# changelog

author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1830.el7uek]
changelog:
  - scsi: smartpqi: bump driver version to 1.1.4-130 (Don Brace)   
  - scsi: smartpqi: fix critical ARM issue reading PQI index registers (Kevin Barnett)   
  - scsi: smartpqi: add inspur advantech ids (Kevin Barnett)   
  - scsi: smartpqi: improve error checking for sync requests (Kevin Barnett)   
  - scsi: smartpqi: improve handling for sync requests (Kevin Barnett)   
  - blk-mq: Allow PCI vector offset for mapping queues (Keith Busch)   
  - scsi: smartpqi: update driver version (Don Brace)   
  - scsi: smartpqi: workaround fw bug for oq deletion (Kevin Barnett)   
  - scsi: smartpqi: add in new supported controllers (Kevin Barnett)   
  - scsi: smartpqi: Convert timers to use timer_setup() (Kees Cook)   
  - jfs: Fix inconsistency between memory allocation and ea_buf->max_size (Shankara Pailoor)  [Orabug: 28221253]  {CVE-2018-12233} 
  - Revert "jfs: Fix inconsistency between memory allocation and ea_buf->max_size" (Jack Vogel)   
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28216828]  
  - MAINTAINERS: Add backup maintainers for libnvdimm and DAX (Dave Jiang)  [Orabug: 27911686]  
  - device-dax: allow MAP_SYNC to succeed (Dave Jiang)  [Orabug: 27911686]  
  - Revert "libnvdimm, of_pmem: workaround OF_NUMA=n build error" (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm, of_pmem: use dev_to_node() instead of of_node_to_nid() (Rob Herring)  [Orabug: 27911686]  
  - tools/testing/nvdimm: enable labels for nfit_test.1 dimms (Dan Williams)  [Orabug: 27911686]  
  - tools/testing/nvdimm: fix missing newline in nfit_test_dimm 'handle' attribute (Dan Williams)  [Orabug: 27911686]  
  - tools/testing/nvdimm: support nfit_test_dimm attributes under nfit_test.1 (Dan Williams)  [Orabug: 27911686]  
  - tools/testing/nvdimm: allow custom error code injection (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm, dimm: handle EACCES failures from label reads (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm, of_pmem: workaround OF_NUMA=n build error (Dan Williams)  [Orabug: 27911686]  
  - nfit, address-range-scrub: add module option to skip initial ars (Dan Williams)  [Orabug: 27911686]  
  - nfit, address-range-scrub: rework and simplify ARS state machine (Dan Williams)  [Orabug: 27911686]  
  - nfit, address-range-scrub: determine one platform max_ars value (Dan Williams)  [Orabug: 27911686]  
  - powerpc/powernv: Create platform devs for nvdimm buses (Oliver O'Halloran)  [Orabug: 27911686]  
  - doc/devicetree: Persistent memory region bindings (Oliver O'Halloran)  [Orabug: 27911686]  
  - libnvdimm: Add device-tree based driver (Oliver O'Halloran)  [Orabug: 27911686]  
  - libnvdimm: Add of_node to region and bus descriptors (Oliver O'Halloran)  [Orabug: 27911686]  
  - libnvdimm, region: quiet region probe (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm, testing: update the default smart ctrl_temperature (Vishal Verma)  [Orabug: 27911686]  
  - libnvdimm, testing: Add emulation for smart injection commands (Vishal Verma)  [Orabug: 27911686]  
  - nfit, address-range-scrub: introduce nfit_spa->ars_state (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm: add an api to cast a 'struct nd_region' to its 'struct device' (Dan Williams)  [Orabug: 27911686]  
  - dax, dm: allow device-mapper to operate without dax support (Dan Williams)  [Orabug: 27911686]  
  - dm log writes: fix max length used for kstrndup (Ma Shimiao)  [Orabug: 27911686]  
  - dm log writes: add support for DAX (Ross Zwisler)  [Orabug: 27911686]  
  - dm log writes: add support for inline data buffers (Ross Zwisler)  [Orabug: 27911686]  
  - dax: introduce CONFIG_DAX_DRIVER (Dan Williams)  [Orabug: 27911686]  
  - fs, dax: use page->mapping to warn if truncate collides with a busy page (Dan Williams)  [Orabug: 27911686]  
  - ext2, dax: introduce ext2_dax_aops (Dan Williams)  [Orabug: 27911686]  
  - ext4, dax: introduce ext4_dax_aops (Dan Williams)  [Orabug: 27911686]  
  - xfs, dax: introduce xfs_dax_aops (Dan Williams)  [Orabug: 27911686]  
  - block, dax: remove dead code in blkdev_writepages() (Dan Williams)  [Orabug: 27911686]  
  - fs, dax: prepare for dax-specific address_space_operations (Dan Williams)  [Orabug: 27911686]  
  - dax: store pfns in the radix (Dan Williams)  [Orabug: 27911686]  
  - acpi, nfit: rework NVDIMM leaf method detection (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7 (Toshi Kani)  [Orabug: 27911686]  
  - libnvdimm, label: change min label storage size per UEFI 2.7 (Toshi Kani)  [Orabug: 27911686]  
  - device-dax: use module_nd_driver (Johannes Thumshirn)  [Orabug: 27911686]  
  - libnvdimm, pmem: use module_nd_driver (Johannes Thumshirn)  [Orabug: 27911686]  
  - libnvdimm: provide module_nd_driver wrapper (Johannes Thumshirn)  [Orabug: 27911686]  
  - nfit_test: prevent parsing error of nfit_test.0 (Ross Zwisler)  [Orabug: 27911686]  
  - nfit_test: fix buffer overrun, add sanity check (Ross Zwisler)  [Orabug: 27911686]  
  - nfit_test: improve structure offset handling (Ross Zwisler)  [Orabug: 27911686]  
  - device-dax: remove redundant __func__ in dev_dbg (Dan Williams)  [Orabug: 27911686]  
  - libnvdimm: remove redundant __func__ in dev_dbg (Dan Williams)  [Orabug: 27911686]  
  - acpi, nfit: remove redundant __func__ in dev_dbg (Johannes Thumshirn)  [Orabug: 27911686]  
  - RDS: Add 1MB message size limit (Avinash Repaka)  [Orabug: 25578394]  
  - RDS: IB: Use newer API for fast registration (Avinash Repaka)  [Orabug: 27509034]  
  - jfs: Fix inconsistency between memory allocation and ea_buf->max_size (Shankara Pailoor)  [Orabug: 28221253]  
  - x86/speculation: Support per-process SSBD with IBRS (Alexandre Chartre)  [Orabug: 28313239]  
  - Linux 4.14.56 (Greg Kroah-Hartman)   
  - f2fs: give message and set need_fsck given broken node id (Jaegeuk Kim)   
  - loop: remember whether sysfs_create_group() was done (Tetsuo Handa)   
  - RDMA/ucm: Mark UCM interface as BROKEN (Leon Romanovsky)   
  - PM / hibernate: Fix oops at snapshot_write() (Tetsuo Handa)   
  - loop: add recursion validation to LOOP_CHANGE_FD (Theodore Ts'o)   
  - netfilter: x_tables: initialise match/target check parameter struct (Florian Westphal)   
  - netfilter: nf_queue: augment nfqa_cfg_policy (Eric Dumazet)   
  - uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn() (Oleg Nesterov)   
  - crypto: x86/salsa20 - remove x86 salsa20 implementations (Eric Biggers)   
  - nvme-pci: Remap CMB SQ entries on every controller reset (Keith Busch)   
  - xen: setup pv irq ops vector earlier (Juergen Gross)   
  - iw_cxgb4: correctly enforce the max reg_mr depth (Steve Wise)   
  - i2c: tegra: Fix NACK error handling (Jon Hunter)   
  - IB/hfi1: Fix incorrect mixing of ERR_PTR and NULL return values (Michael J. Ruhl)   
  - tools build: fix # escaping in .cmd files for future Make (Paul Menzel)   
  - arm64: neon: Fix function may_use_simd() return error status (Yandong Zhao)   
  - kbuild: delete INSTALL_FW_PATH from kbuild documentation (Randy Dunlap)   
  - tracing: Reorder display of TGID to be after PID (Joel Fernandes (Google))   
  - mm: do not bug_on on incorrect length in __mm_populate() (Michal Hocko)   
  - fs, elf: make sure to page align bss in load_elf_library (Oscar Salvador)   
  - fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps* (Vlastimil Babka)   
  - mm: do not drop unused pages when userfaultd is running (Christian Borntraeger)   
  - ALSA: hda - Handle pm failure during hotplug (Chris Wilson)   
  - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Hui Wang)   
  - scsi: megaraid_sas: fix selection of reply queue (Ming Lei)   
  - scsi: megaraid_sas: Create separate functions to allocate ctrl memory (Shivasharan S)   
  - scsi: megaraid_sas: replace is_ventura with adapter_type checks (Shivasharan S)   
  - scsi: megaraid_sas: replace instance->ctrl_context checks with instance->adapter_type (Shivasharan S)   
  - scsi: megaraid_sas: use adapter_type for all gen controllers (Shivasharan S)   
  - genirq/affinity: assign vectors to all possible CPUs (Christoph Hellwig)   
  - Fix up non-directory creation in SGID directories (Linus Torvalds)   
  - devpts: resolve devpts bind-mounts (Christian Brauner)   
  - devpts: hoist out check for DEVPTS_SUPER_MAGIC (Christian Brauner)   
  - xhci: xhci-mem: off by one in xhci_stream_id_to_ring() (Dan Carpenter)   
  - usb: quirks: add delay quirks for Corsair Strafe (Nico Sneck)   
  - USB: serial: mos7840: fix status-register error handling (Johan Hovold)   
  - USB: yurex: fix out-of-bounds uaccess in read handler (Jann Horn)   
  - USB: serial: keyspan_pda: fix modem-status error handling (Johan Hovold)   
  - USB: serial: cp210x: add another USB ID for Qivicon ZigBee stick (Olli Salonen)   
  - USB: serial: ch341: fix type promotion bug in ch341_control_in() (Dan Carpenter)   
  - ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS (Hans de Goede)   
  - vmw_balloon: fix inflation with batching (Nadav Amit)   
  - ata: Fix ZBC_OUT all bit handling (Damien Le Moal)   
  - ata: Fix ZBC_OUT command block check (Damien Le Moal)   
  - staging: r8822be: Fix RTL8822be can't find any wireless AP (Ping-Ke Shih)   
  - staging: rtl8723bs: Prevent an underflow in rtw_check_beacon_data(). (Murray McAllister)   
  - ibmasm: don't write out of bounds in read handler (Jann Horn)   
  - mmc: dw_mmc: fix card threshold control configuration (x00270170)   
  - mmc: sdhci-esdhc-imx: allow 1.8V modes without 100/200MHz pinctrl states (Stefan Agner)   
  - MIPS: Fix ioremap() RAM check (Paul Burton)   
  - MIPS: Use async IPIs for arch_trigger_cpumask_backtrace() (Paul Burton)   
  - MIPS: Call dump_stack() from show_regs() (Paul Burton)   
  - ASoC: mediatek: preallocate pages use platform device (Kai Chieh Chuang)   
  - media: rc: mce_kbd decoder: fix stuck keys (Sean Young)   
  - Linux 4.14.55 (Greg Kroah-Hartman)   
  - Revert mm/vmstat.c: fix vmstat_update() preemption BUG (Sebastian Andrzej Siewior)   
  - sched, tracing: Fix trace_sched_pi_setprio() for deboosting (Sebastian Andrzej Siewior)   
  - staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write() (Dan Carpenter)   
  - netfilter: nf_log: don't hold nf_log_mutex during user access (Jann Horn)   
  - mtd: cfi_cmdset_0002: Change erase functions to check chip good only (Tokunori Ikegami)   
  - mtd: cfi_cmdset_0002: Change erase functions to retry for error (Tokunori Ikegami)   
  - mtd: cfi_cmdset_0002: Change definition naming to retry write operation (Tokunori Ikegami)   
  - dm: prevent DAX mounts if not supported (Ross Zwisler)   
  - dm: set QUEUE_FLAG_DAX accordingly in dm_table_set_restrictions() (Mike Snitzer)   
  - dax: check for QUEUE_FLAG_DAX in bdev_dax_supported() (Ross Zwisler)   
  - dax: change bdev_dax_supported() to support boolean returns (Dave Jiang)   
  - fs: allow per-device dax status checking for filesystems (Darrick J. Wong)   
  - mtd: rawnand: mxc: set spare area size register explicitly (Martin Kaiser)   
  - media: cx25840: Use subdev host data for PLL override (Brad Love)   
  - Kbuild: fix # escaping in .cmd files for future Make (Rasmus Villemoes)   
  - Revert "dpaa_eth: fix error in dpaa_remove()" (Greg Kroah-Hartman)   
  - f2fs: truncate preallocated blocks in error case (Jaegeuk Kim)   
  - media: vb2: core: Finish buffers at the end of the stream (Sakari Ailus)   
  - mm: hwpoison: disable memory error handling on 1GB hugepage (Naoya Horiguchi)   
  - irq/core: Fix boot crash when the irqaffinity= boot parameter is passed on CPUMASK_OFFSTACK=y kernels(v1) (Rakib Mullick)   
  - HID: debug: check length before copy_to_user() (Daniel Rosenberg)   
  - HID: hiddev: fix potential Spectre v1 (Gustavo A. R. Silva)   
  - HID: i2c-hid: Fix "incomplete report" noise (Jason Andryuk)   
  - block: cope with WRITE ZEROES failing in blkdev_issue_zeroout() (Ilya Dryomov)   
  - block: factor out __blkdev_issue_zero_pages() (Ilya Dryomov)   
  - ext4: check superblock mapped prior to committing (Jon Derrick)   
  - ext4: add more mount time checks of the superblock (Theodore Ts'o)   
  - ext4: add more inode number paranoia checks (Theodore Ts'o)   {CVE-2018-10882} 
  - ext4: avoid running out of journal credits when appending to an inline file (Theodore Ts'o)   {CVE-2018-10883} 
  - ext4: never move the system.data xattr out of the inode body (Theodore Ts'o)   {CVE-2018-10880} 
  - ext4: clear i_data in ext4_inode_info when removing inline data (Theodore Ts'o)   {CVE-2018-10881} 
  - ext4: include the illegal physical block in the bad map ext4_error msg (Theodore Ts'o)   
  - ext4: verify the depth of extent tree in ext4_find_extent() (Theodore Ts'o)   {CVE-2018-10877} 
  - ext4: only look at the bg_flags field if it is valid (Theodore Ts'o)   {CVE-2018-10876} 
  - ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o)   
  - ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o)   
  - ext4: always verify the magic number in xattr blocks (Theodore Ts'o)   {CVE-2018-10879} 
  - ext4: add corruption check in ext4_xattr_set_entry() (Theodore Ts'o)   {CVE-2018-10879} 
  - jbd2: don't mark block as modified if the handle is out of credits (Theodore Ts'o)   {CVE-2018-10883} 
  - drm/udl: fix display corruption of the last line (Mikulas Patocka)   
  - drm: Use kvzalloc for allocating blob property memory (Michel Dänzer)   
  - cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting (Stefano Brivio)   
  - cifs: Fix infinite loop when using hard mount option (Paulo Alcantara)   
  - cifs: Fix memory leak in smb2_set_ea() (Paulo Alcantara)   
  - cifs: Fix use after free of a mid_q_entry (Lars Persson)   
  - vfio: Use get_user_pages_longterm correctly (Jason Gunthorpe)   
  - drbd: fix access after free (Lars Ellenberg)   
  - s390: Correct register corruption in critical section cleanup (Christian Borntraeger)   
  - scsi: target: Fix truncated PR-in ReadKeys response (David Disseldorp)   
  - scsi: sg: mitigate read/write abuse (Jann Horn)   
  - tracing: Fix missing return symbol in function_graph output (Changbin Du)   
  - mm: hugetlb: yield when prepping struct pages (Cannon Matthews)   
  - userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Janosch Frank)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1831.el7uek]
changelog:
  - IB/mad: Use IDR for agent IDs (willy@infradead.org)  [Orabug: 25571450]  
  - IB/mad: Agent registration is process context only (Matthew Wilcox)  [Orabug: 25571450]  
  - scsi: lpfc: Revise copyright for new company language (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: update driver version to 12.0.0.5 (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: devloss timeout race condition caused null pointer reference (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix NVME Target crash in defer rcv logic (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Support duration field in Link Cable Beacon V1 command (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Make PBDE optimizations configurable (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix abort error path for NVMET (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix panic if driver unloaded when port is offline (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Add Buffer overflow check, when nvme_info larger than PAGE_SIZE (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: use monotonic timestamps for statistics (Arnd Bergmann)  [Orabug: 28410240]  
  - scsi: lpfc: update driver version to 12.0.0.4 (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix port initialization failure. (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix 16gb hbas failing cq create. (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix crash in blk_mq layer when executing modprobe -r lpfc (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: correct oversubscription of nvme io requests for an adapter (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix MDS diagnostics failure (Rx < Tx) (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: fix spelling mistakes: "mabilbox" and "maibox" (Colin Ian King)  [Orabug: 28410240]  
  - scsi: lpfc: Comment cleanup regarding Broadcom copyright header (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: update driver version to 12.0.0.3 (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Fix up log messages and stats counters in IO submit code path (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Driver NVME load fails when CPU cnt > WQ resource cnt (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Handle new link fault code returned by adapter firmware. (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Correct fw download error message (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: enhance LE data structure copies to hardware (James Smart)  [Orabug: 28410240]  
  - scsi: lpfc: Change IO submit return to EBUSY if remote port is recovering (James Smart)  [Orabug: 28410240]  
  - uek-rpm: aarch64 Set CONFIG_BPF_STREAM_PARSER (Henry Willard)  [Orabug: 27653372]  
  - x86/smpboot: Do not use smp_num_siblings in __max_logical_packages calculation (Prarit Bhargava)  [Orabug: 28328644]  
  - RDMA/restrack: Move restrack_clean to be symmetrical to restrack_init (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/restrack: Don't rely on uninitialized variable in restrack_add flow (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/nldev: provide detailed PD information (Steve Wise)  [Orabug: 27616702]  
  - mlx4_ib: zero out struct ib_pd when allocating (Steve Wise)  [Orabug: 27616702]  
  - RDMA/nldev: provide detailed MR information (Steve Wise)  [Orabug: 27616702]  
  - mlx4_ib: set user mr attributes in struct ib_mr (Steve Wise)  [Orabug: 27616702]  
  - RDMA/nldev: provide detailed CQ information (Steve Wise)  [Orabug: 27616702]  
  - RDMA/nldev: provide detailed CM_ID information (Steve Wise)  [Orabug: 27616702]  
  - RDMA/CM: move rdma_id_private to cma_priv.h (Steve Wise)  [Orabug: 27616702]  
  - RDMA/nldev: common resource dumpit function (Steve Wise)  [Orabug: 27616702]  
  - RDMA/restrack: clean up res_to_dev() (Steve Wise)  [Orabug: 27616702]  
  - RDMA/uverbs: Fix kernel panic while using XRC_TGT QP type (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/restrack: don't use uaccess_kernel() (Steve Wise)  [Orabug: 27616702]  
  - RDMA/restrack: Remove unimplemented XRCD object (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/netlink: Hide unimplemented NLDEV commands (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/nldev: Provide detailed QP information (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/nldev: Provide global resource utilization (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/core: Add resource tracking for create and destroy PDs (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/core: Add resource tracking for create and destroy CQs (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/core: Add resource tracking for create and destroy QPs (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/restrack: Add general infrastructure to track RDMA resources (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/core: Save kernel caller name when creating PD and CQ objects (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/core: Use the MODNAME instead of the function name for pd callers (Leon Romanovsky)  [Orabug: 27616702]  
  - RDMA/nldev: Refactor setting the nldev handle to a common function (Leon Romanovsky)  [Orabug: 27616702]  
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - uek-rpm: Enable net_failover.ko in nano_modules file (Victor Erminpour)  [Orabug: 28390028]  
  - uek-rpm: config: Disable CONFIG_SECURITY_DMESG_RESTRICT (Victor Erminpour)  [Orabug: 28372959]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1833.el7uek]
changelog:
  - x86/bugs: spectre_v2_heuristics_setup should check for ssbd, not rds (Daniel Jordan)  [Orabug: 28362348]  
  - x86/bugs: inverted documentation of spectre_v2_heuristics=ssbd=off (Daniel Jordan)  [Orabug: 28362348]  
  - ib/core: Adding match_net_dev_ignore_port workaround. (Gerd Rausch)  [Orabug: 28167460]  
  - mm: don't warn about allocations which stall for too long (Tetsuo Handa)  [Orabug: 27871033]  
  - ipc/shm.c add ->pagesize function to shm_vm_ops (Jane Chu)  [Orabug: 28069826]  
  - dtrace: increment dtrace-kernel-headers revision to 1.1.0 (Vincent Lim)  [Orabug: 28241736]  
  - nfsd: give out fewer session slots as limit approaches (J. Bruce Fields)   
  - nfsd: increase DRC cache limit (J. Bruce Fields)   
  - uek-rpm: aarch64: enable building SHA3 algorithms (Henry Willard)  [Orabug: 28486461]  
  - qla2xxx: Update the version to 10.00.00.07-k1. (Giridhar Malavali)  [Orabug: 28497106]  
  - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. (Giridhar Malavali)  [Orabug: 28497106]  
  - qla2xxx: Correction to total data segment count when local DMA buffers used for DIF PI. (Giridhar Malavali)  [Orabug: 28497106]  
  - dtrace: fix ustack for arm64 (Kris Van Hees)  [Orabug: 28216251]  
  - dtrace: increase supported number of SDT arguments to 18 (Kris Van Hees)  [Orabug: 28216316]  
  - dtrace: SDT support on arm64 (Kris Van Hees)  [Orabug: 28070261]  
  - ipv4: frags: handle possible skb truesize change (Eric Dumazet)  [Orabug: 28481663]  {CVE-2018-5391} 
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28481670]  {CVE-2018-5391} 
  - init/main.c: reorder boot_cpu_state_init/smp_prepare_boot_cpu (Mihai Carabas)  [Orabug: 28491884]  
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28220625]  {CVE-2018-3620} 
  - cpu/hotplug: Fix SMT supported evaluation (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3620} 
  - Documentation/l1tf: Remove Yonah processors from not vulnerable list (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86: Don't include linux/irq.h from asm/hardirq.h (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - cpu/hotplug: detect SMT disabled by BIOS (Josh Poimboeuf)  [Orabug: 28220625]  {CVE-2018-3620} 
  - Documentation/l1tf: Fix typos (Tony Luck)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Jiri Kosina)  [Orabug: 28220625]  {CVE-2018-3620} 
  - Documentation: Add section about CPU vulnerabilities (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Jiri Kosina)  [Orabug: 28220625]  {CVE-2018-3646} 
  - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - cpu/hotplug: Expose SMT control init function (Jiri Kosina)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/kvm: Allow runtime control of L1D flush (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/kvm: Serialize L1D flush parameter setter (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/kvm: Add static key for flush always (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/kvm: Move l1tf setup function (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/l1tf: Handle EPT disabled state proper (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/kvm: Drop L1TF MSR list approach (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/litf: Introduce vmx status variable (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - cpu/hotplug: Online siblings when SMT control is turned on (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add find_msr() helper function (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush logic (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D MSR based flush (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush algorithm (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add module argument for L1TF mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} {CVE-2018-3646} 
  - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3646} 
  - cpu/hotplug: Boot HT siblings at least once (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Borislav Petkov)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpufeatures: Add detection of L1D cache flush support. (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/apic: Ignore secondary threads if nosmt=force (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpu/AMD: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Borislav Petkov)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpu/intel: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpu/topology: Provide detect_extended_topology_early() (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpu/common: Provide detect_ht_early() (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpu/AMD: Remove the pointless detect_ht() call (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/cpu: Remove the pointless CPU printout (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - cpu/hotplug: Provide knobs to control SMT (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - cpu/hotplug: Split do_cpu_down() (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - cpu/hotplug: Make bringup/teardown of smp threads symmetric (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/topology: Provide topology_smt_supported() (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/smp: Provide topology_is_primary_thread() (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - sched/smt: Update sched_smt_present at runtime (Peter Zijlstra)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Klein)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Kleen)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Klein)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Klein)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Klein)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Klein)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/mm: Limit mmap() of /dev/mem to valid physical addresses (Craig Bergstrom)  [Orabug: 28220625]  {CVE-2018-3620} {CVE-2018-3620} 
  - x86/mm: Prevent non-MAP_FIXED mapping across DEFAULT_MAP_WINDOW border (Kirill A. Shutemov)  [Orabug: 28220625]  {CVE-2018-3620} {CVE-2018-3620} 
  - mstflint: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27416559]  
  - rds: Remove RDS dependency on IPv6 (Ka-Cheong Poon)  [Orabug: 28466876]  
  - rds: Allow non-link local and link local communication (Ka-Cheong Poon)  [Orabug: 28398845]  
  - rds: Allow IPv4-mapped IPv6 address to be used (Ka-Cheong Poon)  [Orabug: 27744573]  
  - rds: Remove VLA, fix incorrect cast, missing static usage warnings (Ka-Cheong Poon)  [Orabug: 28452068]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 28469286]  
  - uek-rpm: Show UEK Release Number in RPM summary (Victor Erminpour)  [Orabug: 28468593]  
  - net/mlx5: Use order-0 allocations for all WQ types (Tariq Toukan)  [Orabug: 28307387]  
  - net/mlx5e: TX, Use actual WQE size for SQ edge fill (Tariq Toukan)  [Orabug: 28307387]  
  - net/mlx5e: Use WQ API functions instead of direct fields access (Tariq Toukan)  [Orabug: 28307387]  
  - net/mlx5e: Use inline MTTs in UMR WQEs (Tariq Toukan)  [Orabug: 28307387]  
  - net/mlx5e: Code movements in RX UMR WQE post (Tariq Toukan)  [Orabug: 28307387]  
  - IB/mlx5: Implement fragmented completion queue (CQ) (Yonatan Cohen)  [Orabug: 28307387]  
  - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet)  [Orabug: 28450913]  {CVE-2018-5390} 
  - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)  [Orabug: 28450913]  {CVE-2018-5390} 
  - tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet)  [Orabug: 28450913]  {CVE-2018-5390} 
  - tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)  [Orabug: 28450913]  {CVE-2018-5390} 
  - tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)  [Orabug: 28450913]  {CVE-2018-5390} 
  - x86/efi: Access EFI MMIO data as unencrypted when SEV is active (Brijesh Singh)  [Orabug: 28446167]  
  - x86/entry/64: Remove %ebx handling from error_entry/exit (Andy Lutomirski)  [Orabug: 28402818]  {CVE-2018-14678} 
  - dtrace: uregs on x86 is broken (Eugene Loh)  [Orabug: 28439480]  
  - fuse: Allow fully unprivileged mounts (Eric W. Biederman)  [Orabug: 28418745]  
  - fuse: Ensure posix acls are translated outside of init_user_ns (Eric W. Biederman)  [Orabug: 28418745]  
  - fuse: define the filesystem as untrusted (Mimi Zohar)  [Orabug: 28418745]  
  - ima: fail file signature verification on non-init mounted filesystems (Mimi Zohar)  [Orabug: 28418745]  
  - fuse: add writeback documentation (Miklos Szeredi)  [Orabug: 28418745]  
  - fuse: honor AT_STATX_FORCE_SYNC (Miklos Szeredi)  [Orabug: 28418745]  
  - fuse: honor AT_STATX_DONT_SYNC (Miklos Szeredi)  [Orabug: 28418745]  
  - fuse: Restrict allow_other to the superblock's namespace or a descendant (Seth Forshee)  [Orabug: 28418745]  
  - fuse: Support fuse filesystems outside of init_user_ns (Eric W. Biederman)  [Orabug: 28418745]  
  - fuse: Fail all requests with invalid uids or gids (Eric W. Biederman)  [Orabug: 28418745]  
  - fuse: Remove the buggy retranslation of pids in fuse_dev_do_read (Eric W. Biederman)  [Orabug: 28418745]  
  - fuse: return -ECONNABORTED on /dev/fuse read after abort (Szymon Lukasz)  [Orabug: 28418745]  
  - fs: fuse: account fuse_inode slab memory as reclaimable (Johannes Weiner)  [Orabug: 28418745]  
  - IB/mlx5: avoid excessive warning msgs when creating VFs on 2nd port (Qing Huang)  [Orabug: 28023157]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1834.el7uek]
changelog:
  - IB/mlx5: Honor cnt_set_id_valid flag instead of set_id (Parav Pandit)  [Orabug: 27406632]  
  - net/mlx5e: Refine ets validation function (Shay Agroskin)  [Orabug: 27948452]  
  - sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() in sym_hipd.c (George Kennedy)  [Orabug: 28481891]  
  - xen-netfront: fix warn message as irq device name has '/' (Xiao Liang)  [Orabug: 28384101]  
  - xen-netfront: fix queue name setting (Vitaly Kuznetsov)  [Orabug: 28384101]  
  - uek-rpm: Enable MPLS suppoprt (Victor Erminpour)  [Orabug: 28367674]  
  - x86/spectrev2: Don't set mode to SPECTRE_V2_NONE when retpoline is available. (Boris Ostrovsky)  [Orabug: 28544483]  
  - CVE-2018-15471 XSA-270 Linux netback driver OOB access in hash handling (Jan Beulich)  [Orabug: 28432127]  {CVE-2018-15471} 
  - net/mlx5e: Remove redundant active_channels indication (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Present SW stats when state is not opened (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Avoid reset netdev stats on configuration changes (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Introducing new statistics rwlock (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Move phy link down events counter out of SW stats (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Extend the stats group API to have update_stats() (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Merge per priority stats groups (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Add per-channel counters infrastructure, use it upon TX timeout (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Add VLAN offloads statistics (Parav Pandit)  [Orabug: 27548610]  
  - net/mlx5e: Switch channels counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch ipsec counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch pme counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch per prio pfc counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch per prio traffic counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch pcie counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch ethernet extended counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch physical statistical counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch RFC 2819 counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch RFC 2863 counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch IEEE 802.3 counters to use stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch vport counters to use the stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Switch Q counters to use the stats group API (Kamal Heib)  [Orabug: 27548610]  
  - net/mlx5e: Introduce stats group API (Parav Pandit)  [Orabug: 27548610]  
  - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Peter Zijlstra)  [Orabug: 28474635]  
  - irqchip/gic-v3-its: Fix its_irq_domain_activate return values. (Tom Saeger)  [Orabug: 28513702]  
  - sched: SIS_CORE to disable idle core search (subhra mazumdar)  [Orabug: 28482695]  
  - sched: add sched feature to disable idle core search (subhra mazumdar)  [Orabug: 28482695]  
  - sched: rotate the cpu search window for better spread (subhra mazumdar)  [Orabug: 28482695]  
  - sched: introduce per-cpu var next_cpu to track search limit (subhra mazumdar)  [Orabug: 28482695]  
  - sched: limit cpu search in select_idle_cpu (subhra mazumdar)  [Orabug: 28482695]  
  - Linux 4.14.60 (Greg Kroah-Hartman)   
  - tcp: add one more quick ack after after ECN events (Eric Dumazet)   
  - tcp: refactor tcp_ecn_check_ce to remove sk type cast (Yousuk Seung)   
  - tcp: do not aggressively quick ack after ECN events (Eric Dumazet)   
  - tcp: add max_quickacks param to tcp_incr_quickack and tcp_enter_quickack_mode (Eric Dumazet)   
  - tcp: do not force quickack when receiving out-of-order packets (Eric Dumazet)   
  - netlink: Don't shift with UB on nlk->ngroups (Dmitry Safonov)   
  - netlink: Do not subscribe to non-existent groups (Dmitry Safonov)   
  - xen-netfront: wait xenbus state change when load module manually (Xiao Liang)   
  - tcp_bbr: fix bw probing to raise in-flight data for very small BDPs (Neal Cardwell)   
  - NET: stmmac: align DMA stuff to largest cache line length (Eugeniy Paltsev)   
  - net: mdio-mux: bcm-iproc: fix wrong getter and setter pair (Anton Vasilyev)   
  - net: lan78xx: fix rx handling before first packet is send (Stefan Wahren)   
  - net: fix amd-xgbe flow-control issue (tangpengpeng)   
  - net: ena: Fix use of uninitialized DMA address bits field (Gal Pressman)   
  - ipv4: remove BUG_ON() from fib_compute_spec_dst (Lorenzo Bianconi)   
  - net: dsa: qca8k: Allow overwriting CPU port setting (Michal Vokáč)   
  - net: dsa: qca8k: Add QCA8334 binding documentation (Michal Vokáč)   
  - net: dsa: qca8k: Enable RXMAC when bringing up a port (Michal Vokáč)   
  - net: dsa: qca8k: Force CPU port to its highest bandwidth (Michal Vokáč)   
  - RDMA/uverbs: Protect from attempts to create flows on unsupported QP (Leon Romanovsky)   
  - usb: gadget: udc: renesas_usb3: should remove debugfs (Yoshihiro Shimoda)   
  - ovl: Sync upper dirty data when syncing overlayfs (Chengguang Xu)   
  - PCI: xgene: Remove leftover pci_scan_child_bus() call (Lorenzo Pieralisi)   
  - PCI: pciehp: Assume NoCompl+ for Thunderbolt ports (Lukas Wunner)   
  - ext4: fix check to prevent initializing reserved inodes (Theodore Ts'o)   
  - ext4: check for allocation block validity with block group locked (Theodore Ts'o)   
  - ext4: fix inline data updates with checksums enabled (Theodore Ts'o)   
  - squashfs: be more careful about metadata corruption (Linus Torvalds)   
  - random: mix rdrand with entropy sent in from userspace (Theodore Ts'o)   
  - block: reset bi_iter.bi_done after splitting bio (Greg Edwards)   
  - blkdev: __blkdev_direct_IO_simple: fix leak in error case (Martin Wilck)   
  - block: bio_iov_iter_get_pages: fix size of last iovec (Martin Wilck)   
  - drm/dp/mst: Fix off-by-one typo when dump payload table (Andy Shevchenko)   
  - drm/atomic-helper: Drop plane->fb references only for drm_atomic_helper_shutdown() (Ville Syrjälä)   
  - drm: Add DP PSR2 sink enable bit (José Roberto de Souza)   
  - ASoC: topology: Add missing clock gating parameter when parsing hw_configs (Kirill Marinushkin)   
  - ASoC: topology: Fix bclk and fsync inversion in set_link_hw_format() (Kirill Marinushkin)   
  - media: si470x: fix __be16 annotations (Mauro Carvalho Chehab)   
  - media: atomisp: compat32: fix __user annotations (Mauro Carvalho Chehab)   
  - scsi: cxlflash: Avoid clobbering context control register value (Matthew R. Ochs)   
  - scsi: cxlflash: Synchronize reset and remove ops (Uma Krishnan)   
  - scsi: megaraid_sas: Increase timeout by 1 sec for non-RAID fastpath IOs (Shivasharan S)   
  - scsi: scsi_dh: replace too broad "TP9" string with the exact models (Xose Vazquez Perez)   
  - regulator: Don't return or expect -errno from of_map_mode() (Douglas Anderson)   
  - media: omap3isp: fix unbalanced dma_iommu_mapping (Suman Anna)   
  - crypto: authenc - don't leak pointers to authenc keys (Tudor-Dan Ambarus)   
  - crypto: authencesn - don't leak pointers to authenc keys (Tudor-Dan Ambarus)   
  - usb: hub: Don't wait for connect state at resume for powered-off ports (Dominik Bozek)   
  - microblaze: Fix simpleImage format generation (Michal Simek)   
  - soc: imx: gpcv2: Do not pass static memory as platform data (Andrey Smirnov)   
  - serial: core: Make sure compiler barfs for 16-byte earlycon names (Douglas Anderson)   
  - staging: lustre: ldlm: free resource when ldlm_lock_create() fails. (NeilBrown)   
  - staging: lustre: llite: correct removexattr detection (James Simmons)   
  - staging: vchiq_core: Fix missing semaphore release in error case (Stefan Wahren)   
  - audit: allow not equal op for audit by executable (Ondrej Mosnáček)   
  - rsi: fix nommu_map_sg overflow kernel panic (Siva Rebbagondla)   
  - rsi: Fix 'invalid vdd' warning in mmc (Siva Rebbagondla)   
  - ipconfig: Correctly initialise ic_nameservers (Chris Novakovic)   
  - drm/gma500: fix psb_intel_lvds_mode_valid()'s return type (Luc Van Oostenryck)   
  - igb: Fix queue selection on MAC filters on i210 (Vinicius Costa Gomes)   
  - arm64: defconfig: Enable Rockchip io-domain driver (Enric Balletbo i Serra)   
  - nvme: lightnvm: add granby support (Wei Xu)   
  - memory: tegra: Apply interrupts mask per SoC (Dmitry Osipenko)   
  - memory: tegra: Do not handle spurious interrupts (Dmitry Osipenko)   
  - delayacct: Use raw_spinlocks (Sebastian Andrzej Siewior)   
  - stop_machine: Use raw spinlocks (Thomas Gleixner)   
  - backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction (Wolfram Sang)   
  - dt-bindings: net: meson-dwmac: new compatible name for AXG SoC (Yixun Lan)   
  - net: hns3: Fixes the out of bounds access in hclge_map_tqp (Huazhong Tan)   
  - spi: meson-spicc: Fix error handling in meson_spicc_probe() (Alexey Khoroshilov)   
  - dt-bindings: pinctrl: meson: add support for the Meson8m2 SoC (Martin Blumenstingl)   
  - mmc: pwrseq: Use kmalloc_array instead of stack VLA (Tobin C. Harding)   
  - mmc: dw_mmc: update actual clock for mmc debugfs (Shawn Lin)   
  - ALSA: hda/ca0132: fix build failure when a local macro is defined (Takashi Sakamoto)   
  - drm/atomic: Handling the case when setting old crtc for plane (Satendra Singh Thakur)   
  - media: siano: get rid of __le32/__le16 cast warnings (Mauro Carvalho Chehab)   
  - f2fs: avoid fsync() failure caused by EAGAIN in writepage() (Jaegeuk Kim)   
  - bpf: fix references to free_bpf_prog_info() in comments (Jakub Kicinski)   
  - thermal: exynos: fix setting rising_threshold for Exynos5433 (Bartlomiej Zolnierkiewicz)   
  - staging: lustre: o2iblnd: Fix FastReg map/unmap for MLX5 (Doug Oucharek)   
  - staging: lustre: o2iblnd: fix race at kiblnd_connect_peer (Doug Oucahrek)   
  - scsi: qedf: Set the UNLOADING flag when removing a vport (Chad Dupuis)   
  - scsi: hisi_sas: config ATA de-reset as an constrained command for v3 hw (Xiang Chen)   
  - scsi: megaraid: silence a static checker bug (Dan Carpenter)   
  - scsi: 3w-xxxx: fix a missing-check bug (Wenwen Wang)   
  - scsi: 3w-9xxx: fix a missing-check bug (Wenwen Wang)   
  - bnxt_en: Check unsupported speeds in bnxt_update_link() on PF only. (Michael Chan)   
  - perf: fix invalid bit in diagnostic entry (Thomas Richter)   
  - s390/cpum_sf: Add data entry sizes to sampling trailer entry (Thomas Richter)   
  - brcmfmac: Add support for bcm43364 wireless chipset (Sean Lanigan)   
  - mtd: rawnand: fsl_ifc: fix FSL NAND driver to read all ONFI parameter pages (Jane Wan)   
  - media: saa7164: Fix driver name in debug output (Brad Love)   
  - media: media-device: fix ioctl function types (Sami Tolvanen)   
  - ACPI / LPSS: Only call pwm_add_table() for Bay Trail PWM if PMIC HRV is 2 (Hans de Goede)   
  - libata: Fix command retry decision (Damien Le Moal)   
  - media: rcar_jpu: Add missing clk_disable_unprepare() on error in jpu_open() (Wei Yongjun)   
  - net: phy: phylink: Release link GPIO (Florian Fainelli)   
  - dma-iommu: Fix compilation when !CONFIG_IOMMU_DMA (Marc Zyngier)   
  - tty: Fix data race in tty_insert_flip_string_fixed_flag (DaeRyong Jeong)   
  - i40e: free the skb after clearing the bitlock (Jacob Keller)   
  - nvmem: properly handle returned value nvmem_reg_read (Mathieu Malaterre)   
  - ARM: dts: sh73a0: Add missing interrupt-affinity to PMU node (Geert Uytterhoeven)   
  - ARM: dts: emev2: Add missing interrupt-affinity to PMU node (Geert Uytterhoeven)   
  - ARM: dts: stih407-pinctrl: Fix complain about IRQ_TYPE_NONE usage (Patrice Chotard)   
  - EDAC, altera: Fix ARM64 build warning (Thor Thayer)   
  - HID: i2c-hid: check if device is there before really probing (Dmitry Torokhov)   
  - powerpc/embedded6xx/hlwd-pic: Prevent interrupts from being handled by Starlet (Jonathan Neuschäfer)   
  - drm/amdgpu: Remove VRAM from shared bo domains. (Samuel Li)   
  - drm/radeon: fix mode_valid's return type (Luc Van Oostenryck)   
  - arm64: dts: renesas: salvator-common: use audio-graph-card for Sound (Kuninori Morimoto)   
  - HID: hid-plantronics: Re-resend Update to map button for PTT products (Terry Junge)   
  - arm64: cmpwait: Clear event register before arming exclusive monitor (Will Deacon)   
  - media: atomisp: ov2680: don't declare unused vars (Mauro Carvalho Chehab)   
  - ALSA: usb-audio: Apply rate limit to warning messages in URB complete callback (Takashi Iwai)   
  - net: ethernet: ti: cpsw-phy-sel: check bus_find_device() ret value (Grygorii Strashko)   
  - media: smiapp: fix timeout checking in smiapp_read_nvm (Colin Ian King)   
  - ixgbevf: fix MAC address changes through ixgbevf_set_mac() (Emil Tantilov)   
  - md: fix NULL dereference of mddev->pers in remove_and_add_spares() (Yufen Yu)   
  - md/raid1: add error handling of read error from FailFast device (Gioh Kim)   
  - regulator: pfuze100: add .is_enable() for pfuze100_swb_regulator_ops (Anson Huang)   
  - ALSA: emu10k1: Rate-limit error messages about page errors (Takashi Iwai)   
  - rtc: tps65910: fix possible race condition (Alexandre Belloni)   
  - rtc: vr41xx: fix possible race condition (Alexandre Belloni)   
  - rtc: tps6586x: fix possible race condition (Alexandre Belloni)   
  - Bluetooth: btusb: add ID for LiteOn 04ca:301a (Vic Wei)   
  - drm/nouveau/fifo/gk104-: poll for runlist update completion (Ben Skeggs)   
  - scsi: zfcp: assert that the ERP lock is held when tracing a recovery trigger (Jens Remus)   
  - scsi: ufs: fix exception event handling (Maya Erez)   
  - scsi: ufs: ufshcd: fix possible unclocked register access (Subhash Jadavani)   
  - fscrypt: use unbound workqueue for decryption (Eric Biggers)   
  - net: hns3: Fix the missing client list node initialization (Xi Wang)   
  - spi: Add missing pm_runtime_put_noidle() after failed get (Tony Lindgren)   
  - drivers/perf: arm-ccn: don't log to dmesg in event_init (Mark Rutland)   
  - ima: based on policy verify firmware signatures (pre-allocated buffer) (Mimi Zohar)   
  - mwifiex: correct histogram data with appropriate index (Xinming Hu)   
  - net: dsa: qca8k: Add support for QCA8334 switch (Michal Vokáč)   
  - PCI: pciehp: Request control of native hotplug only if supported (Mika Westerberg)   
  - bpf: powerpc64: pad function address loads with NOPs (Sandipan Das)   
  - pinctrl: at91-pio4: add missing of_node_put (Julia Lawall)   
  - powerpc/8xx: fix invalid register expression in head_8xx.S (Christophe Leroy)   
  - spi: sh-msiof: Fix setting SIRMDR1.SYNCAC to match SITMDR1.SYNCAC (Geert Uytterhoeven)   
  - powerpc: Add __printf verification to prom_printf (Mathieu Malaterre)   
  - powerpc/powermac: Mark variable x as unused (Mathieu Malaterre)   
  - powerpc/powermac: Add missing prototype for note_bootable_part() (Mathieu Malaterre)   
  - powerpc/chrp/time: Make some functions static, add missing header include (Mathieu Malaterre)   
  - powerpc/32: Add a missing include header (Mathieu Malaterre)   
  - ath: Add regulatory mapping for Bahamas (Sven Eckelmann)   
  - ath: Add regulatory mapping for Bermuda (Sven Eckelmann)   
  - ath: Add regulatory mapping for Serbia (Sven Eckelmann)   
  - ath: Add regulatory mapping for Tanzania (Sven Eckelmann)   
  - ath: Add regulatory mapping for Uganda (Sven Eckelmann)   
  - ath: Add regulatory mapping for APL2_FCCA (Sven Eckelmann)   
  - ath: Add regulatory mapping for APL13_WORLD (Sven Eckelmann)   
  - ath: Add regulatory mapping for ETSI8_WORLD (Sven Eckelmann)   
  - ath: Add regulatory mapping for FCC3_ETSIC (Sven Eckelmann)   
  - nvme-pci: Fix AER reset handling (Keith Busch)   
  - nvme-rdma: stop admin queue before freeing it (Jianchao Wang)   
  - PCI: Prevent sysfs disable of device while driver is attached (Christoph Hellwig)   
  - PM / wakeup: Make s2idle_lock a RAW_SPINLOCK (Sebastian Andrzej Siewior)   
  - x86/microcode: Make the late update update_lock a raw lock for RT (Scott Wood)   
  - btrfs: qgroup: Finish rescan when hit the last leaf of extent tree (Qu Wenruo)   
  - btrfs: add barriers to btrfs_sync_log before log_commit_wait wakeups (David Sterba)   
  - Btrfs: don't BUG_ON() in btrfs_truncate_inode_items() (Omar Sandoval)   
  - Btrfs: don't return ino to ino cache if inode item removal fails (Omar Sandoval)   
  - media: videobuf2-core: don't call memop 'finish' when queueing (Hans Verkuil)   
  - media: tw686x: Fix incorrect vb2_mem_ops GFP flags (Ezequiel Garcia)   
  - net: hns3: Fixes the init of the VALID BD info in the descriptor (Fuyun Liang)   
  - wlcore: sdio: check for valid platform device data before suspend (Eyal Reizer)   
  - mwifiex: handle race during mwifiex_usb_disconnect (Ganapathi Bhat)   
  - mfd: cros_ec: Fail early if we cannot identify the EC (Vincent Palatin)   
  - ASoC: dpcm: fix BE dai not hw_free and shutdown (Kai Chieh Chuang)   
  - Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011 (Jian-Hong Pan)   
  - Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning (Thierry Escande)   
  - iwlwifi: pcie: fix race in Rx buffer allocator (Shaul Triebitz)   
  - btrfs: balance dirty metadata pages in btrfs_finish_ordered_io (Ethan Lien)   
  - PCI: Fix devm_pci_alloc_host_bridge() memory leak (Jan Kiszka)   
  - selftests: intel_pstate: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests: memfd: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests/intel_pstate: Improve test, minor fixes (Daniel Díaz)   
  - perf/x86/intel/uncore: Correct fixed counter index check for NHM (Kan Liang)   
  - perf/x86/intel/uncore: Correct fixed counter index check in generic code (Kan Liang)   
  - usbip: dynamically allocate idev by nports found in sysfs (Michael Grzeschik)   
  - usbip: usbip_detach: Fix memory, udev context and udev leak (Shuah Khan (Samsung OSG))   
  - block, bfq: remove wrong lock in bfq_requests_merged (Filippo Muzzini)   
  - f2fs: fix race in between GC and atomic open (Chao Yu)   
  - f2fs: fix to detect failure of dquot_initialize (Chao Yu)   
  - f2fs: Fix deadlock in shutdown ioctl (Sahitya Tummala)   
  - f2fs: fix to wait page writeback during revoking atomic write (Chao Yu)   
  - f2fs: fix to don't trigger writeback during recovery (Chao Yu)   
  - f2fs: fix error path of move_data_page (Chao Yu)   
  - disable loading f2fs module on PAGE_SIZE > 4KB (Anatoly Pugachev)   
  - pnfs: Don't release the sequence slot until we've processed layoutget on open (Trond Myklebust)   
  - netfilter: nf_tables: check msg_type before nft_trans_set(trans) (Alexey Kodanev)   
  - lightnvm: pblk: warn in case of corrupted write buffer (Javier González)   
  - RDMA/mad: Convert BUG_ONs to error flows (Leon Romanovsky)   
  - powerpc/64s: Fix compiler store ordering to SLB shadow area (Nicholas Piggin)   
