# changelog

author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.7.1.el7uek]
changelog:
  - mm: thp: set THP defrag by default to madvise and add a stall-free defrag option (Mel Gorman)  [Orabug: 26614414]  
  - rds: Fix incorrect statistics counting (Håkon Bugge)  [Orabug: 26847814]  
  - rds: Fix non-atomic operation on shared flag variable (Håkon Bugge)  [Orabug: 26846933]  
  - Documentation: add watermark_scale_factor to the list of vm systcl file (Jerome Marchand)  [Orabug: 26832827]  
  - mm: scale kswapd watermarks in proportion to memory (Johannes Weiner)  [Orabug: 26832827]  
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26867289]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26867289]  
  - i40e: use cpumask_copy instead of direct assignment (Jacob Keller)  [Orabug: 26849262]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.8.1.el7uek]
changelog:
  - tcp: fix tcp_mark_head_lost to check skb len before fragmenting (Neal Cardwell)  [Orabug: 26923675]  
  - timerfd: Protect the might cancel mechanism proper (Thomas Gleixner)  [Orabug: 26899775]  {CVE-2017-10661} 
  - kvm: nVMX: Don't allow L2 to access the hardware CR8 (Jim Mattson)   {CVE-2017-12154} {CVE-2017-12154} 
  - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen)  [Orabug: 26880590]  {CVE-2017-7541} 
  - crypto: ahash - Fix EINPROGRESS notification callback (Herbert Xu)  [Orabug: 26916575]  {CVE-2017-7618} 
  - ovl: use O_LARGEFILE in ovl_copy_up() (David Howells)  [Orabug: 25953280]  
  - rxrpc: Fix several cases where a padded len isn't checked in ticket decode (David Howells)  [Orabug: 26880508]  {CVE-2017-7482} {CVE-2017-7482} 
  - tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Wei Wang)  [Orabug: 26813385]  {CVE-2017-14106}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.1.el7uek]
changelog:
  - xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster)  [Orabug: 27013241]  
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988633]  {CVE-2017-14489} 
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26999097]  
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27013220]  {CVE-2017-7542} 
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 27013227]  {CVE-2017-1000112} 
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 26943884]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.10.1.el7uek]
changelog:
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27200879]  {CVE-2017-1000405} 
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 27044692]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069038]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069038]  {CVE-2017-12190} 
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27069065]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27069065]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27069065]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27069065]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27069065]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27069065]  {CVE-2017-15649} 
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215225]  {CVE-2017-16650} 
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148276]  {CVE-2017-16527} 
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 27187217]  
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 27126129]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119628]  
  - ocfs2: code clean up for direct io (Ryan Ding)   
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27076919]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27062498]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27062498]  
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 27026180]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001717]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036903]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050248]  {CVE-2017-12192} 
  - IB/ipoib: For sendonly join free the multicast group on leave (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: increase the max mcast backlog queue (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Make sendonly multicast joins create the mcast group (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Expire sendonly multicast joins (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: Suppress warning for send only join failures (Jason Gunthorpe)  [Orabug: 27077718]  
  - IB/ipoib: Clean up send-only multicast joins (Doug Ledford)  [Orabug: 27077718]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077944]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052681]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Brian Maly)  [Orabug: 27037811]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.1.1.el7uek]
changelog:
  - Added IB diag counters from UEK2 (Chris Gray)  [Orabug: 26088208]  
