug: 19144350]  
  - qla4xxx: Fix smatch warning in func qla4xxx_get_ep_param (Adheer Chandravanshi)  [Orabug: 19144350]  
  - qla4xxx: Fix memory leak for ha->saved_acb (Nilesh Javali)  [Orabug: 19144350]  
  - qla4xxx: Export sysfs DDBs from DPC handler (Nilesh Javali)  [Orabug: 19144350]  
  - qla4xxx: Disable INTx interrupt for ISP82XX (Tej Parkash)  [Orabug: 19144350]  
  - hpsa: add previously missing pci_device_id (Vaughan Cao)  [Orabug: 19137821]  
  - hpsa: fix handling of hpsa_volume_offline return value (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: return -ENOMEM not -1 on kzalloc failure in hpsa_get_device_id (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: remove messages about volume status VPD inquiry page not supported (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: report check condition even if no sense data present for ioaccel2 mode (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: remove bad unlikely annotation from device list updating code (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: fix event filtering to prevent excessive rescans with old firmware (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: kill annoying messages about SSD Smart Path retries (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: define extended_report_lun_entry data structure (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: Rearrange start_io to avoid one unlock/lock sequence in main io path (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: avoid unnecessary readl on every command submission (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: use per-cpu variable for lockup_detected (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: set irq affinity hints to route MSI-X vectors across CPUs (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: allocate reply queues individually (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: choose number of reply queues more intelligently. (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: remove dev_dbg() calls from hot paths (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: use gcc aligned attribute instead of manually padding structs (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: change doorbell reset delay to ten seconds (Justin Lindley)  [Orabug: 19137821]  
  - hpsa: allow passthru ioctls to work with bidirectional commands (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: remove unused fields from struct ctlr_info (Stephen M. Cameron)  [Orabug: 19137821]  
  - hpsa: fix bad comparison of signed with unsigned in hpsa_update_scsi_devices (Joe Handzik)  [Orabug: 19137821]  
  - hpsa: do not ignore failure of sense controller parameters command (Joe Handzik)  [Orabug: 19137821]  
  - hpsa: fix memory leak in hpsa_hba_mode_enabled (Joe Handzik)  [Orabug: 19137821]  
  - hpsa: Checking for a NULL return from a kzalloc call (Joe Handzik)  [Orabug: 19137821]  
  - hpsa: unnecessary type conversion for physdev_list (Vaughan Cao)  [Orabug: 19137821]  
  - hpsa: detect_controller_lockup don't need return value (Vaughan Cao)  [Orabug: 19137821]  
  - hpsa: fixup MSI-X registration (Hannes Reinecke)  [Orabug: 19137821]  
  - xen/microcode: Use dummy microcode_ops for non initial domain guest (Zhenzhong Duan)  [Orabug: 19053626]  
  - hyperv: Change the receive buffer size for legacy hosts (Haiyang Zhang)  [Orabug: 19050496]  
  - be2net: fix qnq mode detection on VFs (Suresh Reddy)  [Orabug: 19006455]  
  - be2net: cleanup MCC async event processing code (Sathya Perla)  [Orabug: 19006455]  
  - be2net: move async cmd processing to a separate routine (Sathya Perla)  [Orabug: 19006455]  
  - be2net: re-factor MCCQ error status handling code (Kalesh AP)  [Orabug: 19006455]  
  - be2net: support flashing new regions on Skyhawk-R (Vasundhara Volam)  [Orabug: 19006455]  
  - be2net: skip multicast promiscuos setting in already set (Kalesh AP)  [Orabug: 19006455]  
  - be2net: enable interrupts in EEH resume (Kalesh AP)  [Orabug: 19006455]  
  - net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19006455]  
  - be2net: use MCCQ instead of MBOX in be_cmd_rss_config() (Kalesh AP)  [Orabug: 19006455]  
  - be2net: include rx-compl error counter in ethtool stats (Kalesh AP)  [Orabug: 19006455]  
  - be2net: remove unused code in be_cmd_vlan_config() (Kalesh AP)  [Orabug: 19006455]  
  - be2net: covert vlan array to bit-map (Ravikumar Nelavelli)  [Orabug: 19006455]  
  - be2net: fix line wrap and function call indentation in be_ethtool.c (Sathya Perla)  [Orabug: 19006455]  
  - be2net: fix function call indentation in be_cmds.c (Sathya Perla)  [Orabug: 19006455]  
  - be2net: fix line wrap and function call indentation in be_main.c (Sathya Perla)  [Orabug: 19006455]  
  - be2net: Fix invocation of be_close() after be_clear() (Kalesh AP)  [Orabug: 19006455]  
  - be2net: Fix to reap TX compls till HW doesn't respond for some time (Vasundhara Volam)  [Orabug: 19006455]  
  - selinux: correctly label /proc inodes in use before the policy is loaded (Paul Moore)  [Orabug: 18823621]  
  - mm, hugetlb: improve page-fault scalability (Davidlohr Bueso)  [Orabug: 18757256]  
  - config: build TPM HW Random Number Generator as module (Guangyu Sun)  [Orabug: 18502024]  
  - cpufreq: Drop rwsem lock around CPUFREQ_GOV_POLICY_EXIT (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Preserve sysfs files across suspend/resume (Srivatsa S. Bhat)  [Orabug: 18464169]  
  - cpufreq, ondemand: Remove leftover debug line (Borislav Petkov)  [Orabug: 18464169]  
  - cpufreq: Issue CPUFREQ_GOV_POLICY_EXIT notifier before dropping policy refcount (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governors: Fix CPUFREQ_GOV_POLICY_{INIT|EXIT} notifiers (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Revert incorrect commit 5800043 (Rafael J. Wysocki)  [Orabug: 18464169]  
  - cpufreq: Don't call __cpufreq_governor() for drivers without target() (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: convert cpufreq_driver to using RCU (Nathan Zimmer)  [Orabug: 18464169]  
  - cpufreq: Call __cpufreq_governor() with correct policy->cpus mask (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Correct header guards typo (Borislav Petkov)  [Orabug: 18464169]  
  - cpufreq: Fix unsigned variable being checked for negative value (jhbird.choi@samsung.com)  [Orabug: 18464169]  
  - cpufreq: conservative: Fix the logic in frequency decrease checking (Stratos Karafotis)  [Orabug: 18464169]  
  - cpufreq: conservative: Fix sampling_down_factor functionality (Stratos Karafotis)  [Orabug: 18464169]  
  - cpufreq: governors: Calculate iowait time only when necessary (Stratos Karafotis)  [Orabug: 18464169]  
  - cpufreq: conservative: Fix relation when decreasing frequency (Namhyung Kim)  [Orabug: 18464169]  
  - cpufreq: conservative: Break out earlier on the lowest frequency (Namhyung Kim)  [Orabug: 18464169]  
  - cpufreq: governors: Avoid unnecessary per cpu timer interrupts (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: ondemand: Don't update sample_type if we don't evaluate load again (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governor: Set MIN_LATENCY_MULTIPLIER to 20 (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governor: Implement per policy instances of governors (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Add per policy governor-init/exit infrastructure (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Convert the cpufreq_driver_lock to a rwlock (Nathan Zimmer)  [Orabug: 18464169]  
  - cpufreq: acpi-cpufreq: Don't set policy->related_cpus from .init() (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: stats: do cpufreq_cpu_put() corresponding to cpufreq_cpu_get() (viresh kumar)  [Orabug: 18464169]  
  - cpufreq_stats: do not remove sysfs files if frequency table is not present (Dirk Brandewie)  [Orabug: 18464169]  
  - cpufreq: Do not track governor name for scaling drivers with internal governors. (Dirk Brandewie)  [Orabug: 18464169]  
  - cpufreq: Only call cpufreq_out_of_sync() for driver that implement cpufreq_driver.target() (Dirk Brandewie)  [Orabug: 18464169]  
  - cpufreq: Retrieve current frequency from scaling drivers with internal governors (Dirk Brandewie)  [Orabug: 18464169]  
  - cpufreq: Fix locking issues (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Create a macro for unlock_policy_rwsem{read,write} (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Remove unused HOTPLUG_CPU code (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governors: Fix WARN_ON() for multi-policy platforms (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: ondemand: Replace down_differential tuner with adj_up_threshold (Stratos Karafotis)  [Orabug: 18464169]  
  - cpufreq / stats: Get rid of CPUFREQ_STATDEVICE_ATTR (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Don't check cpu_online(policy->cpu) (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Don't remove sysfs link for policy->cpu (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governors: Reset tunables only for cpufreq_unregister_governor() (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governors: Remove code redundancy between governors (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governors: Get rid of dbs_data->enable field (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: governors: fix misuse of cdbs.cpu (Fabio Baltieri)  [Orabug: 18464169]  
  - cpufreq: governors: implement generic policy_is_shared (Fabio Baltieri)  [Orabug: 18464169]  
  - cpufreq: governors: clean timer init and exit code (Fabio Baltieri)  [Orabug: 18464169]  
  - cpufreq: Simplify cpufreq_add_dev() (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Revert "cpufreq: Don't use cpu removed during cpufreq_driver_unregister" (Viresh Kumar)  [Orabug: 18464169]  
  - powernow-k8: Cleanup init function (Borislav Petkov)  [Orabug: 18464169]  
  - powernow-k8: Cleanup module request (Borislav Petkov)  [Orabug: 18464169]  
  - cpufreq: Add a get_current_driver helper (Borislav Petkov)  [Orabug: 18464169]  
  - cpufreq: Make acpi-cpufreq link first (Borislav Petkov)  [Orabug: 18464169]  
  - acpi-cpufreq: Do not load on K8 (Matthew Garrett)  [Orabug: 18464169]  
  - cpufreq: handle cpufreq being disabled for all exported function. (Dirk Brandewie)  [Orabug: 18464169]  
  - cpufreq: Simplify __cpufreq_remove_dev() (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Don't use cpu removed during cpufreq_driver_unregister (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Notify governors when cpus are hot-[un]plugged (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: Manage only online cpus (Viresh Kumar)  [Orabug: 18464169]  
  - cpufreq: ondemand: use all CPUs in update_sampling_rate (Fabio Baltieri)  [Orabug: 18464169]  
  - cpufreq: conservative: call dbs_check_cpu only when necessary (Fabio Baltieri)  [Orabug: 18464169]  
  - cpufreq: ondemand: call dbs_check_cpu only when necessary (Fabio Baltieri)  [Orabug: 18464169]  
  - cpufreq: handle SW coordinated CPUs (Rickard Andersson)  [Orabug: 18464169]  
  - PM / tracing: remove deprecated power trace API (Paul Gortmaker)  [Orabug: 18464169]  
  - xen/balloon: set ballooned out pages as invalid in p2m (David Vrabel)  [Orabug: 19182632]  
  - xen/manage: fix potential deadlock when resuming the console (David Vrabel)  [Orabug: 19182632]  
  - xen/grant-table: fix suspend for non-PV guests (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: no need to explicitly register an NMI callback (David Vrabel)  [Orabug: 19182632]  
  - Revert "xen/pvh: Update E820 to work with PVH (v2)" (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: fix memory setup for PVH dom0 (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: map foreign pfns for autotranslated guests (Mukesh Rathor)  [Orabug: 19182632]  
  - xen-acpi-processor: Don't display errors when we get -ENOSYS (Konrad Rzeszutek Wilk)  [Orabug: 19182632]  