  - hvc_opal: don't set tb_ticks_per_usec in udbg_init_opal_common() (Stewart Smith)   
  - powerpc/eeh: Fix use-after-release of EEH driver (Sam Bobroff)   
  - powerpc/64s: Add barrier_nospec (Michal Suchanek)   
  - powerpc/lib: Adjust .balign inside string functions for PPC32 (Christophe Leroy)   
  - infiniband: fix a possible use-after-free bug (Cong Wang)   
  - e1000e: Ignore TSYNCRXCTL when getting I219 clock attributes (Benjamin Poirier)   
  - ceph: fix alignment of rasize (Chengguang Xu)   
  - bpf, arm32: fix inconsistent naming about emit_a32_lsr_{r64,i64} (Wang YanQing)   
  - printk: drop in_nmi check from printk_safe_flush_on_panic() (Sergey Senozhatsky)   
  - watchdog: da9063: Fix updating timeout value (Marco Felsch)   
  - irqchip/ls-scfg-msi: Map MSIs in the iommu (Laurentiu Tudor)   
  - netfilter: ipset: List timing out entries with "timeout 1" instead of zero (Jozsef Kadlecsik)   
  - netfilter: ipset: forbid family for hash:mac sets (Florent Fourcot)   
  - perf tools: Fix pmu events parsing rule (Jiri Olsa)   
  - rtc: ensure rtc_set_alarm fails when alarms are not supported (Alexandre Belloni)   
  - mm/slub.c: add __printf verification to slab_err() (Mathieu Malaterre)   
  - mm: vmalloc: avoid racy handling of debugobjects in vunmap (Chintan Pandya)   
  - mm: /proc/pid/pagemap: hide swap entries from unprivileged users (Huang Ying)   
  - kernel/hung_task.c: show all hung tasks before panic (Tetsuo Handa)   
  - vfio/type1: Fix task tracking for QEMU vCPU hotplug (Alex Williamson)   
  - vfio/mdev: Check globally for duplicate devices (Alex Williamson)   
  - vfio: platform: Fix reset module leak in error path (Geert Uytterhoeven)   
  - nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo (Scott Mayhew)   
  - NFSv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Trond Myklebust)   
  - ALSA: fm801: add error handling for snd_ctl_add (Zhouyang Jia)   
  - ALSA: emu10k1: add error handling for snd_ctl_add (Zhouyang Jia)   
  - skip LAYOUTRETURN if layout is invalid (Olga Kornievskaia)   
  - hv_netvsc: fix network namespace issues with VF support (Stephen Hemminger)   
  - xen/netfront: raise max number of slots in xennet_get_responses() (Juergen Gross)   
  - kcov: ensure irq code sees a valid area (Mark Rutland)   
  - mlxsw: spectrum_switchdev: Fix port_vlan refcounting (Petr Machata)   
  - arm64: fix vmemmap BUILD_BUG_ON() triggering on !vmemmap setups (Johannes Weiner)   
  - tracing: Quiet gcc warning about maybe unused link variable (Steven Rostedt (VMware))   
  - tracing/kprobes: Fix trace_probe flags on enable_trace_kprobe() failure (Artem Savkov)   
  - kthread, tracing: Don't expose half-written comm when creating kthreads (Snild Dolkow)   
  - tracing: Fix possible double free in event_enable_trigger_func() (Steven Rostedt (VMware))   
  - tracing: Fix double free of event_trigger_data (Steven Rostedt (VMware))   
  - delayacct: fix crash in delayacct_blkio_end() after delayacct init failure (Tejun Heo)   
  - kvm, mm: account shadow page tables to kmemcg (Shakeel Butt)   
  - Input: elan_i2c - add another ACPI ID for Lenovo Ideapad 330-15AST (KT Liao)   
  - Input: i8042 - add Lenovo LaVie Z to the i8042 reset list (Chen-Yu Tsai)   
  - Input: elan_i2c - add ACPI ID for lenovo ideapad 330 (Donald Shanty III)   
  - spi: spi-s3c64xx: Fix system resume support (Marek Szyprowski)   
  - drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4 (Andrew Morton)   
  - IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write() (Bart Van Assche)   
  - drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4 (Andrew Morton)   
  - RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access (Bart Van Assche)   
  - i2c: core: decrease reference count of device node in i2c_unregister_device (Lixin Wang)   
  - fork: unconditionally clear stack on fork (Kees Cook)   
  - Linux 4.14.59 (Greg Kroah-Hartman)   
  - turn off -Wattribute-alias (Arnd Bergmann)   
  - can: m_can.c: fix setup of CCCR register: clear CCCR NISO bit before checking can.ctrlmode (Roman Fietze)   
  - can: peak_canfd: fix firmware < v3.3.0: limit allocation to 32-bit DMA addr only (Stephane Grosjean)   
  - can: xilinx_can: fix RX overflow interrupt not being enabled (Anssi Hannula)   
  - can: xilinx_can: fix incorrect clear of non-processed interrupts (Anssi Hannula)   
  - can: xilinx_can: keep only 1-2 frames in TX FIFO to fix TX accounting (Anssi Hannula)   
  - can: xilinx_can: fix device dropping off bus on RX overrun (Anssi Hannula)   
  - can: xilinx_can: fix recovery from error states not being propagated (Anssi Hannula)   
  - can: xilinx_can: fix power management handling (Anssi Hannula)   
  - can: xilinx_can: fix RX loop if RXNEMP is asserted without RXOK (Anssi Hannula)   
  - driver core: Partially revert "driver core: correct device's shutdown order" (Rafael J. Wysocki)   
  - usb: gadget: f_fs: Only return delayed status when len is 0 (Jerry Zhang)   
  - usb: dwc2: Fix DMA alignment to start at allocated boundary (Antti Seppälä)   
  - usb: core: handle hub C_PORT_OVER_CURRENT condition (Bin Liu)   
  - usb: cdc_acm: Add quirk for Castles VEGA3000 (Lubomir Rintel)   
  - staging: speakup: fix wraparound in uaccess length check (Samuel Thibault)   
  - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet)   
  - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)   
  - tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet)   
  - tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)   
  - tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)   
  - tcp: do not delay ACK in DCTCP upon CE status change (Yuchung Cheng)   
  - tcp: do not cancel delay-AcK on DCTCP special ACK (Yuchung Cheng)   
  - tcp: helpers to send special DCTCP ack (Yuchung Cheng)   
  - tcp: fix dctcp delayed ACK schedule (Yuchung Cheng)   
  - vxlan: fix default fdb entry netlink notify ordering during netdev create (Roopa Prabhu)   
  - vxlan: make netlink notify in vxlan_fdb_destroy optional (Roopa Prabhu)   
  - vxlan: add new fdb alloc and create helpers (Roopa Prabhu)   
  - rtnetlink: add rtnl_link_state check in rtnl_configure_link (Roopa Prabhu)   
  - sock: fix sg page frag coalescing in sk_alloc_sg (Daniel Borkmann)   
  - net: phy: consider PHY_IGNORE_INTERRUPT in phy_start_aneg_priv (Heiner Kallweit)   
  - multicast: do not restore deleted record source filter mode to new one (Hangbin Liu)   
  - net/ipv6: Fix linklocal to global address with VRF (David Ahern)   
  - net/mlx5e: Fix quota counting in aRFS expire flow (Eran Ben Elisha)   
  - net/mlx5e: Don't allow aRFS for encapsulated packets (Eran Ben Elisha)   
  - net/mlx5: Adjust clock overflow work period (Ariel Levkovich)   
  - net: skb_segment() should not return NULL (Eric Dumazet)   
  - net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper (Jack Morgenstein)   
  - ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull (Willem de Bruijn)   
  - ip: hash fragments consistently (Paolo Abeni)   
  - bonding: set default miimon value for non-arp modes if not set (Jarod Wilson)   
  - drm/nouveau: Set DRIVER_ATOMIC cap earlier to fix debugfs (Lyude Paul)   
  - drm/nouveau/drm/nouveau: Fix runtime PM leak in nv50_disp_atomic_commit() (Lyude Paul)   
  - KVM: PPC: Check if IOMMU page is contained in the pinned physical page (Alexey Kardashevskiy)   
  - xen/PVH: Set up GS segment for stack canary (Boris Ostrovsky)   
  - MIPS: Fix off-by-one in pci_resource_to_user() (Paul Burton)   
  - MIPS: ath79: fix register address in ath79_ddr_wb_flush() (Felix Fietkau)   
  - Revert "cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting" (Greg Kroah-Hartman)   
  - Linux 4.14.58 (Greg Kroah-Hartman)   
  - xhci: Fix perceived dead host due to runtime suspend race with event handler (Mathias Nyman)   
  - powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from stop (idle) (Gautham R. Shenoy)   
  - cxl_getfile(): fix double-iput() on alloc_file() failures (Al Viro)   
  - alpha: fix osf_wait4() breakage (Al Viro)   
  - net: usb: asix: replace mii_nway_restart in resume path (Alexander Couzens)   
  - ipv6: make DAD fail with enhanced DAD when nonce length differs (Sabrina Dubroca)   
  - net: systemport: Fix CRC forwarding check for SYSTEMPORT Lite (Florian Fainelli)   
  - net/mlx4_en: Don't reuse RX page when XDP is set (Saeed Mahameed)   
  - hv_netvsc: Fix napi reschedule while receive completion is busy (Haiyang Zhang)   
  - tg3: Add higher cpu clock for 5762. (Sanjeev Bansal)   
  - qmi_wwan: add support for Quectel EG91 (Matevz Vucnik)   
  - ptp: fix missing break in switch (Gustavo A. R. Silva)   
  - net: phy: fix flag masking in __set_phy_supported (Heiner Kallweit)   
  - net/ipv4: Set oif in fib_compute_spec_dst (David Ahern)   
  - skbuff: Unconditionally copy pfmemalloc in __skb_clone() (Stefano Brivio)   
  - net: Don't copy pfmemalloc flag in __copy_skb_header() (Stefano Brivio)   
  - net: diag: Don't double-free TCP_NEW_SYN_RECV sockets in tcp_abort (Lorenzo Colitti)   
  - lib/rhashtable: consider param->min_size when setting initial table size (Davidlohr Bueso)   
  - ipv6: ila: select CONFIG_DST_CACHE (Arnd Bergmann)   
  - ipv6: fix useless rol32 call on hash (Colin Ian King)   
  - ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns (Tyler Hicks)   
  - gen_stats: Fix netlink stats dumping in the presence of padding (Toke Høiland-Jørgensen)   
  - drm/nouveau: Avoid looping through fake MST connectors (Lyude Paul)   
  - drm/nouveau: Use drm_connector_list_iter_* for iterating connectors (Lyude Paul)   
  - drm/i915: Fix hotplug irq ack on i965/g4x (Ville Syrjälä)   
  - stop_machine: Disable preemption when waking two stopper threads (Isaac J. Manjarres)   
  - vfio/spapr: Use IOMMU pageshift rather than pagesize (Alexey Kardashevskiy)   
  - vfio/pci: Fix potential Spectre v1 (Gustavo A. R. Silva)   
  - cpufreq: intel_pstate: Register when ACPI PCCH is present (Rafael J. Wysocki)   
  - mm/huge_memory.c: fix data loss when splitting a file pmd (Hugh Dickins)   
  - mm: memcg: fix use after free in mem_cgroup_iter() (Jing Xia)   
  - ARC: mm: allow mprotect to make stack mappings executable (Vineet Gupta)   
  - ARC: configs: Remove CONFIG_INITRAMFS_SOURCE from defconfigs (Alexey Brodkin)   
  - ARC: Fix CONFIG_SWAP (Alexey Brodkin)   
  - ARCv2: [plat-hsdk]: Save accl reg pair by default (Vineet Gupta)   
  - ALSA: hda: add mute led support for HP ProBook 455 G5 (Po-Hsu Lin)   
  - ALSA: hda/realtek - Add Panasonic CF-SZ6 headset jack quirk (YOKOTA Hiroshi)   
  - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai)   
  - fat: fix memory allocation failure handling of match_strdup() (OGAWA Hirofumi)   
  - x86/MCE: Remove min interval polling limitation (Dewet Thibaut)   
  - x86/events/intel/ds: Fix bts_interrupt_threshold alignment (Hugh Dickins)   
  - x86/apm: Don't access __preempt_count with zeroed fs (Ville Syrjälä)   
  - KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel. (Lan Tianyu)   
  - scsi: sd_zbc: Fix variable type and bogus comment (Damien Le Moal)   
  - Linux 4.14.57 (Greg Kroah-Hartman)   
  - string: drop __must_check from strscpy() and restore strscpy() usages in cgroup (Tejun Heo)   
  - arm64: KVM: Add ARCH_WORKAROUND_2 discovery through ARCH_FEATURES_FUNC_ID (Marc Zyngier)   
  - arm64: KVM: Handle guest's ARCH_WORKAROUND_2 requests (Marc Zyngier)   
  - arm64: KVM: Add ARCH_WORKAROUND_2 support for guests (Marc Zyngier)   
  - arm64: KVM: Add HYP per-cpu accessors (Marc Zyngier)   
  - arm64: ssbd: Add prctl interface for per-thread mitigation (Marc Zyngier)   
  - arm64: ssbd: Introduce thread flag to control userspace mitigation (Marc Zyngier)   
  - arm64: ssbd: Restore mitigation status on CPU resume (Marc Zyngier)   
  - arm64: ssbd: Skip apply_ssbd if not using dynamic mitigation (Marc Zyngier)   
  - arm64: ssbd: Add global mitigation state accessor (Marc Zyngier)   
  - arm64: Add 'ssbd' command-line option (Marc Zyngier)   
  - arm64: Add ARCH_WORKAROUND_2 probing (Marc Zyngier)   
  - arm64: Add per-cpu infrastructure to call ARCH_WORKAROUND_2 (Marc Zyngier)   
  - arm64: Call ARCH_WORKAROUND_2 on transitions between EL0 and EL1 (Marc Zyngier)   
  - arm/arm64: smccc: Add SMCCC-specific return codes (Marc Zyngier)   
  - KVM: arm64: Avoid storing the vcpu pointer on the stack (Christoffer Dall)   
  - KVM: arm/arm64: Do not use kern_hyp_va() with kvm_vgic_global_state (Marc Zyngier)   
  - arm64: alternatives: Add dynamic patching feature (Marc Zyngier)   
  - KVM: arm64: Stop save/restoring host tpidr_el1 on VHE (James Morse)   
  - arm64: alternatives: use tpidr_el2 on VHE hosts (James Morse)   
  - KVM: arm64: Change hyp_panic()s dependency on tpidr_el2 (James Morse)   
  - KVM: arm/arm64: Convert kvm_host_cpu_state to a static per-cpu allocation (James Morse)   
  - KVM: arm64: Store vcpu on the stack during __guest_enter() (James Morse)   
  - net/nfc: Avoid stalls when nfc_alloc_send_skb() returned NULL. (Tetsuo Handa)   
  - rds: avoid unenecessary cong_update in loop transport (Santosh Shilimkar)   
  - bdi: Fix another oops in wb_workfn() (Jan Kara)   
  - netfilter: ipv6: nf_defrag: drop skb dst before queueing (Florian Westphal)   
  - nsh: set mac len based on inner packet (Willem de Bruijn)   
  - autofs: fix slab out of bounds read in getname_kernel() (Tomas Bortoli)   
  - tls: Stricter error checking in zerocopy sendmsg path (Dave Watson)   
  - KEYS: DNS: fix parsing multiple options (Eric Biggers)   
  - reiserfs: fix buffer overflow with long warning messages (Eric Biggers)   
  - netfilter: ebtables: reject non-bridge targets (Florian Westphal)   
  - PCI: hv: Disable/enable IRQs rather than BH in hv_compose_msi_msg() (Dexuan Cui)   
  - block: do not use interruptible wait anywhere (Alan Jenkins)   
  - mtd: rawnand: denali_dt: set clk_x_rate to 200 MHz unconditionally (Masahiro Yamada)   
  - crypto: af_alg - Initialize sg_num_bytes in error code path (Stephan Mueller)   
  - clocksource: Initialize cs->wd_list (Peter Zijlstra)   
  - media: rc: oops in ir_timer_keyup after device unplug (Sean Young)   
  - xhci: Fix USB3 NULL pointer dereference at logical disconnect. (Mathias Nyman)   
  - net: lan78xx: Fix race in tx pending skb size calculation (Stefan Wahren)   
  - rtlwifi: rtl8821ae: fix firmware is not ready to run (Ping-Ke Shih)   
  - rtlwifi: Fix kernel Oops "Fw download fail!!" (Ping-Ke Shih)   
  - net: cxgb3_main: fix potential Spectre v1 (Gustavo A. R. Silva)   
  - VSOCK: fix loopback on big-endian systems (Claudio Imbrenda)   
  - vhost_net: validate sock before trying to put its fd (Jason Wang)   
  - tcp: prevent bogus FRTO undos with non-SACK flows (Ilpo Järvinen)   
  - tcp: fix Fast Open key endianness (Yuchung Cheng)   
  - strparser: Remove early eaten to fix full tcp receive buffer stall (Doron Roberts-Kedes)   
  - stmmac: fix DMA channel hang in half-duplex mode (Bhadram Varka)   
  - r8152: napi hangup fix after disconnect (Jiri Slaby)   
  - qmi_wwan: add support for the Dell Wireless 5821e module (Aleksander Morgado)   
  - qed: Limit msix vectors in kdump kernel to the minimum required count. (Sudarsana Reddy Kalluru)   
  - qed: Fix use of incorrect size in memcpy call. (Sudarsana Reddy Kalluru)   
  - qed: Fix setting of incorrect eswitch mode. (Sudarsana Reddy Kalluru)   
  - qede: Adverstise software timestamp caps when PHC is not available. (Sudarsana Reddy Kalluru)   
  - net/tcp: Fix socket lookups with SO_BINDTODEVICE (David Ahern)   
  - net: sungem: fix rx checksum support (Eric Dumazet)   
  - net_sched: blackhole: tell upper qdisc about dropped packets (Konstantin Khlebnikov)   
  - net/packet: fix use-after-free (Eric Dumazet)   
  - net: mvneta: fix the Rx desc DMA address in the Rx path (Antoine Tenart)   
  - net/mlx5: Fix wrong size allocation for QoS ETC TC regitster (Shay Agroskin)   
  - net/mlx5: Fix required capability for manipulating MPFS (Eli Cohen)   
  - net/mlx5: Fix incorrect raw command length parsing (Alex Vesker)   
  - net/mlx5: Fix command interface race in polling mode (Alex Vesker)   
  - net/mlx5: E-Switch, Avoid setup attempt if not being e-switch manager (Or Gerlitz)   
  - net/mlx5e: Don't attempt to dereference the ppriv struct if not being eswitch manager (Or Gerlitz)   
  - net/mlx5e: Avoid dealing with vport representors if not being e-switch manager (Or Gerlitz)   
  - net: macb: Fix ptp time adjustment for large negative delta (Harini Katakam)   
  - net: fix use-after-free in GRO with ESP (Sabrina Dubroca)   
  - net: dccp: switch rx_tstamp_last_feedback to monotonic clock (Eric Dumazet)   
  - net: dccp: avoid crash in ccid3_hc_rx_send_feedback() (Eric Dumazet)   
  - ixgbe: split XDP_TX tail and XDP_REDIRECT map flushing (Jesper Dangaard Brouer)   
  - ipvlan: fix IFLA_MTU ignored on NEWLINK (Xin Long)   
  - ipv6: sr: fix passing wrong flags to crypto_alloc_shash() (Eric Biggers)   
  - hv_netvsc: split sub-channel setup into async and sync (Stephen Hemminger)   
  - atm: zatm: Fix potential Spectre v1 (Gustavo A. R. Silva)   
  - atm: Preserve value of skb->truesize when accounting to vcc (David Woodhouse)   
  - alx: take rtnl before calling __alx_open from resume (Sabrina Dubroca)   
  - crypto: crypto4xx - fix crypto4xx_build_pdr, crypto4xx_build_sdr leak (Christian Lamparter)   
  - crypto: crypto4xx - remove bad list_del (Christian Lamparter)   
  - PCI: exynos: Fix a potential init_clk_resources NULL pointer dereference (Jaehoon Chung)   
  - bcm63xx_enet: do not write to random DMA channel on BCM6345 (Jonas Gorski)   
  - bcm63xx_enet: correct clock usage (Jonas Gorski)   
  - ocfs2: ip_alloc_sem should be taken in ocfs2_get_block() (alex chen)   
  - ocfs2: subsystem.su_mutex is required while accessing the item->ci_parent (alex chen)   
  - xprtrdma: Fix corner cases when handling device removal (Chuck Lever)   
  - cpufreq / CPPC: Set platform specific transition_delay_us (Prashanth Prakash)   
  - Btrfs: fix duplicate extents after fsync of file with prealloc extents (Filipe Manana)   
  - x86/paravirt: Make native_save_fl() extern inline (Nick Desaulniers)   
  - x86/asm: Add _ASM_ARG* constants for argument registers to <asm/asm.h> (H. Peter Anvin)   
  - compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations (Nick Desaulniers)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1836.el7uek]
changelog:
  - usb: xhci: do not create and register shared_hcd when USB3.0 is disabled (Tung Nguyen)  [Orabug: 27628252]  
  - x86/xen: Calculate __max_logical_packages on PV domains (Prarit Bhargava)  [Orabug: 28476573]  
  - x86/pti: Don't report XenPV as vulnerable (Jiri Kosina)  [Orabug: 28476581]  
  - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen)  [Orabug: 28488797]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka)  [Orabug: 28488797]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka)  [Orabug: 28488797]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28488797]  {CVE-2018-3620} 
  - x86/spectre: Add missing family 6 check to microcode check (Andi Kleen)  [Orabug: 28488797]  {CVE-2018-3620} 
  - KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner)  [Orabug: 28488797]  {CVE-2018-3646} 
  - Revert "uek-rpm: support both 4k and 64k page size for aarch64" (Jack Vogel)   
  - uek-rpm: Disable F2FS in the UEK5 config (Victor Erminpour)  [Orabug: 28570381]  
  - x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use (Patrick Colp)  [Orabug: 28274907]  
  - net/mlx5e: Cleanup of dcbnl related fields (Huy Nguyen)  [Orabug: 27408474]  
  - net/mlx5e: Receive buffer support for DCBX (Huy Nguyen)  [Orabug: 28102581]  
  - net/mlx5e: Receive buffer configuration (Huy Nguyen)  [Orabug: 28102581]  
  - net/mlx5: PPTB and PBMC register firmware command support (Huy Nguyen)  [Orabug: 28102581]  
  - net/mlx5: Add pbmc and pptb in the port_access_reg_cap_mask (Huy Nguyen)  [Orabug: 28102581]  
  - net/mlx5e: Move port speed code from en_ethtool.c to en/port.c (Huy Nguyen)  [Orabug: 28102581]  
  - net/dcb: Add dcbnl buffer attribute (Huy Nguyen)  [Orabug: 28102581]  
  - RDMA/umem: Don't hold mmap_sem for too long (Leon Romanovsky)  [Orabug: 28416767]  
  - PCI: Add ACS quirk for Ampere root ports (Feng Kan)  [Orabug: 28368446]  
  - x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan)  [Orabug: 28180211]  
  - x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan)  [Orabug: 28180211]  
  - x86/bugs: x86_spec_ctrl_set may not disable IBRS on kernel idle (Daniel Jordan)  [Orabug: 28180211]  
  - x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan)  [Orabug: 28180211]  
  - x86/bugs: ssbd_ibrs_selected called prematurely (Daniel Jordan)  [Orabug: 28362349]  
  - xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE (Darrick J. Wong)  [Orabug: 28481156]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - ip: discard IPv4 datagrams with overlapping segments. (Peter Oskolkov)  [Orabug: 28552922]  
  - Linux 4.14.66 (Greg Kroah-Hartman)   
  - cls_matchall: fix tcf_unbind_filter missing (Hangbin Liu)   
  - isdn: Disable IIOCDBGVAR (Kees Cook)   
  - Bluetooth: avoid killing an already killed socket (Sudip Mukherjee)   
  - misc: sram: fix resource leaks in probe error path (Johan Hovold)   
  - serial: 8250_dw: Add ACPI support for uart on Broadcom SoC (Srinath Mannam)   
  - serial: 8250_dw: always set baud rate in dw8250_set_termios (Chen Hu)   
  - serial: 8250_exar: Read INT0 from slave device, too (Aaron Sierra)   
  - tty: serial: 8250: Revert NXP SC16C2552 workaround (Mark)   
  - ACPI / PM: save NVS memory for ASUS 1025C laptop (Willy Tarreau)   
  - USB: option: add support for DW5821e (Aleksander Morgado)   
  - USB: serial: pl2303: add a new device id for ATEN (Movie Song)   
  - USB: serial: sierra: fix potential deadlock at close (John Ogness)   
  - ALSA: vxpocket: Fix invalid endian conversions (Takashi Iwai)   
  - ALSA: memalloc: Don't exceed over the requested size (Takashi Iwai)   
  - ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry (Hans de Goede)   
  - ALSA: cs5535audio: Fix invalid endian conversion (Takashi Iwai)   
  - ALSA: virmidi: Fix too long output trigger loop (Takashi Iwai)   
  - ALSA: vx222: Fix invalid endian conversions (Takashi Iwai)   
  - ALSA: hda - Turn CX8200 into D3 as well upon reboot (Park Ju Hyung)   
  - ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs (Park Ju Hyung)   
  - net: aquantia: Fix IFF_ALLMULTI flag functionality (Dmitry Bogdanov)   
  - ip6_tunnel: use the right value for ipv4 min mtu check in ip6_tnl_xmit (Xin Long)   
  - vhost: reset metadata cache when initializing new IOTLB (Jason Wang)   
  - net_sched: Fix missing res info when create new tc_index filter (Hangbin Liu)   
  - vsock: split dwork to avoid reinitializations (Cong Wang)   
  - net_sched: fix NULL pointer dereference when delete tcindex filter (Hangbin Liu)   
  - llc: use refcount_inc_not_zero() for llc_sap_find() (Cong Wang)   
  - l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache (Wei Wang)   
  - dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart() (Alexey Kodanev)   
  - Linux 4.14.65 (Greg Kroah-Hartman)   
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)   
  - Linux 4.14.64 (Greg Kroah-Hartman)   
  - x86/mm: Add TLB purge to free pmd/pte page interfaces (Toshi Kani)   
  - ioremap: Update pgtable free interfaces with addr (Chintan Pandya)   
  - Bluetooth: hidp: buffer overflow in hidp_process_report (Mark Salyzyn)   {CVE-2018-9363} 
  - ASoC: Intel: cht_bsw_max98090_ti: Fix jack initialization (Thierry Escande)   
  - ASoC: msm8916-wcd-digital: fix RX2 MIX1 and RX3 MIX1 (Jean-François Têtu)   
  - block, bfq: fix wrong init of saved start time for weight raising (Paolo Valente)   
  - clk: sunxi-ng: Fix missing CLK_SET_RATE_PARENT in ccu-sun4i-a10.c (Alexander Syring)   
  - ASoC: rsnd: fix ADG flags (Kuninori Morimoto)   
  - fw_cfg: fix driver remove (Marc-André Lureau)   
  - sched/debug: Fix task state recording/printout (Thomas Gleixner)   
  - ACPI / APEI: Remove ghes_ioremap_area (James Morse)   
  - crypto: skcipher - fix crash flushing dcache in error path (Eric Biggers)   
  - crypto: skcipher - fix aligning block size in skcipher_copy_iv() (Eric Biggers)   
  - crypto: ablkcipher - fix crash flushing dcache in error path (Eric Biggers)   
  - crypto: blkcipher - fix crash flushing dcache in error path (Eric Biggers)   
  - crypto: vmac - separate tfm and request context (Eric Biggers)   
  - crypto: vmac - require a block cipher with 128-bit block size (Eric Biggers)   
  - crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2() (Eric Biggers)   
  - kbuild: verify that $DEPMOD is installed (Randy Dunlap)   
  - x86/mm: Disable ioremap free page handling on x86-PAE (Toshi Kani)   
  - x86: i8259: Add missing include file (Guenter Roeck)   
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Guenter Roeck)   
  - Linux 4.14.63 (Greg Kroah-Hartman)   
  - x86/CPU/AMD: Have smp_num_siblings and cpu_llc_id always be present (Borislav Petkov)   
  - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Jiri Kosina)   
  - x86/init: fix build with CONFIG_SWAP=n (Vlastimil Babka)   
  - cpu/hotplug: Non-SMP machines do not make use of booted_once (Abel Vesa)   
  - x86/smp: fix non-SMP broken build due to redefinition of apic_id_is_primary_thread (Vlastimil Babka)   
  - x86/microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf)   
  - tools headers: Synchronise x86 cpufeatures.h for L1TF additions (David Woodhouse)   
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)   
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)   
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)   
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)   
  - cpu/hotplug: Fix SMT supported evaluation (Thomas Gleixner)   
  - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Paolo Bonzini)   
  - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Paolo Bonzini)   
  - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Paolo Bonzini)   
  - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paolo Bonzini)   
  - KVM: X86: Allow userspace to define the microcode version (Wanpeng Li)   
  - KVM: X86: Introduce kvm_get_msr_feature() (Wanpeng Li)   
  - KVM: SVM: Add MSR-based feature support for serializing LFENCE (Tom Lendacky)   
  - KVM: x86: Add a framework for supporting MSR-based features (Tom Lendacky)   
  - Documentation/l1tf: Remove Yonah processors from not vulnerable list (Thomas Gleixner)   
  - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Nicolai Stange)   
  - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Nicolai Stange)   
  - x86: Don't include linux/irq.h from asm/hardirq.h (Nicolai Stange)   
  - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Nicolai Stange)   
  - x86/irq: Demote irq_cpustat_t::__softirq_pending to u16 (Nicolai Stange)   
  - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Nicolai Stange)   
  - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Nicolai Stange)   
  - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Nicolai Stange)   
  - cpu/hotplug: detect SMT disabled by BIOS (Josh Poimboeuf)   
  - Documentation/l1tf: Fix typos (Tony Luck)   
  - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Nicolai Stange)   
  - Documentation: Add section about CPU vulnerabilities (Thomas Gleixner)   
  - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Jiri Kosina)   
  - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Thomas Gleixner)   
  - cpu/hotplug: Expose SMT control init function (Jiri Kosina)   
  - x86/kvm: Allow runtime control of L1D flush (Thomas Gleixner)   
  - x86/kvm: Serialize L1D flush parameter setter (Thomas Gleixner)   
  - x86/kvm: Add static key for flush always (Thomas Gleixner)   
  - x86/kvm: Move l1tf setup function (Thomas Gleixner)   
  - x86/l1tf: Handle EPT disabled state proper (Thomas Gleixner)   
  - x86/kvm: Drop L1TF MSR list approach (Thomas Gleixner)   
  - x86/litf: Introduce vmx status variable (Thomas Gleixner)   
  - cpu/hotplug: Online siblings when SMT control is turned on (Thomas Gleixner)   
  - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Konrad Rzeszutek Wilk)   
  - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Konrad Rzeszutek Wilk)   
  - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Konrad Rzeszutek Wilk)   
  - x86/KVM/VMX: Add find_msr() helper function (Konrad Rzeszutek Wilk)   
  - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Konrad Rzeszutek Wilk)   
  - x86/KVM/VMX: Add L1D flush logic (Paolo Bonzini)   
  - x86/KVM/VMX: Add L1D MSR based flush (Paolo Bonzini)   
  - x86/KVM/VMX: Add L1D flush algorithm (Paolo Bonzini)   
  - x86/KVM/VMX: Add module argument for L1TF mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3620} 
  - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Konrad Rzeszutek Wilk)   
  - cpu/hotplug: Boot HT siblings at least once (Thomas Gleixner)   
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Thomas Gleixner)   
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)   
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)   
  - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Borislav Petkov)   
  - x86/cpufeatures: Add detection of L1D cache flush support. (Konrad Rzeszutek Wilk)   
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)   
  - x86/apic: Ignore secondary threads if nosmt=force (Thomas Gleixner)   
  - x86/cpu/AMD: Evaluate smp_num_siblings early (Thomas Gleixner)   
  - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Borislav Petkov)   
  - x86/cpu/intel: Evaluate smp_num_siblings early (Thomas Gleixner)   
  - x86/cpu/topology: Provide detect_extended_topology_early() (Thomas Gleixner)   
  - x86/cpu/common: Provide detect_ht_early() (Thomas Gleixner)   
  - x86/cpu/AMD: Remove the pointless detect_ht() call (Thomas Gleixner)   
  - x86/cpu: Remove the pointless CPU printout (Thomas Gleixner)   
  - cpu/hotplug: Provide knobs to control SMT (Thomas Gleixner)   
  - cpu/hotplug: Split do_cpu_down() (Thomas Gleixner)   
  - cpu/hotplug: Make bringup/teardown of smp threads symmetric (Thomas Gleixner)   
  - x86/topology: Provide topology_smt_supported() (Thomas Gleixner)   
  - x86/smp: Provide topology_is_primary_thread() (Thomas Gleixner)   
  - sched/smt: Update sched_smt_present at runtime (Peter Zijlstra)   
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)   
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Kleen)   
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Kleen)   
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Kleen)   
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Kleen)   
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Kleen)   
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)   
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)   
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Kleen)   
  - x86/irqflags: Provide a declaration for native_save_fl (Nick Desaulniers)   
  - kprobes/x86: Fix %p uses in error messages (Masami Hiramatsu)   
  - x86/speculation: Protect against userspace-userspace spectreRSB (Jiri Kosina)   
  - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Peter Zijlstra)   
  - ARM: dts: imx6sx: fix irq for pcie bridge (Oleksij Rempel)   
  - Bluetooth: hci_serdev: Init hci_uart proto_lock to avoid oops (Lukas Wunner)   
  - Bluetooth: hci_ldisc: Allow sleeping while proto locks are held. (Ronald Tschalär)   
  - phy: phy-mtk-tphy: use auto instead of force to bypass utmi signals (Chunfeng Yun)   
  - mtd: nand: qcom: Add a NULL check for devm_kasprintf() (Fabio Estevam)   
  - fix __legitimize_mnt()/mntput() race (Al Viro)   
  - fix mntput/mntput race (Al Viro)   
  - make sure that __dentry_kill() always invalidates d_seq, unhashed or not (Al Viro)   
  - root dentries need RCU-delayed freeing (Al Viro)   
  - init: rename and re-order boot_cpu_state_init() (Linus Torvalds)   
  - scsi: qla2xxx: Fix memory leak for allocating abort IOCB (Quinn Tran)   
  - scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management enabled (Bart Van Assche)   
  - xen/netfront: don't cache skb_shinfo() (Juergen Gross)   
  - stop_machine: Disable preemption after queueing stopper threads (Isaac J. Manjarres)   
  - Mark HI and TASKLET softirq synchronous (Linus Torvalds)   
  - kasan: add no_sanitize attribute for clang builds (Andrey Konovalov)   
  - scsi: virtio_scsi: fix IO hang caused by automatic irq vector affinity (Ming Lei)   
  - scsi: core: introduce force_blk_mq (Ming Lei)   
  - scsi: hpsa: fix selection of reply queue (Ming Lei)   
  - parisc: Define mb() and add memory barriers to assembler unlock sequences (John David Anglin)   
  - parisc: Enable CONFIG_MLONGCALLS by default (Helge Deller)   
  - Linux 4.14.62 (Greg Kroah-Hartman)   
  - jfs: Fix inconsistency between memory allocation and ea_buf->max_size (Shankara Pailoor)   
  - xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen)   
  - xfs: validate cached inodes are free when allocated (Dave Chinner)   
  - xfs: catch inode allocation state mismatch corruption (Dave Chinner)   
  - intel_idle: Graceful probe failure when MWAIT is disabled (Len Brown)   
  - nvmet-fc: fix target sgl list on large transfers (James Smart)   
  - nvme-pci: Fix queue double allocations (Keith Busch)   
  - nvme-pci: allocate device queues storage space at probe (Sagi Grimberg)   
  - Btrfs: fix file data corruption after cloning a range and fsync (Filipe Manana)   
  - i2c: imx: Fix reinit_completion() use (Esben Haabendal)   
  - ring_buffer: tracing: Inherit the tracing setting to next ring buffer (Masami Hiramatsu)   
  - ACPI / PCI: Bail early in acpi_pci_add_bus() if there is no ACPI handle (Vitaly Kuznetsov)   
  - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Theodore Ts'o)   
  - netlink: Don't shift on 64 for ngroups (Dmitry Safonov)   
  - nohz: Fix missing tick reprogram when interrupting an inline softirq (Frederic Weisbecker)   
  - nohz: Fix local_timer_softirq_pending() (Anna-Maria Gleixner)   
  - genirq: Make force irq threading setup more robust (Thomas Gleixner)   
  - scsi: qla2xxx: Return error when TMF returns (Anil Gurumurthy)   
  - scsi: qla2xxx: Fix ISP recovery on unload (Quinn Tran)   
  - scsi: qla2xxx: Fix NPIV deletion by calling wait_for_sess_deletion (Quinn Tran)   
  - scsi: qla2xxx: Fix unintialized List head crash (Quinn Tran)   
  - Linux 4.14.61 (Greg Kroah-Hartman)   
  - scsi: sg: fix minor memory leak in error path (Tony Battersby)   
  - drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats (Boris Brezillon)   
  - crypto: padlock-aes - Fix Nano workaround data corruption (Herbert Xu)   
  - RDMA/uverbs: Expand primary and alt AV port checks (Jack Morgenstein)   
  - iwlwifi: add more card IDs for 9000 series (Emmanuel Grumbach)   
  - userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails (Mike Rapoport)   
  - audit: fix potential null dereference 'context->module.name' (Yi Wang)   
  - kvm: x86: vmx: fix vpid leak (Roman Kagan)   
  - x86/entry/64: Remove %ebx handling from error_entry/exit (Andy Lutomirski)   
  - x86/apic: Future-proof the TSC_DEADLINE quirk for SKX (Len Brown)   
  - virtio_balloon: fix another race between migration and ballooning (Jiang Biao)   
  - net: socket: fix potential spectre v1 gadget in socketcall (Jeremy Cline)   
  - can: ems_usb: Fix memory leak on ems_usb_disconnect() (Anton Vasilyev)   
  - squashfs: more metadata hardenings (Linus Torvalds)   
  - squashfs: more metadata hardening (Linus Torvalds)   
  - net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager (Eli Cohen)   
  - rxrpc: Fix user call ID check in rxrpc_service_prealloc_one (YueHaibing)   
  - net: stmmac: Fix WoL for PCI-based setups (Jose Abreu)   
  - netlink: Fix spectre v1 gadget in netlink_create() (Jeremy Cline)   
  - net: dsa: Do not suspend/resume closed slave_dev (Florian Fainelli)   
  - ipv4: frags: handle possible skb truesize change (Eric Dumazet)   
  - inet: frag: enforce memory limits earlier (Eric Dumazet)   
  - bonding: avoid lockdep confusion in bond_get_stats() (Eric Dumazet)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1837.el7uek]
changelog:
  - rds: CVE-2018-7492: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 28565415]  {CVE-2018-7492} 
  - locking/qrwlock: Prevent slowpath writers getting held up by fastpath (Will Deacon)  [Orabug: 28467517]  
  - locking/qrwlock, arm64: Move rwlock implementation over to qrwlocks (Will Deacon)  [Orabug: 28467517]  
  - locking/qrwlock: Use atomic_cond_read_acquire() when spinning in qrwlock (Will Deacon)  [Orabug: 28467517]  
  - locking/atomic: Add atomic_cond_read_acquire() (Will Deacon)  [Orabug: 28467517]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - x86/speculation: Unconditionally fill RSB on context switch (Alejandro Jimenez)  [Orabug: 28569500]  {CVE-2018-15572} 
  - arm64: vdso: fix clock_getres for 4GiB-aligned res (Mark Rutland)  [Orabug: 28603382]  
  - dt-bindings/bcm283x: Define polarity of per-cpu interrupts (Stefan Wahren)  [Orabug: 28215527]  
  - irqchip/irq-bcm2836: Add support for DT interrupt polarity (Stefan Wahren)  [Orabug: 28215527]  
  - dt-bindings/bcm2836-l1-intc: Add interrupt polarity support (Stefan Wahren)  [Orabug: 28215527]  
  - sched: use per-cpu variable cpumask_weight_sibling (subhra mazumdar)  [Orabug: 28550503]  
  - x86/smpboot: introduce per-cpu variable for HT siblings (subhra mazumdar)  [Orabug: 28550503]  
  - bnxt_en: Add PHY retry logic. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add external loopback test to ethtool selftest. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Adjust timer based on ethtool stats-block-usecs settings. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Update firmware interface version to 1.9.2.25. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add bnxt_en initial params table and register it. (Vasundhara Volam)  [Orabug: 28440609]  
  - bnxt_en: combine 'else if' and 'else' into single branch (YueHaibing)  [Orabug: 28440609]  
  - bnxt_en: remove redundant debug register dma mem allocation (YueHaibing)  [Orabug: 28440609]  
  - bnxt_en: Fix for system hang if request_irq fails (Vikas Gupta)  [Orabug: 28440609]  
  - bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Support clearing of the IFF_BROADCAST flag. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Always set output parameters in bnxt_get_max_rings(). (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Fix the vlan_tci exact match check. (Venkat Duvvuru)  [Orabug: 28440609]  
  - bnxt_en: Always forward VF MAC address to the PF. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Read phy eeprom A2h address only when optical diagnostics is supported. (Vasundhara Volam)  [Orabug: 28440609]  
  - bnxt_en: Check unsupported speeds in bnxt_update_link() on PF only. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Fix firmware message delay loop regression. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Reserve rings at driver open if none was reserved at probe time. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Reserve RSS and L2 contexts for VF. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Don't reserve rings on VF when min rings were not provisioned by PF. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Reserve rings in bnxt_set_channels() if device is down. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: add debugfs support for DIM (Andy Gospodarek)  [Orabug: 28440609]  
  - bnxt_en: reduce timeout on initial HWRM calls (Andy Gospodarek)  [Orabug: 28440609]  
  - bnxt_en: Increase RING_IDLE minimum threshold to 50 (Andy Gospodarek)  [Orabug: 28440609]  
  - bnxt_en: Do not allow VF to read EEPROM. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Display function level rx/tx_discard_pkts via ethtool (Vasundhara Volam)  [Orabug: 28440609]  
  - bnxt_en: Simplify ring alloc/free error messages. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Do not set firmware time from VF driver on older firmware. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Check the lengths of encapsulated firmware responses. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Remap TC to hardware queues when configuring PFC. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add TC to hardware QoS queue mapping logic. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Fix memory fault in bnxt_ethtool_init() (Vasundhara Volam)  [Orabug: 28440609]  
  - bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov)  [Orabug: 28440609]  
  - bnxt_en: Fix NULL pointer dereference at bnxt_free_irq(). (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Need to include RDMA rings in bnxt_check_rings(). (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Support max-mtu with VF-reps (Sriharsha Basavapatna)  [Orabug: 28440609]  
  - bnxt_en: Ignore src port field in decap filter nodes (Sriharsha Basavapatna)  [Orabug: 28440609]  
  - bnxt_en: do not allow wildcard matches for L2 flows (Andy Gospodarek)  [Orabug: 28440609]  
  - bnxt_en: Fix ethtool -x crash when device is down. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add ULP calls to stop and restart IRQs. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA driver. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Refactor bnxt_need_reserve_rings(). (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add IRQ remapping logic. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Change IRQ assignment for RDMA driver. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Improve ring allocation logic. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Improve valid bit checking in firmware response message. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Improve resource accounting for SRIOV. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Check max_tx_scheduler_inputs value from firmware. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add extended port statistics support (Vasundhara Volam)  [Orabug: 28440609]  
  - bnxt_en: Include additional hardware port statistics in ethtool -S. (Vasundhara Volam)  [Orabug: 28440609]  
  - bnxt_en: Add support for ndo_set_vf_trust (Vasundhara Volam)  [Orabug: 28440609]  
  - bnxt_en: fix clear flags in ethtool reset handling (Scott Branden)  [Orabug: 28440609]  
  - bnxt_en: Use a dedicated VNIC mode for RDMA. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Adjust default rings for multi-port NICs. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Update firmware interface to 1.9.1.15. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Eliminate duplicate barriers on weakly-ordered archs (Sinan Kaya)  [Orabug: 28440609]  
  - bnxt_en: close & open NIC, only when the interface is in running state. (Venkat Duvvuru)  [Orabug: 28440609]  
  - bnxt_en: Return standard Linux error codes for hwrm flow cmds. (Venkat Duvvuru)  [Orabug: 28440609]  
  - bnxt_en: Fix regressions when setting up MQPRIO TX rings. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Pass complete VLAN TCI to the stack. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Remove unwanted ovs-offload messages in some conditions (Sriharsha Basavapatna)  [Orabug: 28440609]  
  - bnxt_en: Fix vnic accounting in the bnxt_check_rings() path. (Eddie Wai)  [Orabug: 28440609]  
  - bnxt_en: Refactor the functions to reserve hardware rings. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: cleanup DIM work on device shutdown (Andy Gospodarek)  [Orabug: 28440609]  
  - bnxt: use tc_cls_can_offload_and_chain0() (Jakub Kicinski)  [Orabug: 28440609]  
  - bnxt_en: don't update cpr->rx_bytes with uninitialized length len (Colin Ian King)  [Orabug: 28440609]  
  - bnxt_en: add support for software dynamic interrupt moderation (Andy Gospodarek)  [Orabug: 28440609]  
  - bnxt_en: setup xdp_rxq_info (Jesper Dangaard Brouer)  [Orabug: 28440609]  
  - bnxt: add bnxt_compat.c (Brian Maly)  [Orabug: 28440609]  
  - ethernet/broadcom: Use zeroing memory allocator than allocator/memset (Himanshu Jha)  [Orabug: 28440609]  
  - bnxt_en: Use NETIF_F_GRO_HW. (Michael Chan)  [Orabug: 28440609]  
  - bnxt_en: Add ETH_RESET_AP support (Brian Maly)  [Orabug: 28440609]  
  - bnxt: add bnxt_compat.h (Brian Maly)   
  - bnxt: delete some unreachable code (Dan Carpenter)  [Orabug: 28440609]  
  - bnxt_en: alloc tc_info{} struct only when tc flower is enabled (Sathya Perla)  [Orabug: 28440609]  
  - bnxt: Convert ndo_setup_tc offloads to block callbacks (Jiri Pirko)  [Orabug: 28440609]  
  - Linux 4.14.67 (Greg Kroah-Hartman)   
  - reiserfs: fix broken xattr handling (heap corruption, bad retval) (Jann Horn)   
  - i2c: imx: Fix race condition in dma read (Esben Haabendal)   
  - i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes (Hans de Goede)   
  - PCI: pciehp: Fix unprotected list iteration in IRQ handler (Lukas Wunner)   
  - PCI: pciehp: Fix use-after-free on unplug (Lukas Wunner)   
  - PCI: Skip MPS logic for Virtual Functions (VFs) (Myron Stowe)   
  - PCI: hotplug: Don't leak pci_slot on registration failure (Lukas Wunner)   
  - parisc: Remove unnecessary barriers from spinlock.h (John David Anglin)   
  - net/smc: no shutdown in state SMC_LISTEN (Ursula Braun)   
  - packet: refine ring v3 block size test to hold one frame (Willem de Bruijn)   
  - netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state (Florian Westphal)   
  - xfrm_user: prevent leaking 2 bytes of kernel memory (Eric Dumazet)   
  - parisc: Remove ordered stores from syscall.S (John David Anglin)   
  - f2fs: sanity check for total valid node blocks (Jaegeuk Kim)   
  - f2fs: return error during fill_super (Jaegeuk Kim)   
  - KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer (Paolo Bonzini)   
  - nvme: fix handling of metadata_len for NVME_IOCTL_IO_CMD (Roland Dreier)   
  - ARM: dts: imx6: RDU2: fix irq type for mv88e6xxx switch (Uwe Kleine-König)   
  - ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems (Robin H. Johnson)   
  - soc: imx: gpc: restrict register range for regmap access (Anson Huang)   
  - tcp: identify cryptic messages as TCP seq # bugs (Randy Dunlap)   
  - net: qca_spi: Fix log level if probe fails (Stefan Wahren)   
  - net: qca_spi: Make sure the QCA7000 reset is triggered (Stefan Wahren)   
  - net: qca_spi: Avoid packet drop during initial sync (Stefan Wahren)   
  - PCI: versatile: Fix I/O space page leak (Sergei Shtylyov)   
  - PCI: OF: Fix I/O space page leak (Sergei Shtylyov)   
  - kvmclock: fix TSC calibration for nested guests (Peng Hao)   
  - net: usb: rtl8150: demote allmulti message to dev_dbg() (David Lechner)   
  - octeon_mgmt: Fix MIX registers configuration on MTU setup (Alexander Sverdlin)   
  - btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block() (Qu Wenruo)   
  - ibmvnic: Fix error recovery on login failure (John Allen)   
  - net/ethernet/freescale/fman: fix cross-build error (Randy Dunlap)   
  - hv/netvsc: fix handling of fallback to single queue mode (Stephen Hemminger)   
  - drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply() (Dan Carpenter)   
  - pinctrl: nsp: Fix potential NULL dereference (Wei Yongjun)   
  - pinctrl: nsp: off by ones in nsp_pinmux_enable() (Dan Carpenter)   
  - pinctrl: ingenic: Fix inverted direction for < JZ4770 (Paul Cercueil)   
  - tcp: remove DELAYED ACK events in DCTCP (Yuchung Cheng)   
  - qlogic: check kstrtoul() for errors (Dan Carpenter)   
  - packet: reset network header if packet shorter than ll reserved space (Willem de Bruijn)   
  - kbuild: suppress warnings from 'getconf LFS_*' (Masahiro Yamada)   
  - tools: build: Use HOSTLDFLAGS with fixdep (Laura Abbott)   
  - ixgbe: Be more careful when modifying MAC filters (Alexander Duyck)   
  - ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller (Adam Ford)   
  - ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores (Nishanth Menon)   
  - ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot (Steven Rostedt (VMware))   
  - RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path (Kamal Heib)   