  - scsi: megaraid_sas: Driver version upgrade (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: raid6 also require cpuSel check same as raid5 (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: add correct return type check for ldio hint logic for raid1 (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: array overflow in megasas_dump_frame() (Dan Carpenter)  [Orabug: 26096381]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Change RAID_1_10_RMW_CMDS to RAID_1_PEER_CMDS and set value to 2 (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Indentation and smatch warning fixes (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Cleanup VD_EXT_DEBUG and SPAN_DEBUG related debug prints (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Increase internal command pool (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Bail out the driver load if ld_list_query fails (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Change build_mpt_mfi_pass_thru to return void (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: During OCR, if get_ctrl_info fails do not continue with OCR (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Do not set fp_possible if TM capable for non-RW syspdIO, change fp_possible to bool (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Remove unused pd_index from megasas_build_ld_nonrw_fusion (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: megasas_return_cmd does not memset IO frame to zero (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: max_fw_cmds are decremented twice, remove duplicate (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: update can_queue only if the new value is less (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Change max_cmd from u32 to u16 in all functions (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: set pd_after_lb from MR_BuildRaidContext and initialize pDevHandle to MR_DEVHANDLE_INVALID (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: latest controller OCR capability from FW before sending shutdown DCMD (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: avoid unaligned access in ioctl path (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: big endian support changes (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Big endian RDPQ mode fix (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: MR_TargetIdToLdGet u8 to u16 and avoid invalid raid-map access (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: In validate raid map, raid capability is not converted to cpu format for all lds (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: reduce size of fusion_context and use vmalloc if kmalloc fails (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: add print in device removal path (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: enhance debug logs in OCR context (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: set residual bytes count during IO completion (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: raid 1 write performance for large io (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: change issue_dcmd to return void from int (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: megasas_get_request_descriptor always return valid desc (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Use DID_REQUEUE (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: RAID map is accessed for SYS PDs when use_seqnum_jbod_fp is not set (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Refactor MEGASAS_IS_LOGICAL macro using sdev (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: 32 bit descriptor fire cmd optimization (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: raid 1 fast path code optimize (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: cpu select rework. (Shivasharan S)  [Orabug: 26096381]  
  - Revert "scsi: megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth" (Shivasharan S)  [Orabug: 26096381]  
  - scsi: megaraid_sas: driver version upgrade (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Implement the PD Map support for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: ldio_outstanding variable is not decremented in completion path (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Enable or Disable Fast path based on the PCI Threshold Bandwidth (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Add the Support for SAS3.5 Generic Megaraid Controllers Capabilities (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Dynamic Raid Map Changes for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: SAS3.5 Generic Megaraid Controllers Fast Path for RAID 1/10 Writes (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: SAS3.5 Generic Megaraid Controllers Stream Detection and IO Coalescing (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: EEDP Escape Mode Support for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: 128 MSIX Support (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: megaraid_sas: Add new pci device Ids for SAS3.5 Generic Megaraid Controllers (Sasikumar Chandrasekaran)  [Orabug: 26096381]  
  - scsi: sd: Check for unaligned partial completion (Damien Le Moal)  [Orabug: 26178369]  
  - PCI/AER: include header file (Sudip Mukherjee)  [Orabug: 25130845]  
  - NVMe: reverse IO direction for VUC command code F7 (Ashok Vairavan)  [Orabug: 25258071]  
  - nvme: factor out a add nvme_is_write helper (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: allow for size limitations from transport drivers (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme.h: add constants for PSDT and FUSE values (James Smart)  [Orabug: 25130845]  