  - xen/pciback: Document the entry points for 'pcistub_put_pci_dev' (Konrad Rzeszutek Wilk)  [Orabug: 19182632]  
  - xen/pciback: Document when the 'unbind' and 'bind' functions are called. (Konrad Rzeszutek Wilk)  [Orabug: 19182632]  
  - xen-pciback: Document when we FLR an PCI device. (Konrad Rzeszutek Wilk)  [Orabug: 19182632]  
  - xen-pciback: First reset, then free. (Konrad Rzeszutek Wilk)  [Orabug: 19182632]  
  - xen-pciback: Cleanup up pcistub_put_pci_dev (Konrad Rzeszutek Wilk)  [Orabug: 19182632]  
  - x86/xen: do not use _PAGE_IOMAP in xen_remap_domain_mfn_range() (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: set regions above the end of RAM as 1:1 (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: only warn once if bad MFNs are found during setup (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: compactly store large identity ranges in the p2m (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: fix set_phys_range_identity() if pfn_e > MAX_P2M_PFN (David Vrabel)  [Orabug: 19182632]  
  - x86/xen: rename early_p2m_alloc() and early_p2m_alloc_middle() (David Vrabel)  [Orabug: 19182632]  
  - xen/x86: set panic notifier priority to minimum (Radim Krčmář)  [Orabug: 19182632]  
  - xen: refactor suspend pre/post hooks (David Vrabel)  [Orabug: 19182632]  
  - xen-blkback: defer freeing blkif to avoid blocking xenwatch (Valentin Priescu)  [Orabug: 19182632]  
  - xen blkif.h: fix comment typo in discard-alignment (Olaf Hering)  [Orabug: 19182632]  
  - xen/blkback: disable discard feature if requested by toolstack (Olaf Hering)  [Orabug: 19182632]  
  - xen-blkfront: remove type check from blkfront_setup_discard (Olaf Hering)  [Orabug: 19182632]  
  - net: flow_dissector: fail on evil iph->ihl (Jason Wang)  [Orabug: 18681886]  {CVE-2013-4348} 
  - netxen: fix ethtool rx_dropped information in ethtool get_ethtool_stats() (Ethan Zhao)  [Orabug: 19140643]  
  - ixgbevf: upgrade to intel version 2.14.2 (Ethan Zhao)  [Orabug: 19139349]  
  - ixgbe: upgrade to intel version 3.21.2 and merge patches based on 3.19.1 (Ethan Zhao)  [Orabug: 19137937]  
  - net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19167879]  
  - qlge: Convert /n to 
   (Joe Perches)  [Orabug: 19167879]  
  - qlge: remove open-coded skb_cow_head. (françois romieu)  [Orabug: 19167879]  
  - qlge: Use pci_enable_msix_range() instead of pci_enable_msix() (Alexander Gordeev)  [Orabug: 19167879]  
  - qlge: Get rid of an redundant assignment (Alexander Gordeev)  [Orabug: 19167879]  
  - drivers/net: delete non-required instances of include <linux/init.h> (Paul Gortmaker)  [Orabug: 19167879]  
  - qlge: Fix vlan netdev features. (Vaughan Cao)  [Orabug: 19167879]  
  - qlge: make local function static (stephen hemminger)  [Orabug: 19167879]  
  - net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19167878]  
  - netxen: Use pci_enable_msix_range() instead of pci_enable_msix() (Alexander Gordeev)  [Orabug: 19167878]  
  - net: netxen: slight optimization of addr compare (dingtianhong)  [Orabug: 19167878]  
  - netxen: Correct off-by-one errors in bounds checks (David Gibson)  [Orabug: 19167878]  
  - ethernet: Fix FSF address in file headers (Jeff Kirsher)  [Orabug: 19167878]  
  - net: netxen: remove unnecessary pci_set_drvdata() (Jingoo Han)  [Orabug: 19167878]  
  - net:drivers/net: Miscellaneous conversions to ETH_ALEN (Joe Perches)  [Orabug: 19167878]  
  - PCI/MSI: Add pci_enable_msi_range() and pci_enable_msix_range() (Alexander Gordeev)  [Orabug: 19167878]  
  - igb: upgrade from 5.0.6 to 5.2.5 (Ethan Zhao)  [Orabug: 19137922]  
  - e1000e: upgrade to intel version 3.1.0.2 and merge patches based on 2.5.4 (Ethan Zhao)  [Orabug: 19137899]  
  - intel_idle: fix IVT idle state table setting (Christoph Jaeger)  [Orabug: 18899422]  
  - intel_idle: fine-tune IVT residency targets (Len Brown)  [Orabug: 18899460]  
  - intel_idle: Add CPU model 54 (Atom N2000 series) (Jan Kiszka)  [Orabug: 18911404]  
  - intel_idle: support Bay Trail (Len Brown)  [Orabug: 18899457]  
  - intel_idle: allow sparse sub-state numbering, for Bay Trail (Len Brown)  [Orabug: 18899452]  
  - intel_idle: remove superfluous dev->state_count initialization (Bartlomiej Zolnierkiewicz)  [Orabug: 18899449]  
  - intel_idle: do C1E promotion disable quirk for hotplugged CPUs (Bartlomiej Zolnierkiewicz)  [Orabug: 18899445]  
  - intel_idle: close avn_cstates array with correct marker (Jiang Liu)  [Orabug: 18909669]  
  - Revert "intel_idle: mark states tables with __initdata tag" (Jiang Liu)  [Orabug: 18899443]  
  - x86 idle: Repair large-server 50-watt idle-power regression (Len Brown)  [Orabug: 18899435]  
  - intel_idle: Fixed C6 state on Avoton/Rangeley processors (Bockholdt Arne)  [Orabug: 18899432]  
  - soreuseport: fix up kabi breakage after backporting soreuseport (Chuck Anderson)  [Orabug: 18459758]  
  - udp: fix two sparse errors (Eric Dumazet)  [Orabug: 18459758]  
  - soreuseport: fix use of uid in tb->fastuid (Tom Herbert)  [Orabug: 18459758]  
  - Remove leftover #endif after introducing SO_REUSEPORT (Thomas Graf)  [Orabug: 18459758]  
  - soreuseport: UDP/IPv6 implementation (Tom Herbert)  [Orabug: 18459758]  
  - soreuseport: TCP/IPv6 implementation (Tom Herbert)  [Orabug: 18459758]  
  - soreuseport: UDP/IPv4 implementation (Tom Herbert)  [Orabug: 18459758]  
  - soreuseport: TCP/IPv4 implementation (Tom Herbert)  [Orabug: 18459758]  
  - soreuseport: infrastructure (Tom Herbert)  [Orabug: 18459758]  
  - pci: fix kabi break due to pci reset nofity backport (Jerry Snitselaar)  [Orabug: 19080834]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-40.el7uek]
changelog:
  - l2tp: fix an unprivileged user to kernel privilege escalation (Sasha Levin)  [Orabug: 19228689]  {CVE-2014-4943} {CVE-2014-4943} 
  - ptrace,x86: force IRET path after a ptrace_stop() (Tejun Heo)  [Orabug: 19222017]  {CVE-2014-4699} 
  - mpt3sas: Rework the MSI-X code to work on systems with many processors (Martin K. Petersen)  [Orabug: 18182490]  
  - mpt2sas: Rework the MSI-X code to work on systems with many processors (Martin K. Petersen)  [Orabug: 18182490]  
  - mpt3sas: Bump mpt3sas driver version to 04.100.00.00 (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: Added Reply Descriptor Post Queue (RDPQ) Array support (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: Bump mpt3sas driver version to 03.100.00.00 (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: Added OEM branding Strings (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: MPI2.5 Rev H (2.5.3) specifications (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: Copyright in driver sources is updated for year the 2014 (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: Clear PFA Status on SGPIO when PFA Drive is Removed or Replaced (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: MPI2.5 Rev G (2.5.2) specifications (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt3sas: Remove use of DEF_SCSI_QCMD (Matthew Wilcox)  [Orabug: 19015667]  
  - mpt3sas: Remove uses of serial_number (Matthew Wilcox)  [Orabug: 19015667]  
  - Allow MPT Fusion SAS 3.0 driver to be built into the kernel (Greg Kroah-Hartman)  [Orabug: 19015667]  
  - mpt3sas: Remove phys on topology change (Jan Vesely)  [Orabug: 19015667]  
  - mpt3sas: Added a driver module parameter max_msix_vectors (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt3sas: fix cleanup on controller resource mapping failure (Joe Lawrence)  [Orabug: 19015667]  
  - Revert "mpt3sas: update from v02.100.00.00 to v3.00.00.00" (Martin K. Petersen)  [Orabug: 19015667]  
  - Revert "mpt3sas: Rework the MSI-X code to work on systems with many processors" (Martin K. Petersen)  [Orabug: 19015667]  
  - mpt2sas: Added module parameter 'unblock_io' to unblock IO's during disk addition (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Bump mpt2sas driver version to 18.100.00.00 (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Get IOC_FACTS information using handshake protocol only after HBA card gets into READY or Operational state (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Added Reply Descriptor Post Queue (RDPQ) Array support (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: For >2TB volumes, DirectDrive support sends IO's with LBA bit 31 to IR FW instead of DirectDrive (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Copyright in driver sources is updated for year the 2014 (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Clear PFA Status on SGPIO when PFA Drive is Removed or Replaced (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Bump mpt2sas driver version to 17.100.00.00 (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: MPI2 Rev Y (2.00.17) and Rev Z (2.00.18) specifications (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Added driver module parameter max_msix_vectors (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Add free smids to the head, not tail of list (Matthew Wilcox)  [Orabug: 19015667]  
  - mpt2sas: Remove use of DEF_SCSI_QCMD (Matthew Wilcox)  [Orabug: 19015667]  
  - mpt2sas: Remove uses of serial_number (Matthew Wilcox)  [Orabug: 19015667]  
  - mpt2sas: Don't disable device twice at suspend. (Tyler Stachecki)  [Orabug: 19015667]  
  - mpt2sas: Remove phys on topology change. (Jan Vesely)  [Orabug: 19015667]  
  - mpt2sas: Bump driver version to v16.100.00.00 (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Fix for kernel panic when driver loads with HBA connected to non LUN 0 configured expander (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: when Async scanning is enabled then while scanning, devices are removed but their transport layer entries are not removed (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Infinite loop can occur if MPI2_IOCSTATUS_CONFIG_INVALID_PAGE is not returned (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: The copyright in driver sources is updated for the year 2013 (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: MPI2 Rev X (2.00.16) specifications (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Change in MPI2_RAID_ACTION_SYSTEM_SHUTDOWN_INITIATED notification methodology (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Null pointer deference possibility in mpt2sas_ctl_event_callback function (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: fix cleanup on controller resource mapping failure (Joe Lawrence)  [Orabug: 19015667]  
  - mpt2sas: fix for unused variable 'event_data' warning (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Bump driver vesion to v15.100.00.00 (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Calulate the Reply post queue depth calculation as per the MPI spec (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: fix firmware failure with wrong task attribute (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Fix for device scan following host reset could get stuck in a infinite loop (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Update the timing requirements for issuing a Hard Reset (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: MPI2 Rev W (2.00.15) specification (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: Fix for issue Missing delay not getting set during system bootup (Reddy, Sreekanth)  [Orabug: 19015667]  
  - mpt2sas: Add support for OEM specific controller (Sreekanth Reddy)  [Orabug: 19015667]  
  - mpt2sas: fix for driver fails EEH, recovery from injected pci bus error (Sreekanth Reddy)  [Orabug: 19015667]  
  - Revert "mpt2sas: update to LSI version 16.05.01.00" (Martin K. Petersen)  [Orabug: 19015667]  
  - Revert "mpt2sas: update from 16.05.01.00 to 17.00.00.00" (Martin K. Petersen)  [Orabug: 19015667]  
  - Revert "mpt2sas: Rework the MSI-X code to work on systems with many processors" (Martin K. Petersen)  [Orabug: 19015667]  