  - nfit: fix unchecked dereference in acpi_nfit_ctl (Dave Jiang)   
  - perf script python: Fix dict reference counting (Janne Huttunen)   
  - perf tools: Fix compilation errors on gcc8 (Jiri Olsa)   
  - perf llvm-utils: Remove bashism from kernel include fetch script (Kim Phillips)   
  - scsi: qedi: Send driver state to MFW (Manish Rangankar)   
  - scsi: qedf: Send the driver state to MFW (Saurav Kashyap)   
  - bnxt_en: Fix for system hang if request_irq fails (Vikas Gupta)   
  - bnxt_en: Always set output parameters in bnxt_get_max_rings(). (Michael Chan)   
  - bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic. (Michael Chan)   
  - ARC: Improve cmpxchg syscall implementation (Peter Zijlstra)   
  - netfilter: nf_conntrack: Fix possible possible crash on module loading. (Andrey Ryabinin)   
  - netfilter: nft_compat: explicitly reject ERROR and standard target (Florian Westphal)   
  - drm/armada: fix irq handling (Russell King)   
  - drm/armada: fix colorkey mode property (Russell King)   
  - drm/tegra: Fix comparison operator for buffer size (Mikko Perttunen)   
  - gpu: host1x: Check whether size of unpin isn't 0 (Dmitry Osipenko)   
  - ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem (Stefan Schmidt)   
  - ieee802154: at86rf230: use __func__ macro for debug messages (Stefan Schmidt)   
  - ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem (Stefan Schmidt)   
  - nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us (Douglas Anderson)   
  - net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used (Davide Caratti)   
  - ARM: pxa: irq: fix handling of ICMR registers in suspend/resume (Daniel Mack)   
  - ravb: fix invalid context bug while changing link options by ethtool (Vladimir Zapolskiy)   
  - ravb: fix invalid context bug while calling auto-negotiation by ethtool (Vladimir Zapolskiy)   
  - sh_eth: fix invalid context bug while changing link options by ethtool (Vladimir Zapolskiy)   
  - sh_eth: fix invalid context bug while calling auto-negotiation by ethtool (Vladimir Zapolskiy)   
  - net: qrtr: Broadcast messages only from control port (Arun Kumar Neelakantam)   
  - ipv6: make ipv6_renew_options() interrupt/kernel safe (Paul Moore)   
  - netfilter: x_tables: set module owner for icmp(6) matches (Florian Westphal)   
  - ieee802154: 6lowpan: set IFLA_LINK (Lubomir Rintel)   
  - samples/bpf: Check the error of write() and read() (Taeung Song)   
  - samples/bpf: Check the result of system() (Taeung Song)   
  - samples/bpf: add missing <linux/if_vlan.h> (Taeung Song)   
  - drm/bridge/sii8620: Fix display of packed pixel modes (Maciej Purski)   
  - smsc75xx: Add workaround for gigabit link up hardware errata. (Yuiko Oshino)   
  - kasan: fix shadow_size calculation error in kasan_module_alloc (Zhen Lei)   
  - tracing: Use __printf markup to silence compiler (Mathieu Malaterre)   
  - bpf: hash map: decrement counter on error (Mauricio Vasquez B)   
  - ARM: imx_v4_v5_defconfig: Select ULPI support (Fabio Estevam)   
  - ARM: imx_v6_v7_defconfig: Select ULPI support (Fabio Estevam)   
  - HID: wacom: Correct touch maximum XY of 2nd-gen Intuos (Jason Gerecke)   
  - x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all() (Zhenzhong Duan)   
  - drm/amdgpu: fix swapped emit_ib_size in vce3 (Alex Deucher)   
  - ipvlan: call dev_change_flags when ipvlan mode is reset (Hangbin Liu)   
  - objtool: Support GCC 8 '-fnoreorder-functions' (Josh Poimboeuf)   
  - m68k: fix "bad page state" oops on ColdFire boot (Greg Ungerer)   
  - openrisc: entry: Fix delay slot exception detection (Stafford Horne)   
  - acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value (Dave Jiang)   
  - dpaa_eth: DPAA SGT needs to be 256B (Madalin Bucur)   
  - fsl/fman: fix parser reporting bad checksum on short frames (Madalin Bucur)   
  - bnx2x: Fix receiving tx-timeout in error or recovery state. (Sudarsana Reddy Kalluru)   
  - PCI: faraday: Add missing of_node_put() (Nicholas Mc Guire)   
  - PCI: xilinx-nwl: Add missing of_node_put() (Nicholas Mc Guire)   
  - PCI: xilinx: Add missing of_node_put() (Nicholas Mc Guire)   
  - bpf, s390: fix potential memleak when later bpf_jit_prog fails (Daniel Borkmann)   
  - drbd: Fix drbd_request_prepare() discard handling (Bart Van Assche)   
  - drm/exynos: decon5433: Fix WINCONx reset value (Marek Szyprowski)   
  - drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes (Marek Szyprowski)   
  - drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes (Marek Szyprowski)   
  - nl80211: check nla_parse_nested() return values (Johannes Berg)   
  - nl80211: relax ht operation checks for mesh (Bob Copeland)   
  - dev-dax: check_vma: ratelimit dev_info-s (Jeff Moyer)   
  - md/raid10: fix that replacement cannot complete recovery after reassemble (BingJing Chang)   
  - ath10k: update the phymode along with bandwidth change request (Ryan Hsu)   
  - dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate() (Dan Carpenter)   
  - dmaengine: pl330: report BURST residue granularity (Marek Szyprowski)   
  - ARM64: dts: meson-gxl: fix Mali GPU compatible string (Martin Blumenstingl)   
  - ARM: dts: da850: Fix interrups property for gpio (Keerthy)   
  - selftests/x86/sigreturn: Do minor cleanups (Andy Lutomirski)   
  - selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs (Andy Lutomirski)   
  - nfp: cast sizeof() to int when comparing with error code (Chengguang Xu)   
  - net/mlx5: E-Switch, Disallow vlan/spoofcheck setup if not being esw manager (Eli Cohen)   
  - ceph: fix dentry leak in splice_dentry() (Yan, Zheng)   
  - netfilter: nf_log: fix uninit read in nf_log_proc_dostring (Jann Horn)   
  - ARM: davinci: board-da850-evm: fix WP pin polarity for MMC/SD (Adam Ford)   
  - perf bench: Fix numa report output code (Jiri Olsa)   
  - perf tools: Fix a clang 7.0 compilation error (Yonghong Song)   
  - perf report powerpc: Fix crash if callchain is empty (Sandipan Das)   
  - perf test session topology: Fix test on s390 (Thomas Richter)   
  - perf record: Support s390 random socket_id assignment (Thomas Richter)   
  - kconfig: fix line numbers for if-entries in menu tree (Dirk Gouders)   
  - typec: tcpm: Fix a msecs vs jiffies bug (Dan Carpenter)   
  - NFC: pn533: Fix wrong GFP flag usage (Hans de Goede)   
  - usb: xhci: increase CRS timeout value (Ajay Gupta)   
  - usb: xhci: remove the code build warning (Dongjiu Geng)   
  - ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl (Takashi Iwai)   
  - ARM: dts: am437x: make edt-ft5x06 a wakeup source (Daniel Mack)   
  - brcmfmac: stop watchdog before detach and free everything (Michael Trimarchi)   
  - iio: pressure: bmp280: fix relative humidity unit (Tomasz Duszynski)   
  - cxgb4: when disabling dcb set txq dcb priority to 0 (Ganesh Goudar)   
  - batman-adv: Fix multicast TT issues with bogus ROAM flags (Linus Lüssing)   
  - batman-adv: Avoid storing non-TT-sync flags on singular entries too (Linus Lüssing)   
  - batman-adv: Fix bat_v best gw refcnt after netlink dump (Sven Eckelmann)   
  - batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump (Sven Eckelmann)   
  - arm64: dts: msm8916: fix Coresight ETF graph connections (Rob Herring)   
  - Smack: Mark inode instant in smack_task_to_inode (Casey Schaufler)   
  - ipv6: mcast: fix unsolicited report interval after receiving querys (Hangbin Liu)   
  - x86/microcode/intel: Fix memleak in save_microcode_patch() (Zhenzhong Duan)   
  - mtd: dataflash: Use ULL suffix for 64-bit constants (Geert Uytterhoeven)   
  - selftests: bpf: notification about privilege required to run test_kmod.sh testing script (Jeffrin Jose T)   
  - locking/lockdep: Do not record IRQ state within lockdep code (Steven Rostedt (VMware))   
  - drm/bridge/sii8620: fix display of packed pixel modes in MHL2 (Maciej Purski)   
  - KVM: arm/arm64: Drop resource size check for GICV window (Ard Biesheuvel)   
  - sctp: fix erroneous inc of snmp SctpFragUsrMsgs (Marcelo Ricardo Leitner)   
  - net: davinci_emac: match the mdio device against its compatible if possible (Bartosz Golaszewski)   
  - nbd: Add the nbd NBD_DISCONNECT_ON_CLOSE config flag. (Doron Roberts-Kedes)   
  - ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP (Alexey Brodkin)   
  - block: sed-opal: Fix a couple off by one bugs (Dan Carpenter)   
  - nvmet: reset keep alive timer in controller enable (Max Gurtuvoy)   
  - net: stmmac: socfpga: add additional ocp reset line for Stratix10 (Dinh Nguyen)   
  - net: propagate dev_get_valid_name return code (Li RongQing)   
  - net: hamradio: use eth_broadcast_addr (Stefan Agner)   
  - enic: initialize enic->rfs_h.lock in enic_probe (Govindarajulu Varadarajan)   
  - qed: Do not advertise DCBX_LLD_MANAGED capability. (Sudarsana Reddy Kalluru)   
  - qed: Add sanity check for SIMD fastpath handler. (Sudarsana Reddy Kalluru)   
  - qed: Fix possible memory leak in Rx error path handling. (Sudarsana Reddy Kalluru)   
  - arm64: make secondary_start_kernel() notrace (Zhizhou Zhang)   
  - arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag (Marek Szyprowski)   
  - xen/scsiback: add error handling for xenbus_printf (Zhouyang Jia)   
  - scsi: xen-scsifront: add error handling for xenbus_printf (Zhouyang Jia)   
  - pNFS: Always free the session slot on error in nfs4_layoutget_handle_exception (Trond Myklebust)   
  - xen: add error handling for xenbus_printf (Zhouyang Jia)   
  - dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation (Minas Harutyunyan)   
  - usb: gadget: dwc2: fix memory leak in gadget_init() (Grigor Tovmasyan)   
  - usb: gadget: composite: fix delayed_status race condition when set_interface (Chunfeng Yun)   
  - usb: dwc2: fix isoc split in transfer with no data (William Wu)   
  - usb: dwc2: alloc dma aligned buffer for isoc split in (William Wu)   
  - libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store() (John Garry)   
  - IB/rxe: Fix missing completion for mem_reg work requests (Vijay Immanuel)   
  - drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format (Ayan Kumar Halder)   
  - drm: mali-dp: Enable Global SE interrupts mask for DP500 (Alison Wang)   
  - drivers/perf: xgene_pmu: Fix IOB SLOW PMU parser error (Hoan Tran)   
  - arm64: dts: Stingray: Fix I2C controller interrupt type (Ray Jui)   
  - arm64: dts: ns2: Fix PCIe controller interrupt type (Ray Jui)   
  - arm64: dts: ns2: Fix I2C controller interrupt type (Ray Jui)   
  - arm64: dts: specify 1.8V EMMC capabilities for bcm958742t (Scott Branden)   
  - arm64: dts: specify 1.8V EMMC capabilities for bcm958742k (Scott Branden)   
  - ARM: dts: Cygnus: Fix PCIe controller interrupt type (Ray Jui)   
  - ARM: dts: Cygnus: Fix I2C controller interrupt type (Ray Jui)   
  - ARM: dts: BCM5301x: Fix i2c controller interrupt type (Florian Fainelli)   
  - ARM: dts: NSP: Fix PCIe controllers interrupt types (Florian Fainelli)   
  - ARM: dts: NSP: Fix i2c controller interrupt type (Florian Fainelli)   
  - selftests: sync: add config fragment for testing sync framework (Fathi Boudra)   
  - selftests: vm: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests: zram: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests: user: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests: sysctl: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests: static_keys: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - selftests: pstore: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))   
  - netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregister (Gao Feng)   
  - netfilter: ipv6: nf_defrag: reduce struct net memory waste (Eric Dumazet)   
  - ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th (Mika Westerberg)   
  - usb: dwc3: of-simple: fix use-after-free on remove (Johan Hovold)   
  - usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc() (Minas Harutyunyan)   
  - usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers (Vincent Pelletier)   
  - usb: dwc3: pci: add support for Intel IceLake (Heikki Krogerus)   
  - soc: imx: gpcv2: correct PGC offset (Anson Huang)   
  - hwmon: (nct6775) Fix loop limit (Guenter Roeck)   
  - ARC: Explicitly add -mmedium-calls to CFLAGS (Alexey Brodkin)   
  - drm/bridge/sii8620: fix potential buffer overflow (Maciej Purski)   
  - drm/bridge/sii8620: fix loops in EDID fetch logic (Andrzej Hajda)   
  - IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()' (Christophe Jaillet)   
  - Input: synaptics-rmi4 - fix axis-swap behavior (Lucas Stach)   
  - perf tools: Fix error index for pmu event parser (Jiri Olsa)   
  - vfio: ccw: fix error return in vfio_ccw_sch_event (Dong Jia Shi)   
  - arm: dts: armada: Fix "#cooling-cells" property's name (Viresh Kumar)   
  - pty: fix O_CLOEXEC for TIOCGPTPEER (Matthijs van Duin)   
  - EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[] (Takashi Iwai)   
  - drm/i915/kvmgt: Fix potential Spectre v1 (Gustavo A. R. Silva)   
  - ext4: fix spectre gadget in ext4_mb_regular_allocator() (Jeremy Cline)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1838.el7uek]
changelog:
  - x86/efi: Allocate e820 buffer before calling efi_exit_boot_service (Eric Snowberg)  [Orabug: 28070694]  
  - posix-timers: Sanitize overrun handling (Thomas Gleixner)  [Orabug: 28603330]  {CVE-2018-12896} 
  - bcache: release dc->writeback_lock properly in bch_writeback_thread() (Shan Hai)  [Orabug: 28335202]  
  - bcache: fix cached_dev->count usage for bch_cache_set_error() (Coly Li)  [Orabug: 28335202]  
  - net/rds: make the source code clean (Zhu Yanjun)  [Orabug: 28289486]  
  - net/rds: Use rdma_read_gids to get connection SGID/DGID in IPv6 (Zhu Yanjun)  [Orabug: 28289486]  
  - net/rds: Use rdma_read_gids to read connection GIDs (Parav Pandit)  [Orabug: 28289486]  
  - oracleasm: Unmap protection pages on completion (Martin K. Petersen)  [Orabug: 28506113]  
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)  [Orabug: 28506113]  
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)  [Orabug: 28506113]  
  - oracleasm: Fix memory leak (Martin K. Petersen)  [Orabug: 28506113]  
  - oracleasm: Add ENXIO handling (Martin K. Petersen)  [Orabug: 28506113]  
  - oracleasm: Add missing tracepoint (Martin K. Petersen)  [Orabug: 28506113]  
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)  [Orabug: 28506113]  
  - hwmon: (k10temp) Display both Tctl and Tdie (Guenter Roeck)  [Orabug: 28652844]  
  - hwmon: (k10temp) Use API function to access System Management Network (Guenter Roeck)  [Orabug: 28652844]  
  - hwmon: (k10temp) Fix reading critical temperature register (Guenter Roeck)  [Orabug: 28652844]  
  - hwmon: (k10temp) Add temperature offset for Ryzen 2700X (Guenter Roeck)  [Orabug: 28652844]  
  - hwmon: (k10temp) Add support for temperature offsets (Guenter Roeck)  [Orabug: 28652844]  
  - hwmon: (k10temp) Add support for family 17h (Guenter Roeck)  [Orabug: 28652844]  
  - hwmon: (k10temp) Move chip specific code into probe function (Guenter Roeck)  [Orabug: 28652844]  
  - kvm: x86: merge with 4.14.50 missed a fix to kvm_read_guest_virt() (Liam Merwick)  [Orabug: 28469410]  
  - KVM: vmx: use local variable for current_vmptr when emulating VMPTRST (Sean Christopherson)  [Orabug: 28469410]  
  - KVM: VMX: Mark VMXArea with revision_id of physical CPU even when eVMCS enabled (Liran Alon)  [Orabug: 28469410]  
  - x86/kvm/Kconfig: Ensure CRYPTO_DEV_CCP_DD state at minimum matches KVM_AMD (Janakarajan Natarajan)  [Orabug: 28469410]  
  - kvm: nVMX: Restore exit qual for VM-entry failure due to MSR loading (Jim Mattson)  [Orabug: 28469410]  
  - x86/kvm/vmx: don't read current->thread.{fs,gs}base of legacy tasks (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - tools/headers: Pick up latest kernel ABIs (Ingo Molnar)  [Orabug: 28469410]  
  - KVM: fix KVM_CAP_HYPERV_TLBFLUSH paragraph number (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - kvm: vmx: Nested VM-entry prereqs for event inj. (Marc Orr)  [Orabug: 28469410]  
  - KVM: arm64: Prevent KVM_COMPAT from being selected (Marc Zyngier)  [Orabug: 28469410]  
  - KVM: Enforce error in ioctl for compat tasks when !KVM_COMPAT (Marc Zyngier)  [Orabug: 28469410]  
  - KVM: arm/arm64: add WARN_ON if size is not PAGE_SIZE aligned in unmap_stage2_range (Jia He)  [Orabug: 28469410]  
  - arm: port KCOV to arm (Dmitry Vyukov)  [Orabug: 28469410]  
  - KVM: x86: VMX: redo fix for link error without CONFIG_HYPERV (Arnd Bergmann)  [Orabug: 28469410]  
  - KVM: x86: fix typo at kvm_arch_hardware_setup comment (Marcelo Tosatti)  [Orabug: 28469410]  
  - KVM: x86: VMX: fix build without hyper-v (Linus Torvalds)  [Orabug: 28469410]  
  - KVM: PPC: Book3S PR: Don't let PAPR guest set MSR hypervisor bit (Paul Mackerras)  [Orabug: 28469410]  
  - KVM: PPC: Book3S PR: Fix MSR setting when delivering interrupts (Paul Mackerras)  [Orabug: 28469410]  
  - KVM: PPC: Book3S PR: Handle additional interrupt types (Cameron Kaiser)  [Orabug: 28469410]  
  - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky)  [Orabug: 28469410]  
  - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk)  [Orabug: 28469410]  
  - x86/bugs: Add AMD's variant of SSB_NO (Konrad Rzeszutek Wilk)  [Orabug: 28469410]  
  - kvm: nVMX: Add support for "VMWRITE to any supported field" (Jim Mattson)  [Orabug: 28469410]  
  - kvm: nVMX: Restrict VMX capability MSR changes (Jim Mattson)  [Orabug: 28469410]  
  - KVM: VMX: Optimize tscdeadline timer latency (Wanpeng Li)  [Orabug: 28469410]  
  - KVM: docs: nVMX: Remove known limitations as they do not exist now (Liran Alon)  [Orabug: 28469410]  
  - KVM: docs: mmu: KVM support exposing SLAT to guests (Liran Alon)  [Orabug: 28469410]  
  - kvm: no need to check return value of debugfs_create functions (Greg Kroah-Hartman)  [Orabug: 28469410]  
  - kvm: Make VM ioctl do valloc for some archs (Marc Orr)  [Orabug: 28469410]  
  - ARM: KVM: report support for SMCCC_ARCH_WORKAROUND_1 (Russell King)  [Orabug: 28469410]  
  - ARM: KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Russell King)  [Orabug: 28469410]  
  - ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15 (Russell King)  [Orabug: 28469410]  
  - ARM: KVM: invalidate icache on guest exit for Cortex-A15 (Marc Zyngier)  [Orabug: 28469410]  
  - ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17 (Marc Zyngier)  [Orabug: 28469410]  
  - KVM: PPC: Book3S PR: Allow KVM_PPC_CONFIGURE_V3_MMU to succeed (Paul Mackerras)  [Orabug: 28469410]  
  - selftests: kvm: return Kselftest Skip code for skipped tests (Shuah Khan (Samsung OSG))  [Orabug: 28469410]  
  - selftests: kvm: update .gitignore with missing file (Anders Roxell)  [Orabug: 28469410]  
  - selftests: kvm: add .gitignore for generated files (Anders Roxell)  [Orabug: 28469410]  
  - KVM: docs: mmu: Fix link to NPT presentation from KVM Forum 2008 (Liran Alon)  [Orabug: 28469410]  
  - kvm: x86: Amend the KVM_GET_SUPPORTED_CPUID API documentation (Jim Mattson)  [Orabug: 28469410]  
  - KVM: x86: hyperv: declare KVM_CAP_HYPERV_TLBFLUSH capability (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - KVM: x86: hyperv: simplistic HVCALL_FLUSH_VIRTUAL_ADDRESS_{LIST,SPACE}_EX implementation (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - KVM: x86: hyperv: simplistic HVCALL_FLUSH_VIRTUAL_ADDRESS_{LIST,SPACE} implementation (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - KVM: introduce kvm_make_vcpus_request_mask() API (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - KVM: x86: hyperv: do rep check for each hypercall separately (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - KVM: x86: hyperv: use defines when parsing hypercall parameters (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - KVM: arm/arm64: Bump VGIC_V3_MAX_CPUS to 512 (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Implement KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Add KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Check all vcpu redistributors are set on map_resources (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Check vcpu redist base before registering an iodev (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Remove kvm_vgic_vcpu_early_init (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Helper to register a new redistributor region (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Adapt vgic_v3_check_base to multiple rdist regions (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Revisit Redistributor TYPER last bit computation (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Helper to locate free rdist index (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Replace the single rdist region by a list (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Document KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm/arm64: Set dist->spis to NULL after kfree (Eric Auger)  [Orabug: 28469410]  
  - KVM: arm64: Fold redundant exit code checks out of fixup_guest_exit() (Dave Martin)  [Orabug: 28469410]  
  - KVM: arm64: Remove redundant *exit_code changes in fpsimd_guest_exit() (Dave Martin)  [Orabug: 28469410]  
  - KVM: arm64: Convert lazy FPSIMD context switch trap to C (Dave Martin)  [Orabug: 28469410]  
  - KVM: arm/arm64: Introduce kvm_arch_vcpu_run_pid_change (Christoffer Dall)  [Orabug: 28469410]  
  - KVM: x86: Expose CLDEMOTE CPU feature to guest VM (Jingqi Liu)  [Orabug: 28469410]  
  - x86/cpufeatures: Enumerate cldemote instruction (Fenghua Yu)  [Orabug: 28469410]  
  - KVM: nVMX: Emulate L1 individual-address invvpid by L0 individual-address invvpid (Liran Alon)  [Orabug: 28469410]  
  - KVM: nVMX: Don't flush TLB when vmcs12 uses VPID (Liran Alon)  [Orabug: 28469410]  
  - KVM: nVMX: Use vmx local var for referencing vpid02 (Liran Alon)  [Orabug: 28469410]  
  - KVM: x86: prevent integer overflows in KVM_MEMORY_ENCRYPT_REG_REGION (Dan Carpenter)  [Orabug: 28469410]  
  - KVM: x86: remove obsolete EXPORT... of handle_mmio_page_fault (Sean Christopherson)  [Orabug: 28469410]  
  - KVM: nVMX: Ensure that VMCS12 field offsets do not change (Jim Mattson)  [Orabug: 28469410]  
  - KVM: nVMX: Restore the VMCS12 offsets for v4.0 fields (Jim Mattson)  [Orabug: 28469410]  
  - KVM: x86: use timespec64 for KVM_HC_CLOCK_PAIRING (Arnd Bergmann)  [Orabug: 28469410]  
  - kvm: nVMX: Use nested_run_pending rather than from_vmentry (Jim Mattson)  [Orabug: 28469410]  
  - KVM: nVMX: sync vmcs02 segment regs prior to vmx_set_cr0 (Sean Christopherson)  [Orabug: 28469410]  
  - KVM: PPC: Reimplement LOAD_VMX/STORE_VMX instruction mmio emulation with analyse_instr() input (Simon Guo)  [Orabug: 28469410]  
  - KVM: PPC: Expand mmio_vsx_copy_type to cover VMX load/store element types (Simon Guo)  [Orabug: 28469410]  
  - KVM: PPC: Reimplement LOAD_VSX/STORE_VSX instruction mmio emulation with analyse_instr() input (Simon Guo)  [Orabug: 28469410]  
  - KVM: PPC: Reimplement LOAD_FP/STORE_FP instruction mmio emulation with analyse_instr() input (Simon Guo)  [Orabug: 28469410]  
  - KVM: PPC: Add giveup_ext() hook to PPC KVM ops (Simon Guo)  [Orabug: 28469410]  
  - KVM: PPC: Reimplement non-SIMD LOAD/STORE instruction mmio emulation with analyse_instr() input (Simon Guo)  [Orabug: 28469410]  
  - KVM: PPC: Add KVMPPC_VSX_COPY_WORD_LOAD_DUMP type support for mmio emulation (Simon Guo)  [Orabug: 28469410]  
  - arm64: KVM: Use lm_alias() for kvm_ksym_ref() (Mark Rutland)  [Orabug: 28469410]  
  - KVM: PPC: Book3S HV: Lockless tlbie for HPT hcalls (Nicholas Piggin)  [Orabug: 28469410]  
  - KVM: PPC: Fix a mmio_host_swabbed uninitialized usage issue (Simon Guo)  [Orabug: 28469410]  
  - KVM: s390: vsie: simplify < 8k address checks (David Hildenbrand)  [Orabug: 28469410]  
  - KVM: s390: generalize kvm_s390_get_tod_clock_ext() (David Hildenbrand)  [Orabug: 28469410]  
  - KVM: s390: reset crypto attributes for all vcpus (Tony Krowiak)  [Orabug: 28469410]  
  - KVM: PPC: Book3S: Change return type to vm_fault_t (Souptick Joarder)  [Orabug: 28469410]  
  - KVM: PPC: Book3S: Check KVM_CREATE_SPAPR_TCE_64 parameters (Alexey Kardashevskiy)  [Orabug: 28469410]  
  - KVM: PPC: Book3S: Allow backing bigger guest IOMMU pages with smaller physical pages (Alexey Kardashevskiy)  [Orabug: 28469410]  
  - KVM: PPC: Book3S: Use correct page shift in H_STUFF_TCE (Alexey Kardashevskiy)  [Orabug: 28469410]  
  - KVM: PPC: Book3S HV: Fix inaccurate comment (Paul Mackerras)  [Orabug: 28469410]  
  - KVM: PPC: Book3S HV: Set RWMR on POWER8 so PURR/SPURR count correctly (Paul Mackerras)  [Orabug: 28469410]  
  - KVM: PPC: Book3S HV: Add 'online' register to ONE_REG interface (Paul Mackerras)  [Orabug: 28469410]  
  - KVM: PPC: Book3S: Fix compile error that occurs with some gcc versions (Paul Mackerras)  [Orabug: 28469410]  
  - KVM: PPC: Fix compile error that occurs when CONFIG_ALTIVEC=n (Paul Mackerras)  [Orabug: 28469410]  
  - torture: Make kvm-find-errors.sh find build warnings (Paul E. McKenney)  [Orabug: 28469410]  
  - rcutorture: Abbreviate kvm.sh summary lines (Paul E. McKenney)  [Orabug: 28469410]  
  - rcutorture: Print end-of-test state in kvm.sh summary (Paul E. McKenney)  [Orabug: 28469410]  
  - torture: Fold parse-torture.sh into parse-console.sh (Paul E. McKenney)  [Orabug: 28469410]  
  - torture: Add a script to edit output from failed runs (Paul E. McKenney)  [Orabug: 28469410]  
  - arm64: Remove duplicate include (Vincenzo Frascino)  [Orabug: 28469410]  
  - kvm: mmu: Don't expose private memslots to L2 (Jim Mattson)  [Orabug: 28469410]  
  - kvm: mmu: Add guest_mode to kvm_mmu_page_role (Jim Mattson)  [Orabug: 28469410]  
  - kvm: nVMX: Eliminate APIC access page sharing between L1 and L2 (Jim Mattson)  [Orabug: 28469410]  
  - kvm: vmx: Basic APIC virtualization controls have three settings (Jim Mattson)  [Orabug: 28469410]  
  - kvm: apic: Flush TLB after APIC mode/address change if VPIDs are in use (Junaid Shahid)  [Orabug: 28469410]  
  - kvm: vmx: Introduce lapic_mode enumeration (Jim Mattson)  [Orabug: 28469410]  
  - KVM: x86: VMX: hyper-v: Enlightened MSR-Bitmap support (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - kvm: x86: Refactor mmu_free_roots() (Junaid Shahid)  [Orabug: 28469410]  
  - powerpc64/ftrace: Disable ftrace during kvm entry/exit (Naveen N. Rao)  [Orabug: 28469410]  
  - x86/headers/UAPI: Move DISABLE_EXITS KVM capability bits to the UAPI (KarimAllah Ahmed)  [Orabug: 28469410]  
  - xen-netfront: Update features after registering netdev (Ross Lagerwall)  [Orabug: 28469410]  
  - xen-netfront: Fix mismatched rtnl_unlock (Ross Lagerwall)  [Orabug: 28469410]  
  - xen/grant-table: Export gnttab_{alloc|free}_pages as GPL (Oleksandr Andrushchenko)  [Orabug: 28469410]  
  - xen: share start flags between PV and PVH (Roger Pau Monne)  [Orabug: 28469410]  
  - xen/PVH: Make GDT selectors PVH-specific (Boris Ostrovsky)  [Orabug: 28469410]  
  - xen/store: do not store local values in xen_start_info (Roger Pau Monne)  [Orabug: 28469410]  
  - xen-netfront: fix xennet_start_xmit()'s return type (Luc Van Oostenryck)  [Orabug: 28469410]  
  - xen/privcmd: add IOCTL_PRIVCMD_MMAP_RESOURCE (Paul Durrant)  [Orabug: 28469410]  
  - x86/xen/efi: Initialize UEFI secure boot state during dom0 boot (Daniel Kiper)  [Orabug: 28469410]  
  - hv_netvsc: Fix napi reschedule while receive completion is busy (Haiyang Zhang)  [Orabug: 28469410]  
  - x86/hyper-v: Fix the circular dependency in IPI enlightenment (K. Y. Srinivasan)  [Orabug: 28469410]  
  - hv_netvsc: Fix the variable sizes in ipsecv2 and rsc offload (Haiyang Zhang)  [Orabug: 28469410]  
  - hv_netvsc: move VF to same namespace as netvsc device (Stephen Hemminger)  [Orabug: 28469410]  
  - hv_netvsc: drop common code until callback model fixed (Stephen Hemminger)  [Orabug: 28469410]  
  - PCI: Initialize endpoint library before controllers (Alan Douglas)  [Orabug: 28469410]  
  - PCI: Collect all native drivers under drivers/pci/controller/ (Shawn Lin)  [Orabug: 28469410]  
  - PCI/IOV: Add pci-pf-stub driver for PFs that only enable VFs (Alexander Duyck)  [Orabug: 28469410]  
  - PCI: Tidy Makefiles (Bjorn Helgaas)  [Orabug: 28469410]  
  - PCI: cadence: Add EndPoint Controller driver for Cadence PCIe controller (Cyrille Pitchen)  [Orabug: 28469410]  
  - PCI: cadence: Add host driver for Cadence PCIe controller (Cyrille Pitchen)  [Orabug: 28469410]  
  - PCI: Regroup all PCI related entries into drivers/pci/Makefile (Cyrille Pitchen)  [Orabug: 28469410]  
  - x86/PCI: Remove unused HyperTransport interrupt support (Bjorn Helgaas)  [Orabug: 28469410]  
  - PCI: Move pci_hp_add_bridge() to drivers/pci/probe.c (Mika Westerberg)  [Orabug: 28469410]  
  - netvsc: refactor notifier/event handling code to use the failover framework (Sridhar Samudrala)  [Orabug: 28469410]  
  - x86/hyper-v: move struct hv_flush_pcpu{,ex} definitions to common header (Vitaly Kuznetsov)  [Orabug: 28469410]  
  - PCI: hv: Do not wait forever on a device that has disappeared (Dexuan Cui)  [Orabug: 28469410]  
  - hv_netvsc: fix bogus ifalias on network device (Stephen Hemminger)  [Orabug: 28469410]  
  - PCI: hv: Use list_for_each_entry() (Stephen Hemminger)  [Orabug: 28469410]  
  - PCI: hv: Convert remove_lock to refcount (Stephen Hemminger)  [Orabug: 28469410]  
  - PCI: hv: Remove unused reason for refcount handler (Stephen Hemminger)  [Orabug: 28469410]  
  - hv_netvsc: Add handlers for ethtool get/set msg level (Haiyang Zhang)  [Orabug: 28469410]  
  - x86/Hyper-V/hv_apic: Build the Hyper-V APIC conditionally (Thomas Gleixner)  [Orabug: 28469410]  
  - x86/Hyper-V/hv_apic: Include asm/apic.h (Thomas Gleixner)  [Orabug: 28469410]  
  - X86/Hyper-V: Consolidate the allocation of the hypercall input page (K. Y. Srinivasan)  [Orabug: 28469410]  
  - X86/Hyper-V: Consolidate code for converting cpumask to vpset (K. Y. Srinivasan)  [Orabug: 28469410]  
  - X86/Hyper-V: Enhanced IPI enlightenment (K. Y. Srinivasan)  [Orabug: 28469410]  
  - X86/Hyper-V: Enable IPI enlightenments (K. Y. Srinivasan)  [Orabug: 28469410]  
  - X86/Hyper-V: Enlighten APIC access (K. Y. Srinivasan)  [Orabug: 28469410]  
  - scsi: storvsc: Avoid allocating memory for temp cpumasks (Michael Kelley)  [Orabug: 28469410]  
  - Drivers: hv: vmbus: Removed an unnecessary cast from void * (Dexuan Cui)  [Orabug: 28469410]  
  - doc: fix sysfs ABI documentation (Stephen Hemminger)  [Orabug: 28469410]  
  - Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Dexuan Cui)  [Orabug: 28469410]  
  - hv_netvsc: typo in NDIS RSS parameters structure (Stephen Hemminger)  [Orabug: 28469410]  
  - PCI: hv: Make sure the bus domain is really unique (Sridhar Pitchai)  [Orabug: 28469410]  
  - hv_netvsc: simplify receive side calling arguments (Stephen Hemminger)  [Orabug: 28469410]  
  - hv_netvsc: select needed ucs2_string routine (Stephen Hemminger)  [Orabug: 28469410]  
  - scsi: storvsc: Select channel based on available percentage of ring buffer to write (Long Li)  [Orabug: 28469410]  
  - scsi: storsvc: don't set a bounce limit (Christoph Hellwig)  [Orabug: 28469410]  
  - hv_netvsc: Add NetVSP v6 and v6.1 into version negotiation (Haiyang Zhang)  [Orabug: 28469410]  
  - hv_netvsc: propogate Hyper-V friendly name into interface alias (Stephen Hemminger)  [Orabug: 28469410]  
  - scsi: netvsc: Use the vmbus function to calculate ring buffer percentage (Long Li)  [Orabug: 28469410]  
  - scsi: vmbus: Add function to report available ring buffer to write in total ring size percentage (Long Li)  [Orabug: 28469410]  
  - RDMA/core: Rate limit MAD error messages (Parav Pandit)  [Orabug: 27796727]  
  - RDMA/core: Fail early if unsupported QP is provided (Parav Pandit)  [Orabug: 27796727]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1839.el7uek]
changelog:
  - net/rds: Fix call to sleeping function in a non-sleeping context (Håkon Bugge)  [Orabug: 28642686]  
  - IB/ipoib: Improve filtering log message (Yuval Shaia)  [Orabug: 27870815]  
  - IB/ipoib: Fix wrong update of arp_blocked counter (Yuval Shaia)  [Orabug: 27870815]  
  - IB/ipoib: Update RX counters after ACL filtering (Yuval Shaia)  [Orabug: 27870815]  
  - IB/ipoib: Filter RX packets before adding pseudo header (Yuval Shaia)  [Orabug: 27870815]  
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 28604541]  
  - arm64: do not place BUG() file name in generic section (Rob Gardner)  [Orabug: 28543950]  
  - x86/speculation: Add sysfs entry to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607498]  
  - x86/speculation: Allow IBRS firmware to be enabled when IBRS is disabled (Alexandre Chartre)  [Orabug: 28607498]  
  - x86/speculation: Remove unnecessary retpoline alternatives (Alexandre Chartre)  [Orabug: 28607498]  
  - x86/speculation: Use static key to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607498]  
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)  [Orabug: 28639381]  {CVE-2018-16658} 
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28630247]  
  - Correct a merge error in v4.14.35-1833 (Jack Vogel)  [Orabug: 28220625]  
  - crypto: ccp - Add support for new CCP/PSP device ID (Tom Lendacky)  [Orabug: 28641301]  
  - crypto: ccp - Support register differences between PSP devices (Tom Lendacky)  [Orabug: 28641301]  
  - crypto: ccp - Remove unused #defines (Tom Lendacky)  [Orabug: 28641301]  
  - crypto: ccp - Add psp enabled message when initialization succeeds (Tom Lendacky)  [Orabug: 28641301]  
  - crypto: ccp - Fix command completion detection race (Tom Lendacky)  [Orabug: 28641301]  
  - iommu/amd: Add support for IOMMU XT mode (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - iommu/amd: Add support for higher 64-bit IOMMU Control Register (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - x86: irq_remapping: Move irq remapping mode enum (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - x86/CPU/AMD: Fix LLC ID bit-shift calculation (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - x86/CPU/AMD: Derive CPU topology from CPUID function 0xB when available (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - x86/CPU/AMD: Calculate last level cache ID from number of sharing threads (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - x86/CPU: Rename intel_cacheinfo.c to cacheinfo.c (Borislav Petkov)  [Orabug: 28641301]  
  - perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined cpu_llc_id (Suravee Suthikulpanit)  [Orabug: 28641301]  
  - x86/CPU/AMD: Have smp_num_siblings and cpu_llc_id always be present (Borislav Petkov)  [Orabug: 28641301]  
  - Linux 4.14.69 (Greg Kroah-Hartman)   
  - arm64: mm: always enable CONFIG_HOLES_IN_ZONE (James Morse)   
  - fs/quota: Fix spectre gadget in do_quotactl (Jeremy Cline)   
  - crypto: caam/qi - fix error path in xts setkey (Horia Geantă)   
  - crypto: caam/jr - fix descriptor DMA unmapping (Horia Geantă)   
  - crypto: caam - fix DMA mapping direction for RSA forms 2 & 3 (Horia Geantă)   
  - crypto: vmx - Fix sleep-in-atomic bugs (Ondrej Mosnacek)   
  - perf auxtrace: Fix queue resize (Adrian Hunter)   
  - cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias() (Eddie.Horng)   
  - bcache: release dc->writeback_lock properly in bch_writeback_thread() (Shan Hai)   
  - libnvdimm: fix ars_status output length calculation (Vishal Verma)   
  - getxattr: use correct xattr length (Christian Brauner)   
  - udlfb: set optimal write delay (Mikulas Patocka)   
  - fb: fix lost console when the user unplugs a USB adapter (Mikulas Patocka)   
  - pwm: tiehrpwm: Fix disabling of output of PWMs (Vignesh R)   
  - pwm: tiehrpwm: Don't use emulation mode bits to control PWM output (Vignesh R)   
  - ubifs: Fix synced_i_size calculation for xattr inodes (Richard Weinberger)   
  - ubifs: xattr: Don't operate on deleted inodes (Richard Weinberger)   
  - ubifs: Check data node size before truncate (Richard Weinberger)   
  - Revert "UBIFS: Fix potential integer overflow in allocation" (Richard Weinberger)   
  - ubifs: Fix memory leak in lprobs self-check (Richard Weinberger)   
  - userns: move user access out of the mutex (Jann Horn)   
  - sys: don't hold uts_sem while accessing userspace memory (Jann Horn)   
  - iommu/vt-d: Fix dev iotlb pfsid use (Jacob Pan)   
  - iommu/vt-d: Add definitions for PFSID (Jacob Pan)   
  - mm/tlb: Remove tlb_remove_table() non-concurrent condition (Peter Zijlstra)   
  - ARM: tegra: Fix Tegra30 Cardhu PCA954x reset (Jon Hunter)   
  - NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence() (Trond Myklebust)   
  - NFSv4: Fix locking in pnfs_generic_recover_commit_reqs (Trond Myklebust)   
  - NFSv4 client live hangs after live data migration recovery (Bill Baker)   
  - pnfs/blocklayout: off by one in bl_map_stripe() (Dan Carpenter)   
  - block, bfq: return nbytes and not zero from struct cftype .write() method (Maciej S. Szmigiero)   
  - xtensa: increase ranges in ___invalidate_{i,d}cache_all (Max Filippov)   
  - xtensa: limit offsets in __loop_cache_{all,page} (Max Filippov)   
  - KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages (Paul Mackerras)   
  - KVM: VMX: fixes for vmentry_l1d_flush module parameter (Paolo Bonzini)   
  - PM / sleep: wakeup: Fix build error caused by missing SRCU support (zhangyi (F))   
  - cpufreq: governor: Avoid accessing invalid governor_data (Henry Willard)   
  - drivers/block/zram/zram_drv.c: fix bug storing backing_dev (Peter Kalauskas)   
  - ovl: fix wrong use of impure dir cache in ovl_iterate() (Amir Goldstein)   
  - mfd: hi655x: Fix regmap area declared size for hi655x (Rafael David Tinoco)   
  - uprobes: Use synchronize_rcu() not synchronize_sched() (Steven Rostedt (VMware))   
  - livepatch: Validate module/old func name length (Kamalesh Babulal)   
  - printk/tracing: Do not trace printk_nmi_enter() (Steven Rostedt (VMware))   
  - tracing/blktrace: Fix to allow setting same value (Steven Rostedt (VMware))   
  - tracing: Do not call start/stop() functions when tracing_on does not change (Steven Rostedt (VMware))   
  - rtc: omap: fix potential crash on power off (Johan Hovold)   
  - vmw_balloon: fix VMCI use when balloon built into kernel (Nadav Amit)   
  - vmw_balloon: VMCI_DOORBELL_SET does not check status (Nadav Amit)   
  - vmw_balloon: do not use 2MB without batching (Nadav Amit)   
  - vmw_balloon: fix inflation of 64-bit GFNs (Nadav Amit)   
  - extcon: Release locking when sending the notification of connector state (Chanwoo Choi)   
  - iio: ad9523: Fix return value for ad952x_store() (Lars-Peter Clausen)   
  - iio: ad9523: Fix displayed phase (Lars-Peter Clausen)   
  - iio: sca3000: Fix missing return in switch (Gustavo A. R. Silva)   
  - Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind() (Dexuan Cui)   
  - uart: fix race between uart_put_char() and uart_shutdown() (Tycho Andersen)   
  - dm crypt: don't decrease device limits (Mikulas Patocka)   
  - dm cache metadata: set dirty on all cache blocks after a crash (Ilya Dryomov)   
  - dm cache metadata: save in-core policy_hint_size to on-disk superblock (Mike Snitzer)   
  - dm thin: stop no_space_timeout worker when switching to write-mode (Hou Tao)   
  - dm integrity: change 'suspending' variable from bool to int (Mikulas Patocka)   
  - net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree() (Tomas Bortoli)   
  - net/9p/client.c: version pointer uninitialized (Tomas Bortoli)   
  - 9p/virtio: fix off-by-one error in sg list bounds check (jiangyiwen)   
  - fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed (piaojun)   
  - 9p: fix multiple NULL-pointer-dereferences (Tomas Bortoli)   
  - RDMA/rxe: Set wqe->status correctly if an unexpected response is received (Bart Van Assche)   
  - ib_srpt: Fix a use-after-free in srpt_close_ch() (Bart Van Assche)   
  - cxl: Fix wrong comparison in cxl_adapter_context_get() (Vaibhav Jain)   
  - powerpc/powernv/pci: Work around races in PCI bridge enabling (Benjamin Herrenschmidt)   
  - PCI: Add wrappers for dev_printk() (Frederick Lawler)   
  - powerpc/pseries: Fix endianness while restoring of r3 in MCE handler. (Mahesh Salgaonkar)   
  - powerpc/fadump: handle crash memory ranges array index overflow (Hari Bathini)   
  - Fix kexec forbidding kernels signed with keys in the secondary keyring to boot (Yannik Sembritzki)   
  - Replace magic for trusting the secondary keyring with #define (Yannik Sembritzki)   
  - mailbox: xgene-slimpro: Fix potential NULL pointer dereference (Gustavo A. R. Silva)   
  - media: Revert "[media] tvp5150: fix pad format frame height" (Javier Martinez Canillas)   
  - libertas: fix suspend and resume for SDIO connected cards (Daniel Mack)   
  - drm/i915/userptr: reject zero user_size (Matthew Auld)   
  - block: really disable runtime-pm for blk-mq (Ming Lei)   
  - block: blk_init_allocated_queue() set q->fq as NULL in the fail case (xiao jin)   
  - readahead: stricter check for bdi io_pages (Markus Stockhausen)   
  - mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS (Sergei Shtylyov)   
  - spi: cadence: Change usleep_range() to udelay(), for atomic context (Janek Kotas)   
  - spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe (Krzysztof Kozlowski)   
  - spi: pxa2xx: Add support for Intel Ice Lake (Mika Westerberg)   
  - spi: davinci: fix a NULL pointer dereference (Bartosz Golaszewski)   
  - 9p/net: Fix zero-copy path in the 9p virtio transport (Chirantan Ekbote)   
  - net: mac802154: tx: expand tailroom if necessary (Alexander Aring)   
  - net: 6lowpan: fix reserved space for single frames (Alexander Aring)   
  - Linux 4.14.68 (Greg Kroah-Hartman)   
  - gcc-plugins: Use dynamic initializers (Kees Cook)   
  - gcc-plugins: Add include required by GCC release 8 (Valdis Kletnieks)   
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)   
  - watchdog: Mark watchdog touch functions as notrace (Vincent Whitchurch)   
  - power: generic-adc-battery: check for duplicate properties copied from iio channels (H. Nikolaus Schaller)   
  - power: generic-adc-battery: fix out-of-bounds write when copying channel properties (H. Nikolaus Schaller)   
  - PM / clk: signedness bug in of_pm_clk_add_clks() (Dan Carpenter)   
  - clk: rockchip: fix clk_i2sout parent selection bits on rk3399 (Alberto Panizzo)   
  - iscsi target: fix session creation failure handling (Mike Christie)   
  - scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock (Bart Van Assche)   
  - scsi: sysfs: Introduce sysfs_{un,}break_active_protection() (Bart Van Assche)   
  - scsi: mpt3sas: Fix _transport_smp_handler() error path (Bart Van Assche)   
  - tpm: Return the actual size when receiving an unsupported command (Ricardo Schwarzmeier)   
  - MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7 (Paul Burton)   
  - MIPS: Change definition of cpu_relax() for Loongson-3 (Huacai Chen)   
  - MIPS: Always use -march=<arch>, not -<arch> shortcuts (Paul Burton)   
  - MIPS: Correct the 64-bit DSP accumulator register size (Maciej W. Rozycki)   
  - kprobes: Make list and blacklist root user read only (Masami Hiramatsu)   
  - kprobes/arm: Fix %p uses in error messages (Masami Hiramatsu)   
  - s390/pci: fix out of bounds access during irq setup (Sebastian Ott)   
  - s390/numa: move initial setup of node_to_cpumask_map (Martin Schwidefsky)   
  - s390/qdio: reset old sbal_state flags (Julian Wiedmann)   
  - s390: fix br_r1_trampoline for machines without exrl (Martin Schwidefsky)   
  - s390/mm: fix addressing exception after suspend/resume (Gerald Schaefer)   
  - x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit() (Jann Horn)   
  - hwmon: (nct6775) Fix potential Spectre v1 (Gustavo A. R. Silva)   
  - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen)   
  - x86/spectre: Add missing family 6 check to microcode check (Andi Kleen)   
  - x86/irqflags: Mark native_restore_fl extern inline (Nick Desaulniers)   
  - x86/nmi: Fix NMI uaccess race against CR3 switching (Andy Lutomirski)   
  - x86/vdso: Fix lsl operand order (Samuel Neves)   
  - pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show() (Dan Carpenter)   
  - ASoC: sirf: Fix potential NULL pointer dereference (Gustavo A. R. Silva)   
  - ASoC: zte: Fix incorrect PCM format bit usages (Takashi Iwai)   
  - ASoC: dpcm: don't merge format from invalid codec dai (Jerome Brunet)   
  - b43/leds: Ensure NUL-termination of LED name string (Michael Buesch)   
  - b43legacy/leds: Ensure NUL-termination of LED name string (Michael Buesch)   
  - udl-kms: avoid division (Mikulas Patocka)   
  - udl-kms: fix crash due to uninitialized memory (Mikulas Patocka)   
  - udl-kms: handle allocation failure (Mikulas Patocka)   
  - udl-kms: change down_interruptible to down (Mikulas Patocka)   
  - fuse: Add missed unlock_page() to fuse_readpages_fill() (Kirill Tkhai)   
  - fuse: Fix oops at process_init_reply() (Miklos Szeredi)   
  - fuse: umount should wait for all requests (Miklos Szeredi)   
  - fuse: fix unlocked access to processing queue (Miklos Szeredi)   
  - fuse: fix double request_end() (Miklos Szeredi)   
  - fuse: fix initial parallel dirops (Miklos Szeredi)   
  - fuse: Don't access pipe->buffers without pipe_lock() (Andrey Ryabinin)   
  - x86/kvm/vmx: Remove duplicate l1d flush definitions (Josh Poimboeuf)   
  - KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner)   
  - x86/process: Re-export start_thread() (Rian Hunter)   
  - x86/vdso: Fix vDSO build if a retpoline is emitted (Andy Lutomirski)   
  - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka)   
  - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka)   
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)   
  - mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE (Peter Zijlstra)   
  - mm: move tlb_table_flush to tlb_flush_mmu_free (Nicholas Piggin)   
  - platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too (Takashi Iwai)   
  - nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (Michal Wnukowski)   
  - ext4: reset error code in ext4_find_entry in fallback (Eric Sandeen)   
  - ext4: sysfs: print ext4_super_block fields as little-endian (Arnd Bergmann)   
  - ext4: check for NUL characters in extended attribute's name (Theodore Ts'o)   
  - stop_machine: Atomically queue and wake stopper threads (Prasad Sodagudi)   
  - stop_machine: Reflow cpu_stop_queue_two_works() (Peter Zijlstra)   
  - s390/kvm: fix deadlock when killed by oom (Claudio Imbrenda)   
  - KVM: arm/arm64: Skip updating PTE entry if no change (Punit Agrawal)   
  - KVM: arm/arm64: Skip updating PMD entry if no change (Punit Agrawal)   
  - arm64: dts: rockchip: corrected uart1 clock-names for rk3328 (Huibin Hong)   
  - arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid() (Greg Hackmann)   
  - kprobes/arm64: Fix %p uses in error messages (Masami Hiramatsu)   
  - printk/nmi: Prevent deadlock when accessing the main log buffer in NMI (Petr Mladek)   
  - printk: Create helper function to queue deferred console handling (Petr Mladek)   
  - printk: Split the code for storing a message into the log buffer (Petr Mladek)   
  - iommu/arm-smmu: Error out only if not enough context interrupts (Vivek Gautam)   
  - Btrfs: fix btrfs_write_inode vs delayed iput deadlock (Josef Bacik)   
  - btrfs: don't leak ret from do_chunk_alloc (Josef Bacik)   
  - btrfs: use correct compare function of dirty_metadata_bytes (Ethan Lien)   
  - smb3: fill in statfs fsid and correct namelen (Steve French)   
  - smb3: don't request leases in symlink creation and query (Steve French)   
  - smb3: Do not send SMB3 SET_INFO if nothing changed (Steve French)   
  - smb3: enumerating snapshots was leaving part of the data off end (Steve French)   
  - cifs: check kmalloc before use (Nicholas Mc Guire)   
  - cifs: add missing debug entries for kconfig options (Steve French)   
  - mei: don't update offset in write (Alexander Usyskin)   
  - mm/memory.c: check return value of ioremap_prot (jie@chenjie6@huwei.com)   
  - scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED (Jim Gill)   
  - scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO (Johannes Thumshirn)   
  - scsi: fcoe: drop frames in ELS LOGO error path (Johannes Thumshirn)   
  - scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send (Johannes Thumshirn)   