  - nvme.h: add AER constants (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme.h: add NVM command set SQE/CQE size defines (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme.h: Add get_log_page command strucure (Armen Baloyan)  [Orabug: 25130845]  
  - nvme.h: add RTD3R, RTD3E and OAES fields (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Only release requested regions (Johannes Thumshirn)  [Orabug: 25130845]  
  - NVMe: Fix removal in case of active namespace list scanning method (Sunad Bhandary)  [Orabug: 25130845]  
  - NVMe: Implement namespace list scanning (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Don't unmap controller registers on reset (Keith Busch)  [Orabug: 25130845]  
  - NVMe: reduce admin queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25186219]  
  - nvme: Limit command retries (Keith Busch)  [Orabug: 25130845]  
  - NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25138123]  
  - NVMe: Create discard zero quirk white list (Keith Busch)  [Orabug: 25130845]  
  - nvme: use UINT_MAX for max discard sectors (Minfei Huang)  [Orabug: 25130845]  
  - nvme: move nvme_cancel_request() to common code (Ming Lin)  [Orabug: 25130845]  
  - nvme: update and rename nvme_cancel_io to nvme_cancel_request (Ming Lin)  [Orabug: 25130845]  
  - blk-mq: Export tagset iter function (Sagi Grimberg)  [Orabug: 25130845]  
  - NVMe: Add device ID's with stripe quirk (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Short-cut removal on surprise hot-unplug (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Allow user initiated rescan (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Reduce driver log spamming (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Unbind driver on failure (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Delete only created queues (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix reset/remove race (Keith Busch)  [Orabug: 25130845]  
  - nvme: fix nvme_ns_remove() deadlock (Ming Lin)  [Orabug: 25130845]  
  - nvme: switch to RCU freeing the namespace (Ming Lin)  [Orabug: 25130845]  
  - NVMe: correct comment for offset enum of controller registers in nvme.h (Wang Sheng-Hui)  [Orabug: 25130845]  
  - nvme: add helper nvme_cleanup_cmd() (Ming Lin)  [Orabug: 25130845]  
  - nvme: move AER handling to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move namespace scanning to core (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: tighten up state check for namespace scanning (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: introduce a controller state machine (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: remove the io_incapable method (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: nvme_core_exit() should do cleanup in the reverse order as nvme_core_init does (Wang Sheng-Hui)  [Orabug: 25130845]  
  - NVMe: Fix check_flush_dependency warning (Keith Busch)  [Orabug: 25130845]  
  - NVMe: small typo in section BLK_DEV_NVME_SCSI of host/Kconfig (Wang Sheng-Hui)  [Orabug: 25130845]  
  - nvme: fix cntlid type (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: Avoid reset work on watchdog timer function during error recovery (Guilherme G. Piccoli)  [Orabug: 25130845]  
  - nvme: remove dead controllers from a work item (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: silence warning about unused 'dev' (Jens Axboe)  [Orabug: 25130845]  
  - NVMe: switch to using blk_queue_write_cache() (Jens Axboe)  [Orabug: 25130845]  
  - block: add ability to flag write back caching on a device (Jens Axboe)  [Orabug: 25130845]  
  - nvme: Use blk-mq helper for IO termination (Sagi Grimberg)  [Orabug: 25130845]  
  - NVMe: Skip async events for degraded controllers (Keith Busch)  [Orabug: 25130845]  
  - nvme: add helper nvme_setup_cmd() (Ming Lin)  [Orabug: 25130845]  
  - block: add offset in blk_add_request_payload() (Ming Lin)  [Orabug: 25130845]  
  - nvme: rewrite discard support (Ming Lin)  [Orabug: 25130845]  
  - nvme: add helper nvme_map_len() (Ming Lin)  [Orabug: 25130845]  
  - nvme: add missing lock nesting notation (Ming Lin)  [Orabug: 25130845]  
  - NVMe: Always use MSI/MSI-x interrupts (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix reset/remove race (Keith Busch)  [Orabug: 25130845]  
  - nvme: avoid cqe corruption when update at the same time as read (Marta Rybczynska)  [Orabug: 25130845]  
  - NVMe: Expose ns wwid through single sysfs entry (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove unused sq_head read in completion path (Jon Derrick)  [Orabug: 25130845]  
  - nvme: fix max_segments integer truncation (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: set queue limits for the admin queue (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Fix 0-length integrity payload (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Don't allow unsupported flags (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Move error handling to failed reset handler (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Simplify device reset failure (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix namespace removal deadlock (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use IDA for namespace disk naming (Keith Busch)  [Orabug: 25130845]  