  - megaraid_sas: Version and Changelog update (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Fix LD/VF affiliation parsing (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Remove unused variables in megasas_instance (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Fix reset_mutex leak (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: fix a small problem when reading state value from hw (Tomas Henzl)  [Orabug: 19015667]  
  - megaraid_sas: Version and Changelog update (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Add Dell PowerEdge VRTX SR-IOV VF support (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Return leaked MPT frames to MPT frame pool (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Fix megasas_ioc_init_fusion (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Load correct raid context timeout (Adam Radford)  [Orabug: 19015667]  
  - megaraid_sas: Performance boost fixes (Sumit.Saxena@lsi.com)  [Orabug: 19015667]  
  - megaraid_sas: Set 32-bit DMA mask (Sumit.Saxena@lsi.com)  [Orabug: 19015667]  
  - megaraid_sas: Big endian code related fixes (Sumit.Saxena@lsi.com)  [Orabug: 19015667]  
  - megaraid_sas: Don't wait forever for non-IOCTL DCMDs (Sumit.Saxena@lsi.com)  [Orabug: 19015667]  
  - megaraid_sas: check return value for megasas_get_pd_list() (Hannes Reinecke)  [Orabug: 19015667]  
  - megaraid_sas_fusion: Return correct error value in megasas_get_ld_map_info() (Hannes Reinecke)  [Orabug: 19015667]  
  - megaraid_sas_fusion: correctly pass queue info pointer (Hannes Reinecke)  [Orabug: 19015667]  
  - megaraid: missing bounds check in mimd_to_kioc() (Dan Carpenter)  [Orabug: 19015667]  
  - megaraid: Use resource_size_t for PCI resources, not long (Ben Collins)  [Orabug: 19015667]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-41.el7uek]
changelog:
  - rds: Lost locking in loop connection freeing (Pavel Emelyanov)  [Orabug: 19124446]  
  - ocfs2/o2net: incorrect to terminate accepting connections loop upon rejecting an invalid one (Tariq Saeed)  [Orabug: 19296823]  
  - xen/pciback: Don't deadlock when unbinding. (Konrad Rzeszutek Wilk)  [Orabug: 19296592]  
  - PCI: Split out pci_dev lock/unlock and save/restore (Alex Williamson)  [Orabug: 19296592]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-42.el7uek]
changelog:
  - filter: prevent nla extensions to peek beyond the end of the message (Mathias Krause)  [Orabug: 19315780]  {CVE-2014-3144} {CVE-2014-3145}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-43.el7uek]
changelog:
  - init: fix in-place parameter modification regression (Krzysztof Mazur)  [Orabug: 18954967]  
  - drivers: scsi: storvsc: Correctly handle TEST_UNIT_READY failure (K. Y. Srinivasan)  [Orabug: 19280065]  
  - drivers: scsi: storvsc: Set srb_flags in all cases (K. Y. Srinivasan)  [Orabug: 19280065]  
  - Drivers: scsi: storvsc: Implement a timedout handler (K. Y. Srinivasan)  [Orabug: 19280065]  
  - Drivers: scsi: storvsc: Fix a bug in handling VMBUS protocol version (K. Y. Srinivasan)  [Orabug: 19280065]  
  - Drivers: scsi: storvsc: Filter commands based on the storage protocol version (K. Y. Srinivasan)  [Orabug: 19280065]  
  - Drivers: scsi: storvsc: Set cmd_per_lun to reflect value supported by the Host (K. Y. Srinivasan)  [Orabug: 19280065]  
  - Drivers: scsi: storvsc: Change the limits to reflect the values on the host (K. Y. Srinivasan)  [Orabug: 19280065]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-44.el7uek]
changelog:
  - net: Use netlink_ns_capable to verify the permisions of netlink messages (Eric W. Biederman)  [Orabug: 19404229]  {CVE-2014-0181} 
  - net: Add variants of capable for use on netlink messages (Eric W. Biederman)  [Orabug: 19404229]  
  - net: Add variants of capable for use on on sockets (Eric W. Biederman)  [Orabug: 19404229]  
  - netlink: Rename netlink_capable netlink_allowed (Eric W. Biederman)  [Orabug: 19404229]  
  - sctp: Fix sk_ack_backlog wrap-around problem (Xufeng Zhang)  [Orabug: 19404238]  {CVE-2014-4667} 
  - Revert "xen/fb: allow xenfb initialization for hvm guests" (Vaughan Cao)  [Orabug: 19320529]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-44.1.1.el7uek]
changelog:
  - auditsc: audit_krule mask accesses need bounds checking (Andy Lutomirski)  [Orabug: 19590596]  {CVE-2014-3917}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-44.1.2.el7uek]
changelog:
  - CVE-2014-3535: NULL pointer dereference in VxLAN packet logging. (Sasha Levin)  [Orabug: 19613139]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-44.1.3.el7uek]
changelog:
  - ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen)  [Orabug: 19817785]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} 
  - ALSA: control: Fix replacing user controls (Lars-Peter Clausen)  [Orabug: 19817747]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} 
  - kvm: iommu: fix the third parameter of kvm_iommu_put_pages (CVE-2014-3601) (Michael S. Tsirkin)  [Orabug: 19817646]  {CVE-2014-3601} 
  - net: sctp: inherit auth_capable on INIT collisions (Daniel Borkmann)  [Orabug: 19816067]  {CVE-2014-5077}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-44.1.4.el7uek]
changelog:
  - USB: whiteheat: Added bounds checking for bulk command response (James Forshaw)  [Orabug: 19849334]  {CVE-2014-3185} 
  - HID: fix a couple of off-by-ones (Jiri Kosina)  [Orabug: 19849317]  {CVE-2014-3181} 
  - kvm: vmx: handle invvpid vm exit gracefully (Petr Matousek)  [Orabug: 19906300]  {CVE-2014-3646} 
  - nEPT: Nested INVEPT (Nadav Har'El)  [Orabug: 19906267]  {CVE-2014-3645} 
  - KVM: x86: Improve thread safety in pit (Andy Honig)  [Orabug: 19905686]  {CVE-2014-3611}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-44.1.5.el7uek]
changelog:
  - net: sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann)  [Orabug: 20010590]  {CVE-2014-3687} 
  - net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann)  [Orabug: 20010577]  {CVE-2014-3673}


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-47.el7uek]
changelog:
  - CVE-2014-3535: NULL pointer dereference in VxLAN packet logging. (Sasha Levin)  [Orabug: 19613111]  
  - ixgbevf: fix cards found counter when unbound one NIC (Ethan Zhao)  [Orabug: 19063958]  
  - ixgbevf: upgrade to version 2.15.3 (Ethan Zhao)  [Orabug: 19528471]  
  - i40e: upgrade to 1.0.15 (Ethan Zhao)  [Orabug: 19493068]  
  - mlx4_ib: Fix endianness in blueflame post_send. (Shamir Rabinovitch)  [Orabug: 18918544]  
  - sparc64: Virtual Console Concentrator driver (Bijan Mottahedeh)  [Orabug: 19337243]  
  - x86, efivars: firmware bug workarounds should be in platform code (Matt Fleming)  [Orabug: 19520640]  
  - sdp: fix keepalive functionality (Shamir Rabinovitch)  [Orabug: 19467625]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-48.el7uek]
changelog:
  - x86/xen: don't copy bogus duplicate entries into kernel page tables (Stefan Bader)  [Orabug: 19672707]  
  - xen/gntalloc: safely delete grefs in add_grefs() undo path (David Vrabel)  [Orabug: 19672707]  
  - xen/gntalloc: fix oops after runnning out of grant refs (David Vrabel)  [Orabug: 19672707]  
  - xen/balloon: cancel ballooning if adding new memory failed (David Vrabel)  [Orabug: 19672707]  
  - xen/manage: Always freeze/thaw processes when suspend/resuming (Ross Lagerwall)  [Orabug: 19672707]  
  - x86/xen: use vmap() to map grant table pages in PVH guests (David Vrabel)  [Orabug: 19672707]  
  - x86/xen: resume timer irqs early (David Vrabel)  [Orabug: 19672707]  
  - xen-pciback: Document the 'quirks' sysfs file (Konrad Rzeszutek Wilk)  [Orabug: 19672707]  
  - xen/pciback: Fix error return code in xen_pcibk_attach() (Wei Yongjun)  [Orabug: 19672707]  
  - xen/events: drop negativity check of unsigned parameter (Andrey Utkin)  [Orabug: 19672707]  
  - xen/setup: Remove Identity Map Debug Message (Matt Rushton)  [Orabug: 19672707]  
  - xen/events/fifo: remove a unecessary use of BM() (Frediano Ziglio)  [Orabug: 19672707]  
  - xen/events/fifo: ensure all bitops are properly aligned even on x86 (David Vrabel)  [Orabug: 19672707]  
  - xen/events/fifo: reset control block and local HEADs on resume (David Vrabel)  [Orabug: 19672707]  
  - xen/grant-table: remove support for V2 tables (David Vrabel)  [Orabug: 19672707]  
  - x86/xen: safely map and unmap grant frames when in atomic context (David Vrabel)  [Orabug: 19672707]  
  - OVMAPI: Memory leak in ovmapi_read_name_value (Sasha Levin)  [Orabug: 19672517]  
  - OVMAPI: Sanity check value size before handling it (Sasha Levin)  [Orabug: 19672529]  
  - block: Fix dev_t minor allocation lifetime (Keith Busch)  [Orabug: 19566288]  
  - PCI: hotplug: Use global PCI rescan-remove locking (Rafael J. Wysocki)  [Orabug: 19593327]  
  - PCI: Add global pci_lock_rescan_remove() (Rafael J. Wysocki)  [Orabug: 19593327]  
  - sparc: Allow memory corruption detection to be enabled by default (Khalid Aziz)  [Orabug: 19348168]  
  - sparc: Add support for Application Data Integrity (ADI) on M7 (Khalid Aziz)  [Orabug: 19348168]  
  - Make kernel-uek-doc not obsolete and not conflict with kernel-doc (John Haxby)  [Orabug: 18922080]  
  - module: fix sprintf format specifier in param_get_byte() (Christoph Jaeger)  [Orabug: 19647215]  
  - mm: make snapshotting pages for stable writes a per-bio operation (Darrick J. Wong)  [Orabug: 19502094]  
  - xfs: growfs overruns AGFL buffer on V4 filesystems (Dave Chinner)  [Orabug: 19427033]  
  - Revert "xen/events: remove unnecessary call to bind_evtchn_to_cpu()" (Zhenzhong Duan)  [Orabug: 19261720]  
  - ocfs2: reflink: fix slow unlink for refcounted file (Junxiao Bi)  [Orabug: 18106641]  
  - xfs: fix Q_XQUOTARM ioctl (Eric Sandeen)  [Orabug: 19207913]  
  - sunvnet: Avoid sending superfluous LDC messages. (Sowmini Varadhan)  [Orabug: 19621729]  
  - sunvnet: only use connected ports when sending (David L Stevens)  [Orabug: 19621274]  
  - sunvnet: Schedule maybe_tx_wakeup() as a tasklet from ldc_rx path (Sowmini Varadhan)  [Orabug: 19359251]  
  - sunvnet: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN (Sowmini Varadhan)  [Orabug: 19359251]  
  - sunvnet: Do not ask for an ACK for every dring transmit (Sowmini Varadhan)  [Orabug: 19359251]  
  - sunvnet: clean up objects created in vnet_new() on vnet_exit() (Sowmini Varadhan)  [Orabug: 19441826]  
  - sparc64: ldc_connect() should not return EINVAL when handshake is in progress. (Sowmini Varadhan)  [Orabug: 19588198]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-49.el7uek]
changelog:
  - vio: fix reuse of vio_dring slot (Dwight Engen)  [Orabug: 19441666]  
  - sunvdc: limit each sg segment to a page (Dwight Engen)  [Orabug: 19347817]  
  - sunvdc: syncronize with upstream commit (Dwight Engen)  [Orabug: 19867684]  
  - mlx4_vnic: Add correct typecasting to pointers in vnic_get_frag_header() (Ashish Samant)  [Orabug: 19824501]  
  - [SCSI] Generate uevents on certain unit attention codes (Ewan D. Milne)  [Orabug: 19670019]  
  - be2net: enable PCIe error reporting on VFs too (Kalesh AP)  [Orabug: 19825384]  
  - be2net: send a max of 8 EQs to be_cmd_modify_eqd() on Lancer (Kalesh AP)  [Orabug: 19825384]  
  - be2net: fix port-type reporting in get_settings (Ravikumar Nelavelli)  [Orabug: 19825384]  
  - be2net: add ethtool "-m" option support (Mark Leonard)  [Orabug: 19825384]  
  - be2net: use v1 of SET_FLOW_CONTROL command (Suresh Reddy)  [Orabug: 19825384]  
  - be2net: fix RX fragment posting for jumbo frames (Ajit Khaparde)  [Orabug: 19825384]  
  - be2net: replace strcpy with strlcpy (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: fix some log messages (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: query max_tx_qs for BE3 super-nic profile from FW (Suresh Reddy)  [Orabug: 19825384]  
  - be2net: make be_cmd_get_regs() return a status (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: define BE_MAX_MTU (Kalesh AP)  [Orabug: 19825384]  
  - be2net: remove unncessary gotos (Kalesh AP)  [Orabug: 19825384]  
  - be2net: fix log messages in lancer FW download path (Kalesh AP)  [Orabug: 19825384]  