  - gpiolib-acpi: make sure we trigger edge events at least once on boot (Benjamin Tissoires)   
  - memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure (Kirill Tkhai)   
  - drivers: net: lmc: fix case value for target abort error (Colin Ian King)   
  - Squashfs: Compute expected length from inode size rather than block length (Phillip Lougher)   
  - mm: delete historical BUG from zap_pmd_range() (Hugh Dickins)   
  - squashfs metadata 2: electric boogaloo (Linus Torvalds)   
  - enic: do not call enic_change_mtu in enic_probe (Govindarajulu Varadarajan)   
  - sparc: use asm-generic version of msi.h (Thomas Petazzoni)   
  - sparc/time: Add missing __init to init_tick_ops() (Steven Rostedt (VMware))   
  - arc: fix type warnings in arc/mm/cache.c (Randy Dunlap)   
  - arc: fix build errors in arc/include/asm/delay.h (Randy Dunlap)   
  - arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c (Randy Dunlap)   
  - arc: [plat-eznps] fix data type errors in platform headers (Randy Dunlap)   
  - ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc (Ofer Levi)   
  - enic: handle mtu change for vf properly (Govindarajulu Varadarajan)   
  - nfp: flower: fix port metadata conversion bug (John Hurley)   
  - bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog() (Taehee Yoo)   
  - ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size (Eugeniy Paltsev)   
  - Revert "MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum" (Rafał Miłecki)   
  - tools/power turbostat: Read extended processor family from CPUID (Calvin Walton)   
  - zswap: re-check zswap_is_full() after do zswap_shrink() (Li Wang)   
  - ipc/sem.c: prevent queue.status tearing in semop (Davidlohr Bueso)   
  - hinic: Link the logical network device to the pci device in sysfs (dann frazier)   
  - selftests/ftrace: Add snapshot and tracing_on test case (Masami Hiramatsu)   
  - cachefiles: Wait rather than BUG'ing on "Unexpected object collision" (Kiran Kumar Modukuri)   
  - cachefiles: Fix refcounting bug in backing-file read monitoring (Kiran Kumar Modukuri)   
  - fscache: Allow cancelled operations to be enqueued (Kiran Kumar Modukuri)   
  - x86/boot: Fix if_changed build flip/flop bug (Kees Cook)   
  - sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE (Hailong Liu)   
  - i2c/mux, locking/core: Annotate the nested rt_mutex usage (Peter Rosin)   
  - locking/rtmutex: Allow specifying a subclass for nested locking (Peter Rosin)   
  - net: axienet: Fix double deregister of mdio (Shubhrajyoti Datta)   
  - qmi_wwan: fix interface number for DW5821e production firmware (Aleksander Morgado)   
  - bnx2x: Fix invalid memory access in rss hash config path. (Sudarsana Reddy Kalluru)   
  - media: staging: omap4iss: Include asm/cacheflush.h after generic includes (Guenter Roeck)   
  - perf/x86/amd/ibs: Don't access non-started event (Thomas Gleixner)   
  - i2c: davinci: Avoid zero value of CLKH (Alexander Sverdlin)   
  - can: m_can: Move accessing of message ram to after clocks are enabled (Faiz Abbas)   
  - can: mpc5xxx_can: check of_iomap return before use (Nicholas Mc Guire)   
  - net: prevent ISA drivers from building on PPC32 (Randy Dunlap)   
  - atl1c: reserve min skb headroom (Florian Westphal)   
  - qed: Correct Multicast API to reflect existence of 256 approximate buckets. (Sudarsana Reddy Kalluru)   
  - qed: Fix possible race for the link state value. (Sudarsana Reddy Kalluru)   
  - qed: Fix link flap issue due to mismatching EEE capabilities. (Sudarsana Reddy Kalluru)   
  - net: caif: Add a missing rcu_read_unlock() in caif_flow_cb (YueHaibing)   
  - tools/power turbostat: fix -S on UP systems (Len Brown)   
  - KVM: vmx: use local variable for current_vmptr when emulating VMPTRST (Sean Christopherson)   
  - netfilter: nf_tables: don't allow to rename to already-pending name (Florian Westphal)   
  - netfilter: nf_tables: fix memory leaks on chain rename (Florian Westphal)   
  - bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd (Daniel Borkmann)   
  - netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy() (Taehee Yoo)   
  - usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3' (Eugeniu Rosca)   
  - tools: usb: ffs-test: Fix build on big endian systems (Peter Senna Tschudin)   
  - usb/phy: fix PPC64 build errors in phy-fsl-usb.c (Randy Dunlap)   
  - usb: gadget: u_audio: protect stream runtime fields with stream spinlock (Vladimir Zapolskiy)   
  - usb: gadget: u_audio: remove cached period bytes value (Vladimir Zapolskiy)   
  - usb: gadget: u_audio: remove caching of stream buffer parameters (Vladimir Zapolskiy)   
  - usb: gadget: u_audio: update hw_ptr in iso_complete after data copied (Joshua Frkuska)   
  - usb: gadget: u_audio: fix pcm/card naming in g_audio_setup() (Eugeniu Rosca)   
  - usb: gadget: f_uac2: fix error handling in afunc_bind (again) (Eugeniu Rosca)   
  - usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in r8a66597_queue() (Jia-Ju Bai)   
  - usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in init_controller() (Jia-Ju Bai)   
  - nbd: handle unexpected replies better (Josef Bacik)   
  - nbd: don't requeue the same request twice. (Josef Bacik)   
  - drm/imx: imx-ldb: check if channel is enabled before printing warning (Lucas Stach)   
  - drm/imx: imx-ldb: disable LDB on driver bind (Lucas Stach)   
  - scsi: libiscsi: fix possible NULL pointer dereference in case of TMF (Varun Prakash)   
  - scsi: target: iscsi: cxgbit: fix max iso npdu calculation (Varun Prakash)   
  - drm/bridge: adv7511: Reset registers on hotplug (Sean Paul)   
  - nl80211: Add a missing break in parse_station_flags (Bernd Edlinger)   
  - ext4: clear mmp sequence number when remounting read-only (Theodore Ts'o)   
  - mac80211: add stations tied to AP_VLANs during hw reconfig (mpubbise@codeaurora.org)   
  - esp6: fix memleak on error path in esp6_input (Zhen Lei)   
  - xfrm: free skb if nlsk pointer is NULL (Florian Westphal)   
  - xfrm: fix missing dst_release() after policy blocking lbcast and multicast (Tommi Rantala)   
  - vti6: fix PMTU caching and reporting on xmit (Eyal Birger)   
  - crypto: vmx - Use skcipher for ctr fallback (Paulo Flabiano Smorigo)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1840.el7uek]
changelog:
  - net: enable RPS on vlan devices (Shannon Nelson)  [Orabug: 28703786]  
  - ixgbe: fix the return value for unsupported VF offload (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: disallow IPsec Tx offload when in SR-IOV mode (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbevf: enable VF IPsec offload operations (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbevf: add VF IPsec offload code (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbevf: add defines for IPsec offload request (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: add VF IPsec offload request message handling (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: add VF IPsec offload enable flag (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: add VF IPsec management (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: prep IPsec constants for later use (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: reload IPsec IP table after sa tables (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: don't clear IPsec sa counters on HW clearing (Shannon Nelson)  [Orabug: 28696833]  
  - ixgbe: fix broken ipsec Rx with proper cast on spi (Shannon Nelson)  [Orabug: 28696814]  
  - ixgbe: check ipsec ip addr against mgmt filters (Shannon Nelson)  [Orabug: 28696814]  
  - ixgbe: cleanup sparse warnings (Cathy Zhou)  [Orabug: 28696814]  
  - ixgbe: Use CONFIG_XFRM_OFFLOAD instead of CONFIG_XFRM (Alexander Duyck)  [Orabug: 28696814]  
  - ixgbe: Move ipsec init function to before reset call (Alexander Duyck)  [Orabug: 28696814]  
  - ixgbe: Avoid loopback and fix boolean logic in ipsec_stop_data (Alexander Duyck)  [Orabug: 28696814]  
  - ixgbe: Fix bit definitions and add support for testing for ipsec support (Alexander Duyck)  [Orabug: 28696814]  
  - ixgbe: Off by one in ixgbe_ipsec_tx() (Dan Carpenter)  [Orabug: 28696814]  
  - ixgbe: add ipsec security registers into ethtool register dump (Shannon Nelson)  [Orabug: 28696814]  
  - xfrm: don't check offload_handle for nonzero (Shannon Nelson)  [Orabug: 28696814]  
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720018]  
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720018]  
  - irq/softirqs: Use lockdep to assert IRQs are disabled/enabled (Frederic Weisbecker)  [Orabug: 28209660]  
  - locking/lockdep: Add IRQs disabled/enabled assertion APIs: lockdep_assert_irqs_enabled()/disabled() (Frederic Weisbecker)  [Orabug: 28209660]  
  - bnxt_re: Implement the shutdown hook of the L2-RoCE driver interface (Somnath Kotur)  [Orabug: 28369671]  
  - RDMA/core: Acquire and release mmap_sem on each page range (Parav Pandit)  [Orabug: 28564777]  
  - KVM: arm/arm64: Enable adaptative WFE trapping (Marc Zyngier)  [Orabug: 28129411]  
  - arm64/kernel: rename module_emit_adrp_veneer->module_emit_veneer_for_adrp (Kim Phillips)  [Orabug: 28660031]  
  - arm64/kernel: don't ban ADRP to work around Cortex-A53 erratum #843419 (Ard Biesheuvel)  [Orabug: 28660031]  
  - btrfs: Check that each block group has corresponding chunk at mount time (Qu Wenruo)  [Orabug: 28693486]  {CVE-2018-14610} 
  - btrfs: validate type when reading a chunk (Gu Jinxiang)  [Orabug: 28693490]  {CVE-2018-14611} 
  - e1000e: Fix link check race condition (Benjamin Poirier)  [Orabug: 28528928]  
  - Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier)  [Orabug: 28528928]  
  - e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier)  [Orabug: 28528928]  
  - e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier)  [Orabug: 28528928]  
  - Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier)  [Orabug: 28528928]  
  - e1000e: Remove Other from EIAC (Benjamin Poirier)  [Orabug: 28528928]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1841.el7uek]
changelog:
  - Btrfs: send, fix missing truncate for inode with prealloc extent past eof (Filipe Manana)  [Orabug: 28400819]  
  - Btrfs: fix fsync after hole punching when using no-holes feature (Filipe Manana)  [Orabug: 28488054]  
  - Btrfs: fix send failure when root has deleted files still open (Filipe Manana)  [Orabug: 28506155]  
  - Btrfs: send, do not issue unnecessary truncate operations (Filipe Manana)  [Orabug: 28506155]  
  - btrfs: Remove unused parameters from various functions (Nikolay Borisov)  [Orabug: 28506155]  
  - uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees)  [Orabug: 28707614]  
  - dtrace: FBT entry probes for arm64 (Kris Van Hees)  [Orabug: 28643859]  
  - uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees)  [Orabug: 28707604]  
  - Btrfs: fix mount failure after fsync due to hard link recreation (Filipe Manana)  [Orabug: 28518966]  
  - Btrfs: fix log replay failure after unlink and link combination (Filipe Manana)  [Orabug: 28518966]  
  - Btrfs: sync log after logging new name (Filipe Manana)  [Orabug: 28519151]  
  - btrfs: Remove root arg from btrfs_log_inode_parent (Nikolay Borisov)  [Orabug: 28519151]  
  - btrfs: btrfs_inode_log_parent should use defined inode_only values. (Edmund Nadolski)  [Orabug: 28519151]  
  - Btrfs: avoid losing data raid profile when deleting a device (Liu Bo)  [Orabug: 28544306]  
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28720880]  
  - rds: tcp: remove register_netdevice_notifier infrastructure. (Ka-Cheong Poon)  [Orabug: 28737841]  
  - bnxt_en: Fix VF mac address regression. (Michael Chan)  [Orabug: 28609280]  
  - Btrfs: reserve space for O_TMPFILE orphan item deletion (Omar Sandoval)   
  - Btrfs: renumber BTRFS_INODE_ runtime flags and switch to enums (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: get rid of unused orphan infrastructure (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: fix ENOSPC caused by orphan items reservations (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: refactor btrfs_evict_inode() reserve refill dance (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: delete dead code in btrfs_orphan_commit_root() (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: get rid of BTRFS_INODE_HAS_ORPHAN_ITEM (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: stop creating orphan items for truncate (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: fix error handling in btrfs_truncate_inode_items() (Omar Sandoval)  [Orabug: 28512436]  
  - Btrfs: update stale comments referencing vmtruncate() (Omar Sandoval)  [Orabug: 28512436]  
  - btrfs: move btrfs_truncate_block out of trans handle (Josef Bacik)  [Orabug: 28512436]  
  - mm: get rid of vmacache_flush_all() entirely (Linus Torvalds)  [Orabug: 28693570]  {CVE-2018-17182} 
  - IB/core: Perform modify QP on real one (Parav Pandit)  [Orabug: 28673621]  
  - KVM: arm64: Fixup Don't save the host ELR_EL2 and SPSR_EL2 on VHE systems (Thomas Tai)  [Orabug: 28659735]  
  - protect against overflow when using ifnames_skip core param (Brian Maly)  [Orabug: 28579075]  
  - kvm: fix possible spectre gadgets in virt/kvm/kvm_main.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/x86.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mtrr.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mmu.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/cpuid.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in include/linux/kvm_host.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/pmu.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny)  [Orabug: 28713077]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1842.el7uek]
changelog:
  - nfs: fix a deadlock in nfs client initialization (Scott Mayhew)  [Orabug: 28775861]  
  - arm64: KVM: Sanitize PSTATE.M when being set from userspace (Marc Zyngier)  [Orabug: 28762162]  {CVE-2018-18021} 
  - kvm/arm: use PSR_AA32 definitions (Mark Rutland)  [Orabug: 28762162]  {CVE-2018-18021} 
  - arm64: KVM: Tighten guest core register access from userspace (Dave Martin)  [Orabug: 28762162]  {CVE-2018-18021} 
  - iommu/amd: Clear memory encryption mask from physical address (Singh, Brijesh)  [Orabug: 28571203]  
  - uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger)  [Orabug: 28549351]  
  - mm, truncate: remove all exceptional entries from pagevec under one lock (Mel Gorman)  [Orabug: 28514617]  
  - mm, truncate: do not check mapping for every page being truncated (Mel Gorman)  [Orabug: 28514617]  
  - mm: fix exports that inadvertently make put_page() EXPORT_SYMBOL_GPL (Dan Williams)  [Orabug: 28514617]  
  - mm: disallow mappings that conflict for devm_memremap_pages() (Dave Jiang)  [Orabug: 28514617]  
  - x86/asm/memcpy_mcsafe: Fix copy_to_user_mcsafe() exception handling (Dan Williams)  [Orabug: 28514617]  
  - lib/iov_iter: Fix pipe handling in _copy_to_iter_mcsafe() (Dan Williams)  [Orabug: 28514617]  
  - lib/iov_iter: Document _copy_to_iter_flushcache() (Dan Williams)  [Orabug: 28514617]  
  - lib/iov_iter: Document _copy_to_iter_mcsafe() (Dan Williams)  [Orabug: 28514617]  
  - acpi, nfit: Fix scrub idle detection (Dan Williams)  [Orabug: 28514617]  
  - tools/testing/nvdimm: advertise a write cache for nfit_test (Vishal Verma)  [Orabug: 28514617]  
  - libnvdimm, pmem: Fix memcpy_mcsafe() return code handling in nsio_rw_bytes() (Dan Williams)  [Orabug: 28514617]  
  - pmem: only set QUEUE_FLAG_DAX for fsdax mode (Ross Zwisler)  [Orabug: 28514617]  
  - mm: remove page_is_poisoned() from linux/mm.h (Sahara)  [Orabug: 28514617]  
  - fs/dax.c: use new return type vm_fault_t (Souptick Joarder)  [Orabug: 28514617]  
  - dax: pass detailed error code from dax_iomap_fault() (Jan Kara)  [Orabug: 28514617]  
  - mm: change return type to vm_fault_t (Souptick Joarder)  [Orabug: 28514617]  
  - dax: Use dax_write_cache* helpers (Ross Zwisler)  [Orabug: 28514617]  
  - libnvdimm, pmem: Do not flush power-fail protected CPU caches (Ross Zwisler)  [Orabug: 28514617]  
  - libnvdimm, pmem: Unconditionally deep flush on *sync (Ross Zwisler)  [Orabug: 28514617]  
  - libnvdimm, pmem: Complete REQ_FLUSH => REQ_PREFLUSH (Ross Zwisler)  [Orabug: 28514617]  
  - acpi, nfit: Remove ecc_unit_size (Dan Williams)  [Orabug: 28514617]  
  - acpi: nfit: document sysfs interface (Aishwarya Pant)  [Orabug: 28514617]  
  - dax: dax_insert_mapping_entry always succeeds (Matthew Wilcox)  [Orabug: 28514617]  
  - x86, nfit_test: Add unit test for memcpy_mcsafe() (Dan Williams)  [Orabug: 28514617]  
  - libnvdimm, e820: Register all pmem resources (Dan Williams)  [Orabug: 28514617]  
  - libnvdimm: Debug probe times (Dan Williams)  [Orabug: 28514617]  
  - pmem: Switch to copy_to_iter_mcsafe() (Dan Williams)  [Orabug: 28514617]  
  - dax: Report bytes remaining in dax_iomap_actor() (Dan Williams)  [Orabug: 28514617]  
  - dax: Introduce a ->copy_to_iter dax operation (Dan Williams)  [Orabug: 28514617]  
  - uio, lib: Fix CONFIG_ARCH_HAS_UACCESS_MCSAFE compilation (Dan Williams)  [Orabug: 28514617]  
  - x86/asm/memcpy_mcsafe: Define copy_to_iter_mcsafe() (Dan Williams)  [Orabug: 28514617]  
  - x86/asm/memcpy_mcsafe: Add write-protection-fault handling (Dan Williams)  [Orabug: 28514617]  
  - x86/asm/memcpy_mcsafe: Return bytes remaining (Dan Williams)  [Orabug: 28514617]  
  - x86/asm/memcpy_mcsafe: Add labels for __memcpy_mcsafe() write fault handling (Dan Williams)  [Orabug: 28514617]  
  - x86/asm/memcpy_mcsafe: Remove loop unrolling (Dan Williams)  [Orabug: 28514617]  
  - xfs, dax: introduce xfs_break_dax_layouts() (Dan Williams)  [Orabug: 28514617]  
  - xfs: prepare xfs_break_layouts() for another layout type (Dan Williams)  [Orabug: 28514617]  
  - xfs: prepare xfs_break_layouts() to be called with XFS_MMAPLOCK_EXCL (Dan Williams)  [Orabug: 28514617]  
  - mm, fs, dax: handle layout changes to pinned dax mappings (Dan Williams)  [Orabug: 28514617]  
  - sched/wait: Introduce wait_var_event() (Peter Zijlstra)  [Orabug: 28514617]  
  - mm: introduce MEMORY_DEVICE_FS_DAX and CONFIG_DEV_PAGEMAP_OPS (Dan Williams)  [Orabug: 28514617]  
  - dax: store pfns in the radix (Dan Williams)  [Orabug: 28514617]  
  - memremap: split devm_memremap_pages() and memremap() infrastructure (Dan Williams)  [Orabug: 28514617]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1843.el7uek]
changelog:
  - Btrfs: do not cache rbio pages if using raid6 recover (Liu Bo)  [Orabug: 28563682]  
  - Btrfs: do not merge rbios if their fail stripe index are not identical (Liu Bo)  [Orabug: 28563682]  
  - iscsi: Capture iscsi debug messages using tracepoints (Fred Herard)  [Orabug: 28797169]  
  - x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre)  [Orabug: 28801815]  
  - hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz)  [Orabug: 28813950]  
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28597387]  
  - scsi: lpfc: Remove set but not used variable 'sgl_size' (YueHaibing)  [Orabug: 28796202]  
  - scsi: lpfc: update driver version to 12.0.0.7 (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: add support to retrieve firmware logs (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: reduce locking when updating statistics (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Fix errors in log messages. (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Correct irq handling via locks when taking adapter offline (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Correct soft lockup when running mds diagnostics (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Correct race with abort on completion path (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Raise nvme defaults to support a larger io and more connectivity (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: raise sg count for nvme to use available sg resources (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: remove an unnecessary NULL check (Dan Carpenter)  [Orabug: 28796202]  
  - scsi: lpfc: update driver version to 12.0.0.6 (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Correct LCB ACCept payload (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Limit tracking of tgt queue depth in fast path (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Fix driver crash when re-registering NVME rports. (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Fix list corruption on the completion queue. (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Fix sysfs Speed value on CNA ports (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart)  [Orabug: 28796202]  
  - scsi: lpfc: remove null check on nvmebuf (Colin Ian King)  [Orabug: 28796202]  
  - Fix error code in nfs_lookup_verify_inode() (Lance Shelton)  [Orabug: 28807481]  
  - kdump/vmcore: support encrypted old memory with SME enabled (Lianbo Jiang)  [Orabug: 28503140]  
  - amd_iommu: remap the device table of IOMMU with the memory encryption mask for kdump (Lianbo Jiang)  [Orabug: 28503140]  
  - kexec: allocate unencrypted control pages for kdump in case SME is enabled (Lianbo Jiang)  [Orabug: 28503140]  
  - x86/ioremap: add a function ioremap_encrypted() to remap kdump old memory (Lianbo Jiang)  [Orabug: 28503140]  
  - Revert "arm64: KVM: Tighten guest core register access from userspace" (Jack Vogel)   
  - Revert "kvm/arm: use PSR_AA32 definitions" (Jack Vogel)   
  - Revert "arm64: KVM: Sanitize PSTATE.M when being set from userspace" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.1.el7uek]
changelog:
  - bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly)  [Orabug: 28651669]  
  - ctf: really link CTF into out-of-tree modules (Nick Alcock)  [Orabug: 28343862]  
  - vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh)  [Orabug: 28300570]  
  - vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh)  [Orabug: 28300570]  
  - vhost/scsi: Respond to control queue operations (Bijan Mottahedeh)  [Orabug: 28300570]  
  - cgroup: css_set_lock should nest inside tasklist_lock (chris hyser)  [Orabug: 28796554]  
  - cgroup: export list of cgroups v2 features using sysfs (chris hyser)  [Orabug: 28796554]  
  - cgroup: export list of delegatable control files using sysfs (chris hyser)  [Orabug: 28796554]  
  - cgroup, sched: Move basic cpu stats from cgroup.stat to cpu.stat (chris hyser)  [Orabug: 28796554]  
  - sched: Implement interface for cgroup unified hierarchy (chris hyser)  [Orabug: 28796554]  
  - sched: Misc preps for cgroup unified hierarchy interface (chris hyser)  [Orabug: 28796554]  
  - cgroup: statically initialize init_css_set->dfl_cgrp (chris hyser)  [Orabug: 28796554]  
  - cgroup: Implement cgroup2 basic CPU usage accounting (chris hyser)  [Orabug: 28796554]  
  - cpuacct: Introduce cgroup_account_cputime[_field]() (chris hyser)  [Orabug: 28796554]  
  - sched/cputime: Expose cputime_adjust() (chris hyser)  [Orabug: 28796554]  
  - dtrace: FBT return probe support for arm64 (Kris Van Hees)  [Orabug: 28826056]  
  - rds: MPRDS messages delivered out of order (Ka-Cheong Poon)  [Orabug: 28838065]  
  - nvme: Skip checking heads without namespaces (Keith Busch)  [Orabug: 28682185]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 28776533]  
  - KVM: arm/arm64: Introduce vcpu_el1_is_32bit (Christoffer Dall)  [Orabug: 28762162]  {CVE-2018-18021} 
  - arm64: KVM: Move CPU ID reg trap setup off the world switch path (Dave Martin)  [Orabug: 28762162]  {CVE-2018-18021} 
  - arm64: KVM: Sanitize PSTATE.M when being set from userspace (Marc Zyngier)  [Orabug: 28762162]  {CVE-2018-18021} 
  - arm64: KVM: Tighten guest core register access from userspace (Dave Martin)  [Orabug: 28762162]  {CVE-2018-18021} 
  - kvm/arm: use PSR_AA32 definitions (Mark Rutland)  [Orabug: 28762162]  {CVE-2018-18021} 
  - arm64: add PSR_AA32_* definitions (Mark Rutland)  [Orabug: 28762162]  {CVE-2018-18021} 
  - dtrace: exclude init and exit sections for sdtinfo (Kris Van Hees)  [Orabug: 28808083]  
  - bnxt_en: Fix TX timeout during netpoll. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: don't try to offload VLAN 'modify' action (Davide Caratti)  [Orabug: 28797053]  
  - net: bnxt: Fix a uninitialized variable warning. (zhong jiang)  [Orabug: 28797053]  
  - bnxt_en: remove set but not used variable 'addr_type' (YueHaibing)  [Orabug: 28797053]  
  - bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Clean up unused functions. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Fix firmware signaled resource change logic in open. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: remove set but not used variable 'rx_stats' (YueHaibing)  [Orabug: 28797053]  
  - bnxt_en: take coredump_record structure off stack (Arnd Bergmann)  [Orabug: 28797053]  
  - bnxt_en: avoid string overflow for record->system_name (Arnd Bergmann)  [Orabug: 28797053]  
  - bnxt_en: Fix strcpy() warnings in bnxt_ethtool.c (Vasundhara Volam)  [Orabug: 28797053]  
  - bnxt_en: Do not use the CNP CoS queue for networking traffic. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Add DCBNL DSCP application protocol support. (Michael Chan)  [Orabug: 28797053]  
  - config: enable BNXT_HWMON (Brian Maly)  [Orabug: 28797053]  
  - bnxt_en: Add hwmon sysfs support to read temperature (Vasundhara Volam)  [Orabug: 28797053]  
  - bnxt_en: Notify firmware about IF state changes. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Move firmware related flags to a new fw_cap field in struct bnxt. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Add BNXT_NEW_RM() macro. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Add support for ethtool get dump. (Vasundhara Volam)  [Orabug: 28797053]  
  - bnxt_en: Update RSS setup and GRO-HW logic according to the latest spec. (Michael Chan)  [Orabug: 28797053]  
  - bnxt_en: Add new VF resource allocation strategy mode. (Michael Chan)  [Orabug: 28797053]  
  - kdump/vmcore: support encrypted old memory with SME enabled (Lianbo Jiang)  [Orabug: 28503140]  
  - amd_iommu: remap the device table of IOMMU with the memory encryption mask for kdump (Lianbo Jiang)  [Orabug: 28503140]  
  - kexec: allocate unencrypted control pages for kdump in case SME is enabled (Lianbo Jiang)  [Orabug: 28503140]  
  - x86/ioremap: add a function ioremap_encrypted() to remap kdump old memory (Lianbo Jiang)  [Orabug: 28503140]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.2.el7uek]
changelog:
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28855638]  
  - bpf: 32-bit RSH verification must truncate input before the ALU op (Jann Horn)  [Orabug: 28861778]  {CVE-2018-18445} 
  - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky)  [Orabug: 28849803]  
  - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky)  [Orabug: 28849803]  
  - x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky)  [Orabug: 28849803]  
  - x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky)  [Orabug: 28849803]  
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)  [Orabug: 28855938]  
  - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz)  [Orabug: 28886638]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.3.el7uek]
changelog:
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 28899788]  
  - ext4: update i_disksize if direct write past ondisk size (Eryu Guan)  [Orabug: 28869435]  
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874150]  
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)  [Orabug: 28887242]  
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)  [Orabug: 28887242]  
  - vhost: correctly check the iova range when waking virtqueue (Jason Wang)  [Orabug: 28892602]  {CVE-2018-1118} 
  - xen/balloon: Support xend-based toolstack (Boris Ostrovsky)  [Orabug: 28901016]  
  - Update the UEFI Secureboot keys in the UEK5 U1 branch (Jack Vogel)  [Orabug: 28900807]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.4.el7uek]
changelog:
  - Btrfs: fix a bug introduced by back porting an upstream commit (Shan Hai)  [Orabug: 28825436]  
  - btrfs: Cleanup existing name_len checks (Qu Wenruo)  [Orabug: 28825436]  
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28856966]  
  - xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)   
  - net: Allow pernet_operations to be executed in parallel (Kirill Tkhai)  [Orabug: 28924192]  
  - net: Move mutex_unlock() in cleanup_net() up (Kirill Tkhai)  [Orabug: 28924192]  
  - locking/arch, x86: Add __down_read_killable() (Kirill Tkhai)  [Orabug: 28924192]  
  - locking/x86: Use named operands in rwsem.h (Miguel Bernal Marin)  [Orabug: 28924192]  
  - locking/rwsem: Add down_read_killable() (Kirill Tkhai)  [Orabug: 28924192]  
  - net: Introduce net_sem for protection of pernet_list (Kirill Tkhai)  [Orabug: 28924192]  
  - net: Assign net to net_namespace_list in setup_net() (Kirill Tkhai)  [Orabug: 28924192]  
  - net: Cleanup in copy_net_ns() (Kirill Tkhai)  [Orabug: 28924192]  
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28929734]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710} 
  - sched/fair: Use a recently used CPU as an idle candidate and the basis for SIS (Mel Gorman)  [Orabug: 28940632]  
  - sched/fair: Move select_task_rq_fair() slow-path into its own function (Brendan Jackman)  [Orabug: 28940632]  
  - certs: Add Oracle's new X509 cert into .builtin_trusted_keys (Eric Snowberg)  [Orabug: 28926199]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.6.el7uek]
changelog:
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 28896272]  
  - xfs: enhance dinode verifier (Eric Sandeen)  [Orabug: 28943577]  {CVE-2018-10322} 
  - xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong)  [Orabug: 28943577]  {CVE-2018-10322} 
  - libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard)  [Orabug: 28946203]  
  - ib/core: Use driver pd ident when comparing pds. (Hans Westgaard Ry)  [Orabug: 28947972]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.0.7.el7uek]
changelog:
  - xfs: enhance dinode verifier (Eric Sandeen)  [Orabug: 28997653]  {CVE-2018-10322} 
  - xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong)  [Orabug: 28997653]  {CVE-2018-10322} 
  - Revert "xfs: move inode fork verifiers to xfs_dinode_verify" (Shan Hai)  [Orabug: 28997653]  
  - Revert "xfs: enhance dinode verifier" (Shan Hai)  [Orabug: 28997653]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.0.el7uek]
changelog:
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 28951264]  {CVE-2018-5848} 
  - [PATCH UEK5 u1 v3] dtrace: add DTRACEACT_PCAP for packet capture  for later pcap_dump() (Alan Maguire)  [Orabug: 28951771]  
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)   {CVE-2018-7755} {CVE-2018-7755} 
  - [PATCH UEK5 u1 v2] dtrace: fix ip provider inconsistencies between IPv4/IPv6 (Alan Maguire)  [Orabug: 28956807]  
  - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez)  [Orabug: 28992002]  
  - x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez)  [Orabug: 28992002]  
  - x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez)  [Orabug: 28992002]  
  - Add forward declaration of tlb_flush, required for asm-generic. (Jack Vogel)  [Orabug: 28866513]  
  - x86/mm: Page size aware flush_tlb_mm_range() (Peter Zijlstra)  [Orabug: 28866513]  
  - mm/memory: Move mmu_gather and TLB invalidation code into its own file (Peter Zijlstra)  [Orabug: 28866513]  
  - asm-generic/tlb: Track which levels of the page tables have been cleared (Will Deacon)  [Orabug: 28866513]  
  - asm-generic/tlb: Track freeing of page-table directories in struct mmu_gather (Peter Zijlstra)  [Orabug: 28866513]  
  - mm: mmu_notifier fix for tlb_end_vma (Nicholas Piggin)  [Orabug: 28866513]  
  - mm: update comment describing tlb_gather_mmu (Mike Rapoport)  [Orabug: 28866513]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.1.el7uek]
changelog:
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28961247]  
  - crypto: ccp - add timeout support in the SEV command (Brijesh Singh)  [Orabug: 29029018]  
  - crypto: ccp - Add GET_ID SEV command (Janakarajan Natarajan)  [Orabug: 29029018]  
  - crypto: ccp - Add DOWNLOAD_FIRMWARE SEV command (Janakarajan Natarajan)  [Orabug: 29029018]  
  - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun)  [Orabug: 27677743]  {CVE-2018-8043} 
  - vti6: remove !skb->ignore_df check from vti6_xmit() (Alexey Kodanev)  [Orabug: 28940590]  
  - A/A failback does not work in concert with ibacm (Håkon Bugge)  [Orabug: 28972800]  
  - ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss)  [Orabug: 29019053]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.2.el7uek]
changelog:
  - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng)  [Orabug: 29042979]  {CVE-2018-19824} 
  - arm64/kernel: kaslr: reduce module randomization range to 4 GB (Ard Biesheuvel)  [Orabug: 28954789]  
  - xfs: enhance dinode verifier (Eric Sandeen)  [Orabug: 28997653]  {CVE-2018-10322} 
  - xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong)  [Orabug: 28997653]  {CVE-2018-10322} 
  - Revert "xfs: move inode fork verifiers to xfs_dinode_verify" (Shan Hai)  [Orabug: 28997653]  
  - Revert "xfs: enhance dinode verifier" (Shan Hai)  [Orabug: 28997653]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.1.3.el7uek]
changelog:
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 29003422]  
  - nfs: don't dirty kernel pages read by direct-io (Dave Kleikamp)  [Orabug: 29122062]  
  - KVM: X86: Fix scan ioapic use-before-initialization (Wanpeng Li)  [Orabug: 29026132]  {CVE-2018-19407} 
  - hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz)  [Orabug: 28951436]  
  - mm: migration: fix migration of huge PMD shared pages (Mike Kravetz)  [Orabug: 28951436]  
  - mm/mmu_notifier: avoid double notification when it is useless (Jérôme Glisse)  [Orabug: 28951436]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.2.0.el7uek]
changelog:
  - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli)  [Orabug: 29163742]  {CVE-2018-18397} 
  - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli)  [Orabug: 29163742]  {CVE-2018-18397} 
  - ocfs2: don't clear bh uptodate for block read (Junxiao Bi)  [Orabug: 29159655]  
  - ocfs2: clear journal dirty flag after shutdown journal (Junxiao Bi)  [Orabug: 29154599]  
  - ocfs2: fix panic due to unrecovered local alloc (Junxiao Bi)  [Orabug: 29154599]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.2.1.el7uek]
changelog:
  - rds: Incorrect rds-info send and retransmission message output (Ka-Cheong Poon)  [Orabug: 29024033]  
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 28861014]  
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29161391]  
  - KVM: Fix UAF in nested posted interrupt processing (Cfir Cohen)  [Orabug: 29172125]  {CVE-2018-16882} 
  - x86/alternative: check int3 breakpoint physical addresses (Alexandre Chartre)  [Orabug: 29178334]  
  - Change mincore() to count "mapped" pages rather than "cached" pages (Linus Torvalds)  [Orabug: 29187408]  {CVE-2019-5489} 
  - net/rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 29180514]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.2.2.el7uek]
changelog:
  - genirq/affinity: Don't return with empty affinity masks on error (Thomas Gleixner)  [Orabug: 29209330]  
  - x86/apic/x2apic: set affinity of a single interrupt to one cpu (Jianchao Wang)  [Orabug: 29201434]  
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 29129556]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004501]  
  - nvme-pci: fix memory leak on probe failure (Keith Busch)  [Orabug: 29214245]  
  - nvme-pci: limit max IO size and segments to avoid high order allocations (Jens Axboe)  [Orabug: 29214245]  
  - arm64, dtrace: add non-virtual clocksources to fbt blacklist (Nick Alcock)  [Orabug: 29220926]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 29222874]  
  - x86/speculation: simplify IBRS firmware control (Alexandre Chartre)  [Orabug: 29225114]  
  - x86/speculation: use jump label instead of alternative to control IBRS firmware (Alexandre Chartre)  [Orabug: 29225114]  
  - x86/speculation: fix and simplify IBPB control (Alexandre Chartre)  [Orabug: 29225114]  
  - x86/speculation: use jump label instead of alternative to control IBPB (Alexandre Chartre)  [Orabug: 29225114]  
  - x86/speculation: move ANNOTATE_* macros to a new header file (Alexandre Chartre)  [Orabug: 29225114]  
  - be2net: Update the driver version to 12.0.0.0 (Suresh Reddy)  [Orabug: 29228473]  
  - be2net: Handle transmit completion errors in Lancer (Suresh Reddy)  [Orabug: 29228473]  
  - be2net: Fix HW stall issue in Lancer (Suresh Reddy)  [Orabug: 29228473]  
  - x86/platform/UV: Fix GAM MMR references in the UV x2apic code (Mike Travis)  [Orabug: 29205471]  
  - x86/platform/UV: Fix GAM MMR changes in UV4A (Mike Travis)  [Orabug: 29205471]  
  - x86/platform/UV: Add references to access fixed UV4A HUB MMRs (Mike Travis)  [Orabug: 29205471]  
  - x86/platform/UV: Fix UV4A support on new Intel Processors (Mike Travis)  [Orabug: 29205471]  
  - x86/platform/UV: Update uv_mmrs.h to prepare for UV4A fixes (Mike Travis)  [Orabug: 29205471]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.2.3.el7uek]
changelog:
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 28983233]  
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114876]  {CVE-2018-17972} 
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 29200902]  
  - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29211613]  
  - xen-netback: wake up xenvif_dealloc_kthread when it should stop (Dongli Zhang)  [Orabug: 29237355]  
  - xen/blkback: rework validate_io_op() (Dongli Zhang)  [Orabug: 29237430]  
  - xen/blkback: optimize validate_io_op() to filter BLKIF_OP_RESERVED_1 operation (Dongli Zhang)  [Orabug: 29237430]  
  - xen/blkback: do not BUG() for invalid blkif_request from frontend (Dongli Zhang)  [Orabug: 29237430]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29248238]  
  - kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs (Eduardo Habkost)  [Orabug: 29254549]  
  - alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner)  [Orabug: 29269148]  {CVE-2018-13053}


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.2.4.el7uek]
changelog:
  - x86/platform/UV: Add check of TSC state set by UV BIOS (mike.travis@hpe.com)  [Orabug: 29205471]  
  - x86/tsc: Provide a means to disable TSC ART (mike.travis@hpe.com)  [Orabug: 29205471]  
  - x86/tsc: Drastically reduce the number of firmware bug warnings (mike.travis@hpe.com)  [Orabug: 29205471]  
  - x86/tsc: Skip TSC test and error messages if already unstable (mike.travis@hpe.com)  [Orabug: 29205471]  
  - x86/tsc: Add option that TSC on Socket 0 being non-zero is valid (mike.travis@hpe.com)  [Orabug: 29205471]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 29248376]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.3.0.el7uek]
changelog:
  - xfs: refactor short form directory structure verifier function (Darrick J. Wong)  [Orabug: 29301204]  
  - xfs: provide a centralized method for verifying inline fork data (Darrick J. Wong)  [Orabug: 29301204]  
  - xfs: create structure verifier function for short form symlinks (Darrick J. Wong)  [Orabug: 29301204]  
  - xfs: create structure verifier function for shortform xattrs (Darrick J. Wong)  [Orabug: 29301204]  
  - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (Qu Wenruo)  [Orabug: 29301101]  {CVE-2018-14609} 
  - iommu/amd: Fix IOMMU page flush when detach device from a domain (Suravee Suthikulpanit)  [Orabug: 29297191]  
  - x86/apic: Switch all APICs to Fixed delivery mode (Thomas Gleixner)  [Orabug: 29262403]  
  - kvm: x86: Report STIBP on GET_SUPPORTED_CPUID (Eduardo Habkost)  [Orabug: 29229728]  
  - bnx2x: disable GSO where gso_size is too big for hardware (Daniel Axtens)  [Orabug: 29125104]  {CVE-2018-1000026} 
  - net: create skb_gso_validate_mac_len() (Daniel Axtens)  [Orabug: 29125104]  {CVE-2018-1000026} 
  - slub: make ->cpu_partial unsigned (Alexey Dobriyan)  [Orabug: 28973025]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.3.1.el7uek]
changelog:
  - x86/speculation: Add support for STIBP always-on preferred mode (Thomas Lendacky)  [Orabug: 29344486]  
  - x86/speculation: Provide IBPB always command line options (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Add seccomp Spectre v2 user space protection mode (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Enable prctl mode for spectre_v2_user (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Add prctl() control for indirect branch speculation (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Prepare arch_smt_update() for PRCTL mode (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Prevent stale SPEC_CTRL msr content (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Split out TIF update (Thomas Gleixner)  [Orabug: 29344486]  
  - ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Remove static key ibpb_enabled_key (Anjali Kulkarni)  [Orabug: 29344486]  
  - x86/speculation: Prepare for conditional IBPB in switch_mm() (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Avoid __switch_to_xtra() calls (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/process: Consolidate and simplify switch_to_xtra() code (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Prepare for per task indirect branch speculation control (Tim Chen)  [Orabug: 29344486]  
  - x86/speculation: Add command line control for indirect branch speculation (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Unify conditional spectre v2 print functions (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculataion: Mark command line parser data __initdata (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Mark string arrays const correctly (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Reorder the spec_v2 code (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/l1tf: Show actual SMT state (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Rework SMT state change (Thomas Gleixner)  [Orabug: 29344486]  
  - sched/smt: Expose sched_smt_present static key (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/Kconfig: Select SCHED_SMT if SMP enabled (Thomas Gleixner)  [Orabug: 29344486]  
  - sched/smt: Make sched_smt_present track topology (Peter Zijlstra (Intel))  [Orabug: 29344486]  
  - x86/speculation: Reorganize speculation control MSRs update (Tim Chen)  [Orabug: 29344486]  
  - x86/speculation: Rename SSBD update functions (Thomas Gleixner)  [Orabug: 29344486]  
  - x86/speculation: Disable STIBP when enhanced IBRS is in use (Tim Chen)  [Orabug: 29344486]  
  - x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Tim Chen)  [Orabug: 29344486]  
  - x86/speculation: Remove unnecessary ret variable in cpu_show_common() (Tim Chen)  [Orabug: 29344486]  
  - x86/speculation: Clean up spectre_v2_parse_cmdline() (Tim Chen)  [Orabug: 29344486]  
  - x86/speculation: Update the TIF_SSBD comment (Tim Chen)  [Orabug: 29344486]  
  - sched/core: Fix cpu.max vs. cpuhotplug deadlock (Peter Zijlstra)  [Orabug: 29344486]  
  - x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Jiri Kosina)  [Orabug: 29344486]  
  - x86/speculation: Apply IBPB more strictly to avoid cross-process data leak (Jiri Kosina)  [Orabug: 29344486]  
  - netfilter: nf_tables: deactivate expressions in rule replecement routine (Taehee Yoo)  [Orabug: 29355502]  
  - btrfs: Verify that every chunk has corresponding block group at mount time (Qu Wenruo)  [Orabug: 29355254]  {CVE-2018-14612} 
  - mlx4_ib: Distribute completion vectors when zero is supplied (Håkon Bugge)  [Orabug: 29324328]  
  - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29211613]  
  - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29211613]  
  - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29211613]  
  - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29211613]  
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29283140]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29322860]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29322860]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29322860]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.3.2.el7uek]
changelog:
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357695]  
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov)  [Orabug: 29364665]  {CVE-2018-16862} 
  - l2tp: fix reading optional fields of L2TPv3 (Jacob Wen)  [Orabug: 29368046]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.4.0.el7uek]
changelog:
  - fs/dcache.c: add cond_resched() in shrink_dentry_list() (Nikolay Borisov)  [Orabug: 29450975]  
  - net_failover: delay taking over primary device to accommodate udevd renaming (Si-Wei Liu)   
  - hugetlbfs: fix races and page leaks during migration (Mike Kravetz)  [Orabug: 29443877]  
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29431289]  
  - KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) (Peter Shier)  [Orabug: 29408638]  {CVE-2019-7221} 
  - KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) (Paolo Bonzini)  [Orabug: 29408618]  {CVE-2019-7222} 
  - kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) (Jann Horn)  [Orabug: 29408541]  {CVE-2019-6974} 
  - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker)  [Orabug: 29384900]  
  - bnxt_en: Return linux standard errors in bnxt_ethtool.c (Vasundhara Volam)  [Orabug: 29261957]  
  - bnxt_en: Don't set ETS on unused TCs. (Michael Chan)  [Orabug: 29261957]  
  - bnxt_en: get the reduced max_irqs by the ones used by RDMA (Vasundhara Volam)  [Orabug: 29261957]  
  - bnxt_en: free hwrm resources, if driver probe fails. (Venkat Duvvuru)  [Orabug: 29261957]  
  - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request (Vasundhara Volam)  [Orabug: 29261957]  
  - bnxt_en: Fix VNIC reservations on the PF. (Michael Chan)  [Orabug: 29261957]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.4.1.el7uek]
changelog:
  - scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task (Anoob Soman)  [Orabug: 29024514]  
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 29469713]  
  - Revert x86/apic/x2apic: set affinity of a single interrupt to one cpu (Mridula Shastry)  [Orabug: 29469651]  
  - net/mlx5: Fix error handling in load one (Maor Gottlieb)  [Orabug: 29019396]  
  - net/mlx5: Fix mlx5_get_uars_page to return error code (Eran Ben Elisha)  [Orabug: 29019396]  
  - net/mlx5: Fix memory leak in bad flow of mlx5_alloc_irq_vectors (Alaa Hleihel)  [Orabug: 29019396]  
  - net/mlx4_core: Fix wrong calculation of free counters (Eran Ben Elisha)  [Orabug: 29019396]  
  - net/mlx5: Free IRQs in shutdown path (Daniel Jurgens)  [Orabug: 29019427]  
  - net/mlx5e: DCBNL fix min inline header size for dscp (Huy Nguyen)  [Orabug: 29019427]  
  - IB/mlx4: Fix integer overflow when calculating optimal MTT size (Jack Morgenstein)  [Orabug: 29019427]  
  - net/mlx5: Fix mlx5_get_vector_affinity function (Israel Rukshin)  [Orabug: 29019427]  
  - net/mlx5e: Fixed sleeping inside atomic context (Aviad Yehezkel)  [Orabug: 29019427]  
  - IB/core: Generate GID change event regardless of RoCE GID table property (Parav Pandit)  [Orabug: 29019427]  
  - net/mlx5: Vport, Use 'kvfree()' for memory allocated by 'kvzalloc()' (Christophe JAILLET)  [Orabug: 29019430]  
  - IB/mlx4: Use 4K pages for kernel QP's WQE buffer (Jack Morgenstein)  [Orabug: 29019795]  
  - net/mlx5: Add missing SET_DRIVER_VERSION command translation (Noa Osherovich)  [Orabug: 29447325]  
  - net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables (Raed Salem)  [Orabug: 29447325]  
  - net/mlx5: Fix debugfs cleanup in the device init/remove flow (Jack Morgenstein)  [Orabug: 29447325]  
  - net/mlx5: Check for error in mlx5_attach_interface (Huy Nguyen)  [Orabug: 29447325]  
  - net/mlx5: Fix use-after-free in self-healing flow (Jack Morgenstein)  [Orabug: 29447325]  
  - uek-rpm: update list of removed files, generated by depmod on install stage (Alexander Burmashev)  [Orabug: 29460369]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.4.2.el7uek]
changelog:
  - x86/speculation: Clean up enhanced IBRS checks in bugs.c (Alejandro Jimenez)  [Orabug: 29423796]  
  - x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez)  [Orabug: 29423796]  
  - kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez)  [Orabug: 29423796]  
  - exec: Fix mem leak in kernel_read_file (YueHaibing)  [Orabug: 29454858]  {CVE-2019-8980} 
  - net: crypto set sk to NULL when af_alg_release. (Mao Wenan)  [Orabug: 29454874]  {CVE-2019-8912} 
  - {net, IB}/mlx5: Raise fatal IB event when sys error occurs (Daniel Jurgens)  [Orabug: 29479744]  
  - net/mlx5e: Avoid query PPCNT register if not supported by the device (Eyal Davidovich)  [Orabug: 29479795]  
  - mm: enforce min addr even if capable() in expand_downwards() (Jann Horn)  [Orabug: 29501977]  {CVE-2019-9213} 
  - [UEK-5] IB/mlx5_core: Use kzalloc when allocating PD (Erez Alfasi)  [Orabug: 29479806]  
  - IB/mlx5: Change debugfs to have per port contents (Parav Pandit)  [Orabug: 29486784]  
  - Revert "IB/mlx5: Change debugfs to have per port contents" (Qing Huang)  [Orabug: 29486784]  
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 29487789]  
  - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis)  [Orabug: 29489795]  
  - qlcnic: fix Tx descriptor corruption on 82xx devices (Shahed Shaikh)  [Orabug: 29495427]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.4.3.el7uek]
changelog:
  - can: gw: ensure DLC boundaries after CAN frame modification (Oliver Hartkopp)  [Orabug: 29215297]  {CVE-2019-3701} {CVE-2019-3701}


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.4.4.el7uek]
changelog:
  - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner)  [Orabug: 29598590]  
  - swiotlb: checking whether swiotlb buffer is full with io_tlb_used (Dongli Zhang)  [Orabug: 29587097]  
  - swiotlb: add debugfs to track swiotlb buffer usage (Dongli Zhang)  [Orabug: 29587097]  
  - swiotlb: fix comment on swiotlb_bounce() (Dongli Zhang)  [Orabug: 29587097]  
  - scsi: target: add device product id and revision configfs attributes (Alan Adamson)  [Orabug: 29344881]  
  - scsi: target: remove hardcoded T10 Vendor ID in INQUIRY response (David Disseldorp)  [Orabug: 29344881]  
  - scsi: target: add device vendor_id configfs attribute (David Disseldorp)  [Orabug: 29344881]  
  - scsi: target: consistently null-terminate t10_wwn strings (David Disseldorp)  [Orabug: 29344881]  
  - scsi: target: use consistent left-aligned ASCII INQUIRY data (David Disseldorp)  [Orabug: 29344881]  
  - x86/speculation: Keep enhanced IBRS on when prctl is used for SSBD control (Alejandro Jimenez)  [Orabug: 29526400]  
  - drm/amdkfd: fix amdkfd use-after-free GP fault (Randy Dunlap)  [Orabug: 29534199]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.4.5.el7uek]
changelog:
  - x86/apic/x2apic: set back affinity of a single interrupt to one cpu (Mridula Shastry)  [Orabug: 29510342]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.14.35-1844.4.5.1.el7uek]
changelog:
  - x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Konrad Rzeszutek Wilk)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Fix comment (Boris Ostrovsky)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add SMT warning message (Josh Poimboeuf)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Move arch_smt_update() call to after mitigation decisions (Josh Poimboeuf)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds=full,nosmt cmdline option (Josh Poimboeuf)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Add MDS vulnerability documentation (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Move L1TF to separate directory (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Andi Kleen)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Consolidate CPU whitelists (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/msr-index: Cleanup bit defines (Thomas Gleixner)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file (Will Deacon)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/cpu: Sanitize FAM6_ATOM naming (Peter Zijlstra)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation/l1tf: Fix small spelling typo (Salvatore Bonaccorso)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Simplify the CPU bug detection logic (Dominik Brodowski)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - tools include: Adopt linux/bits.h (Arnaldo Carvalho de Melo)  [Orabug: 29526899]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.14.35-1844.4.5.2.el7uek]
changelog:
  - x86/mds: Add empty commit for CVE-2019-11091 (Konrad Rzeszutek Wilk)  [Orabug: 29721848]  {CVE-2019-11091} 
  - x86/speculation/mds: Make mds_mitigation mutable after init (Konrad Rzeszutek Wilk)  [Orabug: 29721835]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.5.0.el7uek]
changelog:
  - swiotlb: save io_tlb_used to local variable before leaving critical section (Dongli Zhang)  [Orabug: 29637519]  
  - swiotlb: dump used and total slots when swiotlb buffer is full (Dongli Zhang)  [Orabug: 29637519]  
  - bonding: ratelimit no-delay interface up messages (Shamir Rabinovitch)  [Orabug: 29016284]  
  - xen/netfront: don't bug in case of too many frags (Juergen Gross)  [Orabug: 29462653]  
  - bnxt_en: Drop oversize TX packets to prevent errors. (Michael Chan)  [Orabug: 29547792]  
  - xen/netfront: tolerate frags with no data (Juergen Gross)  [Orabug: 29632146]  
  - net/mlx5: E-Switch, fix syndrome (0x678139) when turn on vepa (Huy Nguyen)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Fix access to invalid memory when toggling esw modes (Roi Dayan)  [Orabug: 29455439]  
  - net/mlx5: Avoid panic when setting vport mac, getting vport config (Tonghao Zhang)  [Orabug: 29455439]  
  - net/mlx5: Support ndo bridge_setlink and getlink (Huy Nguyen)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Add support for VEPA in legacy mode. (Huy Nguyen)  [Orabug: 29455439]  
  - net/mlx5: Split FDB fast path prio to multiple namespaces (Paul Blakey)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Remove unused argument when creating legacy FDB (Eli Cohen)  [Orabug: 29455439]  
  - net/mlx5: E-switch, Create a second level FDB flow table (Chris Mi)  [Orabug: 29455439]  
  - net/mlx5: Add cap bits for flow table destination in FDB table (Chris Mi)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Reorganize and rename fdb flow tables (Chris Mi)  [Orabug: 29455439]  
  - net/mlx5: Add destination e-switch owner (Shahar Klein)  [Orabug: 29455439]  
  - net/mlx5: Properly handle a vport destination when setting FTE (Shahar Klein)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Reload IB interface when switching devlink modes (Mark Bloch)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Optimize HW steering tables in switchdev mode (Mark Bloch)  [Orabug: 29455439]  
  - net/mlx5: E-Switch, Increase number of FTEs in FDB in switchdev mode (Mark Bloch)  [Orabug: 29455439]  
  - net/mlx5: Separate ingress/egress namespaces for each vport (Gal Pressman)  [Orabug: 29455439]  
  - net/mlx5: Fix ingress/egress naming mistake (Gal Pressman)  [Orabug: 29455439]  
  - net/mlx5: Initialize destination_flow struct to 0 (Rabie Loulou)  [Orabug: 29455439]  
  - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data (Hui Peng)  [Orabug: 29613788]  {CVE-2018-19985} {CVE-2018-19985} 
  - mm: hwpoison: fix thp split handing in soft_offline_in_use_page() (zhongjiang)  [Orabug: 29613794]  {CVE-2019-10124} 
  - x86/bugs, kvm: don't miss SSBD when IBRS is in use. (Mihai Carabas)  [Orabug: 29642112]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1844.5.2.el7uek]
changelog:
  - xen: Fix x86 sched_clock() interface for xen (Juergen Gross)  [Orabug: 29464437]  
  - x86/xen/time: Output xen sched_clock time from 0 (Pavel Tatashin)  [Orabug: 29464437]  
  - repairing kmodstd to support cross compilation (Mark Nicholson)  [Orabug: 29682406]  
  - xfs: don't overflow xattr listent buffer (Darrick J. Wong)  [Orabug: 29697225]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1845.el7uek]
changelog:
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - uek-rpm: Run 'make olddefconfig' to get latest x86 config values (Victor Erminpour)  [Orabug: 28763256]  
  - arm64/kernel: kaslr: reduce module randomization range to 4 GB (Ard Biesheuvel)  [Orabug: 28809178]  
  - bpf: 32-bit RSH verification must truncate input before the ALU op (Jann Horn)  [Orabug: 28855418]  {CVE-2018-18445} 
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28850263]  
  - ocfs2: fix ocfs2 read block panic (Junxiao Bi)  [Orabug: 28821388]  
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)  [Orabug: 28427276]  
  - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky)  [Orabug: 28806752]  
  - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky)  [Orabug: 28806752]  
  - x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky)  [Orabug: 28806752]  
  - x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky)  [Orabug: 28806752]  
  - x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky)  [Orabug: 28806752]  
  - Linux 4.14.70 (Greg Kroah-Hartman)   
  - arm64: Handle mismatched cache type (Suzuki K Poulose)   
  - arm64: Fix mismatched cache line size detection (Suzuki K Poulose)   
  - ASoC: wm8994: Fix missing break in switch (Gustavo A. R. Silva)   
  - arm64: cpu_errata: include required headers (Arnd Bergmann)   
  - x86: kvm: avoid unused variable warning (Arnd Bergmann)   
  - kvm: x86: Set highest physical address bits in non-present/reserved SPTEs (Junaid Shahid)   
  - Revert "ARM: imx_v6_v7_defconfig: Select ULPI support" (Fabio Estevam)   
  - irda: Only insert new objects into the global database via setsockopt (Tyler Hicks)   {CVE-2018-6555} 
  - irda: Fix memory leak caused by repeated binds of irda socket (Tyler Hicks)   {CVE-2018-6554} 
  - s390/lib: use expoline for all bcr instructions (Martin Schwidefsky)   
  - kbuild: make missing $DEPMOD a Warning instead of an Error (Randy Dunlap)   
  - drm/i915: Increase LSPCON timeout (Fredrik Schön)   
  - x86/xen: don't write ptes directly in 32-bit PV guests (Juergen Gross)   
  - x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear (Juergen Gross)   
  - usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during suspend/resume (Roger Quadros)   
  - HID: add quirk for another PIXART OEM mouse used by HP (Dave Young)   
  - mm: Fix devm_memremap_pages() collision handling (Jan H. Schönherr)   
  - lightnvm: pblk: free padded entries in write buffer (Javier González)   
  - sched/deadline: Fix switching to -deadline (Luca Abeni)   
  - debugobjects: Make stack check warning more informative (Joel Fernandes (Google))   
  - uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name (Randy Dunlap)   
  - drm/amdgpu:add VCN booting with firmware loaded by PSP (Likun Gao)   
  - drm/amdgpu:add VCN support in PSP driver (Likun Gao)   
  - drm/amdgpu:add new firmware id for VCN (Likun Gao)   
  - drm/amdgpu:add tmr mc address into amdgpu_firmware_info (James Zhu)   
  - drm/amdgpu: update tmr mc address (James Zhu)   
  - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80 (Kai-Heng Feng)   
  - drm/amd/pp/Polaris12: Fix a chunk of registers missed to program (Rex Zhu)   
  - drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode (Michel Dänzer)   
  - drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks" (Chris Wilson)   
  - ARM: rockchip: Force CONFIG_PM on Rockchip systems (Marc Zyngier)   
  - arm64: rockchip: Force CONFIG_PM on Rockchip systems (Marc Zyngier)   
  - btrfs: Don't remove block group that still has pinned down bytes (Qu Wenruo)   
  - btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (Qu Wenruo)   
  - btrfs: replace: Reset on-disk dev stats value after replace (Misono Tomohiro)   
  - btrfs: Exit gracefully when chunk map cannot be inserted to the tree (Qu Wenruo)   
  - kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 (Jim Mattson)   
  - KVM: vmx: track host_state.loaded using a loaded_vmcs pointer (Sean Christopherson)   
  - clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399 (Levin Du)   
  - powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX. (Mahesh Salgaonkar)   
  - powerpc/64s: Make rfi_flush_fallback a little more robust (Michael Ellerman)   
  - powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning (Randy Dunlap)   
  - SMB3: Number of requests sent should be displayed for SMB3 not just CIFS (Steve French)   
  - smb3: fix reset of bytes read and written stats (Steve French)   
  - cfq: Suppress compiler warnings about comparisons (Bart Van Assche)   
  - RDS: IB: fix 'passing zero to ERR_PTR()' warning (YueHaibing)   
  - selftests/powerpc: Kill child processes on SIGINT (Breno Leitao)   
  - iommu/omap: Fix cache flushes on L2 table entries (Ralf Goebel)   
  - ASoC: rt5677: Fix initialization of rt5677_of_match.data (Matthias Kaehlcke)   
  - staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice (Ian Abbott)   
  - dm kcopyd: avoid softlockup in run_complete_job (John Pittman)   
  - PCI: mvebu: Fix I/O space end address calculation (Thomas Petazzoni)   
  - xen/balloon: fix balloon initialization for PVH Dom0 (Roger Pau Monne)   
  - Input: do not use WARN() in input_alloc_absinfo() (Dmitry Torokhov)   
  - NFSv4: Fix error handling in nfs4_sp4_select_mode() (Wei Yongjun)   
  - scsi: aic94xx: fix an error code in aic94xx_init() (Dan Carpenter)   
  - ACPI / scan: Initialize status to ACPI_STA_DEFAULT (Hans de Goede)   
  - s390/dasd: fix panic for failed online processing (Stefan Haberland)   
  - s390/dasd: fix hanging offline processing due to canceled worker (Stefan Haberland)   
  - block: bvec_nr_vecs() returns value for wrong slab (Greg Edwards)   
  - perf probe powerpc: Fix trace event post-processing (Sandipan Das)   
  - powerpc: Fix size calculation using resource_size() (Dan Carpenter)   
  - powerpc/uaccess: Enable get_user(u64, *p) on 32-bit (Michael Ellerman)   
  - f2fs: fix to clear PG_checked flag in set_page_dirty() (Chao Yu)   
  - net/9p: fix error path of p9_virtio_probe (Jean-Philippe Brucker)   
  - net/9p/trans_fd.c: fix race by holding the lock (Tomas Bortoli)   
  - irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP (Jonas Gorski)   
  - perf tools: Check for null when copying nsinfo. (Benno Evers)   
  - net: hns3: Fix for phy link issue when using marvell phy driver (Jian Shen)   
  - net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero (Xi Wang)   
  - RDMA/hns: Fix usage of bitmap allocation functions return values (Gal Pressman)   
  - tcp, ulp: add alias for all ulp modules (Daniel Borkmann)   
  - netfilter: fix memory leaks on netlink_dump_start error (Florian Westphal)   
  - platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360 (Aleh Filipovich)   
  - mfd: sm501: Set coherent_dma_mask when creating subdevices (Guenter Roeck)   
  - ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest() (Tan Hu)   
  - s390/kdump: Fix memleak in nt_vmcoreinfo (Philipp Rudo)   
  - netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses (Florian Westphal)   
  - platform/x86: intel_punit_ipc: fix build errors (Randy Dunlap)   
  - fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() (Tetsuo Handa)   
  - mm/fadvise.c: fix signed overflow UBSAN complaint (Andrey Ryabinin)   
  - pwm: meson: Fix mux clock names (Jerome Brunet)   
  - IB/hfi1: Invalid NUMA node information can cause a divide by zero (Michael J. Ruhl)   
  - x86/mce: Add notifier_block forward declaration (Arnd Bergmann)   
  - virtio: pci-legacy: Validate queue pfn (Suzuki K Poulose)   
  - scripts: modpost: check memory allocation results (Randy Dunlap)   
  - fat: validate ->i_start before using (OGAWA Hirofumi)   
  - fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries (James Morse)   
  - hfsplus: fix NULL dereference in hfsplus_lookup() (Ernesto A. Fernández)   
  - reiserfs: change j_timestamp type to time64_t (Arnd Bergmann)   
  - fork: don't copy inconsistent signal handler state to child (Jann Horn)   
  - sunrpc: Don't use stack buffer with scatterlist (Laura Abbott)   
  - hfs: prevent crash on exit from failed search (Ernesto A. Fernández)   
  - hfsplus: don't return 0 when fill_super() failed (Tetsuo Handa)   
  - cifs: check if SMB2 PDU size has been padded and suppress the warning (Ronnie Sahlberg)   
  - net: sched: action_ife: take reference to meta module (Vlad Buslov)   
  - act_ife: fix a potential deadlock (Cong Wang)   
  - act_ife: move tcfa_lock down to where necessary (Cong Wang)   
  - hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() (Dexuan Cui)   
  - hv_netvsc: ignore devices that are not PCI (Stephen Hemminger)   
  - vhost: correctly check the iova range when waking virtqueue (Jason Wang)   
  - mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge (Ido Schimmel)   
  - sctp: hold transport before accessing its asoc in sctp_transport_get_next (Xin Long)   
  - nfp: wait for posted reconfigs when disabling the device (Jakub Kicinski)   
  - tipc: fix a missing rhashtable_walk_exit() (Cong Wang)   
  - net/sched: act_pedit: fix dump of extended layered op (Davide Caratti)   
  - vti6: remove !skb->ignore_df check from vti6_xmit() (Alexey Kodanev)   
  - tcp: do not restart timewait timer on rst reception (Florian Westphal)   
  - r8169: add support for NCube 8168 network card (Anthony Wong)   
  - qlge: Fix netdev features configuration. (Manish Chopra)   
  - net: sched: Fix memory exposure from short TCA_U32_SEL (Kees Cook)   
  - net: macb: do not disable MDIO bus at open/close time (Anssi Hannula)   
  - net: bcmgenet: use MAC link status for fixed phy (Doug Berger)   
  - ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state (Eric Dumazet)   
  - act_ife: fix a potential use-after-free (Cong Wang)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1846.el7uek]
changelog:
  - Update the UEFI secureboot keys in UEK5 Master (Jack Vogel)  [Orabug: 28900807]  
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)  [Orabug: 28919754]  
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)  [Orabug: 28919754]  
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 28581149]  
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28320013]  
  - rds: Incorrect rds-info send and retransmission message output (Ka-Cheong Poon)  [Orabug: 28898827]  
  - ext4: update i_disksize if direct write past ondisk size (Eryu Guan)  [Orabug: 28533060]  
  - xen/balloon: Support xend-based toolstack (Boris Ostrovsky)  [Orabug: 28764189]  
  - tools headers uapi: Sync kvm.h copy (Arnaldo Carvalho de Melo)  [Orabug: 28671425]  
  - tools arch uapi: Sync the x86 kvm.h copy (Arnaldo Carvalho de Melo)  [Orabug: 28671425]  
  - PCI: hv: Fix return value check in hv_pci_assign_slots() (Wei Yongjun)  [Orabug: 28671425]  
  - PCI: hv: support reporting serial number as slot information (Stephen Hemminger)  [Orabug: 28671425]  
  - PCI: hv: Replace GFP_ATOMIC with GFP_KERNEL in new_pcichild_device() (Jia-Ju Bai)  [Orabug: 28671425]  
  - x86/hyper-v: rename ipi_arg_{ex,non_ex} structures (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - hv_netvsc: pair VF based on serial number (Stephen Hemminger)  [Orabug: 28671425]  
  - hv_netvsc: ignore devices that are not PCI (Stephen Hemminger)  [Orabug: 28671425]  
  - hv_netvsc: fix schedule in RCU context (Stephen Hemminger)  [Orabug: 28671425]  
  - vmbus: don't return values for uninitalized channels (Stephen Hemminger)  [Orabug: 28671425]  
  - Tools: hv: Fix a bug in the key delete code (K. Y. Srinivasan)  [Orabug: 28671425]  
  - x86/mm: Only use tlb_remove_table() for paravirt (Peter Zijlstra)  [Orabug: 28671425]  
  - hv/netvsc: Fix NULL dereference at single queue mode fallback (Takashi Iwai)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Cleanup synic memory free path (Michael Kelley)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Remove use of slow_virt_to_phys() (Michael Kelley)  [Orabug: 28671425]  
  - hv_netvsc: Add per-cpu ethtool stats for netvsc (Yidong Ren)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: add numa_node to sysfs (Stephen Hemminger)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Get rid of MSR access from vmbus_drv.c (Sunil Muthuswamy)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Fix the issue with freeing up hv_ctl_table_hdr (Sunil Muthuswamy)  [Orabug: 28671425]  
  - Drivers: hv: vmus: Fix the check for return value from kmsg get dump buffer (Sunil Muthuswamy)  [Orabug: 28671425]  
  - uio: add SPDX license tags (Stephen Hemminger)  [Orabug: 28671425]  
  - x86/hyper-v: Fix wrong merge conflict resolution (K. Y. Srinivasan)  [Orabug: 28671425]  
  - x86/hyper-v: Check for VP_INVAL in hyperv_flush_tlb_others() (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - x86/hyper-v: Check cpumask_to_vpset() return value in hyperv_flush_tlb_others_ex() (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - Drivers: HV: Send one page worth of kmsg dump over Hyper-V during panic (Sunil Muthuswamy)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Make TLFS #define names architecture neutral (Michael Kelley)  [Orabug: 28671425]  
  - Tools: hv: vss: fix loop device detection (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - tools: hv: update lsvmbus to be compatible with python3 (Olaf Hering)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Remove x86 MSR refs in arch independent code (Michael Kelley)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer() (Dexuan Cui)  [Orabug: 28671425]  
  - Drivers: hv: vmbus: Add comments on ring buffer signaling (Michael Kelley)  [Orabug: 28671425]  
  - x86/hyperv: Add interrupt handler annotations (Michael Kelley)  [Orabug: 28671425]  
  - x86/hyper-v: Trace PV IPI send (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - x86/hyper-v: Use cheaper HVCALL_SEND_IPI hypercall when possible (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - x86/hyper-v: Use 'fast' hypercall for HVCALL_SEND_IPI (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - x86/hyper-v: Implement hv_do_fast_hypercall16 (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - x86/hyper-v: Use cheaper HVCALL_FLUSH_VIRTUAL_ADDRESS_{LIST,SPACE} hypercalls when possible (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - sched/isolcpus: Fix "isolcpus=" boot parameter handling when !CONFIG_CPUMASK_OFFSTACK (Rakib Mullick)  [Orabug: 28671425]  
  - ARM: KVM: Correctly order SGI register entries in the cp15 array (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: x86: support CONFIG_KVM_AMD=y with CONFIG_CRYPTO_DEV_CCP_DD=m (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: vmx: hyper-v: don't pass EPT configuration info to vmx_hv_remote_flush_tlb() (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - tools/kvm_stat: cut down decimal places in update interval dialog (Stefan Raspl)  [Orabug: 28671425]  
  - kvm: nVMX: fix entry with pending interrupt if APICv is enabled (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: VMX: hide flexpriority from guest when disabled at the module level (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: VMX: check for existence of secondary exec controls before accessing (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: fix L1TF's MMIO GFN calculation (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: nVMX: Fix emulation of VM_ENTRY_LOAD_BNDCFGS (Liran Alon)  [Orabug: 28671425]  
  - KVM: x86: Do not use kvm_x86_ops->mpx_supported() directly (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Do not expose MPX VMX controls when guest MPX disabled (Liran Alon)  [Orabug: 28671425]  
  - KVM: x86: never trap MSR_KERNEL_GS_BASE (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs (Liran Alon)  [Orabug: 28671425]  
  - kvm: selftests: Add platform_info_test (Drew Schmitt)  [Orabug: 28671425]  
  - KVM: x86: Control guest reads of MSR_PLATFORM_INFO (Drew Schmitt)  [Orabug: 28671425]  
  - KVM: x86: Turbo bits in MSR_PLATFORM_INFO (Drew Schmitt)  [Orabug: 28671425]  
  - nVMX x86: Check VPID value on vmentry of L2 guests (Krish Sadhukhan)  [Orabug: 28671425]  
  - nVMX x86: check posted-interrupt descriptor addresss on vmentry of L2 (Krish Sadhukhan)  [Orabug: 28671425]  
  - KVM: nVMX: Wake blocked vCPU in guest-mode if pending interrupt in virtual APICv (Liran Alon)  [Orabug: 28671425]  
  - KVM: VMX: check nested state and CR4.VMXE against SMM (Paolo Bonzini)  [Orabug: 28671425]  
  - kvm: x86: make kvm_{load|put}_guest_fpu() static (Sebastian Andrzej Siewior)  [Orabug: 28671425]  
  - KVM: VMX: use preemption timer to force immediate VMExit (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: VMX: modify preemption timer bit only when arming timer (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: VMX: immediately mark preemption timer expired only for zero value (Sean Christopherson)  [Orabug: 28671425]  
  - KVM/MMU: Fix comment in walk_shadow_page_lockless_end() (Tianyu Lan)  [Orabug: 28671425]  
  - kvm: selftests: use -pthread instead of -lpthread (Lei Yang)  [Orabug: 28671425]  
  - KVM: x86: don't reset root in kvm_mmu_setup() (Wei Yang)  [Orabug: 28671425]  
  - kvm: mmu: Don't read PDPTEs when paging is not enabled (Junaid Shahid)  [Orabug: 28671425]  
  - x86/kvm/lapic: always disable MMIO interface in x2APIC mode (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - KVM: s390: Make huge pages unavailable in ucontrol VMs (Janosch Frank)  [Orabug: 28671425]  
  - KVM: PPC: Avoid marking DMA-mapped pages dirty in real mode (Alexey Kardashevskiy)  [Orabug: 28671425]  
  - tools headers uapi: Update tools's copies of kvm headers (Arnaldo Carvalho de Melo)  [Orabug: 28671425]  
  - kvm: fix typo in flag name (Michael S. Tsirkin)  [Orabug: 28671425]  
  - tools/headers: Synchronize kernel ABI headers, v4.17-rc1 (Ingo Molnar)  [Orabug: 28671425]  
  - tools/headers: Synchronize kernel ABI headers, v4.16-rc1 (Liam Merwick)  [Orabug: 28671425]  
  - KVM: LAPIC: Fix pv ipis out-of-bounds access (Wanpeng Li)  [Orabug: 28671425]  
  - KVM: nVMX: Fix loss of pending IRQ/NMI before entering L2 (Liran Alon)  [Orabug: 28671425]  
  - arm64: KVM: Remove pgd_lock (Steven Price)  [Orabug: 28671425]  
  - KVM: Remove obsolete kvm_unmap_hva notifier backend (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW (Marc Zyngier)  [Orabug: 28671425]  
  - selftests: add headers_install to lib.mk (Anders Roxell)  [Orabug: 28671425]  
  - KVM: s390: Properly lock mm context allow_gmap_hpage_1m setting (Janosch Frank)  [Orabug: 28671425]  
  - KVM: s390: vsie: copy wrapping keys to right place (Pierre Morel)  [Orabug: 28671425]  
  - KVM: s390: Fix pfmf and conditional skey emulation (Janosch Frank)  [Orabug: 28671425]  
  - KVM: x86: Unexport x86_emulate_instruction() (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: Rename emulate_instruction() to kvm_emulate_instruction() (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: Do not re-{try,execute} after failed emulation in L2 (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: Default to not allowing emulation retry in kvm_mmu_page_fault (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: Merge EMULTYPE_RETRY and EMULTYPE_ALLOW_REEXECUTE (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: Invert emulation re-execute behavior to make it opt-in (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: x86: SVM: Set EMULTYPE_NO_REEXECUTE for RSM emulation (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: SVM: remove unused variable dst_vaddr_end (Colin Ian King)  [Orabug: 28671425]  
  - KVM: nVMX: avoid redundant double assignment of nested_run_pending (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - treewide: correct "differenciate" and "instanciate" typos (Finn Thain)  [Orabug: 28671425]  
  - kvm: selftest: add dirty logging test (Peter Xu)  [Orabug: 28671425]  
  - kvm: selftest: pass in extra memory when create vm (Peter Xu)  [Orabug: 28671425]  
  - kvm: selftest: include the tools headers (Peter Xu)  [Orabug: 28671425]  
  - kvm: selftest: unify the guest port macros (Peter Xu)  [Orabug: 28671425]  
  - KVM: vmx: Inject #UD for SGX ENCLS instruction in guest (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: Add defines for SGX ENCLS exiting (Sean Christopherson)  [Orabug: 28671425]  
  - x86/kvm/vmx: Fix coding style in vmx_setup_l1d_flush() (Yi Wang)  [Orabug: 28671425]  
  - KVM: Documentation: rename the capability of KVM_CAP_ARM_SET_SERROR_ESR (Dongjiu Geng)  [Orabug: 28671425]  
  - powerpc64/ftrace: Include ftrace.h needed for enable/disable calls (Luke Dashjr)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function (Paul Mackerras)  [Orabug: 28671425]  
  - mm/cma: remove unsupported gfp_mask parameter from cma_alloc() (Marek Szyprowski)  [Orabug: 28671425]  
  - mm: kernel-doc: add missing parameter descriptions (Mike Rapoport)  [Orabug: 28671425]  
  - mm/cma.c: change pr_info to pr_err for cma_alloc fail log (Pintu Agarwal)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix() (Paul Mackerras)  [Orabug: 28671425]  
  - kvm: x86: Set highest physical address bits in non-present/reserved SPTEs (Junaid Shahid)  [Orabug: 28671425]  
  - KVM: arm: Use true and false for boolean values (Gustavo A. R. Silva)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Do not use spin_lock_irqsave/restore with irq disabled (Jia He)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Kick new VCPU on interrupt migration (Andre Przywara)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Move DEBUG_SPINLOCK_BUG_ON to vgic.h (Jia He)  [Orabug: 28671425]  
  - KVM: arm: vgic-v3: Add support for ICC_SGI0R and ICC_ASGI1R accesses (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm64: vgic-v3: Add support for ICC_SGI0R_EL1 and ICC_ASGI1R_EL1 accesses (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic-v3: Add core support for Group0 SGIs (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm64: Remove non-existent AArch32 ICC_SGI1R encoding (Marc Zyngier)  [Orabug: 28671425]  
  - KVM/x86: Use CC_SET()/CC_OUT in arch/x86/kvm/vmx.c (Uros Bizjak)  [Orabug: 28671425]  
  - KVM: X86: Implement "send IPI" hypercall (Wanpeng Li)  [Orabug: 28671425]  
  - KVM: X86: Implement PV IPIs in linux guest (Wanpeng Li)  [Orabug: 28671425]  
  - KVM: X86: Add kvm hypervisor init time platform setup callback (Wanpeng Li)  [Orabug: 28671425]  
  - KVM/x86: Move X86_CR4_OSXSAVE check into kvm_valid_sregs() (Tianyu Lan)  [Orabug: 28671425]  
  - KVM: x86: Skip pae_root shadow allocation if tdp enabled (Liang Chen)  [Orabug: 28671425]  
  - KVM/MMU: Combine flushing remote tlb in mmu_set_spte() (Tianyu Lan)  [Orabug: 28671425]  
  - KVM: vmx: skip VMWRITE of HOST_{FS,GS}_BASE when possible (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: skip VMWRITE of HOST_{FS,GS}_SEL when possible (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: always initialize HOST_{FS,GS}_BASE to zero during setup (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: move struct host_state usage to struct loaded_vmcs (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: compute need to reload FS/GS/LDT on demand (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: nVMX: remove a misleading comment regarding vmcs02 fields (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: rename __vmx_load_host_state() and vmx_save_host_state() (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: add dedicated utility to access guest's kernel_gs_base (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: track host_state.loaded using a loaded_vmcs pointer (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: vmx: refactor segmentation code in vmx_save_host_state() (Sean Christopherson)  [Orabug: 28671425]  
  - kvm: nVMX: Fix fault priority for VMX operations (Jim Mattson)  [Orabug: 28671425]  
  - KVM: try __get_user_pages_fast even if not in atomic context (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: vmx: Add tlb_remote_flush callback support (Tianyu Lan)  [Orabug: 28671425]  
  - KVM: x86: Add tlb remote flush callback in kvm_x86_ops. (Tianyu Lan)  [Orabug: 28671425]  
  - X86/Hyper-V: Add hyperv_nested_flush_guest_mapping ftrace support (Tianyu Lan)  [Orabug: 28671425]  
  - X86/Hyper-V: Add flush HvFlushGuestPhysicalAddressSpace hypercall support (Tianyu Lan)  [Orabug: 28671425]  
  - device-dax: Add missing address_space_operations (Dave Jiang)  [Orabug: 28887121]  
  - libnvdimm, pmem: Restore page attributes when clearing errors (Dan Williams)  [Orabug: 28887121]  
  - x86/memory_failure: Introduce {set, clear}_mce_nospec() (Dan Williams)  [Orabug: 28887121]  
  - x86/mm, mm/hwpoison: unmap if memory_failure() succeeded (Jane Chu)  [Orabug: 28887121]  
  - x86/mce: Convert 'struct mca_config' bools to a bitfield (Borislav Petkov)  [Orabug: 28887121]  
  - x86/mce: Put private structures and definitions into the internal header (Borislav Petkov)  [Orabug: 28887121]  
  - x86/mm/pat: Prepare {reserve, free}_memtype() for "decoy" addresses (Dan Williams)  [Orabug: 28887121]  
  - mm, memory_failure: Teach memory_failure() about dev_pagemap pages (Dan Williams)  [Orabug: 28887121]  
  - filesystem-dax: Introduce dax_lock_mapping_entry() (Dan Williams)  [Orabug: 28887121]  
  - mm, memory_failure: Collect mapping size in collect_procs() (Dan Williams)  [Orabug: 28887121]  
  - mm, madvise_inject_error: Let memory_failure() optionally take a page reference (Dan Williams)  [Orabug: 28887121]  
  - signal/memory-failure: Use force_sig_mceerr and send_sig_mceerr (Eric W. Biederman)  [Orabug: 28887121]  
  - mm/memory_failure: Remove unused trapno from memory_failure (Eric W. Biederman)  [Orabug: 28887121]  
  - signal: Helpers for faults with specialized siginfo layouts (Eric W. Biederman)  [Orabug: 28887121]  
  - signal: Add send_sig_fault and force_sig_fault (Eric W. Biederman)  [Orabug: 28887121]  
  - signal: Don't use structure initializers for struct siginfo (Eric W. Biederman)  [Orabug: 28887121]  
  - mm, dev_pagemap: Do not clear ->mapping on final put (Dan Williams)  [Orabug: 28887121]  
  - mm, madvise_inject_error: Disable MADV_SOFT_OFFLINE for ZONE_DEVICE pages (Dan Williams)  [Orabug: 28887121]  
  - filesystem-dax: Set page->index (Dan Williams)  [Orabug: 28887121]  
  - device-dax: Set page->index (Dan Williams)  [Orabug: 28887121]  
  - device-dax: Enable page_mapping() (Dan Williams)  [Orabug: 28887121]  
  - KVM/MMU: Simplify __kvm_sync_page() function (Tianyu Lan)  [Orabug: 28671425]  
  - kvm: x86: Remove CR3_PCID_INVD flag (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Add multi-entry LRU cache for previous CR3s (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Flush only affected TLB entries in kvm_mmu_invlpg* (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Skip shadow page resync on CR3 switch when indicated by guest (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Support selectively freeing either current or previous MMU root (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Add a root_hpa parameter to kvm_mmu->invlpg() (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Skip TLB flush on fast CR3 switch when indicated by guest (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: vmx: Support INVPCID in shadow paging mode (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Propagate guest PCIDs to host PCIDs (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Add ability to skip TLB flush when switching CR3 (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Use fast CR3 switch for nested VMX (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Support resetting the MMU context without resetting roots (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Add support for fast CR3 switch across different MMU modes (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Introduce KVM_REQ_LOAD_CR3 (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Introduce kvm_mmu_calc_root_page_role() (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Add fast CR3 switch code path (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Avoid taking MMU lock in kvm_mmu_sync_roots if no sync is needed (Junaid Shahid)  [Orabug: 28671425]  
  - kvm: x86: Make sync_page() flush remote TLBs once only (Junaid Shahid)  [Orabug: 28671425]  
  - KVM: MMU: drop vcpu param in gpte_access (Peter Xu)  [Orabug: 28671425]  
  - KVM: nVMX: Separate logic allocating shadow vmcs to a function (Liran Alon)  [Orabug: 28671425]  
  - KVM: VMX: Mark vmcs header as shadow in case alloc_vmcs_cpu() allocate shadow vmcs (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Expose VMCS shadowing to L1 guest (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Do not forward VMREAD/VMWRITE VMExits to L1 if required so by vmcs12 vmread/vmwrite bitmaps (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: vmread/vmwrite: Use shadow vmcs12 if running L2 (Liran Alon)  [Orabug: 28671425]  
  - KVM: selftests: add tests for shadow VMCS save/restore (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: nVMX: include shadow vmcs12 in nested state (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: nVMX: Cache shadow vmcs12 on VMEntry and flush to memory on VMExit (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Verify VMCS shadowing VMCS link pointer (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Verify VMCS shadowing controls (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Introduce nested_cpu_has_shadow_vmcs() (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Fail VMLAUNCH and VMRESUME on shadow VMCS (Liran Alon)  [Orabug: 28671425]  
  - KVM: nVMX: Allow VMPTRLD for shadow VMCS if vCPU supports VMCS shadowing (Liran Alon)  [Orabug: 28671425]  
  - KVM: VMX: Change vmcs12_{read,write}_any() to receive vmcs12 as parameter (Liran Alon)  [Orabug: 28671425]  
  - KVM: VMX: Create struct for VMCS header (Liran Alon)  [Orabug: 28671425]  
  - kvm: selftests: add test for nested state save/restore (Paolo Bonzini)  [Orabug: 28671425]  
  - kvm: nVMX: Introduce KVM_CAP_NESTED_STATE (Jim Mattson)  [Orabug: 28671425]  
  - KVM: x86: do not load vmcs12 pages while still in SMM (Paolo Bonzini)  [Orabug: 28671425]  
  - kvm: selftests: add basic test for state save and restore (Paolo Bonzini)  [Orabug: 28671425]  
  - kvm: selftests: ensure vcpu file is released (Paolo Bonzini)  [Orabug: 28671425]  
  - kvm: selftests: actually use all of lib/vmx.c (Paolo Bonzini)  [Orabug: 28671425]  
  - kvm: selftests: create a GDT and TSS (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Paolo Bonzini)  [Orabug: 28671425]  
  - KVM: vmx: remove save/restore of host BNDCGFS MSR (Sean Christopherson)  [Orabug: 28671425]  
  - KVM: Switch 'requests' to be 64-bit (explicitly) (KarimAllah Ahmed)  [Orabug: 28671425]  
  - kvm: selftests: add cr4_cpuid_sync_test (Wei Huang)  [Orabug: 28671425]  
  - KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: Fix potential loss of ptimer interrupts (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: s390: Add huge page enablement control (Janosch Frank)  [Orabug: 28671425]  
  - powerpc: remove unnecessary inclusion of asm/tlbflush.h (Christophe Leroy)  [Orabug: 28671425]  
  - KVM: s390: Add skey emulation fault handling (Janosch Frank)  [Orabug: 28671425]  
  - arm64: Add support for STACKLEAK gcc plugin (Laura Abbott)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Read kvm->arch.emul_smt_mode under kvm->lock (Paul Mackerras)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Allow creating max number of VCPUs on POWER9 (Paul Mackerras)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Pack VCORE IDs to access full VCPU ID space (Sam Bobroff)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Fix possible spectre-v1 write in vgic_mmio_write_apr() (Mark Rutland)  [Orabug: 28671425]  
  - kvm: Don't open code task_pid in kvm_vcpu_ioctl (Eric W. Biederman)  [Orabug: 28671425]  
  - KVM: arm: Add 32bit get/set events support (James Morse)  [Orabug: 28671425]  
  - KVM: arm64: Share the parts of get/set events useful to 32bit (James Morse)  [Orabug: 28671425]  
  - arm64: KVM: export the capability to set guest SError syndrome (Dongjiu Geng)  [Orabug: 28671425]  
  - arm/arm64: KVM: Add KVM_GET/SET_VCPU_EVENTS (Dongjiu Geng)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Update documentation of the GIC devices wrt IIDR (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Let userspace opt-in to writable v2 IGROUPR (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Allow configuration of interrupt groups (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Return error on incompatible uaccess GICD_IIDR writes (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Permit uaccess writes to return errors (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Signal IRQs using their configured group (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Add group field to struct irq (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: GICv2 IGROUPR should read as zero (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Keep track of implementation revision (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic: Define GICD_IIDR fields for GICv2 and GIv3 (Christoffer Dall)  [Orabug: 28671425]  
  - arm64: KVM: Cleanup tpidr_el2 init on non-VHE (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm/arm64: vgic-debug: Show LPI status (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm64: vgic-its: Remove VLA usage (Kees Cook)  [Orabug: 28671425]  
  - KVM: arm/arm64: Fix vgic init race (Christoffer Dall)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Fix constant size warning (Nicholas Mc Guire)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Work around transactional memory bugs in POWER9 (Paul Mackerras)  [Orabug: 28671425]  
  - KVM: PPC: Book3S HV: Add of_node_put() in success path (Nicholas Mc Guire)  [Orabug: 28671425]  
  - KVM: PPC: Book3S: Fix matching of hardware and emulated TCE tables (Alexey Kardashevskiy)  [Orabug: 28671425]  
  - KVM: PPC: Remove mmio_vsx_tx_sx_enabled in KVM MMIO emulation (Simon Guo)  [Orabug: 28671425]  
  - KVM: s390/vsie: avoid sparse warning (Christian Borntraeger)  [Orabug: 28671425]  
  - KVM: PPC: Make iommu_table::it_userspace big endian (Alexey Kardashevskiy)  [Orabug: 28671425]  
  - KVM: s390: Fix storage attributes migration with memory slots (Claudio Imbrenda)  [Orabug: 28671425]  
  - KVM: s390: a utility function for migration (Claudio Imbrenda)  [Orabug: 28671425]  
  - KVM: s390: Replace clear_user with kvm_clear_guest (Janosch Frank)  [Orabug: 28671425]  
  - KVM: arm/arm64: Remove unnecessary CMOs when creating HYP page tables (Marc Zyngier)  [Orabug: 28671425]  
  - KVM: arm/arm64: Consolidate page-table accessors (Marc Zyngier)  [Orabug: 28671425]  
  - arm64: remove unused COMPAT_PSR definitions (Mark Rutland)  [Orabug: 28671425]  
  - arm64: use PSR_AA32 definitions (Mark Rutland)  [Orabug: 28671425]  
  - arm64: ptrace: map SPSR_ELx<->PSR for compat tasks (Mark Rutland)  [Orabug: 28671425]  
  - arm64: compat: map SPSR_ELx<->PSR for signals (Mark Rutland)  [Orabug: 28671425]  
  - arm64: don't zero DIT on signal return (Mark Rutland)  [Orabug: 28671425]  
  - arm64: traps: Pretty-print pstate in register dumps (Will Deacon)  [Orabug: 28671425]  
  - arm64: traps: Don't print stack or raw PC/LR values in backtraces (Will Deacon)  [Orabug: 28671425]  
  - rcutorture: Make kvm-find-errors.sh find close calls (Paul E. McKenney)  [Orabug: 28671425]  
  - torture: Use a single build directory for torture scenarios (Paul E. McKenney)  [Orabug: 28671425]  
  - x86/kvmclock: Mark kvm_get_preset_lpj() as __init (Dou Liyang)  [Orabug: 28671425]  
  - x86/kvmclock: Switch kvmclock data to a PER_CPU variable (Thomas Gleixner)  [Orabug: 28671425]  
  - x86/kvmclock: Move kvmclock vsyscall param and init to kvmclock (Thomas Gleixner)  [Orabug: 28671425]  
  - x86/kvmclock: Mark variables __initdata and __ro_after_init (Thomas Gleixner)  [Orabug: 28671425]  
  - x86/kvmclock: Cleanup the code (Thomas Gleixner)  [Orabug: 28671425]  
  - x86/kvmclock: Decrapify kvm_register_clock() (Thomas Gleixner)  [Orabug: 28671425]  
  - x86/kvmclock: Remove page size requirement from wall_clock (Thomas Gleixner)  [Orabug: 28671425]  
  - x86/kvmclock: Remove memblock dependency (Pavel Tatashin)  [Orabug: 28671425]  
  - x86/kvmclock: set pvti_cpu0_va after enabling kvmclock (Radim Krčmář)  [Orabug: 28671425]  
  - x86: Add check for APIC access address for vmentry of L2 guests (Krish Sadhukhan)  [Orabug: 28671425]  
  - kvm: Fix compiler warnings in arch/x86/kvm/vmx.c (Liam Merwick)  [Orabug: 28671425]  
  - xen-netback: handle page straddling in xenvif_set_hash_mapping() (Jan Beulich)  [Orabug: 28671425]  
  - xen-netback: validate queue numbers in xenvif_set_hash_mapping() (Jan Beulich)  [Orabug: 28671425]  
  - xen/blkfront: correct purging of persistent grants (Juergen Gross)  [Orabug: 28671425]  
  - Revert "xen/blkfront: When purging persistent grants, keep them in the buffer" (Jens Axboe)  [Orabug: 28671425]  
  - xen/blkfront: When purging persistent grants, keep them in the buffer (Boris Ostrovsky)  [Orabug: 28671425]  
  - xen: issue warning message when out of grant maptrack entries (Juergen Gross)  [Orabug: 28671425]  
  - xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code (Boris Ostrovsky)  [Orabug: 28671425]  
  - xen/netfront: don't bug in case of too many frags (Juergen Gross)  [Orabug: 28671425]  
  - xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage (Josh Abraham)  [Orabug: 28671425]  
  - xen: avoid crash in disable_hotplug_cpu (Olaf Hering)  [Orabug: 28671425]  
  - xen/balloon: add runtime control for scrubbing ballooned out pages (Marek Marczykowski-Górecki)  [Orabug: 28671425]  
  - xen/manage: don't complain about an empty value in control/sysrq node (Vitaly Kuznetsov)  [Orabug: 28671425]  
  - xen/netfront: fix waiting for xenbus state change (Juergen Gross)  [Orabug: 28671425]  
  - x86/xen: remove redundant variable save_pud (Colin Ian King)  [Orabug: 28671425]  
  - xen: export device state to sysfs (Joe Jin)  [Orabug: 28671425]  
  - xen/blkback: remove unused pers_gnts_lock from struct xen_blkif_ring (Juergen Gross)  [Orabug: 28671425]  
  - xen/blkback: move persistent grants flags to bool (Juergen Gross)  [Orabug: 28671425]  
  - xen/blkfront: reorder tests in xlblk_init() (Juergen Gross)  [Orabug: 28671425]  
  - xen/blkfront: cleanup stale persistent grants (Juergen Gross)  [Orabug: 28671425]  
  - xen/blkback: don't keep persistent grants too long (Juergen Gross)  [Orabug: 28671425]  
  - x86/EISA: Don't probe EISA bus for Xen PV guests (Boris Ostrovsky)  [Orabug: 28671425]  
  - x86/xen: Disable CPU0 hotplug for Xen PV (Juergen Gross)  [Orabug: 28671425]  
  - x86/xen: enable early use of set_fixmap in 32-bit Xen PV guest (Juergen Gross)  [Orabug: 28671425]  
  - xen: remove unused hypercall functions (Juergen Gross)  [Orabug: 28671425]  
  - x86/xen: remove unused function xen_auto_xlated_memory_setup() (Juergen Gross)  [Orabug: 28671425]  
  - xen/ACPI: don't upload Px/Cx data for disabled processors (Jan Beulich)  [Orabug: 28671425]  
  - x86/Xen: further refine add_preferred_console() invocations (Jan Beulich)  [Orabug: 28671425]  
  - xen/mcelog: eliminate redundant setting of interface version (Jan Beulich)  [Orabug: 28671425]  
  - x86/Xen: mark xen_setup_gdt() __init (Jan Beulich)  [Orabug: 28671425]  
  - xen: don't use privcmd_call() from xen_mc_flush() (Juergen Gross)  [Orabug: 28671425]  
  - xen/pv: Call get_cpu_address_sizes to set x86_virt/phys_bits (M. Vefa Bicakci)  [Orabug: 28671425]  
  - x86/cpu: Prevent cpuinfo_x86::x86_phys_bits adjustment corruption (Kirill A. Shutemov)  [Orabug: 28671425]  
  - xen/biomerge: Use true and false for boolean values (Gustavo A. R. Silva)  [Orabug: 28671425]  
  - xen-blkfront: use true and false for boolean values (Gustavo A. R. Silva)  [Orabug: 28671425]  
  - xen-netback: use true and false for boolean values (Gustavo A. R. Silva)  [Orabug: 28671425]  
  - xen/gntdev: don't dereference a null gntdev_dmabuf on allocation failure (Colin Ian King)  [Orabug: 28671425]  
  - xen/spinlock: Don't use pvqspinlock if only 1 vCPU (Waiman Long)  [Orabug: 28671425]  