  - nvme: expose cntlid in sysfs (Ming Lin)  [Orabug: 25130845]  
  - nvme: return the whole CQE through the request passthrough interface (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: fix Kconfig description for BLK_DEV_NVME_SCSI (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: replace the kthread with a per-device watchdog timer (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: don't poll the CQ from the kthread (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: use a work item to submit async event requests (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Rate limit nvme IO warnings (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Poll device while still active during remove (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Requeue requests on suspended queues (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Allow request merges (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix io incapable return values (Keith Busch)  [Orabug: 25130845]  
  - nvme: split pci module out of core module (Ming Lin)  [Orabug: 25130845]  
  - nvme: split dev_list_lock (Ming Lin)  [Orabug: 25130845]  
  - nvme: move timeout variables to core.c (Ming Lin)  [Orabug: 25130845]  
  - nvme/host: reference the fabric module for each bdev open callout (Sagi Grimberg)  [Orabug: 25130845]  
  - nvme: Log the ctrl device name instead of the underlying pci device name (Sagi Grimberg)  [Orabug: 25130845]  
  - nvme: fix drvdata setup for the nvme device (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Fix possible queue use after freed (Keith Busch)  [Orabug: 25130845]  
  - nvme: switch abort to blk_execute_rq_nowait (Christoph Hellwig)  [Orabug: 25130845]  
  - blk-mq: fix racy updates of rq->errors (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Export NVMe attributes to sysfs group (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Shutdown controller only for power-off (Keith Busch)  [Orabug: 25130845]  
  - NVMe: IO queue deletion re-write (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove queue freezing on resets (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use a retryable error code on reset (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix admin queue ring wrap (Keith Busch)  [Orabug: 25130845]  
  - nvme: make SG_IO support optional (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: fixes for NVME_IOCTL_IO_CMD on the char device (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: synchronize access to ctrl->namespaces (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: Move nvme_freeze/unfreeze_queues to nvme core (Sagi Grimberg)  [Orabug: 25130845]  
  - NVMe: Export namespace attributes to sysfs (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Add pci error handlers (Keith Busch)  [Orabug: 25130845]  
  - nvme: merge iod and cmd_info (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: meta_sg doesn't have to be an array (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: properly free resources for cancelled command (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: simplify completion handling (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: special case AEN requests (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: factor out a few helpers from req_completion (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: fix admin queue depth (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Simplify metadata setup (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove device management handles on remove (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use unbounded work queue for all work (Keith Busch)  [Orabug: 25130845]  
  - nvme: switch abort_limit to an atomic_t (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: merge probe_work and reset_work (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: do not restart the request timeout if we're resetting the controller (Keith Busch)  [Orabug: 25130845]  
  - nvme: simplify resets (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: add NVME_SC_CANCELLED (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: merge nvme_abort_req and nvme_timeout (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: don't take the I/O queue q_lock in nvme_timeout (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: protect against simultaneous shutdown invocations (Keith Busch)  [Orabug: 25130845]  
  - nvme: only add a controller to dev_list after it's been fully initialized (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: only ignore hardware errors in nvme_create_io_queues (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: precedence bug in nvme_pr_clear() (Dan Carpenter)  [Orabug: 25130845]  
  - nvme: fix another 32-bit build warning (Arnd Bergmann)  [Orabug: 25130845]  
  - nvme: refactor set_queue_count (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move chardev and sysfs interface to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move namespace scanning to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move the call to nvme_init_identify earlier (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: add a common helper to read Identify Controller data (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move nvme_{enable,disable,shutdown}_ctrl to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move remaining CC setup into nvme_enable_ctrl (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: add explicit quirk handling (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move block_device_operations and ns/ctrl freeing to common code (Ashok Vairavan)  [Orabug: 25130845]  