  - be2net: Add a dma_mapping_error counter in ethtool (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: Add TX completion error statistics in ethtool (Kalesh AP)  [Orabug: 19825384]  
  - be2net: add a description for counter rx_input_fifo_overflow_drop (Sathya Perla)  [Orabug: 19825384]  
  - be2net: add a few log messages (Sathya Perla)  [Orabug: 19825384]  
  - PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 19825384]  
  - be2net: support deleting FW dump via ethtool (only for Lancer) (Kalesh AP)  [Orabug: 19825384]  
  - be2net: ignore VF mac address setting for the same mac (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: Issue shutdown event to ocrdma driver (Devesh Sharma)  [Orabug: 19825384]  
  - be2net: update driver version to 10.4 (Sathya Perla)  [Orabug: 19825384]  
  - be2net: use adapter->flags to track SRIOV state (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: use be_max_vfs() macro to access max-vfs (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: use "if (!foo)" test style (Kalesh AP)  [Orabug: 19825384]  
  - be2net: remove unused structures in be_cmds.h (Kalesh AP)  [Orabug: 19825384]  
  - be2net: reduce arguments passed to FW-cmd routines (Kalesh AP)  [Orabug: 19825384]  
  - be2net: update UE bit description strings (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: fix return status of some ndo methods (Kalesh AP)  [Orabug: 19825384]  
  - be2net: fix return status of some ethtool methods (Kalesh AP)  [Orabug: 19825384]  
  - be2net: return -ENOMEM for memory allocation failures (Kalesh AP)  [Orabug: 19825384]  
  - be2net: return -ETIMEDOUT when a FW-cmd times out (Kalesh AP)  [Orabug: 19825384]  
  - be2net: fix error status for FW-download (Kalesh AP)  [Orabug: 19825384]  
  - be2net: use -ENETDOWN error status when interface is down (Kalesh AP)  [Orabug: 19825384]  
  - be2net: set EQ DB clear-intr bit in be_open() (Suresh Reddy)  [Orabug: 19825384]  
  - be2net: re-enable vlan filtering mode asap (Kalesh AP)  [Orabug: 19825384]  
  - be2net: read VF's capabilities from GET_PROFILE_CONFIG cmd (Vasundhara Volam)  [Orabug: 19825384]  
  - be2net: remove be_cmd_get_profile_config_mbox/mccq() variants (Vasundhara Volam)  [Orabug: 19825384]  
  - megaraid: Fail resume if MSI-X re-initialization failed (Alexander Gordeev)  [Orabug: 19664513]  
  - megaraid_sas: Add missing initial call to megasas_get_ld_vf_affiliation(). (Adam Radford)  [Orabug: 19664513]  
  - megaraid_sas: Fix LD/VF affiliation parsing (Adam Radford)  [Orabug: 19664513]  
  - Revert "megaraid_sas: Fix LD/VF affiliation parsing" (Martin K. Petersen)  [Orabug: 19664513]  
  - sparc64: vcc driver changes (Bijan Mottahedeh)  [Orabug: 19404981]  
  - SPARC64: Virtual Logical Domain Channel (VLDC) Driver: Update #1 (Aaron Young)  [Orabug: 19623083]  
  - SPARC64: Virtual Logical Domain Channel (VLDC) Driver (Aaron Young)  [Orabug: 19424085]  
  - sparc64: ds support for "sp-token" service and ioctl interface to get token (Liam Merwick)  [Orabug: 19774592]  
  - HID: magicmouse: sanity check report size in raw_event() callback (Jiri Kosina)  [Orabug: 19849350]  {CVE-2014-3184} 
  - USB: whiteheat: Added bounds checking for bulk command response (James Forshaw)  [Orabug: 19849331]  {CVE-2014-3185} 
  - HID: fix a couple of off-by-ones (Jiri Kosina)  [Orabug: 19849311]  {CVE-2014-3181} 
  - ALSA: control: Don't access controls outside of protected regions (Lars-Peter Clausen)  [Orabug: 19817689]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} 
  - ALSA: control: Fix replacing user controls (Lars-Peter Clausen)  [Orabug: 19817671]  {CVE-2014-4653} {CVE-2014-4654} {CVE-2014-4655} 
  - kvm: iommu: fix the third parameter of kvm_iommu_put_pages (CVE-2014-3601) (Michael S. Tsirkin)  [Orabug: 19817515]  {CVE-2014-3601} 
  - ixgbe: upgrade to version 3.22.3 and merge patches based on 3.21.2 (Ethan Zhao)  [Orabug: 19528458]  
  - sparc: Add support for seek and shorter read to /dev/mdesc (Khalid Aziz)  [Orabug: 19797906]  
  - cciss: Fallback to MSI rather than to INTx if MSI-X failed (Alexander Gordeev)  [Orabug: 19692099]  
  - drivers/block/cciss.c:cciss_init_one(): use proper errnos (Andrew Morton)  [Orabug: 19692099]  
  - cciss: return 0 from driver probe function on success, not 1 (Stephen M. Cameron)  [Orabug: 19692099]  
  - cpufreq: Use rwsem for protecting critical sections (Viresh Kumar)  [Orabug: 19482546]  
  - Drivers: hv: vmbus: Cleanup hv_post_message() (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Cleanup vmbus_close_internal() (K. Y. Srinivasan)  [Orabug: 19727050]  
  - storvsc: get rid of overly verbose warning messages (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Cleanup vmbus_post_msg() (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Cleanup vmbus_teardown_gpadl() (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Cleanup vmbus_establish_gpadl() (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Fix a bug in vmbus_open() (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Enable interrupt driven flow control (K. Y. Srinivasan)  [Orabug: 19727050]  
  - Drivers: hv: vmbus: Negotiate version 3.0 when running on ws2012r2 hosts (K. Y. Srinivasan)  [Orabug: 19727047]  
  - hyperv: import some definition due to compatiblility (Vaughan Cao)  [Orabug: 19230208]  
  - net: hyperv: fix netvsc_select_queue definition (Vaughan Cao)  [Orabug: 19230208]  
  - hyperv: Add hash value into RNDIS Per-packet info (Haiyang Zhang)  [Orabug: 19230208]  
  - Drivers: hv: vmbus: Implement per-CPU mapping of relid to channel (K. Y. Srinivasan)  [Orabug: 19230208]  
  - Drivers: hv: Eliminate the channel spinlock in the callback path (K. Y. Srinivasan)  [Orabug: 19230208]  
  - hyperv: Properly handle checksum offload (KY Srinivasan)  [Orabug: 19230208]  
  - hyperv: Enable sendbuf mechanism on the send path (KY Srinivasan)  [Orabug: 19230208]  
  - hyperv: Simplify the send_completion variables (Haiyang Zhang)  [Orabug: 19230208]  
  - hyperv: Remove recv_pkt_list and lock (Haiyang Zhang)  [Orabug: 19230208]  
  - hyperv: Add support for virtual Receive Side Scaling (vRSS) (Haiyang Zhang)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Address UDP checksum issues (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Negotiate suitable ndis version for offload support (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Allocate memory for all possible per-pecket information (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Enable large send offload (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Enable send side checksum offload (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Enable receive side IP checksum offload (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Enable offloads on the host (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Cleanup the send path (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Enable scatter gather I/O (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: hv: vmbus: Increase the limit on the number of pfns we can handle (K. Y. Srinivasan)  [Orabug: 19230208]  
  - hyperv: Add latest NetVSP versions to auto negotiation (Haiyang Zhang)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Cleanup the netvsc receive callback functio (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Cleanup the receive path (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: net: hyperv: Get rid of the rndis_filter_packet structure (KY Srinivasan)  [Orabug: 19230208]  
  - Drivers: hv: vmbus: Support per-channel driver state (K. Y. Srinivasan)  [Orabug: 19230208]  
  - bnx2fc: Improve stats update mechanism (Neil Horman)  [Orabug: 19692103]  
  - bnx2fc: do not scan uninitialized lists in case of error. (Maurizio Lombardi)  [Orabug: 19692103]  
  - bnx2fc: fix memory leak in bnx2fc_allocate_hash_table() (Maurizio Lombardi)  [Orabug: 19692103]  
  - bnx2fc: fix memory leak and potential NULL pointer dereference. (Maurizio Lombardi)  [Orabug: 19692103]  
  - bnx2fc: remove unused variable hash_table_size (Maurizio Lombardi)  [Orabug: 19692103]  
  - bnx2i: Rebranding bnx2i driver (Vikas Chaudhary)  [Orabug: 19692103]  
  - bnx2i: fix custom stats length (Mike Christie)  [Orabug: 19692103]  
  - bnx2x: Configure device endianity on driver load and reset endianity on removal. (Manish Chopra)  [Orabug: 19692103]  
  - net: ethernet: broadcom: bnx2x: Remove redundant #ifdef (Rasmus Villemoes)  [Orabug: 19692103]  
  - bnx2x: Revert UNDI flushing mechanism (Yuval Mintz)  [Orabug: 19692103]  
  - PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 19692103]  
  - bnx2x: fix set_setting for some PHYs (Yaniv Rosner)  [Orabug: 19692103]  
  - bnx2x: Fail probe of VFs using an old incompatible driver (Yuval Mintz)  [Orabug: 19692103]  
  - bnx2x: Fix the MSI flags (Yijing Wang)  [Orabug: 19692103]  
  - drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c: remove null test before kfree (Fabian Frederick)  [Orabug: 19692103]  
  - bnx2x: Enlarge the dorq threshold for VFs (Ariel Elior)  [Orabug: 19692103]  
  - bnx2x: Check for UNDI in uncommon branch (Yuval Mintz)  [Orabug: 19692103]  
  - bnx2x: Fix 1G-baseT link (Yaniv Rosner)  [Orabug: 19692103]  
  - bnx2x: Fix link for KR with swapped polarity lane (Yaniv Rosner)  [Orabug: 19692103]  
  - bnx2x: Fix kernel crash and data miscompare after EEH recovery (wenxiong@linux.vnet.ibm.com)  [Orabug: 19692103]  
  - bnx2x: Adapter not recovery from EEH error injection (wenxiong@linux.vnet.ibm.com)  [Orabug: 19692103]  
  - bnx2x: update MAINTAINERS for bnx2x and e-mail addresses (Ariel Elior)  [Orabug: 19692103]  
  - bnx2x: Convert return 0 to return rc (Joe Perches)  [Orabug: 19692103]  
  - bnx2x: fix build when BNX2X_SRIOV is not enabled (Randy Dunlap)  [Orabug: 19692103]  
  - bnx2x: Fix UNDI driver unload (Yuval Mintz)  [Orabug: 19692103]  
  - bnx2x: Fix failure to configure VF multicast filters (Narender Kumar)  [Orabug: 19692103]  
  - bnx2x: Fix vlan credit issues for VFs (Yuval Mintz)  [Orabug: 19692103]  
  - bnx2x: Memory leak during VF removal (Yuval Mintz)  [Orabug: 19692103]  
  - net: bnx2x: include irq.h for irqreturn_t definitions (Josh Boyer)  [Orabug: 19692103]  
  - bnx2x: Fix possible memory leak on iov error flow (Yuval Mintz)  [Orabug: 19692103]  
  - bnx2x: Fix compilation when CONFIG_BNX2X_SRIOV is not set (Yuval Mintz)  [Orabug: 18505568]  
  - bnx2x: Don't allow VFs to become promiscuous (Yuval Mintz)  [Orabug: 18505568]  
  - bnx2x: Don't show port statistics for VFs (Yuval Mintz)  [Orabug: 18505568]  
  - bnx2x: Remove the sriov VFOP mechanism (Yuval Mintz)  [Orabug: 18505568]  
  - bnx2x: Don't receive packets when the napi budget == 0 (Eric W. Biederman)  [Orabug: 18505568]  
  - bnx2x: save RAM in kdump kernel by disabling TPA (Michal Schmidt)  [Orabug: 18505568]  
  - bnx2x: save RAM in kdump kernel by using a single queue (Michal Schmidt)  [Orabug: 18505568]  
  - bnx2x: clamp num_queues to prevent passing a negative value (Michal Schmidt)  [Orabug: 18505568]  
  - cnic : Cleanup CONFIG_IPV6 & VLAN check (Anish Bhatt)  [Orabug: 19692103]  
  - cnic: Rebranding cnic driver. (Jitendra Kalsaria)  [Orabug: 19692103]  
  - cnic: Fix missing ISCSI_KEVENT_IF_DOWN message (Michael Chan)  [Orabug: 19692103]  
  - cnic: Don't take cnic_dev_lock in cnic_alloc_uio_rings() (Michael Chan)  [Orabug: 19692103]  
  - cnic: Don't take rcu_read_lock in cnic_rcv_netevent() (Michael Chan)  [Orabug: 19692103]  
  - PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 19692103]  
  - bnx2: Rebranding bnx2 driver. (Jitendra Kalsaria)  [Orabug: 19692103]  
  - bnx2: Don't receive packets when the napi budget == 0 (Eric W. Biederman)  [Orabug: 19692103]  
  - bnx2: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. Biederman)  [Orabug: 19692103]  
  - bnx2: Make module parameters readable (James M Leddy)  [Orabug: 19692103]  
  - tg3: prevent ifup/ifdown during PCI error recovery (Ivan Vecera)  [Orabug: 19692103]  