  - arm64: mm: Export __sync_icache_dcache() for xen-privcmd (Ben Hutchings)  [Orabug: 28671425]  
  - xen/gntdev: Implement dma-buf import functionality (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/gntdev: Implement dma-buf export functionality (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/gntdev: Add initial support for dma-buf UAPI (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/gntdev: Make private routines/structures accessible (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/gntdev: Allow mappings for DMA buffers (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/grant-table: Allow allocating buffers suitable for DMA (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/balloon: Share common memory reservation routines (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/grant-table: Make set/clear page private code shared (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen/blkfront: remove unused macros (Juergen Gross)  [Orabug: 28671425]  
  - x86/xen/time: Output xen sched_clock time from 0 (Pavel Tatashin)  [Orabug: 28671425]  
  - x86/xen/time: Initialize pv xen time in init_hypervisor_platform() (Pavel Tatashin)  [Orabug: 28671425]  
  - scsi: target: Convert target drivers to use sbitmap (Matthew Wilcox)  [Orabug: 28671425]  
  - scsi: target: Abstract tag freeing (Matthew Wilcox)  [Orabug: 28671425]  
  - Input: xen-kbdfront - allow better run-time configuration (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - Input: xen-kbdfront - fix multi-touch XenStore node's locations (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - xen: Sync up with the canonical protocol definitions in Xen (Oleksandr Andrushchenko)  [Orabug: 28671425]  
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874134]  
  - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz)  [Orabug: 28886622]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1847.el7uek]
changelog:
  - ib/core: Use driver pd ident when comparing pds. (Hans Westgaard Ry)  [Orabug: 28674979]  
  - ima: Create a lockdown policy (Eric Snowberg)  [Orabug: 28702669]  
  - uek-rpm: Enable read IMA policy (Eric Snowberg)  [Orabug: 28702669]  
  - ima: Reflect correct permissions for policy (Petr Vorel)  [Orabug: 28702669]  
  - ima: don't remove the securityfs policy file (Mimi Zohar)  [Orabug: 28702669]  
  - lockdown: fix coordination of kernel module signature verification (Mimi Zohar)  [Orabug: 28702669]  
  - module: export module signature enforcement status (Bruno E. O. Meneguele)  [Orabug: 28702669]  
  - ima: require secure_boot rules in lockdown mode (Mimi Zohar)  [Orabug: 28702669]  
  - Fix kABI breakage (Eric Snowberg)  [Orabug: 28702669]  
  - Enforce module signatures if the kernel is locked down (David Howells)  [Orabug: 28702669]  
  - Revert "Enforce module signatures if the kernel is locked down" (Eric Snowberg)  [Orabug: 28702669]  
  - libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard)  [Orabug: 28709877]  
  -  rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28748008]  
  -   net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28856912]  
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28906151]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710} 
  - xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)   
  - Btrfs: fix a bug introduced by back porting an upstream commit (Shan Hai)  [Orabug: 28920621]  
  - btrfs: Cleanup existing name_len checks (Qu Wenruo)  [Orabug: 28920621]  
  - sched/fair: Use a recently used CPU as an idle candidate and the basis for SIS (Mel Gorman)  [Orabug: 28088230]  
  - sched/fair: Move select_task_rq_fair() slow-path into its own function (Brendan Jackman)  [Orabug: 28088230]  
  - certs: Add Oracle's new X509 cert into .builtin_trusted_keys (Eric Snowberg)  [Orabug: 28926150]  
  - net: Allow pernet_operations to be executed in parallel (Kirill Tkhai)  [Orabug: 28900385]  
  - net: Move mutex_unlock() in cleanup_net() up (Kirill Tkhai)  [Orabug: 28900385]  
  - locking/arch, x86: Add __down_read_killable() (Kirill Tkhai)  [Orabug: 28900385]  
  - locking/x86: Use named operands in rwsem.h (Miguel Bernal Marin)  [Orabug: 28900385]  
  - locking/rwsem: Add down_read_killable() (Kirill Tkhai)  [Orabug: 28900385]  
  - net: Introduce net_sem for protection of pernet_list (Kirill Tkhai)  [Orabug: 28900385]  
  - net: Assign net to net_namespace_list in setup_net() (Kirill Tkhai)  [Orabug: 28900385]  
  - net: Cleanup in copy_net_ns() (Kirill Tkhai)  [Orabug: 28900385]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1848.el7uek]
changelog:
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 28020561]  {CVE-2018-5333} 
  - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez)  [Orabug: 28474838]  
  - x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez)  [Orabug: 28474838]  
  - x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez)  [Orabug: 28474838]  
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 28569708]  {CVE-2018-5848} 
  - xfs: enhance dinode verifier (Eric Sandeen)  [Orabug: 28906188]  {CVE-2018-10322} 
  - xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong)  [Orabug: 28906188]  {CVE-2018-10322} 
  - ipv6: udp: set dst cache for a connected sk if current not valid (Alexey Kodanev)  [Orabug: 28923349]  
  - ipv6: udp: convert 'connected' to bool type in udpv6_sendmsg() (Alexey Kodanev)  [Orabug: 28923349]  
  - ipv6: allow to cache dst for a connected sk in ip6_sk_dst_lookup_flow() (Alexey Kodanev)  [Orabug: 28923349]  
  - ipv6: add a wrapper for ip6_dst_store() with flowi6 checks (Alexey Kodanev)  [Orabug: 28923349]  
  - uek-rpm: aarch64: enable CONFIG_GPIO_THUNDERX (Henry Willard)  [Orabug: 28932941]  
  - Memory leak in rdmaip_device_remove() (Sudhakar Dindukurti)  [Orabug: 28496850]  
  - resilient_rdmaip: Remove unused variable (Sudhakar Dindukurti)  [Orabug: 28925778]  
  - A/A failback does not work in concert with ibacm (Håkon Bugge)  [Orabug: 28919144]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 28896267]  
  - x86/mm: Page size aware flush_tlb_mm_range() (Peter Zijlstra)  [Orabug: 28936467]  
  - mm/memory: Move mmu_gather and TLB invalidation code into its own file (Peter Zijlstra)  [Orabug: 28936467]  
  - asm-generic/tlb: Track which levels of the page tables have been cleared (Will Deacon)  [Orabug: 28936467]  
  - asm-generic/tlb: Track freeing of page-table directories in struct mmu_gather (Peter Zijlstra)  [Orabug: 28936467]  
  - mm: mmu_notifier fix for tlb_end_vma (Nicholas Piggin)  [Orabug: 28936467]  
  - mm: update comment describing tlb_gather_mmu (Mike Rapoport)  [Orabug: 28936467]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1849.el7uek]
changelog:
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 28972461]  
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)   {CVE-2018-7755} {CVE-2018-7755} 
  - ocfs2: free up write context when direct IO failed (Wengang Wang)  [Orabug: 28951112]  
  - [PATCH UEK5] dtrace: fix ip provider inconsistencies between IPv4/IPv6 (Alan Maguire)  [Orabug: 28975775]  
  - [PATCH UEK5 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire)  [Orabug: 28975818]  
  - Node crashes when trace buffer is opened (Sudhakar Dindukurti)  [Orabug: 28988861]  
  - module unload: Restore IPs during module unloading (Sudhakar Dindukurti)  [Orabug: 27902037]  
  - uek-rpm: Allow blacklisting of kernel modules in initramfs during nano-kernel build (Somasundaram Krishnasamy)  [Orabug: 28925565]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1850.el7uek]
changelog:
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - x86/speculation: simplify IBRS firmware control (Alexandre Chartre)  [Orabug: 28922326]  
  - x86/speculation: use jump label instead of alternative to control IBRS firmware (Alexandre Chartre)  [Orabug: 28922326]  
  - x86/speculation: fix and simplify IBPB control (Alexandre Chartre)  [Orabug: 28922326]  
  - x86/speculation: use jump label instead of alternative to control IBPB (Alexandre Chartre)  [Orabug: 28922326]  
  - x86/speculation: move ANNOTATE_* macros to a new header file (Alexandre Chartre)  [Orabug: 28922326]  
  - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun)  [Orabug: 29012327]  {CVE-2018-8043} 
  - ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss)  [Orabug: 29019037]  
  - Correct KABI issues in the stable v4.14.71 merge (Jack Vogel)  [Orabug: 29029707]  
  - psi: make disabling/enabling easier for vendor kernels (Johannes Weiner)  [Orabug: 28813459]  
  - kernel/sched/psi.c: simplify cgroup_move_task() (Olof Johansson)  [Orabug: 28813459]  
  - psi: Fix KABI breakages due to PSI (Tom Hromatka)  [Orabug: 28813459]  
  - KVM: X86: Fix scan ioapic use-before-initialization (Wanpeng Li)  [Orabug: 29010225]  {CVE-2018-19407} 
  - psi: cgroup support (Johannes Weiner)  [Orabug: 28813459]  
  - psi-pressure-stall-information-for-cpu-memory-and-io-fix-4 (Johannes Weiner)  [Orabug: 28813459]  
  - psi-pressure-stall-information-for-cpu-memory-and-io-fix-3 (Johannes Weiner)  [Orabug: 28813459]  
  - psi-pressure-stall-information-for-cpu-memory-and-io-fix-2 (Johannes Weiner)  [Orabug: 28813459]  
  - psi-pressure-stall-information-for-cpu-memory-and-io-fix (Johannes Weiner)  [Orabug: 28813459]  
  - psi: pressure stall information for CPU, memory, and IO (Johannes Weiner)  [Orabug: 28813459]  
  - sched: introduce this_rq_lock_irq() (Johannes Weiner)  [Orabug: 28813459]  
  - sched: sched.h: make rq locking and clock functions available in stats.h (Johannes Weiner)  [Orabug: 28813459]  
  - sched: loadavg: make calc_load_n() public (Johannes Weiner)  [Orabug: 28813459]  
  - sched: loadavg: consolidate LOAD_INT, LOAD_FRAC, CALC_LOAD (Johannes Weiner)  [Orabug: 28813459]  
  - delayacct: track delays from thrashing cache pages (Johannes Weiner)  [Orabug: 28813459]  
  - mm: workingset: tell cache transitions from workingset thrashing (Johannes Weiner)  [Orabug: 28813459]  
  - mm: workingset: don't drop refault information prematurely fix (Johannes Weiner)  [Orabug: 28813459]  
  - mm: workingset: don't drop refault information prematurely (Johannes Weiner)  [Orabug: 28813459]  
  - crypto: ccp - add timeout support in the SEV command (Brijesh Singh)  [Orabug: 29026054]  
  - crypto: ccp - Add GET_ID SEV command (Janakarajan Natarajan)  [Orabug: 29026054]  
  - crypto: ccp - Add DOWNLOAD_FIRMWARE SEV command (Janakarajan Natarajan)  [Orabug: 29026054]  
  - Linux 4.14.72 (Greg Kroah-Hartman)   
  - e1000e: Fix check_for_link return value with autoneg off (Benjamin Poirier)   
  - e1000e: Fix link check race condition (Benjamin Poirier)   
  - Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier)   
  - e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier)   
  - e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier)   
  - Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier)   
  - e1000e: Remove Other from EIAC (Benjamin Poirier)   
  - net/ipv6: prevent use after free in ip6_route_mpath_notify (David Ahern)   
  - drm/i915: Apply the GTT write flush for all !llc machines (Chris Wilson)   
  - ASoC: samsung: Fix invalid argument when devm_gpiod_get is called (Jaechul Lee)   
  - ASoC: samsung: i2s: Fix error handling path in i2s_set_sysclk() (Christophe Jaillet)   
  - earlycon: Remove hardcoded port->uartclk initialization in of_setup_earlycon (Michal Simek)   
  - earlycon: Initialize port->uartclk based on clock-frequency property (Michal Simek)   
  - mei: bus: type promotion bug in mei_nfc_if_version() (Dan Carpenter)   
  - clk: tegra: bpmp: Don't crash when a clock fails to register (Mikko Perttunen)   
  - pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant (Douglas Anderson)   
  - pinctrl: msm: Fix msm_config_group_get() to be compliant (Douglas Anderson)   
  - blk-mq: avoid to synchronize rcu inside blk_cleanup_queue() (Ming Lei)   
  - blk-mq: only attempt to merge bio if there is rq in sw queue (Ming Lei)   
  - drm/panel: type promotion bug in s6e8aa0_read_mtp_id() (Dan Carpenter)   
  - selftest: timers: Tweak raw_skew to SKIP when ADJ_OFFSET/other clock adjustments are in progress (John Stultz)   
  - scsi: libfc: fixup 'sleeping function called from invalid context' (Hannes Reinecke)   
  - ALSA: pcm: Fix snd_interval_refine first/last with open min/max (Timo Wischer)   
  - rtc: bq4802: add error handling for devm_ioremap (Zhouyang Jia)   
  - drm/amdkfd: Fix error codes in kfd_get_process (Wei Lu)   
  - input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) (Peter Rosin)   
  - mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) (Peter Rosin)   
  - gpiolib: Mark gpio_suffixes array with __maybe_unused (Andy Shevchenko)   
  - gpio: pxa: Fix potential NULL dereference (Wei Yongjun)   
  - staging: bcm2835-audio: Don't leak workqueue if open fails (Tuomas Tynkkynen)   
  - coresight: ETM: Add support for Arm Cortex-A73 and Cortex-A35 (Suzuki K Poulose)   
  - coresight: tpiu: Fix disabling timeouts (Robin Murphy)   
  - coresight: Handle errors in finding input/output ports (Suzuki K Poulose)   
  - sched/fair: Fix util_avg of new tasks for asymmetric systems (Quentin Perret)   
  - parport: sunbpp: fix error return code (Julia Lawall)   
  - drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping (Thierry Reding)   
  - drm/nouveau/debugfs: Wake up GPU before doing any reclocking (Karol Herbst)   
  - drm/nouveau: Fix runtime PM leak in drm_open() (Lyude Paul)   
  - mmc: sdhci: do not try to use 3.3V signaling if not supported (Stefan Agner)   
  - mmc: tegra: prevent HS200 on Tegra 3 (Stefan Agner)   
  - mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips (Laurentiu Tudor)   
  - tty: fix termios input-speed encoding (Johan Hovold)   
  - tty: fix termios input-speed encoding when using BOTHER (Johan Hovold)   
  - gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes (Enrico Scholz)   
  - liquidio: fix hang when re-binding VF host drv after running DPDK VF driver (Rick Farrington)   
  - ARM: hisi: check of_iomap and fix missing of_node_put (Nicholas Mc Guire)   
  - ARM: hisi: fix error handling and missing of_node_put (Nicholas Mc Guire)   
  - ARM: hisi: handle of_iomap and fix missing of_node_put (Nicholas Mc Guire)   
  - efi/esrt: Only call efi_mem_reserve() for boot services memory (Ard Biesheuvel)   
  - sched/core: Use smp_mb() in wake_woken_function() (Andrea Parri)   
  - pinctrl: rza1: Fix selector use for groups and functions (Tony Lindgren)   
  - configfs: fix registered group removal (Mike Christie)   
  - MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads (Paul Burton)   
  - security: check for kstrdup() failure in lsm_append() (Eric Biggers)   
  - KVM: PPC: Book3S HV: Add of_node_put() in success path (Nicholas Mc Guire)   
  - evm: Don't deadlock if a crypto algorithm is unavailable (Matthew Garrett)   
  - Bluetooth: Use lock_sock_nested in bt_accept_enqueue (Philipp Puschmann)   
  - vfs: fix freeze protection in mnt_want_write_file() for overlayfs (Miklos Szeredi)   
  - mtdchar: fix overflows in adjustment of `count` (Jann Horn)   
  - audit: fix use-after-free in audit_add_watch (Ronny Chevalier)   
  - arm64: dts: uniphier: Add missing cooling device properties for CPUs (Viresh Kumar)   
  - net/mlx5: Add missing SET_DRIVER_VERSION command translation (Noa Osherovich)   
  - binfmt_elf: Respect error return from `regset->active' (Maciej W. Rozycki)   
  - NFSv4.1 fix infinite loop on I/O. (Trond Myklebust)   
  - x86/EISA: Don't probe EISA bus for Xen PV guests (Boris Ostrovsky)   
  - perf/core: Force USER_DS when recording user stack data (Yabin Cui)   
  - xtensa: ISS: don't allocate memory in platform_setup (Max Filippov)   
  - CIFS: fix wrapping bugs in num_entries() (Dan Carpenter)   
  - cifs: prevent integer overflow in nxt_dir_entry() (Dan Carpenter)   
  - Revert "cdc-acm: implement put_char() and flush_chars()" (Oliver Neukum)   
  - usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt() (Jia-Ju Bai)   
  - USB: yurex: Fix buffer over-read in yurex_write() (Ben Hutchings)   
  - USB: serial: ti_usb_3410_5052: fix array underflow in completion handler (Johan Hovold)   
  - usb: misc: uss720: Fix two sleep-in-atomic-context bugs (Jia-Ju Bai)   
  - USB: serial: io_ti: fix array underflow in completion handler (Johan Hovold)   
  - USB: net2280: Fix erroneous synchronization change (Alan Stern)   
  - usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0 (Yoshihiro Shimoda)   
  - USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller (Maxence Duprès)   
  - usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame() (Jia-Ju Bai)   
  - usb: Avoid use-after-free by flushing endpoints early in usb_set_interface() (Mathias Nyman)   
  - usb: uas: add support for more quirk flags (Oliver Neukum)   
  - USB: Add quirk to support DJI CineSSD (Tim Anderson)   
  - mei: bus: need to unlink client before freeing (Tomas Winkler)   
  - mei: ignore not found client in the enumeration (Alexander Usyskin)   
  - usb: Don't die twice if PCI xhci host is not responding in resume (Mathias Nyman)   
  - xhci: Fix use after free for URB cancellation on a reallocated endpoint (Mathias Nyman)   
  - misc: hmc6352: fix potential Spectre v1 (Gustavo A. R. Silva)   
  - Tools: hv: Fix a bug in the key delete code (K. Y. Srinivasan)   
  - ipmi: Fix I2C client removal in the SSIF driver (Corey Minyard)   
  - mmc: omap_hsmmc: fix wakeirq handling on removal (Andreas Kemnade)   
  - s390/crypto: Fix return code checking in cbc_paes_crypt() (Ingo Franzki)   
  - IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler (Aaron Knister)   
  - xen/netfront: fix waiting for xenbus state change (Juergen Gross)   
  - pstore: Fix incorrect persistent ram buffer mapping (Bin Yang)   
  - RDMA/cma: Protect cma dev list with lock (Parav Pandit)   
  - xen-netfront: fix warn message as irq device name has '/' (Xiao Liang)   
  - x86/mm/pti: Add an overflow check to pti_clone_pmds() (Joerg Roedel)   
  - x86/pti: Check the return value of pti_user_pagetable_walk_pmd() (Jiang Biao)   
  - x86/pti: Check the return value of pti_user_pagetable_walk_p4d() (Jiang Biao)   
  - crypto: sharah - Unregister correct algorithms for SAHARA 3 (Michael Müller)   
  - dmaengine: mv_xor_v2: kill the tasklets upon exit (Hanna Hawa)   
  - i2c: aspeed: Fix initial values of master and slave state (Jae Hyun Yoo)   
  - drivers/base: stop new probing during shutdown (Pingfan Liu)   
  - KVM: arm/arm64: Fix vgic init race (Christoffer Dall)   
  - platform/x86: toshiba_acpi: Fix defined but not used build warnings (Randy Dunlap)   
  - s390/qeth: reset layer2 attribute on layer switch (Julian Wiedmann)   
  - s390/qeth: fix race in used-buffer accounting (Julian Wiedmann)   
  - ARM: dts: qcom: msm8974-hammerhead: increase load on l20 for sdhci (Bhushan Shah)   
  - arm64: dts: qcom: db410c: Fix Bluetooth LED trigger (Loic Poulain)   
  - xen-netfront: fix queue name setting (Vitaly Kuznetsov)   
  - nfp: avoid buffer leak when FW communication fails (Jakub Kicinski)   
  - efi/arm: preserve early mapping of UEFI memory map longer for BGRT (Ard Biesheuvel)   
  - reset: imx7: Fix always writing bits as 0 (Leonard Crestez)   
  - arm64: fix possible spectre-v1 write in ptrace_hbp_set_event() (Mark Rutland)   
  - wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of qe_muram_alloc (YueHaibing)   
  - Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets (Piotr Sawicki)   
  - mac80211: restrict delayed tailroom needed decrement (Manikanta Pubbisetty)   
  - MIPS: jz4740: Bump zload address (Paul Cercueil)   
  - ASoC: rt5514: Fix the issue of the delay volume applied (Oder Chiou)   
  - staging: bcm2835-camera: handle wait_for_completion_timeout return properly (Nicholas Mc Guire)   
  - staging: bcm2835-camera: fix timeout handling in wait_for_completion_timeout (Nicholas Mc Guire)   
  - powerpc/powernv: opal_put_chars partial write fix (Nicholas Piggin)   
  - KVM: arm/arm64: vgic: Fix possible spectre-v1 write in vgic_mmio_write_apr() (Mark Rutland)   
  - nvme-rdma: unquiesce queues when deleting the controller (Sagi Grimberg)   
  - perf powerpc: Fix callchain ip filtering (Sandipan Das)   
  - ARM: exynos: Clear global variable on init error path (Krzysztof Kozlowski)   
  - fbdev: Distinguish between interlaced and progressive modes (Fredrik Noring)   
  - video: fbdev: pxafb: clear allocated memory for video modes (Daniel Mack)   
  - perf powerpc: Fix callchain ip filtering when return address is in a register (Sandipan Das)   
  - fbdev/via: fix defined but not used warning (Randy Dunlap)   
  - video: goldfishfb: fix memory leak on driver remove (Anton Vasilyev)   
  - perf tools: Fix struct comm_str removal crash (Jiri Olsa)   
  - fbdev: omapfb: off by one in omapfb_register_client() (Dan Carpenter)   
  - perf tools: Synthesize GROUP_DESC feature in pipe mode (Jiri Olsa)   
  - gfs2: Don't reject a supposedly full bitmap if we have blocks reserved (Bob Peterson)   
  - perf test: Fix subtest number when showing results (Thomas Richter)   
  - media: ov5645: Supported external clock is 24MHz (Todor Tomov)   
  - mtd/maps: fix solutionengine.c printk format warnings (Randy Dunlap)   
  - IB/ipoib: Fix error return code in ipoib_dev_init() (Wei Yongjun)   
  - block: allow max_discard_segments to be stacked (Mike Snitzer)   
  - IB/rxe: Drop QP0 silently (Zhu Yanjun)   
  - media: videobuf2-core: check for q->error in vb2_core_qbuf() (Hans Verkuil)   
  - MIPS: ath79: fix system restart (Felix Fietkau)   
  - dmaengine: pl330: fix irq race with terminate_all (John Keeping)   
  - media: tw686x: Fix oops on buffer alloc failure (Krzysztof Ha?asa)   
  - kbuild: add .DELETE_ON_ERROR special target (Masahiro Yamada)   
  - clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure (Rajan Vaja)   
  - clk: core: Potentially free connection id (Mikko Perttunen)   
  - clk: imx6ul: fix missing of_node_put() (Nicholas Mc Guire)   
  - gfs2: Special-case rindex for gfs2_grow (Andreas Gruenbacher)   
  - amd-xgbe: use dma_mapping_error to check map errors (YueHaibing)   
  - xfrm: fix 'passing zero to ERR_PTR()' warning (YueHaibing)   
  - ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro (Takashi Iwai)   
  - ALSA: msnd: Fix the default sample sizes (Takashi Iwai)   
  - iommu/io-pgtable-arm-v7s: Abort allocation when table address overflows the PTE (Jean-Philippe Brucker)   
  - iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register (Miao Zhong)   
  - usb: dwc3: change stream event enable bit back to 13 (Erich E. Hoover)   
  - hv/netvsc: Fix NULL dereference at single queue mode fallback (Takashi Iwai)   
  - tcp: really ignore MSG_ZEROCOPY if no SO_ZEROCOPY (Vincent Whitchurch)   
  - erspan: return PACKET_REJECT when the appropriate tunnel is not found (Haishuang Yan)   
  - erspan: fix error handling for erspan tunnel (Haishuang Yan)   
  - net/tls: Set count of SG entries if sk_alloc_sg returns -ENOSPC (Vakul Garg)   
  - net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables (Raed Salem)   
  - net/mlx5: Fix debugfs cleanup in the device init/remove flow (Jack Morgenstein)   
  - net/mlx5: Check for error in mlx5_attach_interface (Huy Nguyen)   
  - rds: fix two RCU related problems (Cong Wang)   
  - net: qca_spi: Fix race condition in spi transfers (Stefan Wahren)   
  - net/mlx5: Fix use-after-free in self-healing flow (Jack Morgenstein)   
  - be2net: Fix memory leak in be_cmd_get_profile_config() (Petr Oros)   
  - Linux 4.14.71 (Greg Kroah-Hartman)   
  - mm: get rid of vmacache_flush_all() entirely (Linus Torvalds)   
  - autofs: fix autofs_sbi() does not check super block type (Ian Kent)   
  - tuntap: fix use after free during release (Jason Wang)   
  - tun: fix use after free for ptr_ring (Jason Wang)   
  - mtd: ubi: wl: Fix error return code in ubi_wl_init() (Wei Yongjun)   
  - ip: frags: fix crash in ip_do_fragment() (Taehee Yoo)   
  - ip: process in-order fragments efficiently (Peter Oskolkov)   
  - ip: add helpers to process in-order fragments faster. (Peter Oskolkov)   
  - ipv4: frags: precedence bug in ip_expire() (Dan Carpenter)   
  - net: sk_buff rbnode reorg (Eric Dumazet)   
  - net: add rb_to_skb() and other rb tree helpers (Eric Dumazet)   
  - net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends (Eric Dumazet)   
  - ipv6: defrag: drop non-last frags smaller than min mtu (Florian Westphal)   
  - net: modify skb_rbtree_purge to return the truesize of all purged skbs. (Peter Oskolkov)   
  - net: speed up skb_rbtree_purge() (Eric Dumazet)   
  - ip: discard IPv4 datagrams with overlapping segments. (Peter Oskolkov)   
  - inet: frags: fix ip6frag_low_thresh boundary (Eric Dumazet)   
  - inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (Eric Dumazet)   
  - inet: frags: reorganize struct netns_frags (Eric Dumazet)   
  - rhashtable: reorganize struct rhashtable layout (Eric Dumazet)   
  - ipv6: frags: rewrite ip6_expire_frag_queue() (Eric Dumazet)   
  - inet: frags: do not clone skb in ip_expire() (Eric Dumazet)   
  - inet: frags: break the 2GB limit for frags storage (Eric Dumazet)   
  - inet: frags: remove inet_frag_maybe_warn_overflow() (Eric Dumazet)   
  - inet: frags: get rif of inet_frag_evicting() (Eric Dumazet)   
  - inet: frags: remove some helpers (Eric Dumazet)   
  - inet: frags: use rhashtables for reassembly units (Eric Dumazet)   
  - rhashtable: add schedule points (Eric Dumazet)   
  - ipv6: export ip6 fragments sysctl to unprivileged users (Eric Dumazet)   
  - inet: frags: refactor lowpan_net_frag_init() (Eric Dumazet)   
  - inet: frags: refactor ipv6_frag_init() (Eric Dumazet)   
  - inet: frags: Convert timers to use timer_setup() (Kees Cook)   
  - inet: frags: refactor ipfrag_init() (Eric Dumazet)   
  - inet: frags: add a pointer to struct netns_frags (Eric Dumazet)   
  - inet: frags: change inet_frags_init_net() return value (Eric Dumazet)   
  - drm/i915: set DP Main Stream Attribute for color range on DDI platforms (Jani Nikula)   
  - RDMA/cma: Do not ignore net namespace for unbound cm_id (Parav Pandit)   
  - MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON (Paul Burton)   
  - NFSv4.1: Fix a potential layoutget/layoutrecall deadlock (Trond Myklebust)   
  - f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize (Chao Yu)   
  - mfd: ti_am335x_tscadc: Fix struct clk memory leak (Zumeng Chen)   
  - iommu/ipmmu-vmsa: Fix allocation in atomic context (Geert Uytterhoeven)   
  - f2fs: Fix uninitialized return in f2fs_ioc_shutdown() (Dan Carpenter)   
  - f2fs: fix to wait on page writeback before updating page (Chao Yu)   
  - media: helene: fix xtal frequency setting at power on (Katsuhiro Suzuki)   
  - partitions/aix: fix usage of uninitialized lv_info and lvname structures (Mauricio Faria de Oliveira)   
  - partitions/aix: append null character to print data from disk (Mauricio Faria de Oliveira)   
  - media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions (Sylwester Nawrocki)   
  - Input: atmel_mxt_ts - only use first T9 instance (Nick Dyer)   
  - dm cache: only allow a single io_mode cache feature to be requested (John Pittman)   
  - net: dcb: For wild-card lookups, use priority -1, not 0 (Petr Machata)   
  - MIPS: generic: fix missing of_node_put() (Nicholas Mc Guire)   
  - MIPS: Octeon: add missing of_node_put() (Nicholas Mc Guire)   
  - f2fs: fix to do sanity check with reserved blkaddr of inline inode (Chao Yu)   
  - tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) (Peter Rosin)   
  - tpm_tis_spi: Pass the SPI IRQ down to the driver (Linus Walleij)   
  - f2fs: fix to skip GC if type in SSA and SIT is inconsistent (Chao Yu)   
  - pktcdvd: Fix possible Spectre-v1 for pkt_devs (Jinbum Park)   
  - f2fs: try grabbing node page lock aggressively in sync scenario (Chao Yu)   
  - net: mvneta: fix mtu change on port without link (Yelena Krivosheev)   
  - pinctrl/amd: only handle irq if it is pending and unmasked (Daniel Kurtz)   
  - gpio: ml-ioh: Fix buffer underwrite on probe error path (Anton Vasilyev)   
  - pinctrl: imx: off by one in imx_pinconf_group_dbg_show() (Dan Carpenter)   
  - x86/mm: Remove in_nmi() warning from vmalloc_fault() (Joerg Roedel)   
  - Bluetooth: hidp: Fix handling of strncpy for hid->name information (Marcel Holtmann)   
  - ath10k: disable bundle mgmt tx completion event support (Surabhi Vishnoi)   
  - tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access() (Huaisheng Ye)   
  - scsi: 3ware: fix return 0 on the error path of probe (Anton Vasilyev)   
  - ata: libahci: Correct setting of DEVSLP register (Srinivas Pandruvada)   
  - ata: libahci: Allow reconfigure of DEVSLP register (Srinivas Pandruvada)   
  - MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET (Paul Burton)   
  - rpmsg: core: add support to power domains for devices (Srinivas Kandagatla)   
  - wlcore: Set rx_status boottime_ns field on rx (Loic Poulain)   
  - ath10k: prevent active scans on potential unusable channels (Sven Eckelmann)   
  - ath9k_hw: fix channel maximum power level test (Felix Fietkau)   
  - ath9k: report tx status on EOSP (Felix Fietkau)   
  - macintosh/via-pmu: Add missing mmio accessors (Finn Thain)   
  - perf evlist: Fix error out while applying initial delay and LBR (Kan Liang)   
  - perf c2c report: Fix crash for empty browser (Jiri Olsa)   
  - NFSv4.0 fix client reference leak in callback (Olga Kornievskaia)   
  - perf tools: Allow overriding MAX_NR_CPUS at compile time (Christophe Leroy)   
  - f2fs: fix defined but not used build warnings (Randy Dunlap)   
  - f2fs: do not set free of current section (Yunlong Song)   
  - f2fs: fix to active page in lru list for read path (Chao Yu)   
  - tty: rocket: Fix possible buffer overwrite on register_PCI (Anton Vasilyev)   
  - Drivers: hv: vmbus: Cleanup synic memory free path (Michael Kelley)   
  - firmware: vpd: Fix section enabled flag on vpd_section_destroy (Anton Vasilyev)   
  - uio: potential double frees if __uio_register_device() fails (Dan Carpenter)   
  - misc: ti-st: Fix memory leak in the error path of probe() (Anton Vasilyev)   
  - gpu: ipu-v3: default to id 0 on missing OF alias (Philipp Zabel)   
  - media: camss: csid: Configure data type and decode format properly (Todor Tomov)   
  - timers: Clear timer_base::must_forward_clk with timer_base::lock held (Gaurav Kohli)   
  - md/raid5: fix data corruption of replacements after originals dropped (BingJing Chang)   
  - scsi: target: fix __transport_register_session locking (Mike Christie)   
  - blk-mq: fix updating tags depth (Ming Lei)   
  - net: phy: Fix the register offsets in Broadcom iProc mdio mux driver (Arun Parameswaran)   
  - media: dw2102: Fix memleak on sequence of probes (Anton Vasilyev)   
  - media: davinci: vpif_display: Mix memory leak on probe error path (Anton Vasilyev)   
  - selftests/bpf: fix a typo in map in map test (Roman Gushchin)   
  - powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage (Reza Arbab)   
  - gpio: tegra: Move driver registration to subsys_init level (Dmitry Osipenko)   
  - Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV (Johan Hedberg)   
  - i2c: aspeed: Add an explicit type casting for *get_clk_reg_val (Jae Hyun Yoo)   
  - ethtool: Remove trailing semicolon for static inline (Florian Fainelli)   
  - misc: mic: SCIF Fix scif_get_new_port() error handling (Dan Carpenter)   
  - ARC: [plat-axs*]: Enable SWAP (Alexey Brodkin)   
  - tpm: separate cmd_ready/go_idle from runtime_pm (Tomas Winkler)   
  - crypto: aes-generic - fix aes-generic regression on powerpc (Arnd Bergmann)   
  - switchtec: Fix Spectre v1 vulnerability (Gustavo A. R. Silva)   
  - x86/microcode: Update the new microcode revision unconditionally (Filippo Sironi)   
  - x86/microcode: Make sure boot_cpu_data.microcode is up-to-date (Prarit Bhargava)   
  - cpu/hotplug: Prevent state corruption on error rollback (Thomas Gleixner)   
  - cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun() (Neeraj Upadhyay)   
  - ALSA: hda - Fix cancel_work_sync() stall from jackpoll work (Takashi Iwai)   
  - KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr (Sean Christopherson)   
  - KVM: s390: vsie: copy wrapping keys to right place (Pierre Morel)   
  - Btrfs: fix data corruption when deduplicating between different files (Filipe Manana)   
  - smb3: check for and properly advertise directory lease support (Steve French)   
  - SMB3: Backup intent flag missing for directory opens with backupuid mounts (Steve French)   
  - MIPS: VDSO: Match data page cache colouring when D$ aliases (Paul Burton)   
  - android: binder: fix the race mmap and alloc_new_buf_locked (Minchan Kim)   
  - block: bfq: swap puts in bfqg_and_blkg_put (Konstantin Khlebnikov)   
  - nbd: don't allow invalid blocksize settings (Jens Axboe)   
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)   
  - i2c: i801: fix DNV's SMBCTRL register offset (Felipe Balbi)   
  - i2c: xiic: Make the start and the byte count write atomic (Shubhrajyoti Datta)


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1850a.el7uek]
changelog:
  - Issues with the rhashtable handling in include/net/inet_frag.h (Jack Vogel)  [Orabug: 29036192]  
  - Log full interface name including label during IPv4 migration (Sudhakar Dindukurti)  [Orabug: 29019945]  
  - A/A : Failover and failback does not work for IP aliases (Sudhakar Dindukurti)  [Orabug: 29019964]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1851.el7uek]
changelog:
  - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng)  [Orabug: 29011303]  {CVE-2018-19824} 
  - net/mlx5: Fix error handling in load one (Maor Gottlieb)  [Orabug: 28631861]  
  - net/mlx5: Fix mlx5_get_uars_page to return error code (Eran Ben Elisha)  [Orabug: 28631861]  
  - net/mlx5: Fix memory leak in bad flow of mlx5_alloc_irq_vectors (Alaa Hleihel)  [Orabug: 28631861]  
  - net/mlx4_core: Fix wrong calculation of free counters (Eran Ben Elisha)  [Orabug: 28631861]  
  - IB/core : Add null pointer check in addr_resolve (Muneendra Kumar M)  [Orabug: 28631884]  
  - IB/mlx5: Avoid passing an invalid QP type to firmware (Noa Osherovich)  [Orabug: 28631884]  
  - RDMA/{core, cma}: Simplify rdma_translate_ip (Parav Pandit)  [Orabug: 28631884]  
  - IB/core: Removed unused function (Parav Pandit)  [Orabug: 28631884]  
  - IB/SA: Check dlid before SA agent queries for ClassPortInfo (Venkata Sandeep Dhanalakota)  [Orabug: 28631884]  
  - IB/mlx5: When not in dual port RoCE mode, use provided port as native (Mark Bloch)  [Orabug: 28631884]  
  - net/mlx5: Free IRQs in shutdown path (Daniel Jurgens)  [Orabug: 28631916]  
  - net/mlx5e: DCBNL fix min inline header size for dscp (Huy Nguyen)  [Orabug: 28631916]  
  - IB/mlx4: Fix integer overflow when calculating optimal MTT size (Jack Morgenstein)  [Orabug: 28631916]  
  - net/mlx5: Fix mlx5_get_vector_affinity function (Israel Rukshin)  [Orabug: 28631916]  
  - net/mlx5e: Fixed sleeping inside atomic context (Aviad Yehezkel)  [Orabug: 28631916]  
  - IB/core: Generate GID change event regardless of RoCE GID table property (Parav Pandit)  [Orabug: 28631916]  
  - net/mlx5: Vport, Use 'kvfree()' for memory allocated by 'kvzalloc()' (Christophe JAILLET)  [Orabug: 28631939]  
  - IB/mlx4: Use 4K pages for kernel QP's WQE buffer (Jack Morgenstein)  [Orabug: 28825967]  
  - x86/cpu: Restore CPUID_8000_0008_EBX reload (Thomas Gleixner)  [Orabug: 28961067]  {CVE-2018-3620} 
  - x86/cpu: Incorrect calculation of x86_cache_bits (Liam Merwick)  [Orabug: 28961067]  {CVE-2018-3620} {CVE-2018-3620} 
  - cpuset: Minor cgroup2 interface updates (Tejun Heo)  [Orabug: 29013584]  
  - cpuset: Expose cpuset.cpus.subpartitions with cgroup_debug (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Add documentation about the new "cpuset.sched.partition" flag (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Use descriptive text when reading/writing cpuset.sched.partition (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Expose cpus.effective and mems.effective on cgroup v2 root (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Make generate_sched_domains() work with partition (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Make CPU hotplug work with partition (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Track cpusets that use parent's effective_cpus (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Add an error state to cpuset.sched.partition (Waiman Long)   
  - cpuset: Add new v2 cpuset.sched.partition flag (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Simply allocation and freeing of cpumasks (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Define data structures to support scheduling partition (Waiman Long)  [Orabug: 29013584]  
  - cpuset: Enable cpuset controller in default hierarchy (Waiman Long)  [Orabug: 29013584]  
  - xfs: enhance dinode verifier (Eric Sandeen)  [Orabug: 29044524]  {CVE-2018-10322} 
  - xfs: move inode fork verifiers to xfs_dinode_verify (Darrick J. Wong)  [Orabug: 29044524]  {CVE-2018-10322} 
  - Revert "xfs: move inode fork verifiers to xfs_dinode_verify" (Shan Hai)  [Orabug: 29044524]  
  - Revert "xfs: enhance dinode verifier" (Shan Hai)  [Orabug: 29044524]  
  - Issues with the rhashtable handling in include/net/inet_frag.h (Jack Vogel)  [Orabug: 29036192]  
  - mm/memblock: introduce PHYS_ADDR_MAX (Stefan Agner)  [Orabug: 29029883]  
  - mm: Preserve _PAGE_DEVMAP across mprotect() calls (Jan Kara)  [Orabug: 29029883]  
  - filesystem-dax: Fix dax_layout_busy_page() livelock (Dan Williams)  [Orabug: 29029883]  
  - dax: Fix deadlock in dax_lock_mapping_entry() (Jan Kara)  [Orabug: 29029883]  
  - filesystem-dax: Fix use of zero page (Matthew Wilcox)  [Orabug: 29029883]  
  - uaccess: Fix is_source param for check_copy_size() in copy_to_iter_mcsafe() (Dave Jiang)   
  - tools/testing/nvdimm: improve emulation of smart injection (Vishal Verma)  [Orabug: 29029883]  
  - device-dax: avoid hang on error before devm_memremap_pages() (Stefan Hajnoczi)  [Orabug: 29029883]  
  - libnvdimm: Export max available extent (Keith Busch)  [Orabug: 29029883]  
  - libnvdimm: Use max contiguous area for namespace size (Keith Busch)  [Orabug: 29029883]  
  - filesystem-dax: Do not request kaddr and pfn when not required (Huaisheng Ye)  [Orabug: 29029883]  
  - dax/super: Do not request a pointer kaddr when not required (Huaisheng Ye)  [Orabug: 29029883]  
  - tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access() (Huaisheng Ye)  [Orabug: 29029883]  
  - s390, dcssblk: kaddr and pfn can be NULL to ->direct_access() (Huaisheng Ye)  [Orabug: 29029883]  
  - libnvdimm, pmem: kaddr and pfn can be NULL to ->direct_access() (Huaisheng Ye)  [Orabug: 29029883]  
  - acpi/nfit: queue issuing of ars when an uc error notification comes in (Dave Jiang)  [Orabug: 29029883]  
  - tools/testing/nvdimm: Make DSM failure code injection an override (Dan Williams)  [Orabug: 29029883]  
  - acpi, nfit: Prefer _DSM over _LSR for namespace label reads (Dan Williams)  [Orabug: 29029883]  
  - libnvdimm: Introduce locked DIMM capacity support (Dan Williams)  [Orabug: 29029883]  
  - Log full interface name including label during IPv4 migration (Sudhakar Dindukurti)  [Orabug: 29019945]  
  - A/A : Failover and failback does not work for IP aliases (Sudhakar Dindukurti)  [Orabug: 29019964]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1901.el7uek]
changelog:
  - Corrections to netns rhashtable memory handling (Jack Vogel)  [Orabug: 29054057]  
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 29003168]  
  - x86/alternative: check int3 breakpoint physical addresses (Alexandre Chartre)  [Orabug: 29117348]  
  - cgroup: Fix dom_cgrp propagation when enabling threaded mode (Tejun Heo)  [Orabug: 29122557]  
  - arm64: Extend erratum 27456 workaround to ThunderX 83xx (Eric Saint-Etienne)  [Orabug: 29048523]  
  - hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz)  [Orabug: 28434766]  
  - mm: migration: fix migration of huge PMD shared pages (Mike Kravetz)  [Orabug: 28434766]  
  - mm/mmu_notifier: avoid double notification when it is useless (Jérôme Glisse)  [Orabug: 28434766]  
  - mm: defer ZONE_DEVICE page initialization to the point where we init pgmap (Alexander Duyck)  [Orabug: 28305449]  
  - mm: create non-atomic version of SetPageReserved for init use (Alexander Duyck)  [Orabug: 28305449]  
  - libnvdimm: Hold reference on parent while scheduling async init (Alexander Duyck)  [Orabug: 28305449]  
  - libnvdimm: Set device node in nd_device_register (Alexander Duyck)  [Orabug: 28305449]  
  - mm/memory_hotplug: optimize memory hotplug (Pavel Tatashin)  [Orabug: 28305449]  
  - mm/memory_hotplug: don't read nid from struct page during hotplug (Pavel Tatashin)  [Orabug: 28305449]  
  - mm/memory_hotplug: optimize probe routine (Pavel Tatashin)  [Orabug: 28305449]  
  - mm: uninitialized struct page poisoning sanity checking (Pavel Tatashin)  [Orabug: 28305449]  
  - x86/mm/memory_hotplug: determine block size based on the end of boot memory (Pavel Tatashin)  [Orabug: 28305449]  
  - mm/memory_hotplug: enforce block size aligned range check (Pavel Tatashin)  [Orabug: 28305449]  
  - IB/core: Move Oracle's priorietary UVERBS_OBJECT_* out of the way (Gerd Rausch)  [Orabug: 29061552]  
  - nfs: don't dirty kernel pages read by direct-io (Dave Kleikamp)  [Orabug: 28649580]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.1.el7uek]
changelog:
  - ocfs2: don't clear bh uptodate for block read (Junxiao Bi)  [Orabug: 29159643]  
  - ocfs2: clear journal dirty flag after shutdown journal (Junxiao Bi)  [Orabug: 29154594]  
  - ocfs2: fix panic due to unrecovered local alloc (Junxiao Bi)  [Orabug: 29154594]  
  - mm: parallelize deferred struct page initialization within each node (Daniel Jordan)  [Orabug: 25577642]  
  - vfio: relieve mmap_sem reader cacheline bouncing by holding it longer (Daniel Jordan)  [Orabug: 25577642]  
  - vfio: ease mmap_sem writer contention by caching locked_vm (Daniel Jordan)  [Orabug: 25577642]  
  - vfio: parallelize vfio_pin_map_dma (Daniel Jordan)  [Orabug: 25577642]  
  - ktask: add undo support (Daniel Jordan)  [Orabug: 25577642]  
  - ktask, lockdep: detect deadlocks between master and helper threads (Daniel Jordan)  [Orabug: 25577642]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 25577642]  
  - ktask: add documentation (Daniel Jordan)  [Orabug: 25577642]  
  - uek-rpm: build in vfio and vfio_iommu_type1 modules (Daniel Jordan)  [Orabug: 25577642]  
  - ice: Do not enable NAPI on q_vectors that have no rings (Young Xiao)  [Orabug: 29031236]  
  - ice: Fix possible NULL pointer de-reference (Bruce Allan)  [Orabug: 29031236]  
  - ice: Use Tx|Rx in comments (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Cosmetic formatting changes (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Cleanup short function signatures (Bruce Allan)  [Orabug: 29031236]  
  - ice: Cleanup ice_tx_timeout() (Bruce Allan)  [Orabug: 29031236]  
  - ice: Fix return value from NAPI poll (Dave Ertman)  [Orabug: 29031236]  
  - ice: Constify global structures that can/should be (Bruce Allan)  [Orabug: 29031236]  
  - ice: Do not set LAN_EN for MAC-VLAN filters (Yashaswini Raghuram Prathivadi Bhayankaram)  [Orabug: 29031236]  
  - ice: Pass the return value of ice_init_def_sw_recp() (Jaroslaw Ilgiewicz)  [Orabug: 29031236]  
  - ice: Cleanup duplicate control queue code (Bruce Allan)  [Orabug: 29031236]  
  - ice: Do autoneg based on VSI state (Akeem G Abodunrin)  [Orabug: 29031236]  
  - ice: Remove ICE_MAX_TXQ_PER_TXQG check when configuring Tx queue (Md Fahad Iqbal Polash)  [Orabug: 29031236]  
  - ice: Destroy scheduler tree in reset path (Henry Tieman)  [Orabug: 29031236]  
  - ice: Fix to make VLAN priority tagged traffic to appear on all TCs (Usha Ketineni)  [Orabug: 29031236]  
  - ice: Call pci_disable_sriov before stopping queues for VF (Brett Creeley)  [Orabug: 29031236]  
  - ice: Increase Rx queue disable timeout (Piotr Raczynski)  [Orabug: 29031236]  
  - ice: Fix NVM mask defines (Lev Faerman)  [Orabug: 29031236]  
  - ice: Avoid nested RTNL locking in ice_dis_vsi (Dave Ertman)  [Orabug: 29031236]  
  - ice: Calculate guaranteed VSIs per function and use it (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Remove node before releasing VSI (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Check for q_vector when stopping rings (Tony Nguyen)  [Orabug: 29031236]  
  - ice: Fix debug print in ice_tx_timeout (Brett Creeley)  [Orabug: 29031236]  
  - Documentation: ice: Prepare documentation for RST conversion (Jeff Kirsher)  [Orabug: 29031236]  
  - ice: Change req_speeds to be u16 (Chinh T Cao)  [Orabug: 29031236]  
  - ice: Fix the bytecount sent to netdev_tx_sent_queue (Brett Creeley)  [Orabug: 29031236]  
  - ice: Fix tx_timeout in PF driver (Brett Creeley)  [Orabug: 29031236]  
  - ice: Fix napi delete calls for remove (Dave Ertman)  [Orabug: 29031236]  
  - ice: Fix typo in error message (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Fix flags for port VLAN (Md Fahad Iqbal Polash)  [Orabug: 29031236]  
  - ice: Remove duplicate addition of VLANs in replay path (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Free VSI contexts during for unload (Victor Raj)  [Orabug: 29031236]  
  - ice: Fix dead device link issue with flow control (Akeem G Abodunrin)  [Orabug: 29031236]  
  - ice: Check for reset in progress during remove (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Set carrier state and start/stop queues in rebuild (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Poll for link status change (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Allocate VF interrupts and set queue map (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Introduce ice_dev_onetime_setup (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Use capability count returned by the firmware (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update expected FW version (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Change device ID define names to align with branding string (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Make ice_msix_clean_rings static (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update version string (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Use the right function to enable/disable VSI (Dave Ertman)  [Orabug: 29031236]  
  - ice: Add more flexibility on how we assign an ITR index (Brett Creeley)  [Orabug: 29031236]  
  - ice: Fix potential null pointer issues (Dave Ertman)  [Orabug: 29031236]  
  - ice: Add code to go from ICE_FWD_TO_VSI_LIST to ICE_FWD_TO_VSI (Brett Creeley)  [Orabug: 29031236]  
  - ice: Fix forward to queue group logic (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Extend malicious operations detection logic (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Notify VF of link status change (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Implement virtchnl commands for AVF support (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add handlers for VF netdevice operations (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add support for VF reset events (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update VSI and queue management code to handle VF VSI (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add handler to configure SR-IOV (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add support to detect SR-IOV capability and mailbox queues (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Fix error on driver remove (Dave Ertman)  [Orabug: 29031236]  
  - ice: Add support for dynamic interrupt moderation (Brett Creeley)  [Orabug: 29031236]  
  - ice: Align ice_reset_req enum values to hardware reset values (Brett Creeley)  [Orabug: 29031236]  
  - ice: Implement ethtool hook for RSS switch (Md Fahad Iqbal Polash)  [Orabug: 29031236]  
  - ice: Split irq_tracker into sw_irq_tracker and hw_irq_tracker (Preethi Banala)  [Orabug: 29031236]  
  - ice: Check for actual link state of port after reset (Dave Ertman)  [Orabug: 29031236]  