  - nvme: use the block layer for userspace passthrough metadata (Keith Busch)  [Orabug: 25130845]  
  - nvme: split __nvme_submit_sync_cmd (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move nvme_setup_flush and nvme_setup_rw to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move nvme_error_status to common code (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: factor out a nvme_unmap_data helper (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: simplify nvme_setup_prps calling convention (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: split a new struct nvme_ctrl out of struct nvme_dev (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: use vendor it from identify (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: split nvme_trans_device_id_page (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: use offset instead of a struct for registers (Christoph Hellwig)   
  - nvme: split command submission helpers out of pci.c (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move struct nvme_iod to pci.c (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Precedence error in nvme_pr_clear() (Dan Carpenter)  [Orabug: 25130845]  
  - Update target repo for nvme patch contributions (Jay Freyensee)  [Orabug: 25130845]  
  - nvme: add missing endianess annotations in nvme_pr_command (Christoph Hellwig)  [Orabug: 25130845]  
  - block: rename REQ_TYPE_SPECIAL to REQ_TYPE_DRV_PRIV (Christoph Hellwig)  [Orabug: 25130845]  
  - block: add an API for Persistent Reservations (Christoph Hellwig)  [Orabug: 25130845]  
  - NVMe: Add persistent reservation ops (Keith Busch)  [Orabug: 25130845]  
  - nvme: suspend i/o during runtime blk_integrity_unregister (Dan Williams)  [Orabug: 25130845]  
  - nvme include linux types.h (Christoph Hellwig)  [Orabug: 25130845]  
  - nvme: move to a new drivers/nvme/host directory (Jay Sternberg)  [Orabug: 25130845]  
  - NVMe: Set affinity after allocating request queues MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Fix IO for extended metadata formats (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Remove hctx reliance for multi-namespace (Keith Busch)  [Orabug: 25130845]  
  - NVMe: Use requested sync command timeout (Keith Busch)  [Orabug: 25130845]  
  - Revert "nvme: move to a new drivers/nvme/host directory" (Ashok Vairavan)  [Orabug: 25130845]  
  - Revert "NVMe: reduce admin queue depth as workaround for Samsung EPIC SQ errata" (Ashok Vairavan)   
  - Revert "nvme: Limit command retries" (Ashok Vairavan)   
  - Revert "nvme: avoid cqe corruption when update at the same time as read" (Ashok Vairavan)   
  - Revert "NVMe: Don't unmap controller registers on reset" (Ashok Vairavan)   
  - Revert "NVMe: reverse IO direction for VUC command code F7" (Ashok Vairavan)   
  - Revert "NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata" (Ashok Vairavan)   
  - forcedeth: enable forcedeth kernel option (Zhu Yanjun)  [Orabug: 25571921]  
  - ipmi: Edit ambiguous error message for unknown command (Atish Patra)  [Orabug: 25461958]  
  - kabi whitelist: Remove all ib_ symbols from the list. (Knut Omang)  [Orabug: 25955825]  
  - ext4: print ext4 mount option data_err=abort correctly (Ales Novak)  [Orabug: 25691020]  
  - IB/sa: Allocate SA query with kzalloc (Kaike Wan)  [Orabug: 26124118]  
  - IB/sa: Fix netlink local service GFP crash (Kaike Wan)  [Orabug: 26124118]  
  - IB/sa: Fix rdma netlink message flags (Kaike Wan)  [Orabug: 26124118]  
  - IB/sa: Put netlink request into the request list before sending (Kaike Wan)  [Orabug: 26124118]  
  - IB/core: Fix a potential array overrun in CMA and SA agent (Yuval Shaia)  [Orabug: 26124118]  
  - IB/SA: Use correct free function (Mark Bloch)  [Orabug: 26124118]  
  - IB/sa: Route SA pathrecord query through netlink (Kaike Wan)  [Orabug: 26124118]  
  - IB/core: Add rdma netlink helper functions (Kaike Wan)  [Orabug: 26124118]  
  - IB/netlink: Add defines for local service requests through netlink (Kaike Wan)  [Orabug: 26124118]  
  - scsi: mpt3sas: remove redundant wmb (Sinan Kaya)  [Orabug: 26096353]  
  - scsi: mpt3sas: Updating driver version to v15.100.00.00 (Chaitra P B)  [Orabug: 26096353]  
  - scsi: mpt3sas: Fix for Crusader to achieve product targets with SAS devices. (Chaitra P B)  [Orabug: 26096353]  
  - scsi: mpt3sas: Fix Firmware fault state 0x2100 during heavy 4K RR FIO stress test. (Chaitra P B)  [Orabug: 26096353]  
  - scsi: mpt3sas: Added print to notify cable running at a degraded speed. (Chaitra P B)  [Orabug: 26096353]  
  - xen-blkback: report hotplug-status busy when detach is initiated but frontend device is busy. (Niranjan Patil)  [Orabug: 26072430]  
  - qla2xxx: Allow vref count to timeout on vport delete. (Joe Carnuccio)  [Orabug: 26021151]  
  - Btrfs: don't BUG_ON() in btrfs_orphan_add (Josef Bacik)  [Orabug: 25975316]  