  - tg3: fix return value in tg3_get_stats64 (Govindarajulu Varadarajan)  [Orabug: 19692103]  
  - tg3: Fix race condition in tg3_get_stats64() (Michael Chan)  [Orabug: 19692103]  
  - PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 19692103]  
  - tg3: Modify tg3_tso_bug() to handle multiple TX rings (Prashant Sreedharan)  [Orabug: 19692103]  
  - tg3: Change nvram command timeout value to 50ms (Prashant Sreedharan)  [Orabug: 19692103]  
  - tg3: Clear NETIF_F_TSO6 flag before doing software GSO (Prashant Sreedharan)  [Orabug: 19692103]  
  - tg3: Override clock, link aware and link idle mode during NVRAM dump (Prashant Sreedharan)  [Orabug: 19692103]  
  - tg3: Prevent page allocation failure during TSO workaround (Michael Chan)  [Orabug: 19692103]  
  - tg3: Don't modify ip header fields when doing GSO (Michael Chan)  [Orabug: 19692103]  
  - tg3: update rx_jumbo_pending ring param only when jumbo frames are enabled (Ivan Vecera)  [Orabug: 19692103]  
  - tg3: remove open-coded skb_cow_head. (françois romieu)  [Orabug: 19692103]  
  - tg3: remove empty MDIO bus reset function (Florian Fainelli)  [Orabug: 19692103]  
  - tg3: Do not include vlan acceleration features in vlan_features (Vlad Yasevich)  [Orabug: 19692103]  
  - tg3: Call dev_kfree_skby_any instead of dev_kfree_skb. (Eric W. Biederman)  [Orabug: 19692103]  
  - hpsa: fix bad -ENOMEM return value in hpsa_big_passthru_ioctl (Stephen M. Cameron)  [Orabug: 19692082]  
  - hpsa: remove online devices from offline device list (Stephen M. Cameron)  [Orabug: 19692082]  
  - hpsa: fix non-x86 builds (Arnd Bergmann)  [Orabug: 19692082]  
  - hpsa: do not unconditionally copy sense data (Robert Elliott)  [Orabug: 19692082]  
  - hpsa: fix 6-byte READ/WRITE with 0 length data xfer (Stephen M. Cameron)  [Orabug: 19692082]  
  - hpsa: make hpsa_init_one return -ENOMEM if allocation of h->lockup_detected fails (Stephen M. Cameron)  [Orabug: 19692082]  
  - sparc: Fix dependency for CONFIG_SPARC_ADI (Khalid Aziz)  [Orabug: 19706013]  
  - ctf: handle srcdir-relative paths properly. (Nick Alcock)  [Orabug: 19712731]


author: Guangyu Sun <guangyu.sun@oracle.com> [3.8.13-50.el7uek]
changelog:
  - NVMe: Do not over allocate for discard requests (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Do not open disks that are being deleted (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Clear QUEUE_FLAG_STACKABLE (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Fix device probe waiting on kthread (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Updates for 1.1 spec (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Passthrough IOCTL for IO commands (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Add revalidate_disk callback (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Fix nvmeq waitqueue entry initialization (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Translate NVMe status to errno (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Fix SG_IO status values (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Remove duplicate compat SG_IO code (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Reference count pci device (Keith Busch)  [Orabug: 19791123]  
  - nvme: Replace rcu_assign_pointer() with RCU_INIT_POINTER() (Andreea-Cristina Bernat)  [Orabug: 19791123]  
  - NVMe: Correctly handle IOCTL_SUBMIT_IO when cpus > online queues (Sam Bradshaw)  [Orabug: 19791123]  
  - NVMe: Fix filesystem sync deadlock on removal (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Add shutdown timeout as module parameter. (Dan McLeran)  [Orabug: 19791123]  
  - NVMe: Skip orderly shutdown on failed devices (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Whitespace fixes (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Handling devices incapable of I/O (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Change nvme_enable_ctrl to set EN and manage CC thru ctrl_config. (Dan McLeran)  [Orabug: 19791123]  
  - NVMe: Mismatched host/device page size support (Keith Busch)  [Orabug: 19791123]  
  - NVMe: Update list of status codes (Matthew Wilcox)  [Orabug: 19791123]  
  - NVMe: Async event request (Keith Busch)  [Orabug: 19791123]  
  - qlge: Fix compilation warning (Harish Patil)  [Orabug: 19877615]  
  - qlge: Fix TSO for non-accelerated vlan traffic (Vlad Yasevich)  [Orabug: 19877615]  
  - PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 19877615]  
  - i40e: Update flow director error messages to reduce user confusion (Carolyn Wyborny)  [Orabug: 19882061]  
  - i40evf: enable module build (Brian Maly)  [Orabug: 19528533]  
  - i40e/i40evf: Bump build versions (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Tweak for-loop in i40e_ethtool.c (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Cleanup if/else statements (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: abstract the close path for better netdev vsis (Shannon Nelson)  [Orabug: 19528533]  
  - i40e/i40evf: add tracking to NVM busy state (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Fix an issue with displaying IPv4 FD filters (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Remove a FW workaround (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e/i40evf: Bump build versions (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Enable VF Tx bandwidth setting (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Reset the VF upon conflicting VLAN configuration (Greg Rose)  [Orabug: 19528533]  
  - i40e: remove open-coded skb_cow_head (Francois Romieu)  [Orabug: 19528533]  
  - i40evf: program RSS LUT correctly (Mitch A Williams)  [Orabug: 19528533]  
  - i40evf: remove open-coded skb_cow_head (Francois Romieu)  [Orabug: 19528533]  
  - i40e: Remove casts of pointer to same type (Joe Perches)  [Orabug: 19528533]  
  - i40e/i40evf: Remove addressof casts to same type (Joe Perches)  [Orabug: 19528533]  
  - i40e: fix function kernel doc description (Jean Sacren)  [Orabug: 19528533]  
  - i40e: Use DEBUG_FD message level for an FD message (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e/i40evf: Add an FD message level (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: check for netdev before debugfs use (Shannon Nelson)  [Orabug: 19528533]  
  - i40evf: remove double space after return (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Add functionality for FD SB to drop packets (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Cleanup in FDIR SB ethtool code (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: eeprom integrity check on load and empr (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Make the alloc and free queue vector calls orthogonal (Greg Rose)  [Orabug: 19528533]  
  - i40evf: fix oops in watchdog handler (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Delete ATR filter on RST (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40evf: clean up init error messages (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: don't shut down admin queue on error (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Fix a message string (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e/i40evf: Add EEE LPI stats (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e/i40evf: Bump build versions (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: potential array underflow in i40e_vc_process_vf_msg() (Dan Carpenter)  [Orabug: 19528533]  
  - i40e/i40evf: reduce context descriptors (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e/i40evf: enable hardware feature head write back (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Patch to enable Ethtool/netdev feature flag for NTUPLE control (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40evf: use min_t (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: correctly program RSS HLUT table (Mitch Williams)  [Orabug: 19528533]  
  - net/i40e: Avoid double setting of NETIF_F_SG for the HW encapsulation feature mask (Or Gerlitz)  [Orabug: 19528533]  
  - i40evf: Rename i40e_ptype_lookup i40evf_ptype_lookup (Eric W Biederman)  [Orabug: 19528533]  
  - i40e: Don't receive packets when the napi budget == 0 (Eric W. Biederman)  [Orabug: 19528533]  
  - i40e/i40evf: Use correct number of VF vectors (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Let MDD events be handled by MDD handler (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Bug fix for FDIR replay logic (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: add missing variable to i40e_ethtool (Brian Maly)  [Orabug: 19528533]  
  - i40e: Add code to handle FD table full condition (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Define a new state variable to keep track of feature auto disable (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Fix function comments (Akeem G Abodunrin)  [Orabug: 19528533]  
  - i40e: make string references to q be queue (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e/i40evf: Some flow director HW definition fixes (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Fix a bug in the update logic for FDIR SB filter. (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: delete netdev after deleting napi and vectors (Shannon Nelson)  [Orabug: 19528533]  
  - i40e/i40evf: Bump pf&vf build versions (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e/i40evf: carefully fill tx ring (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fix nvm version and remove firmware report (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Remove a redundant filter addition (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: count timeout events (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Remove a FW workaround for Number of MSIX vectors (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: clean up comment style (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Prevent overflow due to kzalloc (Akeem G Abodunrin)  [Orabug: 19528533]  
  - i40e: Flow Director sideband accounting (Joseph Gasparakis)  [Orabug: 19528533]  
  - i40evf: Enable the ndo_set_features netdev op (Greg Rose)  [Orabug: 19528533]  
  - i40e and i40evf: Bump driver versions (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Change MSIX to MSI-X (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: tighten up ring enable/disable flow (Mitch Williams)  [Orabug: 19528533]  
  - i40e: remove unnecessary delay (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: remove errant space (Mitch A Williams)  [Orabug: 19528533]  
  - i40evf: update version and copyright date (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: store ring size in ring structs (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: don't guess device name (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: remove bogus comment (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: fix up strings in init task (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: get rid of pci_using_dac (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: fix multiple crashes on remove (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: remove VLAN filters on close (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: request reset on tx hang (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Use pci_enable_msix_range() instead of pci_enable_msix() (Alexander Gordeev)  [Orabug: 19528533]  
  - net: i40evf: Remove duplicate include (Sachin Kamat)  [Orabug: 19528533]  
  - i40evf: refactor reset handling (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: change type of flags variable (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: don't store unnecessary array of strings (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: fix bogus comment (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: clean up adapter struct (Mitch Williams)  [Orabug: 19528533]  
  - i40e: don't handle VF reset on unload (Mitch Williams)  [Orabug: 19528533]  
  - i40e: enable extant VFs (Mitch Williams)  [Orabug: 19528533]  