  - ice: Implement VSI replay framework (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Expand use of VSI handles part 2/2 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Expand use of VSI handles part 1/2 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Change pf state behavior to protect reset path (Dave Ertman)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 7/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 6/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 5/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 4/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 3/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 2/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Move common functions out of ice_main.c part 1/7 (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: fix changing of ring descriptor size (ethtool -G) (Bruce Allan)  [Orabug: 29031236]  
  - ice: Update to capabilities admin queue command (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Query the Tx scheduler node before adding it (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update comment for ice_fltr_mgmt_list_entry (Brett Creeley)  [Orabug: 29031236]  
  - ice: update fw version check logic (Jacob Keller)  [Orabug: 29031236]  
  - ice: update branding strings and supported device ids (Bruce Allan)  [Orabug: 29031236]  
  - ice: replace unnecessary memcpy with direct assignment (Bruce Allan)  [Orabug: 29031236]  
  - ice: use [sr]q.count when checking if queue is initialized (Jacob Keller)  [Orabug: 29031236]  
  - ice: remove ndo_poll_controller (Eric Dumazet)  [Orabug: 29031236]  
  - intel-ethernet: use correct module license (Jesse Brandeburg)  [Orabug: 29031236]  
  - ice: Fix and update driver version string (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Introduce SERVICE_DIS flag and service routine functions (Akeem G Abodunrin)  [Orabug: 29031236]  
  - ice: Enable VSI Rx/Tx pruning only when VLAN 0 is active (Brett Creeley)  [Orabug: 29031236]  
  - ice: Enable firmware logging during device initialization. (Hieu Tran)  [Orabug: 29031236]  
  - ice: Implement ice_bridge_getlink and ice_bridge_setlink (Md Fahad Iqbal Polash)  [Orabug: 29031236]  
  - ice: Add support for Tx hang, Tx timeout and malicious driver detection (Sudheer Mogilappagari)  [Orabug: 29031236]  
  - ice: Clean up register file (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Implement handlers for ethtool PHY/link operations (Chinh Cao)  [Orabug: 29031236]  
  - ice: Refactor VSI allocation, deletion and rebuild flow (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Refactor switch rule management structures and functions (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Code optimization for ice_fill_sw_rule() (Zhenning Xiao)  [Orabug: 29031236]  
  - ice: Prevent control queue operations during reset (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update request resource command to latest specification (Dan Nowlin)  [Orabug: 29031236]  
  - ice: Updates to Tx scheduler code (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Rework flex descriptor programming (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Trivial formatting fixes (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Change struct members from bool to u8 (Bruce Allan)  [Orabug: 29031236]  
  - ice: Fix potential return of uninitialized value (Jesse Brandeburg)  [Orabug: 29031236]  
  - ice: Fix a few null pointer dereference issues (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update to interrupts enabled in OICR (Bruce Allan)  [Orabug: 29031236]  
  - ice: Set VLAN flags correctly (Brett Creeley)  [Orabug: 29031236]  
  - ice: Use order_base_2 to calculate higher power of 2 (Jacob Keller)  [Orabug: 29031236]  
  - ice: Fix bugs in control queue processing (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Clean control queues only when they are initialized (Preethi Banala)  [Orabug: 29031236]  
  - ice: Report stats for allocated queues via ethtool stats (Jacob Keller)  [Orabug: 29031236]  
  - ice: Cleanup magic number (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Remove unnecessary node owner check (Bruce Allan)  [Orabug: 29031236]  
  - ice: Fix multiple static analyser warnings (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update NVM AQ command functions (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Set rq_last_status when cleaning rq (Jeff Shaw)  [Orabug: 29031236]  
  - ice: Fix insufficient memory issue in ice_aq_manage_mac_read (Md Fahad Iqbal Polash)  [Orabug: 29031236]  
  - ice: Do not check INTEVENT bit for OICR interrupts (Ben Shelton)  [Orabug: 29031236]  
  - ice: Fix incorrect comment for action type (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Fix initialization for num_nodes_added (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Bug fixes in ethtool code (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Fix error return code in ice_init_hw() (Wei Yongjun)  [Orabug: 29031236]  
  - ice: Implement filter sync, NDO operations and bump version (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Support link events, reset and rebuild (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Update Tx scheduler tree for VSI multi-Tx queue support (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add stats and ethtool support (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add support for VLANs and offloads (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Implement transmit and NAPI support (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Configure VSIs for Tx/Rx (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add support for switch filter programming (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add support for VSI allocation and deallocation (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Initialize PF and setup miscellaneous interrupt (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Get MAC/PHY/link info and scheduler topology (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Get switch config, scheduler config and device capabilities (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Start hardware initialization (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add support for control queues (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - ice: Add basic driver framework for Intel(R) E800 Series (Anirudh Venkataramanan)  [Orabug: 29031236]  
  - igc: Remove obsolete IGC_ERR define (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Clean up code (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Tidy up some white space (Dan Carpenter)  [Orabug: 29031258]  
  - igc: fix error return handling from call to netif_set_real_num_tx_queues (Colin Ian King)  [Orabug: 29031258]  
  - igc: Remove set but not used variable 'pci_using_dac' (YueHaibing)  [Orabug: 29031258]  
  - igc: Remove set but not used variables 'ctrl_ext, link_mode' (YueHaibing)  [Orabug: 29031258]  
  - igc: Add watchdog (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add setup link functionality (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add code for PHY support (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add NVM support (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add HW initialization code (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add transmit and receive fastpath and interrupt handlers (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add support for Tx/Rx rings (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add interrupt support (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add netdev (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add support for PF (Sasha Neftin)  [Orabug: 29031258]  
  - igc: Add skeletal frame for Intel(R) 2.5G Ethernet Controller support (Sasha Neftin)  [Orabug: 29031258]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.2.el7uek]
changelog:
  - Change mincore() to count "mapped" pages rather than "cached" pages (Linus Torvalds)  [Orabug: 29187400]  {CVE-2019-5489} 
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 29191493]  
  - dtrace: ensure SDT probe processing can handle symbols with same names (Kris Van Hees)  [Orabug: 29189508]  
  - dtrace: ensure ustack works regardless of glibc stack implementation (Kris Van Hees)  [Orabug: 29189506]  
  - ctf: explicitly specify the sizes of structures and unions (Nick Alcock)  [Orabug: 29192683]  
  - ctf: do not emit types in functions, or types that point into them (Nick Alcock)  [Orabug: 29192673]  
  - uek-rpm: remove obsolete CTF-related find-debuginfo hack (Nick Alcock)  [Orabug: 29192654]  
  - net/rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 29189346]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.3.el7uek]
changelog:
  - delayacct: Fix kernel panic due to null pointer (Tom Hromatka)  [Orabug: 29222501]  
  - x86/platform/UV: Fix GAM MMR references in the UV x2apic code (Mike Travis)  [Orabug: 29205472]  
  - x86/platform/UV: Fix GAM MMR changes in UV4A (Mike Travis)  [Orabug: 29205472]  
  - x86/platform/UV: Add references to access fixed UV4A HUB MMRs (Mike Travis)  [Orabug: 29205472]  
  - x86/platform/UV: Fix UV4A support on new Intel Processors (Mike Travis)  [Orabug: 29205472]  
  - x86/platform/UV: Update uv_mmrs.h to prepare for UV4A fixes (Mike Travis)  [Orabug: 29205472]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.4.el7uek]
changelog:
  - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29018602]  
  - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29018602]  
  - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29018602]  
  - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29018602]  
  - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29018602]  
  - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli)  [Orabug: 29189776]  {CVE-2018-18397} 
  - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli)  [Orabug: 29189776]  {CVE-2018-18397} 
  - libnvdimm/security: Quiet security operations (Dan Williams)  [Orabug: 29199920]  
  - libnvdimm/security: Add documentation for nvdimm security support (Dave Jiang)  [Orabug: 29199920]  
  - tools/testing/nvdimm: add Intel DSM 1.8 support for nfit_test (Dave Jiang)  [Orabug: 29199920]  
  - tools/testing/nvdimm: Add overwrite support for nfit_test (Dave Jiang)  [Orabug: 29199920]  
  - tools/testing/nvdimm: Add test support for Intel nvdimm security DSMs (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm/security: add Intel DSM 1.8 master passphrase support (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm/security: Add security DSM overwrite support (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Add support for issue secure erase DSM to Intel nvdimm (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Add enable/update passphrase support for Intel nvdimms (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Add disable passphrase support to Intel nvdimm. (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Add unlock of nvdimm support for Intel DIMMs (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Add freeze security support to Intel nvdimm (Dave Jiang)  [Orabug: 29199920]  
  - libnvdimm/dimm: Fix security capability detection for non-Intel NVDIMMs (Jane Chu)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Introduce nvdimm_security_ops (Dave Jiang)  [Orabug: 29199920]  
  - keys-encrypted: add nvdimm key format type to encrypted keys (Dave Jiang)  [Orabug: 29199920]  
  - keys: Export lookup_user_key to external users (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit, libnvdimm: Store dimm id as a member to struct nvdimm (Dave Jiang)  [Orabug: 29199920]  
  - acpi/nfit: Add support for Intel DSM 1.8 commands (Dave Jiang)  [Orabug: 29199920]  
  - ACPI/nfit: Adjust annotation for why return 0 if fail to find NFIT at start (Ocean He)  [Orabug: 29199920]  
  - libnvdimm, bus: Check id immediately following ida_simple_get (Ocean He)  [Orabug: 29199920]  
  - libnvdimm, namespace: Replace kmemdup() with kstrndup() (Andy Shevchenko)  [Orabug: 29199920]  
  - libnvdimm, pfn: Pad pfn namespaces relative to other regions (Dan Williams)  [Orabug: 29199920]  
  - tools/testing/nvdimm: Align test resources to 128M (Dan Williams)  [Orabug: 29199920]  
  - tools/testing/nvdimm: Fix the array size for dimm devices. (Masayoshi Mizuma)  [Orabug: 29199920]  
  - acpi, nfit: Fix ARS overflow continuation (Dan Williams)  [Orabug: 29199920]  
  - libnvdimm: remove duplicate include (Pankaj Gupta)  [Orabug: 29199920]  
  - libnvdimm, namespace: Drop the repeat assignment for variable dev->parent (GuangZhe Fu)  [Orabug: 29199920]  
  - UAPI: ndctl: Remove use of PAGE_SIZE (David Howells)  [Orabug: 29199920]  
  - UAPI: ndctl: Fix g++-unsupported initialisation in headers (David Howells)  [Orabug: 29199920]  
  - libnvdimm, pfn: during init, clear errors in the metadata area (Vishal Verma)  [Orabug: 29199920]  
  - acpi/nfit: Fix user-initiated ARS to be "ARS-long" rather than "ARS-short" (Dan Williams)  [Orabug: 29199920]  
  - acpi, nfit: Fix Address Range Scrub completion tracking (Dan Williams)  [Orabug: 29199920]  
  - tools/testing/nvdimm: Populate dirty shutdown data (Dan Williams)  [Orabug: 29199920]  
  - acpi, nfit: Collect shutdown status (Dan Williams)  [Orabug: 29199920]  
  - acpi, nfit: Introduce nfit_mem flags (Dan Williams)  [Orabug: 29199920]  
  - libnvdimm, label: Fix sparse warning (Dan Williams)  [Orabug: 29199920]  
  - libnvdimm, pmem: Fix badblocks population for 'raw' namespaces (Dan Williams)  [Orabug: 29199920]  
  - libnvdimm, region: Fail badblocks listing for inactive regions (Dan Williams)  [Orabug: 29199920]  
  - nvdimm: Use namespace index data to reduce number of label reads needed (Alexander Duyck)  [Orabug: 29199920]  
  - nvdimm: Split label init out from the logic for getting config data (Alexander Duyck)  [Orabug: 29199920]  
  - nvdimm: Remove empty if statement (Alexander Duyck)  [Orabug: 29199920]  
  - nvdimm: Clarify comment in sizeof_namespace_index (Alexander Duyck)  [Orabug: 29199920]  
  - nvdimm: Sanity check labeloff (Alexander Duyck)  [Orabug: 29199920]  
  - libnvdimm, dimm: Maximize label transfer size (Dan Williams)  [Orabug: 29199920]  
  - x86/apic/x2apic: set affinity of a single interrupt to one cpu (Jianchao Wang)  [Orabug: 29201449]  
  - genirq/affinity: Don't return with empty affinity masks on error (Thomas Gleixner)  [Orabug: 29209329]  
  - scsi: lpfc: Update lpfc version to 12.0.0.10 (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Adding ability to reset chip via pci bus reset (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Add log messages to aid in debugging fc4type discovery issues (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix discovery failure when PLOGI is defered (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: update fault value on successful trunk events. (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct MDS loopback diagnostics support (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix link state reporting for trunking when adapter is offline (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan D. Milne)  [Orabug: 29212758]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 29212758]  
  - Revert "scsi: lpfc: ls_rjt erroneus FLOGIs" (Martin K. Petersen)  [Orabug: 29212758]  
  - scsi: lpfc: update driver version to 12.0.0.9 (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix dif and first burst use in write commands (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix driver release of fw-logging buffers (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Defer LS_ACC to FLOGI on point to point logins (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: ls_rjt erroneus FLOGIs (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: rport port swap discovery issue. (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Cap NPIV vports to 256 (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix kernel Oops due to null pring pointers (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix a duplicate 0711 log message number. (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix discovery failures during port failovers with lots of vports (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: refactor mailbox structure context fields (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix panic when FW-log buffsize is not initialized (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: fix block guard enablement on SLI3 adapters (Martin Wilck)  [Orabug: 29212758]  
  - scsi: lpfc: Use dma_zalloc_coherent (Sabyasachi Gupta)  [Orabug: 29212758]  
  - scsi: lpfc: use dma_set_mask_and_coherent (Christoph Hellwig)  [Orabug: 29212758]  
  - scsi: lpfc: update driver version to 12.0.0.8 (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: add Trunking support (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Implement GID_PT on Nameserver query to support faster failover (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct loss of fc4 type on remote port address change (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct LCB RJT handling (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct errors accessing fw log (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Reset link or adapter instead of doing infinite nameserver PLOGI retry (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Fix lpfc_sli4_read_config return value check (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: Correct speeds on SFP swap (James Smart)  [Orabug: 29212758]  
  - scsi: lpfc: fix remoteport access (Arnd Bergmann)  [Orabug: 29212758]  
  - scsi: lpfc: Remove set but not used variables 'tgtp' (YueHaibing)  [Orabug: 29212758]  
  - scsi: lpfc: Remove set but not used variable 'psli' (YueHaibing)  [Orabug: 29212758]  
  - scsi: lpfc: Remove set but not used variables 'fc_hdr' and 'hw_page_size' (YueHaibing)  [Orabug: 29212758]  
  - scsi: lpfc: fix spelling mistake "Resrouce" -> "Resource" (Colin Ian King)  [Orabug: 29212758]  
  - scsi: lpfc: remove a bogus pci_dma_sync_single_for_device call (Christoph Hellwig)  [Orabug: 29212758]  
  - scsi: lpfc: Synchronize access to remoteport via rport (James Smart)  [Orabug: 29212758]  
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 29213209]  
  - nvme-pci: fix memory leak on probe failure (Keith Busch)  [Orabug: 29214250]  
  - nvme-pci: limit max IO size and segments to avoid high order allocations (Jens Axboe)  [Orabug: 29214250]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29217829]  
  - arm64, dtrace: add non-virtual clocksources to fbt blacklist (Nick Alcock)  [Orabug: 29220925]  
  - be2net: Fix HW stall issue in Lancer (Suresh Reddy)  [Orabug: 29222472]  
  - be2net: Handle transmit completion errors in Lancer (Suresh Reddy)  [Orabug: 29222472]  
  - be2net: Update the driver version to 12.0.0.0 (Suresh Reddy)  [Orabug: 29222472]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 29222813]  
  - scsi: mpt3sas: Update driver version to 27.101.00.00 (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Replace readl with ioc->base_readl (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Add separate function for aero doorbell reads (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Introduce flag for aero based controllers (Suganath Prabu)  [Orabug: 29229740]  
  - mpt3sas: Display message on Configurable secure HBA (Sreekanth Reddy)  [Orabug: 29229740]  
  - Revert "mpt3sas: Display message on Configurable secure HBA" (Sreekanth Reddy)  [Orabug: 29229740]  
  - mpt3sas: Display message on Configurable secure HBA (Sreekanth Reddy)  [Orabug: 29229740]  
  - Revert "mpt3sas: Display message only for Configurable secure controller" (Sreekanth Reddy)  [Orabug: 29229740]  
  - mpt3sas: Display message only for Configurable secure controller (Sreekanth Reddy)  [Orabug: 29229740]  
  - scsi: mpt3sas: Bump driver version to 27.100.00.00 (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11 (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Don't modify EEDPTagMode field setting on SAS3.5 HBA devices (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix Sync cache command failure during driver unload (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Call sas_remove_host before removing the target devices (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Refactor mpt3sas_wait_for_ioc function (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Separate out mpt3sas_wait_for_ioc (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Added new #define variable IOC_OPERATIONAL_WAIT_COUNT (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Add support for Aero controllers (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: Update MPI headers to support Aero controllers (Suganath Prabu)  [Orabug: 29229740]  
  - scsi: mpt3sas: switch to generic DMA API (Christoph Hellwig)  [Orabug: 29229740]  
  - scsi: mpt3sas: Remove unnecessary parentheses and simplify null checks (Nathan Chancellor)  [Orabug: 29229740]  
  - scsi: mpt3sas: Use dma_pool_zalloc (Souptick Joarder)  [Orabug: 29229740]  
  - scsi: mpt3sas: Remove unused macro MPT3SAS_FMT (Joe Perches)  [Orabug: 29229740]  
  - scsi: mpt3sas: Convert logging uses with MPT3SAS_FMT without logging levels (Joe Perches)  [Orabug: 29229740]  
  - scsi: mpt3sas: Remove KERN_WARNING from panic uses (Joe Perches)  [Orabug: 29229740]  
  - scsi: mpt3sas: Convert logging uses with MPT3SAS_FMT and reply_q_name to %s: (Joe Perches)  [Orabug: 29229740]  
  - scsi: mpt3sas: Convert mlsleading uses of pr_<level> with MPT3SAS_FMT (Joe Perches)  [Orabug: 29229740]  
  - mpt3sas: Convert uses of pr_<level> with MPT3SAS_FMT to ioc_<level> (Suganath Prabu S)  [Orabug: 29229740]  
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches)  [Orabug: 29229740]  
  - PCI/AER: Remove pci_cleanup_aer_uncorrect_error_status() calls (Oza Pawandeep)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix calltrace observed while running IO & reset (Sreekanth Reddy)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix for regression caused by sparse cleanups (Chaitra P B)  [Orabug: 29229740]  
  - mpt3sas: Improve kernel-doc headers (Suganath Prabu S)  [Orabug: 29229740]  
  - scsi: mpt3sas: Split _base_reset_handler(), mpt3sas_scsih_reset_handler() and mpt3sas_ctl_reset_handler() (Bart Van Assche)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix a race condition in mpt3sas_base_hard_reset_handler() (Bart Van Assche)  [Orabug: 29229740]  
  - scsi: mpt3sas: Introduce struct mpt3sas_nvme_cmd (Bart Van Assche)  [Orabug: 29229740]  
  - scsi: mpt3sas: Annotate switch/case fall-through (Bart Van Assche)  [Orabug: 29229740]  
  - scsi: mpt3sas: Remove set-but-not-used variables (Bart Van Assche)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix indentation (Bart Van Assche)  [Orabug: 29229740]  
  - scsi: mpt3sas: Update driver version "26.100.00.00" (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Fix, False timeout prints for ioctl and other internal commands during controller reset. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Don't access the structure after decrementing it's instance reference count. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Incorrect command status was set/marked as not used. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Don't abort I/Os issued to NVMe drives while processing Async Broadcast primitive event. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Add an I/O barrier (Tomas Henzl)  [Orabug: 29229740]  
  - scsi: mpt3sas: fix spelling mistake: "disbale" -> "disable" (Colin Ian King)  [Orabug: 29229740]  
  - scsi: mpt3sas: Update driver version "25.100.00.00" (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: fix possible memory leak. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: For NVME device, issue a protocol level reset (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Update MPI Headers (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Report Firmware Package Version from HBA Driver. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Cache enclosure pages during enclosure add. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Allow processing of events during driver unload. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Increase event log buffer to support 24 port HBA's. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Added support for SAS Device Discovery Error Event. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Enhanced handling of Sense Buffer. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Optimize I/O memory consumption in driver. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Lockless access for chain buffers. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Pre-allocate RDPQ Array at driver boot time. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: Bug fix for big endian systems. (Chaitra P B)  [Orabug: 29229740]  
  - scsi: mpt3sas: clarify mmio pointer types (Arnd Bergmann)  [Orabug: 29229740]  
  - mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers. (Suganath Prabu S)  [Orabug: 29229740]  
  - scsi: mpt3sas: Introduce function to clone mpi reply. (Suganath Prabu Subramani)  [Orabug: 29229740]  
  - scsi: mpt3sas: Introduce function to clone mpi request. (Suganath Prabu Subramani)  [Orabug: 29229740]  
  - csi: mpt3sas: Introduce Base function for cloning. (root)  [Orabug: 29229740]  
  - scsi: mpt3sas: Introduce API to get BAR0 mapped buffer address (Suganath Prabu Subramani)  [Orabug: 29229740]  
  - scsi: mpt3sas: Configure reply post queue depth, DMA and sgl tablesize. (root)  [Orabug: 29229740]  
  - scsi: mpt3sas: Add PCI device ID for Andromeda. (Suganath Prabu Subramani)  [Orabug: 29229740]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.5.el7uek]
changelog:
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29054635]  
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 29200904]  
  - uek-rpm: Enable Ext2 extended attributes (Dave Aldridge)  [Orabug: 29211514]  
  - [UEK5] net/mlx5: Enable 1M QPs (Erez Alfasi)  [Orabug: 29229777]  
  - xen-netback: wake up xenvif_dealloc_kthread when it should stop (Dongli Zhang)  [Orabug: 29237354]  
  - xen/blkback: rework validate_io_op() (Dongli Zhang)  [Orabug: 29237427]  
  - xen/blkback: optimize validate_io_op() to filter BLKIF_OP_RESERVED_1 operation (Dongli Zhang)  [Orabug: 29237427]  
  - xen/blkback: do not BUG() for invalid blkif_request from frontend (Dongli Zhang)  [Orabug: 29237427]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29248170]  
  - kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs (Eduardo Habkost)  [Orabug: 29254547]  
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29258950]  {CVE-2018-17972} 
  - rdmaip: Name structure fields appropriately (for better readability) (Sudhakar Dindukurti)  [Orabug: 29254664]  
  - rdmaip: Add rdmaip_process_async_event() (Sudhakar Dindukurti)  [Orabug: 29254662]  
  - rdmaip: Potential race conditions (Sudhakar Dindukurti)  [Orabug: 29254654]  
  - rdmaip: check return value of the rdmaip_init_port (Sudhakar Dindukurti)  [Orabug: 29254643]  
  - rdmaip: Optimize rdmaip_event_handler() (Sudhakar Dindukurti)  [Orabug: 29254637]  
  - rdmaip: Add new function rdmaip_sched_failover_failback() to sechedule failover/failback (Sudhakar Dindukurti)  [Orabug: 29254508]  
  - rdmaip: Skip failover and failback operations during network reconfiguration (Sudhakar Dindukurti)  [Orabug: 29254404]  
  - rdmaip: Add new function rdmaip_add_new_rdmaip_port() (Sudhakar Dindukurti)  [Orabug: 29254373]  
  - rdmaip: Add rdmaip_update_port_status_all_layers() function (Sudhakar Dindukurti)  [Orabug: 29254356]  
  - rdmaip: Add a new function rdmaip_find_port_tstate() to find port transition state (Sudhakar Dindukurti)  [Orabug: 29254331]  
  - Replace alloc_page() with static allocation (Sudhakar Dindukurti)  [Orabug: 29254264]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.6.el7uek]
changelog:
  - qede: Add netconsole support (Jan Glauber)  [Orabug: 28542958]  
  - module: check module read policy in finit_module (Eric Snowberg)  [Orabug: 29228426]  
  - ima: remove module check from lock_down_rules (Eric Snowberg)  [Orabug: 29228426]  
  - ima: fix updating the ima_appraise flag (Mimi Zohar)  [Orabug: 29228426]  
  - kvm: x86: Report STIBP on GET_SUPPORTED_CPUID (Eduardo Habkost)  [Orabug: 29229726]  
  - x86/kvm: move kvmclock_init to kvm_init_platform() (Prasad Singamsetty)  [Orabug: 29229886]  
  - net/sched: cls_flower: Use correct inline function for assignment of vlan tpid (Jianbo Liu)  [Orabug: 29249199]  
  - net/mlx5e: Support offloading double vlan push/pop tc actions (Jianbo Liu)  [Orabug: 29249199]  
  - net/mlx5e: Refactor tc vlan push/pop actions offloading (Jianbo Liu)  [Orabug: 29249199]  
  - net/mlx5e: Support offloading tc double vlan headers match (Jianbo Liu)  [Orabug: 29249199]  
  - net/mlx5: Add core support for double vlan push/pop steering action (Jianbo Liu)  [Orabug: 29249199]  
  - net/sched: flower: Fix null pointer dereference when run tc vlan command (Jianbo Liu)  [Orabug: 29249199]  
  - net/sched: flower: Add supprt for matching on QinQ vlan headers (Jianbo Liu)  [Orabug: 29249199]  
  - net/sched: flower: Dump the ethertype encapsulated in vlan (Jianbo Liu)  [Orabug: 29249199]  
  - net/flow_dissector: Add support for QinQ dissection (Jianbo Liu)  [Orabug: 29249199]  
  - net/sched: flower: Add support for matching on vlan ethertype (Jianbo Liu)  [Orabug: 29249199]  
  - net/flow_dissector: Save vlan ethertype from headers (Jianbo Liu)  [Orabug: 29249199]  
  - net/mlx5e: Get the required HW match level while parsing TC flow matches (Or Gerlitz)  [Orabug: 29249199]  
  - net/mlx5e: Properly order min inline mode setup while parsing TC matches (Or Gerlitz)  [Orabug: 29249199]  
  - net/mlx5e: Offload tc vlan push/pop using HW action (Or Gerlitz)  [Orabug: 29249199]  
  - net/mlx5: Add core support for vlan push/pop steering action (Or Gerlitz)  [Orabug: 29249199]  
  - net/mlx5: Embed mlx5_flow_act into fs_fte (Matan Barak)  [Orabug: 29249199]  
  - {net,IB}/mlx5: Add has_tag to mlx5_flow_act (Matan Barak)  [Orabug: 29249199]  
  - IB/mlx5: Pass mlx5_flow_act struct instead of multiple arguments (Boris Pismenny)  [Orabug: 29249199]  
  - net/mlx5: Add header re-write to the checks for conflicting actions (Or Gerlitz)  [Orabug: 29249199]  
  - net/mlx5e: Add 802.1ad VLAN insertion support (Gal Pressman)  [Orabug: 29249199]  
  - net/mlx5e: Add 802.1ad VLAN filter steering rules (Gal Pressman)  [Orabug: 29249199]  
  - net/mlx5e: Declare bitmap using kernel macro (Gal Pressman)  [Orabug: 29249199]  
  - net: Introduce netdev_*_once functions (Gal Pressman)  [Orabug: 29249199]  
  - net/mlx5e: Add rollback on add VLAN failure (Gal Pressman)  [Orabug: 29249199]  
  - net/mlx5e: Rename VLAN related variables and functions (Gal Pressman)  [Orabug: 29249199]  
  - net/mlx5: Allocate FTE object without lock (Maor Gottlieb)  [Orabug: 29249199]  
  - net/mlx5: Support multiple updates of steering rules in parallel (Maor Gottlieb)  [Orabug: 29249199]  
  - net/mlx5: Replace fs_node mutex with reader/writer semaphore (Maor Gottlieb)  [Orabug: 29249199]  
  - net/mlx5: Refactor FTE and FG creation code (Maor Gottlieb)  [Orabug: 29249199]  
  - net/mlx5: Export building of matched flow groups list (Maor Gottlieb)  [Orabug: 29249199]  
  - net/mlx5: Move the entry index allocator to flow group (Maor Gottlieb)  [Orabug: 29249199]  
  - uek-rpm: Enable ena driver (Somasundaram Krishnasamy)  [Orabug: 29250466]  
  - net: ena: Fix Kconfig dependency on X86 (Netanel Belgazal)  [Orabug: 29250466]  
  - net: ena: fix missing calls to READ_ONCE (Netanel Belgazal)  [Orabug: 29250466]  
  - net: ena: fix driver when PAGE_SIZE == 64kB (Netanel Belgazal)  [Orabug: 29250466]  
  - bnxt_en: Adjust default RX coalescing ticks to 10 us. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Support for 64-bit flow handle. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Increase context memory allocations on 57500 chips for RDMA. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add Level 2 context memory paging support. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Enhance bnxt_alloc_ring()/bnxt_free_ring(). (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add support for 2nd firmware message channel. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Introduce bnxt_get_hwrm_resp_addr & bnxt_get_hwrm_seq_id routines. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Avoid arithmetic on void * pointer. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Use macros for firmware message doorbell offsets. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Set hwrm_intr_seq_id value to its inverted value. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Update firmware interface spec. to 1.10.0.33. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: query force speeds before disabling autoneg mode. (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: Do not free port statistics buffer when device is down. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Save ring statistics before reset. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Return linux standard errors in bnxt_ethtool.c (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: Don't set ETS on unused TCs. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add ethtool -S priority counters. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add SR-IOV support for 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Disable MSIX before re-reserving NQs/CMPL rings. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Reserve 1 stat_ctx for RDMA driver. (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: Do not modify max_stat_ctxs after RDMA driver requests/frees stat_ctxs (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: get rid of num_stat_ctxs variable (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: Add bnxt_get_avail_cp_rings_for_en() helper function. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Store the maximum NQs available on the PF. (Michael Chan)  [Orabug: 29265943]  
  - bnxt: remove printing of hwrm message (Jonathan Toppins)  [Orabug: 29265943]  
  - bnxt_en: Fix _bnxt_get_max_rings() for 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Fix NQ/CP rings accounting on the new 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Keep track of reserved IRQs. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Fix CNP CoS queue regression. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Fix filling time in bnxt_fill_coredump_record() (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: Add software "missed_irqs" counter. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Workaround occasional TX timeout on 57500 A0. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Disable RDMA support on the 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Fix rx_l4_csum_errors counter on 57500 devices. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Fix RSS context allocation. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Copy and paste bug in extended tx_stats (Dan Carpenter)  [Orabug: 29265943]  
  - bnxt_en: Add PCI ID for BCM57508 device. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add new NAPI poll function for 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Refactor bnxt_poll_work(). (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add coalescing setup for 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Use bnxt_cp_ring_info struct pointer as parameter for RX path. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add RSS support for 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Increase RSS context array count and skip ring groups on 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Allocate/Free CP rings for 57500 series chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Modify bnxt_ring_alloc_send_msg() to support 57500 chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add helper functions to get firmware CP ring ID. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Allocate completion ring structures for 57500 series chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Modify the ring reservation functions for 57500 series chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Adjust MSIX and ring groups for 57500 series chips. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Re-structure doorbells. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add 57500 new chip ID and basic structures. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Configure context memory on new devices. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Check context memory requirements from firmware. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add new flags to setup new page table PTE bits on newer devices. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Refactor bnxt_ring_struct. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Update interrupt coalescing logic. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add maximum extended request length fw message support. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Add additional extended port statistics. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: Update firmware interface spec. to 1.10.0.3. (Michael Chan)  [Orabug: 29265943]  
  - bnxt_en: get the reduced max_irqs by the ones used by RDMA (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: free hwrm resources, if driver probe fails. (Venkat Duvvuru)  [Orabug: 29265943]  
  - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request (Vasundhara Volam)  [Orabug: 29265943]  
  - bnxt_en: Fix VNIC reservations on the PF. (Michael Chan)  [Orabug: 29265943]  
  - slub: make ->cpu_partial unsigned (Alexey Dobriyan)  [Orabug: 29267160]  
  - alarmtimer: Prevent overflow for relative nanosleep (Thomas Gleixner)  [Orabug: 29269150]  {CVE-2018-13053} 
  - iommu/amd: Fix IOMMU page flush when detach device from a domain (Suravee Suthikulpanit)  [Orabug: 29297190]  
  - xfs: refactor short form directory structure verifier function (Darrick J. Wong)  [Orabug: 29301206]  
  - xfs: provide a centralized method for verifying inline fork data (Darrick J. Wong)  [Orabug: 29301206]  
  - xfs: create structure verifier function for short form symlinks (Darrick J. Wong)  [Orabug: 29301206]  
  - xfs: create structure verifier function for shortform xattrs (Darrick J. Wong)  [Orabug: 29301206]  
  - x86/apic: Switch all APICs to Fixed delivery mode (Thomas Gleixner)  [Orabug: 29298764]  
  - x86/platform/UV: Add check of TSC state set by UV BIOS (mike.travis@hpe.com)  [Orabug: 29205472]  
  - x86/tsc: Provide a means to disable TSC ART (mike.travis@hpe.com)  [Orabug: 29205472]  
  - x86/tsc: Drastically reduce the number of firmware bug warnings (mike.travis@hpe.com)  [Orabug: 29205472]  
  - x86/tsc: Skip TSC test and error messages if already unstable (mike.travis@hpe.com)  [Orabug: 29205472]  
  - x86/tsc: Add option that TSC on Socket 0 being non-zero is valid (mike.travis@hpe.com)  [Orabug: 29205472]  
  - i40e: Enable VF to negotiate number of allocated queues (Alan Brady)  [Orabug: 29298870]  
  - virtchnl: Added support to exchange additional speed values (Yashaswini Raghuram Prathivadi Bhayankaram)  [Orabug: 29298870]  
  - ethtool: add ethtool_intersect_link_masks (Alan Brady)  [Orabug: 29298870]  
  - Add the Intel ICE driver to UEK5 configuration (Jack Vogel)  [Orabug: 29298870]  
  - PCI: Add PCI_EXP_LNKCTL2_TLS* macros (Frederick Lawler)  [Orabug: 29298874]  
  - PCI: Add decoding for 16 GT/s link speed (Jay Fang)  [Orabug: 29298874]  
  - PCI: Add pcie_print_link_status() to log link speed and whether it's limited (Tal Gilboa)  [Orabug: 29298874]  
  - PCI: Add pcie_bandwidth_available() to compute bandwidth available to device (Tal Gilboa)  [Orabug: 29298874]  
  - PCI: Add pcie_bandwidth_capable() to compute max supported link bandwidth (Tal Gilboa)  [Orabug: 29298874]  
  - PCI: Export pcie_get_speed_cap and pcie_get_width_cap (Alex Deucher)  [Orabug: 29298874]  
  - PCI: Add pcie_get_speed_cap() to find max supported link speed (Tal Gilboa)  [Orabug: 29298874]  
  - Add Configuration option for Intel IGC driver to UEK5 (Jack Vogel)  [Orabug: 29298874]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.7.el7uek]
changelog:
  - IB/mlx5: Change debugfs to have per port contents (Parav Pandit)  [Orabug: 29249230]  
  - Revert "IB/mlx5: Change debugfs to have per port contents" (Qing Huang)  [Orabug: 29249230]  
  - IB/core: Move Oracle's priorietary UVERBS_OBJECT_* out of the way (Dag Moxnes)  [Orabug: 29213073]  
  - RDMA/uverbs: Add an ioctl method to destroy an object (Parav Pandit)  [Orabug: 29249270]  
  - RDMA/uverbs: Add a method to introspect handles in a context (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Add UVERBS_ATTR_CONST_IN to the specs language (Mark Bloch)  [Orabug: 29249270]  
  - IB/uverbs: Do not check for device disassociation during ioctl (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Remove struct uverbs_root_spec and all supporting code (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Use uverbs_api to unmarshal ioctl commands (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Use uverbs_alloc for allocations (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Add a simple allocator to uverbs_attr_bundle (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Remove the ib_uverbs_attr pointer from each attr (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Provide implementation private memory for the uverbs_attr_bundle (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Use uverbs_api to manage the object type inside the uobject (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Build the specs into a radix tree at runtime (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Have the core code create the uverbs_root_spec (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Fix reading of 32 bit flags (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Allow all DESTROY commands to succeed after disassociate (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Do not block disassociate during write() (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Do not pass struct ib_device to the ioctl methods (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Do not pass struct ib_device to the write based methods (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Allow uobject allocation to work concurrently with disassociate (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Allow RDMA_REMOVE_DESTROY to work concurrently with disassociate (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Convert 'bool exclusive' into an enum (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Consolidate uobject destruction (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Make the write path destroy methods use the same flow as ioctl (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Remove rdma_explicit_destroy() from the ioctl methods (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/core: Check for verbs callbacks before using them (Kamal Heib)  [Orabug: 29249270]  
  - IB/uverbs: Add UVERBS_ATTR_FLAGS_IN to the specs language (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Fix locking around struct ib_uverbs_file ucontext (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Move the FD uobj type struct file allocation to alloc_commit (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Always propagate errors from rdma_alloc_commit_uobject() (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Rework the locking for cleaning up the ucontext (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Revise and clarify the rwsem and uobjects_lock (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Clarify and revise uverbs_close_fd (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Revise the placement of get/puts on uobject (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Clarify the kref'ing ordering for alloc_commit (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Handle IDR and FD types without truncation (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Get rid of null_obj_type (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB: Support ib_flow creation in drivers (Yishai Hadas)  [Orabug: 29249270]  
  - IB/uverbs: Move ib_access_flags and ib_read_counters_flags to uapi (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB: Enable uverbs_destroy_def_handler to be used by drivers (Yishai Hadas)  [Orabug: 29249270]  
  - RDMA: Fix storage of PortInfo CapabilityMask in the kernel (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Do not use uverbs_cmd_mask in the ioctl path (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Replace ib_ucq_object uverbs_file with the one in ib_uobject (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Remove ib_uobject_file (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Tidy up remaining references to ucontext (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Replace file->ucontext with file in uverbs_cmd.c (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Replace ib_ucontext with ib_uverbs_file in core function calls (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Move non driver related elements from ib_ucontext to ib_ufile (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Add a uobj_perform_destroy helper (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Combine MIN_SZ_OR_ZERO with UVERBS_ATTR_STRUCT (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Use UVERBS_ATTR_MIN_SIZE correctly and uniformly (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Remove UA_FLAGS (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/core: fix spelling mistake: "aceess" -> "access" (Colin Ian King)  [Orabug: 29249270]  
  - RDMA/uverbs: Get rid of the & in method specifications (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Simplify UVERBS_OBJECT and _TREE family of macros (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Simplify method definition macros (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Simplify UVERBS_ATTR family of macros (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Split UVERBS_ATTR_FLOW_ACTION_ESP_HANDLE (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Store the specs_root in the struct ib_uverbs_device (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Don't fail in creation of multiple flows (Leon Romanovsky)  [Orabug: 29249270]  
  - IB: Improve uverbs_cleanup_ucontext algorithm (Yishai Hadas)  [Orabug: 29249270]  
  - RDMA/uverbs: Fix slab-out-of-bounds in ib_uverbs_ex_create_flow (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/verbs: Drop kernel variant of destroy_flow (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Check existence of create_flow callback (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Delete type and id from uverbs_obj_attr (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/core: Expose ib_ucontext from a given ib_uverbs_file (Yishai Hadas)  [Orabug: 29249270]  
  - IB/core: Introduce DECLARE_UVERBS_GLOBAL_METHODS (Yishai Hadas)  [Orabug: 29249270]  
  - IB/uverbs: Allow an empty namespace in ioctl() framework (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add a macro to define a type with no kernel known size (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add PTR_IN attributes that are allocated/copied automatically (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Refactor uverbs_finalize_objects (Matan Barak)  [Orabug: 29249270]  
  - IB: Ensure that all rdma_ah_attr's are zero initialized (Parav Pandit)  [Orabug: 29249270]  
  - RDMA/uverbs: Refactor flow_resources_alloc() function (Leon Romanovsky)  [Orabug: 29249270]  
  - IB/uverbs: Fix ordering of ucontext check in ib_uverbs_write (Jason Gunthorpe)  [Orabug: 29249270]  