  - Btrfs: clarify do_chunk_alloc()'s return value (Liu Bo)  [Orabug: 25975316]  
  - btrfs: flush_space: treat return value of do_chunk_alloc properly (Alex Lyakas)  [Orabug: 25975316]  
  - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki)  [Orabug: 25955089]  
  - xen: Make VPMU init message look less scary (Juergen Gross)  [Orabug: 25873416]  
  - uek-rpm: configs: enable CONFIG_ACPI_NFIT (Todd Vierling)  [Orabug: 25719149]  
  - ipv6: Don't use ufo handling on later transformed packets (Jakub Sitnicki)  [Orabug: 25533743]  
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 25813773]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 25813773]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 25813773]  {CVE-2017-7308} 
  - fs/file.c: __fget() and dup2() atomicity rules (Eric Dumazet)  [Orabug: 25408921]  
  - IB/ipoib: add get_settings in ethtool (Zhu Yanjun)  [Orabug: 25048521]  
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26081079]  
  - Revert "xen/events: remove unnecessary call to bind_evtchn_to_cpu()" (Zhenzhong Duan)   
  - xsigo: Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 25981973]  
  - Revert "[SCSI] libiscsi: Reduce locking contention in fast path" (Ashish Samant)  [Orabug: 25975223]  
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25974739]  {CVE-2017-7895} 
  - sched/rt: Minimize rq->lock contention in do_sched_rt_period_timer() (Dave Kleikamp)  [Orabug: 25491970]  
  - sparc64: cache_line_size() returns larger value for cache line size. (chris hyser)   
  - sparc64: fix inconsistent printing of handles in debug messages (Menno Lageman)   
  - sparc64: set the ISCNTRLD bit for SP service handles (Menno Lageman)  [Orabug: 25983868]  
  - sparc64: DAX recursive lock removed (Rob Gardner)  [Orabug: 26103487]  
  - sparc/ftrace: Fix ftrace graph time measurement (Liam R. Howlett)  [Orabug: 25995351]  
  - sparc64: Increase max_phys_bits to 51 for M8. (Vijay Kumar)  [Orabug: 25808647]  
  - sparc64: 5-Level page table support for sparc (Vijay Kumar)  [Orabug: 26076110] [Orabug: 25808647]  
  - mm, gup: fix typo in gup_p4d_range() (Kirill A. Shutemov)  [Orabug: 25808647]  
  - mm: introduce __p4d_alloc() (Kirill A. Shutemov)  [Orabug: 25808647]  
  - mm: convert generic code to 5-level paging (Vijay Kumar)  [Orabug: 25808647]  
  - asm-generic: introduce <asm-generic/pgtable-nop4d.h> (Vijay Kumar)  [Orabug: 25808647]  
  - arch, mm: convert all architectures to use 5level-fixup.h (Vijay Kumar)  [Orabug: 25808647]  
  - asm-generic: introduce __ARCH_USE_5LEVEL_HACK (Kirill A. Shutemov)  [Orabug: 25808647]  
  - asm-generic: introduce 5level-fixup.h (Kirill A. Shutemov)  [Orabug: 25808647]  
  - sparc64: prevent sunvdc from sending duplicate vdisk requests (Jag Raman)  [Orabug: 25866770]  
  - ldmvsw: stop the clean timer at beginning of remove (Shannon Nelson)  [Orabug: 25748241]  
  - sparc64: set CONFIG_EFI in config (Eric Snowberg)  [Orabug: 26037358]  
  - sparc64: /sys/firmware/efi missing during EFI boot (Eric Snowberg)  [Orabug: 26037358]  
  - Allow default value of npools used for iommu to be configured from cmdline (Allen Pais)   
  - SPARC64: Add Linux vds driver Device ID support for Solaris guest boot (George Kennedy)  [Orabug: 25836231]  
  - sparc64: Remove locking of huge pages in DAX driver (Sanath Kumar)  [Orabug: 25968141]  
  - ldmvsw: unregistering netdev before disable hardware (Thomas Tai)   
  - arch/sparc: Measure receiver forward progress to avoid send mondo timeout (Jane Chu)  [Orabug: 25476541]  
  - sparc64: update DAX submit to latest HV spec (Jonathan Helman)  [Orabug: 25927558]  
  - arch/sparc: increase CONFIG_NODES_SHIFT on SPARC to 5 (Jane Chu)  [Orabug: 25577754]  
  - arch/sparc: support NR_CPUS = 4096 (jane Chu)  [Orabug: 25505750]  
  - ipv6: catch a null skb before using it in a DTRACE (Shannon Nelson)  [Orabug: 25973797]  
  - sparc64: fix fault handling in NGbzero.S and GENbzero.S (Dave Aldridge)  [Orabug: 25577560]  
  - sparc64: modify sys_dax.h for new libdax (Jonathan Helman)  [Orabug: 25927572]  
  - bnx2x: Align RX buffers (Scott Wood)  [Orabug: 25806778]  
  - PCI: Fix unaligned accesses in VC code (David Miller)  [Orabug: 25806778]  
  - sparc64: Use LOCKDEP_SMALL, not PROVE_LOCKING_SMALL (Daniel Jordan)  [Orabug: 25830041]  
  - lockdep: Limit static allocations if PROVE_LOCKING_SMALL is defined (Babu Moger)   
  - config: Adding the new config parameter CONFIG_PROVE_LOCKING_SMALL for sparc (Babu Moger)   
  - sparc64: fix cdev_put() use-after-free when unbinding an LDom (Thomas Tai)  [Orabug: 25911389]  
  - sparc64: change DAX CCB_EXEC ENOBUFS print to debug (Jonathan Helman)  [Orabug: 25927528]  
  - xen-netback: copy buffer on xenvif_start_xmit (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: slightly rework xenvif_rx_skb (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: introduce rx copy mode (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: use gref mappings for Tx buffers (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: generalize recycling for grants (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: add rx page statistics (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: introduce rx page recyling (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: move rx_gso_checksum_fixup into netfront_stats (Joao Martins)  [Orabug: 26107942]  