  - i40e: reset VFs after PF reset (Mitch Williams)  [Orabug: 19528533]  
  - i40e: set VF state to active when reset is complete (Mitch Williams)  [Orabug: 19528533]  
  - i40e: remove dead code (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Setting i40e_down bit for tx_timeout (Akeem G Abodunrin)  [Orabug: 19528533]  
  - i40evf: clean up memsets (Mitch Williams)  [Orabug: 19528533]  
  - i40evf: trivial fixes (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: bump driver version (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: spelling error (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: refactor flow director (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: rename defines (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: whitespace fixes (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Change firmware workaround (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fix compile warning on checksum_local (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: updates to AdminQ interface (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: check desc pointer before printing (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Remove autogenerated Module.symvers file. (David S. Miller)  [Orabug: 19528533]  
  - i40e: Retain MAC filters on port VLAN deletion (Greg Rose)  [Orabug: 19528533]  
  - i40e: Warn admin to reload VF driver on port VLAN configuration (Greg Rose)  [Orabug: 19528533]  
  - i40e: Bump version number (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: trivial cleanup (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: whitespace fixes (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: make message meaningful (Mitch Williams)  [Orabug: 19528533]  
  - i40e: associate VMDq queue with VM type (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: remove extra register write (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Bump version (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: fix log message wording (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: enable PTP (Jacob Keller)  [Orabug: 19528533]  
  - i40e: call clear_pxe after adminq is initialized (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: clear qtx_head before enabling Tx queue (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: adjust ITR max and min values (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: check for possible incorrect ipv6 checksum (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: allow VF to remove any MAC filter (Mitch Williams)  [Orabug: 19528533]  
  - i40e: do not bail when disabling if Tx queue disable fails (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Setting queue count to 1 using ethtool is valid (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Cleanup Doxygen warnings (Jeff Kirsher)  [Orabug: 19528533]  
  - i40e: fix long lines (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Bump version (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Update the Current NVM version Low value (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: drop unused macros (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: use assignment instead of memcpy (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Turn flow director off in MFP mode (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Add a dummy packet template (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fix spelling errors (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: trivial: formatting and checkpatch fixes (Mitch Williams)  [Orabug: 19528533]  
  - i40e: shorten wordy fields (Mitch Williams)  [Orabug: 19528533]  
  - i40e: accept pf to pf adminq messages (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: remove interrupt on AQ error (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: release NVM resource reservation on startup (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Cleanup reconfig rss path (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: disable packet split (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: add a comment on barrier and fix panic on reset (Greg Rose)  [Orabug: 19528533]  
  - i40e: Fix MAC format in Write MAC address AQ cmd (Kamil Krawczyk)  [Orabug: 19528533]  
  - i40e: Fix GPL header (Greg Rose)  [Orabug: 19528533]  
  - i40e: use kernel specific defines (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Re-enable interrupt on ICR0 (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: correctly setup ARQ descriptors (Mitch Williams)  [Orabug: 19528533]  
  - i40e: remove redundant AQ enable (Kamil Krawczyk)  [Orabug: 19528533]  
  - i40e: Enable/Disable PF switch LB on SR-IOV configure changes (Greg Rose)  [Orabug: 19528533]  
  - i40e: whitespace paren and comment tweaks (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: rework shadow ram read functions (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: check MAC type before any REG access (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: move PF ID init from PF reset to SC init (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Reduce range of interrupt reg in reg test (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: update firmware api to 1.1 (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Add code to wait for FW to complete in reset path (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Bump version (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Allow VF to set already assigned MAC address (Greg Rose)  [Orabug: 19528533]  
  - i40e: Stop accepting any VLAN tag on VLAN 0 filter set (Greg Rose)  [Orabug: 19528533]  
  - i40e: Do not enable broadcast promiscuous by default (Greg Rose)  [Orabug: 19528533]  
  - i40e: Expose AQ debugfs hooks (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Do not allow AQ calls from ndo-ops (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: check asq alive before notify (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Admin queue shutdown fixes (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Hide the Port VLAN VLAN ID (Greg Rose)  [Orabug: 19528533]  
  - i40e: use correct struct for get and update vsi params (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Fix VF driver MAC address configuration (Greg Rose)  [Orabug: 19528533]  
  - i40e: support VFs on PFs other than 0 (Mitch Williams)  [Orabug: 19528533]  
  - i40e: acknowledge VFLR when disabling SR-IOV (Mitch Williams)  [Orabug: 19528533]  
  - i40e: don't allocate zero size (Mitch Williams)  [Orabug: 19528533]  
  - i40e: use struct assign instead of memcpy (Mitch Williams)  [Orabug: 19528533]  
  - i40e: Do not enable default port on the VEB (Greg Rose)  [Orabug: 19528533]  
  - i40e: avoid unnecessary register read (Mitch Williams)  [Orabug: 19528533]  
  - i40e: fix whitespace (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Fix SR-IOV VF port VLAN (Greg Rose)  [Orabug: 19528533]  
  - i40e: Record dma buffer info for dummy packets (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: remove un-necessary io-write (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Remove unnecessary prototypes (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: I40E_FLAG_MQ_ENABLED is not used (Neerav Parikh)  [Orabug: 19528533]  
  - i40e: Fix ring allocation (Neerav Parikh)  [Orabug: 19528533]  
  - i40e: catch unset q_vector (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: keep allocated memory in structs (David Cassard)  [Orabug: 19528533]  
  - i40e: fix error handling when alloc of vsi array fails (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: reinit buffer size each time (Mitch Williams)  [Orabug: 19528533]  
  - i40e: use functions to enable and disable icr 0 (Mitch Williams)  [Orabug: 19528533]  
  - i40e: add header file flag _I40E_TXRX_H_ (Vasu Dev)  [Orabug: 19528533]  
  - i40e: guard against vf message races (Mitch Williams)  [Orabug: 19528533]  
  - i40e: fix constant cast issues (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Change the ethtool NVM read method to use AQ (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: fix mac address checking (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Dump the whole NVM, not half (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: report VF MAC addresses correctly (Mitch Williams)  [Orabug: 19528533]  
  - i40e: update led set args (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: make a define from a large constant (Mitch Williams)  [Orabug: 19528533]  
  - i40e: be more informative (Mitch Williams)  [Orabug: 19528533]  
  - i40e: fix error return (Mitch Williams)  [Orabug: 19528533]  
  - i40e: remove chatty log messages (Mitch Williams)  [Orabug: 19528533]  
  - i40e: remove redundant code (Mitch Williams)  [Orabug: 19528533]  
  - i40e: refactor VF reset flow (Mitch Williams)  [Orabug: 19528533]  
  - i40e: move i40e_reset_vf (Mitch Williams)  [Orabug: 19528533]  
  - i40e: fix curly brace use and return type (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: add wake-on-lan support (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Suppress HMC error to Interrupt message level (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: using for_each_set_bit to simplify the code (Wei Yongjun)  [Orabug: 19528533]  
  - i40e: make functions static and remove dead code (Stephen Hemminger)  [Orabug: 19528533]  
  - i40e: Fix off by one in i40e_dbg_command_write (Alan Cox)  [Orabug: 19528533]  
  - i40e: Bump version number (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Fix wrong mask bits being used in misc interrupt (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: more print_hex_dump use (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: fix up scanf decoders (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: simplify error messages for dump descriptor (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: prevent null pointer exception in dump descriptor (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Fix dump output from debugfs calls (Neerav Parikh)  [Orabug: 19528533]  
  - i40e: Remove FCoE in i40e_virtchnl_pf.c code (Neerav Parikh)  [Orabug: 19528533]  
  - i40e: support for suspend and resume (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: rtnl_lock in reset path fixes (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Add basic support for get/set channels for RSS (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: function to reconfigure RSS queues and rebuild (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: reinit flow for the main VSI (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: use same number of queues as CPUs (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: trivial fixes (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: init flow control settings to disabled (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Tell the stack about our actual number of queues (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: fix pf reset after offline test (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: fix up some of the ethtool connection reporting (Brian Maly)  [Orabug: 19528533]  
  - i40e: Bump version number (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: remove and fix confusing define name (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: complain about out-of-range descriptor request (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: loopback info and set loopback fix (Kamil Krawczyk)  [Orabug: 19528533]  
  - i40e: restrict diag test messages (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Add a new variable to track number of pf instances (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: add num_VFs message (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: refactor ethtool tests (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: clear test state bit after all ethtool tests (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: only set up the rings to be used (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: Enable all PCTYPEs except FCOE for RSS. (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: refactor reset code (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: Bump version (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: whitespace (Jeff Kirsher)  [Orabug: 19528533]  