  - mm: Use overflow helpers in kvmalloc() (Kees Cook)  [Orabug: 29249270]  
  - overflow.h: Add allocation size calculation helpers (Kees Cook)  [Orabug: 29249270]  
  - IB/uverbs: Add support for flow counters (Raed Salem)  [Orabug: 29249270]  
  - IB/core: Add support for flow counters (Raed Salem)  [Orabug: 29249270]  
  - IB/core: Support passing uhw for create_flow (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add read counters support (Raed Salem)  [Orabug: 29249270]  
  - IB/core: Introduce counters read verb (Raed Salem)  [Orabug: 29249270]  
  - IB/uverbs: Add create/destroy counters support (Raed Salem)  [Orabug: 29249270]  
  - IB/core: Introduce counters object and its create/destroy (Raed Salem)  [Orabug: 29249270]  
  - IB/uverbs: Add an ib_uobject getter to ioctl() infrastructure (Matan Barak)  [Orabug: 29249270]  
  - compiler.h: enable builtin overflow checkers and add fallback code (Rasmus Villemoes)  [Orabug: 29249270]  
  - RDMA/uverbs: Hoist the common process of disassociate_ucontext into ib core (Wei Hu(Xavier))  [Orabug: 29249270]  
  - IB/uverbs: Introduce a MPLS steering match filter (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Introduce a GRE steering match filter (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Fix kernel crash during MR deregistration flow (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Prevent reregistration of DM_MR to regular MR (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Add missing braces in anonymous union initializers (Geert Uytterhoeven)  [Orabug: 29249270]  
  - RDMA/ucma: ucma_context reference leak in error path (Shamir Rabinovitch)  [Orabug: 29341194]  
  - IB/uverbs: Add device memory registration ioctl support (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Add alloc/free dm uverbs ioctl support (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Add device memory capabilities reporting (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Expose device memory capabilities to user (Ariel Levkovich)  [Orabug: 29249270]  
  - IB/uverbs: Introduce ESP steering match filter (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add modify ESP flow_action (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add action_handle flow steering specification (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add flow_action create and destroy verbs (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Refactor kern_spec_to_ib_spec_filter (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add enum attribute type to ioctl() interface (Matan Barak)  [Orabug: 29249270]  
  - RDMA: Use u64_to_user_ptr everywhere (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Enable ioctl() uAPI by default for new verbs (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Add macros to simplify adding driver specific attributes (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Move ioctl path of create_cq and destroy_cq to a new file (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Expose parsing tree of all common objects to providers (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Safely extend existing attributes (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Enable compact representation of uverbs_attr_spec (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Extend uverbs_ioctl header with driver_id (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Move to new headers and make naming consistent (Matan Barak)  [Orabug: 29249270]  
  - RDMA/uverbs: Ensure validity of current QP state value (Leon Romanovsky)  [Orabug: 29249270]  
  - IB/uverbs: Tidy uverbs_uobject_add (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA/uverbs: Reduce number of command header flags checks (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Replace user's types with kernel's types (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Refactor the header validation logic (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMa/uverbs: Copy ex_hdr outside of SRCU read lock (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Move uncontext check before SRCU read lock (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Properly check command supported mask (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Refactor command header processing (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Unify return values of not supported command (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Return not supported error code for unsupported commands (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Fail as early as possible if not enough header data was provided (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Refactor flags checks and update return value (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Update sizeof users (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/uverbs: Convert command mask validity check function to be bool (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/verbs: Check existence of function prior to accessing it (Leon Romanovsky)  [Orabug: 29249270]  
  - RDMA/restrack: Increment CQ restrack object before committing (Leon Romanovsky)  [Orabug: 29249270]  
  - IB/uverbs: Hold the uobj write lock after allocate (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Add ioctl support for 32bit processes (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Use __aligned_u64 for uapi headers (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Use u64_to_user_ptr() not a union (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Use inline data transfer for UHW_IN (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Always use the attribute size provided by the user (Matan Barak)  [Orabug: 29249270]  
  - IB/uverbs: Use the standard kConfig format for experimental (Jason Gunthorpe)  [Orabug: 29249270]  
  - RDMA: Move enum ib_cq_creation_flags to uapi headers (Jason Gunthorpe)  [Orabug: 29249270]  
  - IB/uverbs: Add CQ moderation capability to query_device (Yonatan Cohen)  [Orabug: 29249270]  
  - IB/uverbs: Allow CQ moderation with modify CQ (Yonatan Cohen)  [Orabug: 29249270]  
  - RDMA/core: avoid uninitialized variable warning in create_udata (Arnd Bergmann)  [Orabug: 29249270]  
  - RDMA/uverbs: Make the code in ib_uverbs_cmd_verbs() less confusing (Bart Van Assche)  [Orabug: 29249270]  
  - IB/uverbs: clean up INIT_UDATA_BUF_OR_NULL usage (Arnd Bergmann)  [Orabug: 29249270]  
  - Revert "IB/core: Move Oracle's priorietary UVERBS_OBJECT_* out of the way" (Erez Alfasi)  [Orabug: 29213073]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29310112]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29310112]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29310112]  
  - scsi: megaraid_sas: correct an info message (Tomas Henzl)  [Orabug: 29260146]  
  - scsi: megaraid: fix out-of-bound array accesses (Qian Cai)  [Orabug: 29260146]  
  - scsi: megaraid_sas: driver version update (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Use 63-bit DMA addressing (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: add retry logic in megasas_readl (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: changes to function prototypes (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Introduce new Aero adapter type (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Fix Ventura series based checks (Sumit Saxena)  [Orabug: 29260146]  
  - scsi: megaraid_sas: NULL check before some freeing functions is not needed (Thomas Meyer)  [Orabug: 29260146]  
  - scsi: megaraid_sas_fusion: Mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29260146]  
  - scsi: megaraid: megaraid_sas_base: Mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Add support for MegaRAID Aero controllers (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Update driver version (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: modify max supported lds related print (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: remove unused macro (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: increase timeout for IOC INIT to 180seconds (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Remove double endian conversion (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Re-use max_mfi_cmds to calculate queue sizes (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Rename scratch_pad registers (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Remove spin lock for dpc operation (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: optimize raid context access in IO path (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Fail init if heartbeat timer fails (Sumit Saxena)  [Orabug: 29260146]  
  - scsi: megaraid_sas: For SRIOV, do not set STOP_ADP bit (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Fix combined reply queue mode detection (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Fix module parameter description (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Fix goto labels in error handling (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Update copyright information (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Add check for reset adapter bit (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Fix msleep granularity (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Add support for FW snap dump (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Add watchdog thread to detect Firmware fault (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: switch to generic DMA API (Sumit Saxena)  [Orabug: 29260146]  
  - scsi: megaraid_sas: fix a missing-check bug (Wenwen Wang)  [Orabug: 29260146]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Support FW provided TM timeout values (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Return immediately from wait_for_adapter_operational after kill adapter (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Update controller info during resume (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: Do not do Kill adapter if GET_CTRL_INFO times out (Shivasharan S)  [Orabug: 29260146]  
  - scsi: megaraid_sas: fix spelling mistake: "disbale" -> "disable" (Colin Ian King)  [Orabug: 29260146]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 29260146]


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-1902.0.9.el7uek]
changelog:
  - uek-rpm: replace i40evf.ko with iavf.ko in nano_modules. (John Donnelly)  [Orabug: 29418355]  
  - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker)  [Orabug: 29384904]  
  - RDMA/core: Acquire and release mmap_sem on page range (Parav Pandit)  [Orabug: 29405070]  
  - Revert "RDMA/core: Acquire and release mmap_sem on each page range" (Qing Huang)  [Orabug: 29350522] [Orabug: 29405070]  
  - scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task (Anoob Soman)  [Orabug: 29412879]  
  - i40e: define proper net_device::neigh_priv_len (Konstantin Khorenko)  [Orabug: 29261177]  
  - i40e: fix mac filter delete when setting mac address (Stefan Assmann)  [Orabug: 29261177]  
  - i40e: Fix deletion of MAC filters (Lihong Yang)  [Orabug: 29261177]  
  - i40e: prevent overlapping tx_timeout recover (Alan Brady)  [Orabug: 29261177]  
  - i40e: suppress bogus error message (Mitch Williams)  [Orabug: 29261177]  
  - i40e: Use correct shift for VLAN priority (Richard Rodriguez)  [Orabug: 29261177]  
  - virtchnl: Fix off by one error (Alice Michael)  [Orabug: 29261177]  
  - virtchnl: white space and reorder (Alice Michael)  [Orabug: 29261177]  
  - i40e: always set ks->base.speed in i40e_get_settings_link_up (Jacob Keller)  [Orabug: 29261177]  
  - i40e: don't restart nway if autoneg not supported (Mitch Williams)  [Orabug: 29261177]  
  - i40e: Allow disabling FW LLDP on X722 devices (Patryk Małek)  [Orabug: 29261177]  
  - i40e: update driver version (Alice Michael)  [Orabug: 29261177]  
  - i40e: Protect access to VF control methods (Jan Sokolowski)  [Orabug: 29261177]  
  - i40e: Replace strncpy with strlcpy to ensure null termination (Patryk Małek)  [Orabug: 29261177]  
  - i40e: Add capability flag for stopping FW LLDP (Krzysztof Galazka)  [Orabug: 29261177]  
  - i40e: Replace spin_is_locked() with lockdep (Lance Roy)  [Orabug: 29261177]  
  - i40e: enable NETIF_F_NTUPLE and NETIF_F_HW_TC at driver load (Jacob Keller)  [Orabug: 29261177]  
  - i40e/ixgbe/igb: fail on new WoL flag setting WAKE_MAGICSECURE (Todd Fujinaka)  [Orabug: 29261177]  
  - ethtool: Add WAKE_FILTER and RX_CLS_FLOW_WAKE (Florian Fainelli)  [Orabug: 29261177]  
  - i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Update status codes (Mitch Williams)  [Orabug: 29261177]  
  - Documentation: iavf: Prepare documentation for RST conversion (Jeff Kirsher)  [Orabug: 29261177]  
  - Documentation: i40e: Prepare documentation for RST conversion (Jeff Kirsher)  [Orabug: 29261177]  
  - iavf: fix a typo (Rami Rosen)  [Orabug: 29261177]  
  - i40e: Remove unnecessary print statement (Nathan Chancellor)  [Orabug: 29261177]  
  - i40e: Use proper enum in i40e_ndo_set_vf_link_state (Nathan Chancellor)  [Orabug: 29261177]  
  - i40e: Remove unused msglen parameter from virtchnl functions (Patryk Małek)  [Orabug: 29261177]  
  - i40e: fix double 'NIC Link is Down' messages (Sergey Nemov)  [Orabug: 29261177]  
  - i40e: add a helper function to validate a VF based on the vf id (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40e: use declared variables for pf and hw (Patryk Małek)  [Orabug: 29261177]  
  - i40e: Unset promiscuous settings on VF reset (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: Fix VF's link state notification (Mariusz Stachura)  [Orabug: 29261177]  
  - intel-ethernet: use correct module license (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: finish renaming files to iavf (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: rename most of i40e strings (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: tracing infrastructure rename (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: replace i40e_debug with iavf version (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: rename i40e_hw to iavf_hw (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: rename I40E_ADMINQ_DESC (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: rename device ID defines (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: remove references to old names (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: move i40evf files to new name (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: rename i40e_status to iavf_status (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: rename functions and structs to new name (Jesse Brandeburg)  [Orabug: 29261177]  
  - iavf: diet and reformat (Jesse Brandeburg)  [Orabug: 29261177]  
  - intel-ethernet: rename i40evf to iavf (Jesse Brandeburg)  [Orabug: 29261177]  
  - i40e(vf): remove i40e_ethtool_stats.h header file (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Prevent deleting MAC address from VF when set by PF (Patryk Małek)  [Orabug: 29261177]  
  - i40evf: cancel workqueue sync for adminq when a VF is removed (Lihong Yang)  [Orabug: 29261177]  
  - i40e: hold the rtnl lock on clearing interrupt scheme (Patryk Małek)  [Orabug: 29261177]  
  - i40evf: Don't enable vlan stripping when rx offload is turned on (Patryk Małek)  [Orabug: 29261177]  
  - i40e: Check and correct speed values for link on open (Jan Sokolowski)  [Orabug: 29261177]  
  - i40e: report correct statistics when XDP is enabled (Björn Töpel)  [Orabug: 29261177]  
  - i40e: static analysis report from community (Martyna Szapar)  [Orabug: 29261177]  
  - virtchnl: use u8 type for a field in the virtchnl_filter struct (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40evf: set IFF_UNICAST_FLT flag for the VF (Lihong Yang)  [Orabug: 29261177]  
  - i40e: use correct length for strncpy (Mitch Williams)  [Orabug: 29261177]  
  - i40evf: Validate the number of queues a PF sends (Paul M Stillwell Jr)  [Orabug: 29261177]  
  - i40evf: Change a VF mac without reloading the VF driver (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40evf: update ethtool stats code and use helper functions (Jacob Keller)  [Orabug: 29261177]  
  - i40e: move ethtool stats boiler plate code to i40e_ethtool_stats.h (Jacob Keller)  [Orabug: 29261177]  
  - i40e: convert queue stats to i40e_stats array (Jacob Keller)  [Orabug: 29261177]  
  - i40e: refactor Rx path for re-use (Björn Töpel)  [Orabug: 29261177]  
  - i40e: added queue pair disable/enable functions (Björn Töpel)  [Orabug: 29261177]  
  - i40e: fix condition of WARN_ONCE for stat strings (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled (Martyna Szapar)  [Orabug: 29261177]  
  - i40e_txrx: mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29261177]  
  - i40e_main: mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29261177]  
  - i40e: fix i40e_add_queue_stats data pointer update (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Add AQ command for rearrange NVM structure (Piotr Azarewicz)  [Orabug: 29261177]  
  - i40e: Add additional return code to i40e_asq_send_command (Piotr Azarewicz)  [Orabug: 29261177]  
  - i40e: fix warning about shadowed ring parameter (Jacob Keller)  [Orabug: 29261177]  
  - i40e: remove unnecessary i variable causing -Wshadow warning (Jacob Keller)  [Orabug: 29261177]  
  - i40e: convert priority flow control stats to use helpers (Jacob Keller)  [Orabug: 29261177]  
  - i40e: convert VEB TC stats to use an i40e_stats array (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Set fec_config when forcing link state (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: add helper to copy statistic values into ethtool buffer (Jacob Keller)  [Orabug: 29261177]  
  - i40e: add helper function for copying strings from stat arrays (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: remove redundant functions i40evf_aq_{set/get}_phy_register (YueHaibing)  [Orabug: 29261177]  
  - i40e: Remove duplicated prepare call in i40e_shutdown (Sergey Nemov)  [Orabug: 29261177]  
  - i40e: split XDP_TX tail and XDP_REDIRECT map flushing (Jesper Dangaard Brouer)  [Orabug: 29261177]  
  - i40e: use the more traditional 'i' loop variable (Jacob Keller)  [Orabug: 29261177]  
  - i40e: add function doc headers for ethtool stats functions (Jacob Keller)  [Orabug: 29261177]  
  - i40e: update data pointer directly when copying to the buffer (Jacob Keller)  [Orabug: 29261177]  
  - i40e: fold prefix strings directly into stat names (Jacob Keller)  [Orabug: 29261177]  
  - i40e: use WARN_ONCE to replace the commented BUG_ON size check (Jacob Keller)  [Orabug: 29261177]  
  - i40e: split i40e_get_strings() into smaller functions (Jacob Keller)  [Orabug: 29261177]  
  - i40e: always return all queue stat strings (Jacob Keller)  [Orabug: 29261177]  
  - i40e: always return VEB stat strings (Jacob Keller)  [Orabug: 29261177]  
  - i40e: free skb after clearing lock in ptp_stop (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: Fix a hardware reset support in VF driver (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40e: cleanup wording in a header comment (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: remove MAX_QUEUES and just use I40EVF_MAX_REQ_QUEUES (Jacob Keller)  [Orabug: 29261177]  
  - i40e: add tx_busy to ethtool stats (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40e: Fix recalculation of MSI-X vectors for VMDq (Patryk Małek)  [Orabug: 29261177]  
  - i40e: cleanup whitespace for some ethtool stat definitions (Jacob Keller)  [Orabug: 29261177]  
  - i40e: remove duplicate pfc stats (Jacob Keller)  [Orabug: 29261177]  
  - i40e: calculate ethtool stats size in a separate function (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: Fix client header define (Jeff Kirsher)  [Orabug: 29261177]  
  - i40e: use %pI4b instead of byte swapping before dev_err (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: take into account queue map from vf when handling queues (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40e: avoid overflow in i40e_ptp_adjfreq() (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Fix multiple issues with UDP tunnel offload filter configuration (Alexander Duyck)  [Orabug: 29261177]  
  - i40evf: Fix turning TSO, GSO and GRO on after (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40e: Add advertising 10G LR mode (Jakub Pawlak)  [Orabug: 29261177]  
  - i40e: fix reading LLDP configuration (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e/i40evf: cleanup incorrect function doxygen comments (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: Replace GFP_ATOMIC with GFP_KERNEL in i40evf_add_vlan (Jia-Ju Bai)  [Orabug: 29261177]  
  - net: intel: Cleanup the copyright/license headers (Jeff Kirsher)  [Orabug: 29261177]  
  - i40e: convert to use generic xdp_frame and xdp_return_frame API (Jesper Dangaard Brouer)  [Orabug: 29261177]  
  - i40e: add support for XDP_REDIRECT (Björn Töpel)  [Orabug: 29261177]  
  - i40e: tweak page counting for XDP_REDIRECT (Björn Töpel)  [Orabug: 29261177]  
  - i40e: re-number feature flags to remove gaps (Jacob Keller)  [Orabug: 29261177]  
  - i40e: stop using cmpxchg flow in i40e_set_priv_flags() (Jacob Keller)  [Orabug: 29261177]  
  - i40e: hold the RTNL lock while changing interrupt schemes (Jacob Keller)  [Orabug: 29261177]  
  - i40e: move client flags into state bits (Jacob Keller)  [Orabug: 29261177]  
  - i40e: move I40E_FLAG_TEMP_LINK_POLLING to state field (Jacob Keller)  [Orabug: 29261177]  
  - i40e: move AUTO_DISABLED flags into the state field (Jacob Keller)  [Orabug: 29261177]  
  - i40e: move I40E_FLAG_UDP_FILTER_SYNC to the state field (Jacob Keller)  [Orabug: 29261177]  
  - i40e: move I40E_FLAG_FILTER_SYNC to a state bit (Jacob Keller)  [Orabug: 29261177]  
  - intel: add SPDX identifiers to all the Intel drivers (Jeff Kirsher)  [Orabug: 29261177]  
  - i40e: Fix the polling mechanism of GLGEN_RSTAT.DEVSTATE (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40evf: remove flags that are never used (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Prevent setting link speed on I40E_DEV_ID_25G_B (Patryk Małek)  [Orabug: 29261177]  
  - i40e: Fix incorrect return types (Doug Dziggel)  [Orabug: 29261177]  
  - i40e: add doxygen comment for new mode parameter (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Close client on suspend and restore client MSIx on resume (Shiraz Saleem)  [Orabug: 29261177]  
  - i40e: Prevent setting link speed on KX_X722 (Patryk Małek)  [Orabug: 29261177]  
  - i40e: Properly check allowed advertisement capabilities (Jan Sokolowski)  [Orabug: 29261177]  
  - i40evf: Reorder configure_clsflower to avoid deadlock on error (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: restore TCPv4 input set when re-enabling ATR (Jacob Keller)  [Orabug: 29261177]  
  - i40e: fix for wrong partition id calculation on OCP mezz cards (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: factor out re-enable functions for ATR and SB (Jacob Keller)  [Orabug: 29261177]  
  - i40e: track filter type statistics when deleting invalid filters (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Fix permission check for VF MAC filters (Filip Sadowski)  [Orabug: 29261177]  
  - i40e: Cleanup i40e_vlan_rx_register (Jacob Keller)  [Orabug: 29261177]  
  - i40evf/i40evf_main: Fix variable assignment in i40evf_parse_cls_flower (Gustavo A R Silva)  [Orabug: 29261177]  
  - i40e: remove i40e_fcoe files (Corentin Labbe)  [Orabug: 29261177]  
  - i40e: remove some stray indenting (Dan Carpenter)  [Orabug: 29261177]  
  - i40evf: remove redundant array comparisons to 0 checks (Colin Ian King)  [Orabug: 29261177]  
  - i40e: check that pointer VSI is not null before dereferencing it (Colin Ian King)  [Orabug: 29261177]  
  - i40evf: pass struct virtchnl_filter by reference rather than by value (Colin Ian King)  [Orabug: 29261177]  
  - i40e/i40evf: use SW variables for hang detection (Alan Brady)  [Orabug: 29261177]  
  - i40evf: Fix double locking the same resource (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40e: link_down_on_close private flag support (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: Add and delete cloud filter (Avinash Dayanand)  [Orabug: 29261177]  
  - i40evf: Add support to apply cloud filters (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - virtchnl: Add filter data structures (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - virtchnl: Add a macro to check the size of a union (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40e: Service request to configure bandwidth for ADq on a VF (Avinash Dayanand)  [Orabug: 29261177]  
  - i40evf: Add support to configure bw via tc tool (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40e: Delete queue channel for ADq on VF (Avinash Dayanand)  [Orabug: 29261177]  
  - i40evf: Alloc queues for ADq on VF (Avinash Dayanand)  [Orabug: 29261177]  
  - i40e: Enable ADq and create queue channel/s on VF (Avinash Dayanand)  [Orabug: 29261177]  
  - i40evf: add ndo_setup_tc callback to i40evf (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - virtchnl: Add virtchl structures to support queue channels (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40evf: Fix link up issue when queues are disabled (Avinash Dayanand)  [Orabug: 29261177]  
  - i40evf: Make VF reset warning message more clear (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40evf: use __dev_[um]c_sync routines in .set_rx_mode (Jacob Keller)  [Orabug: 29261177]  
  - i40e: i40e: Change ethtool check from MAC to HW flag (Dave Ertman)  [Orabug: 29261177]  
  - i40e: do not force filter failure in overflow promiscuous (Alan Brady)  [Orabug: 29261177]  
  - i40e: refactor promisc_changed in i40e_sync_vsi_filters (Alan Brady)  [Orabug: 29261177]  
  - i40evf: Use an iterator of the same type as the list (Harshitha Ramamurthy)  [Orabug: 29261177]  
  - i40e: broadcast filters can trigger overflow promiscuous (Alan Brady)  [Orabug: 29261177]  
  - i40e: don't leak memory addresses (Mitch Williams)  [Orabug: 29261177]  
  - i40evf: use GFP_ATOMIC under spin lock (Wei Yongjun)  [Orabug: 29261177]  
  - i40e: Make local function i40e_get_link_speed static (Wei Yongjun)  [Orabug: 29261177]  
  - i40e/i40evf: Add support for new mechanism of updating adaptive ITR (Alexander Duyck)  [Orabug: 29261177]  
  - i40e/i40evf: Split container ITR into current_itr and target_itr (Alexander Duyck)  [Orabug: 29261177]  
  - i40evf: Correctly populate rxitr_idx and txitr_idx (Alexander Duyck)  [Orabug: 29261177]  
  - i40e/i40evf: Use usec value instead of reg value for ITR defines (Alexander Duyck)  [Orabug: 29261177]  
  - i40e/i40evf: Don't bother setting the CLEARPBA bit (Alexander Duyck)  [Orabug: 29261177]  
  - i40e/i40evf: Clean-up of bits related to using q_vector->reg_idx (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: use changed_flags to check I40E_FLAG_DISABLE_FW_LLDP (Alan Brady)  [Orabug: 29261177]  
  - i40e: Warn when setting link-down-on-close while in MFP (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40e/i40evf: Clean up logic for adaptive ITR (Alexander Duyck)  [Orabug: 29261177]  
  - i40e/i40evf: Only track one ITR setting per ring instead of Tx/Rx (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: fix typo in function description (Alan Brady)  [Orabug: 29261177]  
  - i40e: Fix the number of queues available to be mapped for use (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e/i40evf: Update DESC_NEEDED value to reflect larger value (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: Do not allow use more TC queue pairs than MSI-X vectors exist (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40e/i40evf: Record ITR register location in the q_vector (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: disallow programming multiple filters with same criteria (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Fix kdump failure (Avinash Dayanand)  [Orabug: 29261177]  
  - i40e: cleanup unnecessary parens (Jeff Kirsher)  [Orabug: 29261177]  
  - i40e: fix FW_LLDP flag on init (Alan Brady)  [Orabug: 29261177]  
  - i40e: Implement an ethtool private flag to stop LLDP in FW (Dave Ertman)  [Orabug: 29261177]  
  - i40e: change flags to use 64 bits (Alice Michael)  [Orabug: 29261177]  
  - i40e: Display LLDP information on vSphere Web Client (Upasana Menon)  [Orabug: 29261177]  
  - i40e/i40evf: Use ring pointers to clean up _set_itr_per_queue (Alexander Duyck)  [Orabug: 29261177]  
  - i40evf: Allow turning off offloads when the VF has VLAN set (Paweł Jabłoński)  [Orabug: 29261177]  
  - i40e: Fix for adding multiple ethtool filters on the same location (Patryk Małek)  [Orabug: 29261177]  
  - i40e: Add returning AQ critical error to SW (Michal Kosiarz)  [Orabug: 29261177]  
  - i40e: use tc_cls_can_offload_and_chain0() (Jakub Kicinski)  [Orabug: 29261177]  
  - i40e: flower: check if TC offload is enabled on a netdev (Jakub Kicinski)  [Orabug: 29261177]  
  - i40e: Fix channel addition in reset flow (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Delete an error message for a failed memory allocation in i40e_init_interrupt_scheme() (Markus Elfring)  [Orabug: 29261177]  
  - i40e: Disable iWARP VSI PETCP_ENA flag on netdev down events (Shiraz Saleem)  [Orabug: 29261177]  
  - i40e: simplify pointer dereferences (Mitch Williams)  [Orabug: 29261177]  
  - i40e: check for invalid DCB config (Mitch Williams)  [Orabug: 29261177]  
  - i40e/i40evf: Detect and recover hung queue scenario (Sudheer Mogilappagari)  [Orabug: 29261177]  
  - i40e: Fix for blinking activity instead of link LEDs (Michal Kuchta)  [Orabug: 29261177]  
  - i40evf: remove flush_scheduled_work call in i40evf_remove (Sudheer Mogilappagari)  [Orabug: 29261177]  
  - i40e: avoid divide by zero (Mitch Williams)  [Orabug: 29261177]  
  - i40e/i40evf: Enable NVMUpdate to retrieve AdminQ and add preservation flags for NVM update (Pawel Jablonski)  [Orabug: 29261177]  
  - i40e: track id can be 0 (Jingjing Wu)  [Orabug: 29261177]  
  - i40e: change ppp name to ddp (Jingjing Wu)  [Orabug: 29261177]  
  - i40evf: Drop i40evf_fire_sw_int as it is prone to races (Alexander Duyck)  [Orabug: 29261177]  
  - i40evf: Clean-up flags for promisc mode to avoid high polling rate (Alexander Duyck)  [Orabug: 29261177]  
  - i40evf: Do not clear MSI-X PBA manually (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: remove redundant initialization of read_size (Colin Ian King)  [Orabug: 29261177]  
  - i40e/i40evf: Bump driver versions (Alice Michael)  [Orabug: 29261177]  
  - i40e: add helper conversion function for link_speed (Jacob Keller)  [Orabug: 29261177]  
  - i40e: update VFs of link state after GET_VF_RESOURCES (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: hold the critical task bit lock while opening (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: release bit locks in reverse order (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: use spinlock to protect (mac|vlan)_filter_list (Jacob Keller)  [Orabug: 29261177]  
  - i40e: display priority_xon and priority_xoff stats (Alice Michael)  [Orabug: 29261177]  
  - i40e: setup xdp_rxq_info (Jesper Dangaard Brouer)  [Orabug: 29261177]  
  - i40e: flower: Fix return value for unsupported offload (Jiri Pirko)  [Orabug: 29261177]  
  - i40e: Remove UDP support for big buffer (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Fix reporting incorrect error codes (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e/virtchnl: fix application of sizeof to pointer (Gustavo A R Silva)  [Orabug: 29261177]  
  - i40e: restore promiscuous after reset (Alan Brady)  [Orabug: 29261177]  
  - i40evf: fix client notify of l2 params (Alan Brady)  [Orabug: 29261177]  
  - i40e: Fix FLR reset timeout issue (Filip Sadowski)  [Orabug: 29261177]  
  - i40e: Remove limit of 64 max queues per channel (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: fix the calculation of VFs mac addresses (Zijie Pan)  [Orabug: 29261177]  
  - i40e: Fix for NUP NVM image downgrade failure (Jacob Keller)  [Orabug: 29261177]  
  - i40e: Enable cloud filters via tc-flower (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Clean up of cloud filters (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Admin queue definitions for cloud filters (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Cloud filter mode for set_switch_config command (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Map TCs with the VSI seids (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e/i40evf: Revert "i40e/i40evf: bump tail only in multiples of 8" (Alexander Duyck)  [Orabug: 29261177]  
  - i40e: only redistribute MSI-X vectors when needed (Shannon Nelson)  [Orabug: 29261177]  
  - i40e: mark PM functions as __maybe_unused (Arnd Bergmann)  [Orabug: 29261177]  
  - i40e: fix u64 division usage (Alan Brady)  [Orabug: 29261177]  
  - i40e: convert i40e_set_link_ksettings to new API (Alan Brady)  [Orabug: 29261177]  
  - i40e: rename 'change' variable to 'autoneg_changed' (Alan Brady)  [Orabug: 29261177]  
  - i40e: convert i40e_get_settings_link_up to new API (Alan Brady)  [Orabug: 29261177]  
  - i40e: convert i40e_phy_type_to_ethtool to new API (Alan Brady)  [Orabug: 29261177]  
  - i40e: Add new PHY types for 25G AOC and ACC support (Sudheer Mogilappagari)  [Orabug: 29261177]  
  - i40e: group autoneg PHY types together (Alan Brady)  [Orabug: 29261177]  
  - i40e: fix whitespace issues in i40e_ethtool.c (Alan Brady)  [Orabug: 29261177]  
  - i40e: fix comment typo (Alan Brady)  [Orabug: 29261177]  
  - i40e: fix i40e_phy_type_to_ethtool function header (Alan Brady)  [Orabug: 29261177]  
  - i40e: fix clearing link masks in i40e_get_link_ksettings (Alan Brady)  [Orabug: 29261177]  
  - i40e: add function header for i40e_get_rxfh (Alan Brady)  [Orabug: 29261177]  
  - i40e: remove ifdef SPEED_25000 (Alan Brady)  [Orabug: 29261177]  
  - i40e: rename 'cmd' variables in ethtool interface (Alan Brady)  [Orabug: 29261177]  
  - i40e/i40evf: don't trust VF to reset itself (Alan Brady)  [Orabug: 29261177]  
  - i40e: fix link reporting (Alan Brady)  [Orabug: 29261177]  
  - i40e: make const array patterns static, reduces object code size (Colin Ian King)  [Orabug: 29261177]  
  - i40e: Add support setting TC max bandwidth rates (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Refactor VF BW rate limiting (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Enable 'channel' mode in mqprio for TC configs (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Add infrastructure for queue channel support (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Add macro for PF reset bit (Amritha Nambiar)  [Orabug: 29261177]  
  - mqprio: Introduce new hardware offload mode and shaper in mqprio (Amritha Nambiar)  [Orabug: 29261177]  
  - i40e: Avoid some useless variables and initializers in NVM functions (Stefano Brivio)  [Orabug: 29261177]  
  - i40e: fix a typo (Rami Rosen)  [Orabug: 29261177]  
  - i40e: use a local variable instead of calculating multiple times (Lihong Yang)  [Orabug: 29261177]  
  - i40e: Retry AQC GetPhyAbilities to overcome I2CRead hangs (Jayaprakash Shanmugam)  [Orabug: 29261177]  
  - i40e: add check for return from find_first_bit call (Lihong Yang)  [Orabug: 29261177]  
  - i40e: allow XPS with QoS enabled (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: bundle more descriptors when allocating buffers (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: bump tail only in multiples of 8 (Jacob Keller)  [Orabug: 29261177]  
  - i40e: reduce lrxqthresh from 2 to 1 (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: always set the CLEARPBA flag when re-enabling interrupts (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: fix incorrect default ITR values on driver load (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: fix mac filter removal timing issue (Alan Brady)  [Orabug: 29261177]  
  - i40e: fix flags declaration (Jacob Keller)  [Orabug: 29261177]  
  - i40e/i40evf: organize and re-number feature flags (Jacob Keller)  [Orabug: 29261177]  
  - i40e: ignore skb->xmit_more when deciding to set RS bit (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: enable support for VF VLAN tag stripping control (Jacob Keller)  [Orabug: 29261177]  
  - i40e: do not enter PHY debug mode while setting LEDs behaviour (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: implement split PCI error reset handler (Alan Brady)  [Orabug: 29261177]  
  - i40e: Properly maintain flow director filters list (Filip Sadowski)  [Orabug: 29261177]  
  - i40e: Display error message if module does not meet thermal requirements (Filip Sadowski)  [Orabug: 29261177]  
  - i40e: fix merge error (Alice Michael)  [Orabug: 29261177]  
  - i40e/i40evf: use DECLARE_BITMAP for state (Jesse Brandeburg)  [Orabug: 29261177]  
  - i40e: fix incorrect register definition (Mitch Williams)  [Orabug: 29261177]  
  - i40e: redfine I40E_PHY_TYPE_MAX (Mitch Williams)  [Orabug: 29261177]  
  - i40e: re-enable PTP L4 capabilities for XL710 if FW >6.0 (Alan Brady)  [Orabug: 29261177]  
  - i40e: add private flag to control source pruning (Mitch Williams)  [Orabug: 29261177]  
  - i40e: fix a typo in i40e_pf documentation (Rami Rosen)  [Orabug: 29261177]  
  - i40e: Stop dropping 802.1ad tags - eth proto 0x88a8 (Scott Peterson)  [Orabug: 29261177]  
  - i40e: fix handling of vf_states variable (Alan Brady)  [Orabug: 29261177]  
  - i40e: make i40evf_map_rings_to_vectors void (Mitch Williams)  [Orabug: 29261177]  
  - i40evf: Enable VF to request an alternate queue allocation (Alan Brady)  [Orabug: 29261177]  
  - i40e: ensure reset occurs when disabling VF (Jacob Keller)  [Orabug: 29261177]  
  - i40e: make use of i40e_vc_disable_vf (Jacob Keller)  [Orabug: 29261177]  
  - i40e: drop i40e_pf *pf from i40e_vc_disable_vf() (Jacob Keller)  [Orabug: 29261177]  
  - i40e: don't hold spinlock while resetting VF (Jacob Keller)  [Orabug: 29261177]  
  - i40e: use admin queue for setting LEDs behavior (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: Add support for 'ethtool -m' (Filip Sadowski)  [Orabug: 29261177]  
  - i40e: Fix reporting of supported link modes (Filip Sadowski)  [Orabug: 29261177]  
  - i40e: Fix a potential NULL pointer dereference (Christophe JAILLET)  [Orabug: 29261177]  
  - i40e: remove logically dead code (Lihong Yang)  [Orabug: 29261177]  
  - i40e: limit lan queue count in large CPU count machine (Shannon Nelson)  [Orabug: 29261177]  
  - i40e: refactor FW version checking (Mitch Williams)  [Orabug: 29261177]  
  - i40evf: fix ring to vector mapping (Alan Brady)  [Orabug: 29261177]  
  - i40e: shutdown all IRQs and disable MSI-X when suspended (Jacob Keller)  [Orabug: 29261177]  
  - i40e: prevent service task from running while we're suspended (Jacob Keller)  [Orabug: 29261177]  
  - i40e: don't clear suspended state until we finish resuming (Jacob Keller)  [Orabug: 29261177]  
  - i40e: use newer generic PM support instead of legacy PM callbacks (Jacob Keller)  [Orabug: 29261177]  
  - i40e: use separate state bit for miscellaneous IRQ setup (Jacob Keller)  [Orabug: 29261177]  
  - i40evf: lower message level (Mitch Williams)  [Orabug: 29261177]  
  - i40e: fix for flow director counters not wrapping as expected (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: relax warning message in case of version mismatch (Mariusz Stachura)  [Orabug: 29261177]  
  - i40e: simplify member variable accesses (Sudheer Mogilappagari)  [Orabug: 29261177]  
  - i40e: Fix link down message when interface is brought up (Sudheer Mogilappagari)  [Orabug: 29261177]  
  - i40e: Fix unqualified module message while bringing link up (Sudheer Mogilappagari)  [Orabug: 29261177]  
  - i40e/i40evf: rename bytes_per_int to bytes_per_usec (Jacob Keller)  [Orabug: 29261177]  
  - drivers: net: i40evf: use setup_timer() helper. (Allen Pais)  [Orabug: 29261177]  
  - KVM: x86: Recompute PID.ON when clearing PID.SN (Luwei Kang)  [Orabug: 28797326]  
  - vhost/vsock: fix use-after-free in network stack callers (Stefan Hajnoczi)  [Orabug: 29212490]  {CVE-2018-14625} {CVE-2018-14625} 
  - add symbols to kABI whitelist (Dan Duval)  [Orabug: 29262003]  
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov)  [Orabug: 29364664]  {CVE-2018-16862} 
  - KVM: LAPIC: Fix pv ipis use-before-initialization (Wanpeng Li)  [Orabug: 29364725]  {CVE-2018-19406} 
  - l2tp: fix reading optional fields of L2TPv3 (Jacob Wen)  [Orabug: 29368045]  
  - xfs: Show realtime device stats on statfs calls if realtime flags set (Richard Wareing)  [Orabug: 29387237]  
  - vfio: Fix locked DMA page accounting (Aaron Young)  [Orabug: 29390715]  
  - btrfs: Verify that every chunk has corresponding block group at mount time (Qu Wenruo)  [Orabug: 28693496]  {CVE-2018-14612} 
  - mlx4_ib: Distribute completion vectors when zero is supplied (Håkon Bugge)  [Orabug: 29324325]  
  - IB/mlx5: Add advise_mr() support (Moni Shoua)  [Orabug: 29350522]  
  - IB/uverbs: Add support to advise_mr (Moni Shoua)  [Orabug: 29350522]  
  - IB/uverbs: Add helper to get array size from ptr attribute (Moni Shoua)  [Orabug: 29350522]  
  - RDMA/mlx5: Initialize return variable in case pagefault was skipped (Leon Romanovsky)  [Orabug: 29350522]  
  - RDMA/uverbs: Do not pass ib_uverbs_file to ioctl methods (Jason Gunthorpe)  [Orabug: 29350522]  
  - IB/mlx5: Fix page fault handling for MW (Artemy Kovalyov)  [Orabug: 29350522]  
  - IB/umem: Set correct address to the invalidation function (Artemy Kovalyov)  [Orabug: 29350522]  
  - IB/mlx5: Skip non-ODP MR when handling a page fault (Artemy Kovalyov)  [Orabug: 29350522]  
  - IB/mlx5: Improve ODP debugging messages (Moni Shoua)  [Orabug: 29350522]  
  - IB/mlx5: Lock QP during page fault handling (Moni Shoua)  [Orabug: 29350522]  
  - net/mlx5: Enumerate page fault types (Moni Shoua)  [Orabug: 29350522]  
  - net/mlx5: Add interface to hold and release core resources (Moni Shoua)  [Orabug: 29350522]  
  - RDMA/umem: Fix potential addition overflow (Doug Ledford)  [Orabug: 29350522]  
  - RDMA/umem: Minor optimizations (Doug Ledford)  [Orabug: 29350522]  
  - RDMA/umem: Avoid synchronize_srcu in the ODP MR destruction path (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Handle a half-complete start/end sequence (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Get rid of per_mm->notifier_count (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Use umem->owning_mm inside ODP (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Move all the ODP related stuff out of ucontext and into per_mm (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Get rid of struct ib_umem.odp_data (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Make ib_umem_odp into a sub structure of ib_umem (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Use ib_umem_odp in all function signatures connected to ODP (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/usnic: Do not use ucontext->tgid (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Do not use current->tgid to track the mm_struct (Jason Gunthorpe)  [Orabug: 29350522]  
  - RDMA/umem: Restore lockdep check while downgrading lock (Leon Romanovsky)  [Orabug: 29350522]  
  - mm, oom: distinguish blockable mode for mmu notifiers (Michal Hocko)  [Orabug: 29350522]  
  - mm, mmu_notifier: annotate mmu notifiers with blockable invalidate callbacks (David Rientjes)  [Orabug: 29350522]  
  - mm, oom: avoid reaping only for mm's with blockable invalidate callbacks (David Rientjes)  [Orabug: 29350522]  
  - RDMA/umem: Avoid partial declaration of non-static function (Leon Romanovsky)  [Orabug: 29350522]  
  - RDMA/umem: Refactor exit paths in ib_umem_get (Leon Romanovsky)  [Orabug: 29350522]  
  - RDMA/umem: Don't hold mmap_sem for too long (Leon Romanovsky)  [Orabug: 29350522]  
  - RDMA/umem: Don't check for a negative return value of dma_map_sg_attrs() (Leon Romanovsky)  [Orabug: 29350522]  
  - IB/usnic: Update with bug fixes from core code (Jason Gunthorpe)  [Orabug: 29350522]  
  - netfilter: nf_tables: deactivate expressions in rule replecement routine (Taehee Yoo)  [Orabug: 29355501]  
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357680]  
  - nfit_test: fix security state pull for nvdimm security nfit_test (Dave Jiang)   
  - acpi/nfit: Fix command-supported detection (Dan Williams)   
  - acpi/nfit: Block function zero DSMs (Dan Williams)   
  - libnvdimm/security: Require nvdimm_security_setup_events() to succeed (Dan Williams)   
  - dax: Check page->mapping isn't NULL (Matthew Wilcox)   
  - mm: hwpoison: use do_send_sig_info() instead of force_sig() (Naoya Horiguchi)   
  - x86/speculation: Add support for STIBP always-on preferred mode (Thomas Lendacky)  [Orabug: 29351650]  
  - x86/speculation: Provide IBPB always command line options (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Add seccomp Spectre v2 user space protection mode (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Enable prctl mode for spectre_v2_user (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Add prctl() control for indirect branch speculation (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Prepare arch_smt_update() for PRCTL mode (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Prevent stale SPEC_CTRL msr content (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Split out TIF update (Thomas Gleixner)  [Orabug: 29351650]  
  - ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Change to static keys (Anjali Kulkarni)  [Orabug: 29351650]  
  - x86/speculation: Prepare for conditional IBPB in switch_mm() (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Avoid __switch_to_xtra() calls (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/process: Consolidate and simplify switch_to_xtra() code (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Prepare for per task indirect branch speculation control (Tim Chen)  [Orabug: 29351650]  
  - x86/speculation: Add command line control for indirect branch speculation (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Unify conditional spectre v2 print functions (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculataion: Mark command line parser data __initdata (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Mark string arrays const correctly (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Reorder the spec_v2 code (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/l1tf: Show actual SMT state (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Rework SMT state change (Thomas Gleixner)  [Orabug: 29351650]  
  - sched/smt: Expose sched_smt_present static key (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/Kconfig: Select SCHED_SMT if SMP enabled (Thomas Gleixner)  [Orabug: 29351650]  
  - sched/smt: Make sched_smt_present track topology (Peter Zijlstra (Intel))  [Orabug: 29351650]  
  - x86/speculation: Reorganize speculation control MSRs update (Tim Chen)  [Orabug: 29351650]  
  - x86/speculation: Rename SSBD update functions (Thomas Gleixner)  [Orabug: 29351650]  
  - x86/speculation: Disable STIBP when enhanced IBRS is in use (Tim Chen)  [Orabug: 29351650]  
  - x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Tim Chen)  [Orabug: 29351650]  
  - x86/speculation: Remove unnecessary ret variable in cpu_show_common() (Tim Chen)  [Orabug: 29351650]  
  - x86/speculation: Clean up spectre_v2_parse_cmdline() (Tim Chen)  [Orabug: 29351650]  
  - x86/speculation: Update the TIF_SSBD comment (Tim Chen)  [Orabug: 29351650]  
  - sched/core: Fix cpu.max vs. cpuhotplug deadlock (Peter Zijlstra)  [Orabug: 29351650]  
  - x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Jiri Kosina)  [Orabug: 29351650]  
  - x86/speculation: Apply IBPB more strictly to avoid cross-process data leak (Jiri Kosina)  [Orabug: 29351650]  
  - blk-mq: dequeue request one by one from sw queue if hctx is busy (Ming Lei)  [Orabug: 28433037]  
  - blk-mq: use list_splice_tail_init() to insert requests (Ming Lei)  [Orabug: 28433037]  
  - blk-mq: introduce BLK_STS_DEV_RESOURCE (Jianchao Wang)  [Orabug: 28433037]