  - xen-netfront: introduce staging gref pools (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: use gref mappings for Tx requests (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: use gref mappings for Rx requests (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: shorten tx grant copy (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: introduce staging grant mappings ops (Joao Martins)  [Orabug: 26107942]  
  - include/xen: import vendor extension to netif.h (Joao Martins)  [Orabug: 26107942]  
  - xen-netback: fix type mismatch warning (Arnd Bergmann)   
  - xen-netback: fix guest Rx stall detection (after guest Rx refactor) (David Vrabel)   
  - xen/netback: add fraglist support for to-guest rx (Ross Lagerwall)   
  - xen-netback: batch copies for multiple to-guest rx packets (David Vrabel)   
  - xen-netback: process guest rx packets in batches (David Vrabel)   
  - xen-netback: immediately wake tx queue when guest rx queue has space (David Vrabel)   
  - xen-netback: refactor guest rx (David Vrabel)   
  - xen-netback: retire guest rx side prefix GSO feature (Paul Durrant)   
  - xen-netback: separate guest side rx code into separate module (Paul Durrant)   
  - x86/xen/time: setup secondary time info for vdso (Joao Martins)  [Orabug: 26107942]  
  - Drivers: hv: kvp: fix IP Failover (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - Drivers: hv: util: Pass the channel information during the init call (K. Y. Srinivasan)  [Orabug: 25970637]  
  - Drivers: hv: utils: run polling callback always in interrupt context (Olaf Hering)  [Orabug: 25970637]  
  - Drivers: hv: util: Increase the timeout for util services (K. Y. Srinivasan)  [Orabug: 25970637]  
  - Drivers: hv: kvp: check kzalloc return value (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - Drivers: hv: fcopy: dynamically allocate smsg_out in fcopy_send_data() (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - Drivers: hv: vss: full handshake support (Vitaly Kuznetsov)  [Orabug: 25970637]  
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 25920916]  
  - mlx4: limit max MSIX allocations (Ajaykumar Hotchandani)  [Orabug: 25912737]  
  - sched/wait: Fix the signal handling fix (Peter Zijlstra)  [Orabug: 25908266]  
  - sparc64: Fix mapping of 64k pages with MAP_FIXED (Nitin Gupta)  [Orabug: 25885991]  
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25876402]  {CVE-2016-10229} 
  - net/mlx4_core: panic the system on unrecoverable errors (Santosh Shilimkar)  [Orabug: 25873690]  
  - Revert "restrict /dev/mem to idle io memory ranges" (Chuck Anderson)  [Orabug: 25832750]  
  - I/O ERROR WHEN A FILE ON ACFS FILESYSTEM IS ATTACHED TO THE GUEST DOMU (Joe Jin)  [Orabug: 25831471]  
  - xsigo: Fix spinlock release in case of error (Pradeep Gopanapalli)  [Orabug: 25779803]  
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 25440329]  
  - xsigo: Optimize xsvnic module parameters for UEK4 (Pradeep Gopanapalli)  [Orabug: 25779865]  
  - xen: events: Replace BUG() with BUG_ON() (Shyam Saini)   
  - xen: remove stale xs_input_avail() from header (Juergen Gross)   
  - xen: return xenstore command failures via response instead of rc (Juergen Gross)   
  - xen: xenbus driver must not accept invalid transaction ids (Juergen Gross)   
  - xen/evtchn: use rb_entry() (Geliang Tang)   
  - xen/setup: Don't relocate p2m over existing one (Ross Lagerwall)   
  - xen/balloon: Only mark a page as managed when it is released (Ross Lagerwall)   
  - xen/scsifront: don't request a slot on the ring until request is ready (Juergen Gross)   
  - xen/x86: Increase xen_e820_map to E820_X_MAX possible entries (Alex Thorlton)   
  - x86: Make E820_X_MAX unconditionally larger than E820MAX (Alex Thorlton)   
  - xen/pci: Bubble up error and fix description. (Konrad Rzeszutek Wilk)   
  - xen: xenbus: set error code on failure (Pan Bian)   
  - xen: set error code on failures (Pan Bian)   
  - xen/events: use xen_vcpu_id mapping for EVTCHNOP_status (Vitaly Kuznetsov)   
  - xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing (Boris Ostrovsky)   
  - tpm xen: Remove bogus tpm_chip_unregister (Jason Gunthorpe)   
  - xen-scsifront: Add a missing call to kfree (Quentin Lambert)   
  - xenfs: Use proc_create_mount_point() to create /proc/xen (Seth Forshee)   
  - xen-netback: fix error handling output (Arnd Bergmann)   
  - xen: make use of xenbus_read_unsigned() in xenbus (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-pciback (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-fbfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-scsifront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-pcifront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-netfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-netback (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-kbdfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-tpmfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-blkfront (Juergen Gross)   
  - xen: make use of xenbus_read_unsigned() in xen-blkback (Juergen Gross)   
  - xen: introduce xenbus_read_unsigned() (Juergen Gross)   
  - xen-netfront: cast grant table reference first to type int (Dongli Zhang)   