  - i40e: enable early hardware support (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Add flag for L2 VEB filtering (Kevin Scott)  [Orabug: 19528533]  
  - i40e: get media type during link info (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: check multi-bit state correctly (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: separate TSYNVALID and TSYNINDX fields in Rx descriptor (Jacob Keller)  [Orabug: 19528533]  
  - i40e: sync header files with hardware (Anjali Singhai Jain)  [Orabug: 19528533]  
  - i40e: restrict diag test length (Kamil Krawczyk)  [Orabug: 19528533]  
  - i40e: add support for triggering EMPR (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: add interrupt test (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: default debug mask setting (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: fix debugging messages (Mitch Williams)  [Orabug: 19528533]  
  - i40e: properly add VF MAC addresses (Mitch Williams)  [Orabug: 19528533]  
  - i40e: retry call on timeout (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: select reset counters correctly (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: allow one more vector for VFs (Mitch Williams)  [Orabug: 19528533]  
  - i40e: firmware version fields offsets update (Anjali Singhai jain)  [Orabug: 19528533]  
  - i40e: simplify aq head-tail-len setups (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: clear AQ head and tail registers (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: register file updates (Anjali Singhai jain)  [Orabug: 19528533]  
  - i40e: set pf_id based on device and function numbers (Christopher Pau)  [Orabug: 19528533]  
  - i40e: fix null dereference (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fix error return code in i40e_probe() (Wei Yongjun)  [Orabug: 19528533]  
  - i40e: remove unused including <linux/version.h> (Wei Yongjun)  [Orabug: 19528533]  
  - i40e: Bump version (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: use pf_id for pf function id in qtx_ctl (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: check vsi ptrs before dumping them (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: reorder block declarations in debugfs (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: tweaking icr0 handling for legacy irq (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: refactor fdir setup function (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fix sign extension issue (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fix use of untrusted scalar value warning (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: clamp debugfs nvm read command (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: debugfs fixups (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: fixup legacy interrupt handling (Shannon Nelson)  [Orabug: 19528533]  
  - i40e: assign correct vector to VF (Mitch Williams)  [Orabug: 19528533]  
  - i40e: don't free nonexistent rings (Mitch Williams)  [Orabug: 19528533]  
  - i40e: do not flush after re-enabling interrupts (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Bump version (Catherine Sullivan)  [Orabug: 19528533]  
  - i40e: Add support for 64 bit netstats (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Move rings from pointer to array to array of pointers (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Replace ring container array with linked list (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Move q_vectors from pointer to array to array of pointers (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Split bytes and packets from Rx/Tx stats (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Add support for Tx byte queue limits (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Drop dead code and flags from Tx hotpath (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: clean up Tx fast path (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Do not directly increment Tx next_to_use (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Cleanup Tx buffer info layout (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Drop unused completed stat (Alexander Duyck)  [Orabug: 19528533]  
  - i40e: Link code updates (Anjali Singhai)  [Orabug: 19528533]  
  - i40e: clean up coccicheck reported errors (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: better return values (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: convert ret to aq_ret (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: small clean ups from review (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: use common failure flow (Jesse Brandeburg)  [Orabug: 19528533]  
  - i40e: Fix device ID define names to align to standard (Shannon Nelson)  [Orabug: 19528533]  
  - i40evf: conform to UEK kapi (Brian Maly)  [Orabug: 19528533]  
  - i40evf: A0 silicon specific (Greg Rose)  [Orabug: 19528533]  
  - i40evf: add driver to kernel build system (Greg Rose)  [Orabug: 19528533]  
  - i40evf: init code and hardware support (Greg Rose)  [Orabug: 19528533]  
  - i40evf: driver core headers (Greg Rose)  [Orabug: 19528533]  
  - i40evf: virtual channel interface (Greg Rose)  [Orabug: 19528533]  
  - i40evf: core ethtool functionality (Greg Rose)  [Orabug: 19528533]  
  - i40evf: transmit and receive functionality (Greg Rose)  [Orabug: 19528533]  
  - i40evf: main driver core (Greg Rose)  [Orabug: 19528533]  
  - Revert "i40e: upgrade to 1.0.15" (Brian Maly)  [Orabug: 19528533]  
  - ixgbe: Look up MAC address on SPARC systems (Martin K. Petersen)  [Orabug: 18182472]  
  - cpufreq: intel_pstate: allow driver to be built as a module (Brian Maly)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: enable driver in kernel config (Brian Maly)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Remove core_pct rounding (Stratos Karafotis)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Simplify P state adjustment logic. (Stratos Karafotis)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Keep values in aperf/mperf in full precision (Stratos Karafotis)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Disable interrupts during MSRs reading (Stratos Karafotis)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Remove unnecessary type casting in div_s64() call (Stratos Karafotis)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Make intel_pstate_kobject and debugfs_parent locals (Stratos Karafotis)  [Orabug: 19250051]  
  - intel_pstate: Set CPU number before accessing MSRs (Vincent Minet)  [Orabug: 19250051]  
  - intel_pstate: Correct rounding in busy calculation (Doug Smythies)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Remove duplicate CPU ID check (Stratos Karafotis)  [Orabug: 19250051]  
  - cpufreq: intel_pstate: Remove unused member name of cpudata (Stratos Karafotis)  [Orabug: 19250051]  
  - intel_pstate: Add CPU IDs for Broadwell processors (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Improve initial busy calculation (Doug Smythies)  [Orabug: 19250051]  
  - intel_pstate: add sample time scaling (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Correct rounding in busy calculation (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Remove C0 tracking (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: remove setting P state to MAX on init (Brian Maly)  [Orabug: 19250051]  
  - intel_pstate: fix pid_reset to use fixed point values (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: remove unneeded sample buffers (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Change busy calculation to use fixed point math. (Brian Maly)  [Orabug: 19250051]  
  - intel_pstate: Remove energy reporting from pstate_sample tracepoint (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Take core C0 time into account for core busy calculation (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Add trace point to report internal state. (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Remove periodic P state boost (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Add X86_FEATURE_APERFMPERF to cpu match parameters. (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Fail initialization if P-state information is missing (Rafael J. Wysocki)  [Orabug: 19250051]  
  - intel_pstate: skip the driver if ACPI has power mgmt option (Adrian Huang)  [Orabug: 19250051]  
  - cpufreq/intel_pstate: Add static declarations to internal functions (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Refactor driver to support CPUs with different MSR layouts (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Correct calculation of min pstate value (Dirk Brandewie)  [Orabug: 19250051]  
  - intel_pstate: Improve accuracy by not truncating until final result (Brennan Shacklett)  [Orabug: 19250051]  
  - intel_pstate: Fix type mismatch warning (Rafael J. Wysocki)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Fix max_perf_pct on resume (Brian Maly)  [Orabug: 19250051]  
  - intel_pstate: fix no_turbo (Srinivas Pandruvada)  [Orabug: 19250051]  
  - intel_pstate: Add Haswell CPU models (Nell Hardcastle)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Change to scale off of max P-state (Brian Maly)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Add additional supported CPU ID (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: use vzalloc() instead of vmalloc()/memset(0) (Wei Yongjun)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: remove #ifdef MODULE compile fence (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Remove idle mode PID (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: fix ffmpeg regression (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: use lowest requested max performance (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: remove idle time and duration from sample and calculations (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Optimize intel_pstate_set_policy (Srinivas Pandruvada)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Set timer timeout correctly (Brian Maly)  [Orabug: 19250051]  
  - intel-pstate: Use #defines instead of hard-coded values. (Konrad Rzeszutek Wilk)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Fix calculation of current frequency (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Add function to check that all MSRs are valid (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Do not load on VM that does not report max P state. (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Fix intel_pstate_init() error path (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Add kernel command line option disable intel_pstate. (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq / intel_pstate: Fix 32 bit build (Dirk Brandewie)  [Orabug: 19250051]  
  - cpufreq/x86: Add P-state driver for sandy bridge. (Dirk Brandewie)  [Orabug: 19250051]  
  - xprtrdma: Update RDMA_NOMSG support (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Make FMR the default memory registration mode (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: human-readable completion status (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Display async errors (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Enable pad optimization (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Cap req_cqinit (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Return an errno from rpcrdma_register_external() (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Handle additional connection events (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Remove RPCRDMA_PERSISTENT_REGISTRATION macro (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Make rpcrdma_ep_disconnect() return void (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Schedule reply tasklet once per upcall (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Allocate each struct rpcrdma_mw separately (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Rename frmr_wr (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Disable completions for LOCAL_INV Work Requests (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Disable completions for FAST_REG_MR Work Requests (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Don't post a LOCAL_INV in rpcrdma_register_frmr_external() (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Reset FRMRs after a flushed LOCAL_INV Work Request (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Reset FRMRs when FAST_REG_MR is flushed by a disconnect (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Properly handle exhaustion of the rb_mws list (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Chain together all MWs in same buffer pool (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Back off rkey when FAST_REG_MR fails (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Unclutter struct rpcrdma_mr_seg (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Don't invalidate FRMRs if registration fails (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: On disconnect, don't ignore pending CQEs (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Update rkeys after transport reconnect (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Limit data payload size for ALLPHYSICAL (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Protect ia->ri_id when unmapping/invalidating MRs (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Fix panic in rpcrdma_register_frmr_external() (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Fix DMA-API-DEBUG warning by checking dma_map result (Yan Burman)  [Orabug: 19878552]  
  - xprtrdma: Disconnect on registration failure (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Remove BUG_ON() call sites (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Avoid deadlock when credit window is reset (Chuck Lever)  [Orabug: 19878552]  
  - SUNRPC: Move congestion window constants to header file (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Reset connection timeout after successful reconnect (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Use macros for reconnection timeout constants (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Allocate missing pagelist (Shirley Ma)  [Orabug: 19878552]  
  - xprtrdma: Remove Tavor MTU setting (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Ensure ia->ri_id->qp is not NULL when reconnecting (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Reduce the number of hardway buffer allocations (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Limit work done by completion handler (Chuck Lever)  [Orabug: 19878552]  
  - xprtrmda: Reduce calls to ib_poll_cq() in completion handlers (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Reduce lock contention in completion handlers (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: mount reports "Invalid mount option" if memreg mode not supported (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Fall back to MTHCAFMR when FRMR is not supported (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Remove REGISTER memory registration mode (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Fix BOUNCEBUFFERS removal (Chuck Lever)  [Orabug: 19878552]  
  - nfs-rdma: Fix for FMR leaks (Allen Andrews)  [Orabug: 19878552]  
  - xprtrdma: mind the device's max fast register page list depth (Steve Wise)  [Orabug: 19878552]  
  - xprtrdma: Update 16b14d4f (xprtrdma: Split the completion queue) (Chuck Lever)  [Orabug: 19878552]  
  - xprtrdma: Revert 87f2934a (xprtrdma: Disable ALLPHYSICAL mode by default) (Chuck Lever)  [Orabug: 19878552]  
  - qlcnic: Update version to 5.3.62 (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: Fix number of arguments in destroy tx context command (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: Fix programming number of arguments in a command. (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: Fix ordering of stats in stats buffer. (Manish Chopra)  [Orabug: 19877622]  
  - qlcnic: Remove __QLCNIC_DEV_UP bit check to read TX queues statistics. (Manish Chopra)  [Orabug: 19877622]  
  - qlcnic: Fix memory corruption while reading stats using ethtool. (Manish Chopra)  [Orabug: 19877622]  
  - qlcnic: Use qlcnic_83xx_flash_read32() API instead of lockless version of the API. (Sony Chacko)  [Orabug: 19877622]  
  - qlcnic: Add support to run firmware POST (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: Use usleep_range() instead of msleep() for sleep less than 20ms (Jitendra Kalsaria)  [Orabug: 19877622]  
  - qlcnic: Add support for 0x8830 device ID (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: Update Link speed and port type info for 83xx adapter (Jitendra Kalsaria)  [Orabug: 19877622]  
  - treewide: Fix typo in printk (Masanari Iida)  [Orabug: 19877622]  
  - qlcnic: Fix endianess issue in firmware load from file operation (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: Fix endianess issue in FW dump template header (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: Fix flash access interface to application (Jitendra Kalsaria)  [Orabug: 19877622]  
  - PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use (Benoit Taine)  [Orabug: 19877622]  
  - net: ethernet: qlogic: qlcnic: Remove duplicate object file from Makefile (Andreas Ruprecht)  [Orabug: 19877622]  
  - qlcnic: Initialize dcbnl_ops before register_netdev (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: Set driver version before registering netdev (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: Fix update of ethtool stats. (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: Update version to 5.3.61 (Harish Patil)  [Orabug: 19877622]  
  - qlcnic: Enhance Tx timeout debug data collection. (Harish Patil)  [Orabug: 19877622]  
  - qlcnic: Update version to 5.3.60 (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: Optimize ring count validations (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: Pre-allocate DMA buffer used for minidump collection (Shahed Shaikh)  [Orabug: 19877622]  
  - qlcnic: remove duplicate QLC_83XX_GET_LSO_CAPABILITY define (Dan Carpenter)  [Orabug: 19877622]  
  - qlcnic: Initialize mailbox cmd structure to zero (Rajesh Borundia)  [Orabug: 19877622]  
  - qlcnic: info leak in qlcnic_dcb_peer_app_info() (Dan Carpenter)  [Orabug: 19877622]  
  - qlogic: Use time_before() (Manuel Schölling)  [Orabug: 19877622]  
  - net: get rid of SET_ETHTOOL_OPS (Wilfried Klaebe)  [Orabug: 19877622]  
  - qlcnic: Do not disable SR-IOV on PF unload when VFs are assigned to VMs. (Manish Chopra)  [Orabug: 19877622]  
  - qla2xxx: Update driver version to 8.07.00.16.39.0-k. (Saurav Kashyap)  [Orabug: 19876725]  
  - qla2xxx: update fc_host for WWPN after cable pull (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: Move warning message to debug level. (Sawan Chandak)  [Orabug: 19876725]  
  - qla2xxx: Fail adapter initialization on load ram failure. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Disable PCI device in shutdown handler. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Mark port lost when we receive an RSCN for it. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Restore WWPN in case of Loop Dead. (Hiral Patel)  [Orabug: 19876725]  
  - qla2xxx: Honor FCP_RSP retry delay timer field. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Add missing ISP27xx checks to optrom code. (Alex Vechersky)  [Orabug: 19876725]  
  - qla2xxx: Force use of mailbox interface for flash access commands for ISP27xx. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Fix mismatch is checks to free sysfs nodes. (Nigel Kirkland)  [Orabug: 19876725]  
  - qla2xxx: Disable laser for ISP2031 while unloading driver. (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: Enable DPORT using NVRAM parameters. (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: Declaration error cause stack corruption. (Quinn Tran)  [Orabug: 19876725]  
  - qla2xxx: Add fix in driver unload for pending activity. (Sawan Chandak)  [Orabug: 19876725]  
  - qla2xxx: Fix duplicate log message ID. (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: Allow user to change ql2xfdmienable value (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: Fix driver version string message. (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: Allow nvram bit to enable D-PORT (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Allow nvram bit to enable FA-WWN (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Remove restriction on starting remote device discovery on port update. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Move mailbox failure messages to a default debug level. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Correction to FA-WWN for un-acquiring portname. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Add scatter/gather table size module parameter. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Add ql2xasynclogin module parameter. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: fix incorrect debug printk (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Add D-Port functionality. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Add FA-WWN functionality. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Add FDMI-2 functionality. (Himanshu Madhani)  [Orabug: 19876725]  
  - qla2xxx: ISPFx00 unexpected resets during adapter boot sequence. (Jan Kulich)  [Orabug: 19876725]  
  - qla2xxx: Incorrect linked list semantic in qlafx00_get_fcport(). (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Incorrect debug level on mailbox command print 0x1111. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Fix potential return count bug in qla2xxx_get_vpd_field(). (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISP27xx fwdump template error print simplification. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISP25xx multiqueue shadow register crash fix. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISPFX00 avoid writing semaphore register in request_irqs(). (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Add endianizer to T10 PI max_payload_size modifier. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: Remove wait for online from host reset handler. (Saurav Kashyap)  [Orabug: 19876725]  
  - qla2xxx: Do logins from a chip reset in DPC thread instead of the error handler thread. (Chad Dypuis)  [Orabug: 19876725]  
  - qla2xxx: Enable fast flash access for ISP83xx. (Chad Dupuis)  [Orabug: 19876725]  
  - qla2xxx: Add ISP27xx fwdump template entry T275 (insert buffer) (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISP27xx fwdump template fix insertbuf() routine. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISP27xx fwdump template remove high frequency debug logs. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISP27xx optimize fwdump entry table lookup. (Joe Carnuccio)  [Orabug: 19876725]  
  - qla2xxx: ISP27xx add tests for incomplete template. (Joe Carnuccio)  [Orabug: 19876725]  
  - crypto: sha - Handle unaligned input data in generic sha256 and sha512. (David S. Miller)  [Orabug: 19680098]  
  - ocfs2: don't fire quorum before connection established (Junxiao Bi)  [Orabug: 19549715]  
  - ocfs2: fix null handle in ocfs2_write_zero_page (Junxiao Bi)  [Orabug: 19547845]  
  - ocfs2: fix deadlock due to wrong locking order (Junxiao Bi)  [Orabug: 19547845]  
  - xfs: fix uflags detection at xfs_fs_rm_xquota (Jie Liu)  [Orabug: 19815141]  
  - genhd: fix leftover might_sleep() in blk_free_devt() (Jens Axboe)  [Orabug: 19854768]