  - xen-netfront: do not cast grant table reference to signed short (Dongli Zhang)   
  - xenbus: check return value of xenbus_scanf() (Jan Beulich)   
  - xenbus: prefer list_for_each() (Jan Beulich)   
  - xenbus: advertise control feature flags (Juergen Gross)   
  - xen/pciback: support driver_override (Juergen Gross)   
  - xen/pciback: avoid multiple entries in slot list (Juergen Gross)   
  - xen/pciback: simplify pcistub device handling (Juergen Gross)   
  - x86/xen: add missing 
   at end of printk warning message (Colin Ian King)   
  - xen-netfront: avoid packet loss when ethernet header crosses page boundary (Vitaly Kuznetsov)   
  - xen: Sync xen header (Juergen Gross)   
  - xen/grant-table: Use kmalloc_array() in arch_gnttab_valloc() (Markus Elfring)   
  - xen: Make VPMU init message look less scary (Juergen Gross)   
  - xen: rename xen_pmu_init() in sys-hypervisor.c (Juergen Gross)   
  - kexec: allow kdump with crash_kexec_post_notifiers (Petr Tesarik)   
  - xen/acpi: allow xen-acpi-processor driver to load on Xen 4.7 (Jan Beulich)   
  - proc: Allow creating permanently empty directories that serve as mount points (Eric W. Biederman)   
  - xen: Resume PMU from non-atomic context (Boris Ostrovsky)


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-103.3.2.el7uek]
changelog:
  - rds: tcp: cancel all worker threads before shutting down socket (Yuval Shaia)  [Orabug: 26332905]  
  - Revert "ixgbevf: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26560824]  
  - Revert "ixgbe: get rid of custom busy polling code" (Jack Vogel)  [Orabug: 26560824]  
  - xen: do not re-use pirq number cached in pci device msi msg data (Boris Ostrovsky)  [Orabug: 26324865]  
  - xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli)  [Orabug: 26520653]  
  - ocfs2: fix deadlock caused by recursive locking in xattr (Eric Ren)  [Orabug: 26554428]  
  - ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren)  [Orabug: 26554428]  
  - ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren)  [Orabug: 26554428]  
  - Revert "add OCFS2_LOCK_RECURSIVE arg_flags to ocfs2_cluster_lock() to prevent hang" (Ashish Samant)  [Orabug: 26554428]  
  - MacSec: fix backporting error in patches for CVE-2017-7477 (Alexey Kodanev)  [Orabug: 26481629] [Orabug: 26368162]  {CVE-2017-7477} {CVE-2017-7477} 
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26492439]  
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540266]  {CVE-2017-2671} 
  - PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran)  [Orabug: 26362330]  
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.4.el7uek]
changelog:
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26585933]  {CVE-2016-6213} {CVE-2016-6213} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578179]  {CVE-2017-9242} 
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585981]  {CVE-2016-9604} {CVE-2016-9604} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586030]  {CVE-2016-10200} 
  - ovl: move super block magic number to magic.h (Stephen Hemminger)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: use a minimal buffer in ovl_copy_xattr (Vito Caputo)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: allow zero size xattr (Miklos Szeredi)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - ovl: default permissions (Miklos Szeredi)  [Orabug: 22876737]  {CVE-2016-1575} {CVE-2016-1576} 
  - scsi: megaraid_sas: handle dma_addr_t right on 32-bit (Arnd Bergmann)  [Orabug: 26560952]  
  - scsi: megaraid_sas: NVME fast path io support (Shivasharan S)  [Orabug: 26560952]  
  - scsi: megaraid_sas: NVME interface target prop added (Shivasharan S)  [Orabug: 26560952]  
  - scsi: megaraid_sas: NVME Interface detection and prop settings (Shivasharan S)  [Orabug: 26560952]  
  - scsi: megaraid_sas: Use synchronize_irq to wait for IRQs to complete (Shivasharan S)  [Orabug: 26560952]  
  - fs/fuse: fuse mount can cause panic with no memory numa node (Somasundaram Krishnasamy)  [Orabug: 26151828]  
  - Fix regression which breaks DFS mounting (Sachin Prabhu)  [Orabug: 26335022]  
  - ol7/spec: sync up linux-firmware version for ol74 (Ethan Zhao)  [Orabug: 26567308] [Orabug: 26567283]  
  - nfsd: encoders mustn't use unitialized values in error cases (J. Bruce Fields)  [Orabug: 26572867]  {CVE-2017-8797} 
  - nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi)  [Orabug: 26572867]  {CVE-2017-8797} 
  - ol6/spec: sync up linux-firmware version for ol6 (Ethan Zhao)  [Orabug: 26586911] [Orabug: 26586927]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.8.el7uek]
changelog:
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26638900]  {CVE-2017-1000365} {CVE-2017-1000365}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-103.3.8.1.el7uek]
changelog:
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796363]  {CVE-2017-1000251}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-102.el7uek]
changelog:
  - Revert "mlx4_ib: Memory leak on Dom0 with SRIOV." (Hakon Bugge)  [Orabug: 25829233]  
  - Revert "mlx4: avoid multiple free on id_map_ent" (Hakon Bugge)  [Orabug: 25829233]  
  - Drivers: hv: vss: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Drivers: hv: vss: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Drivers: hv: vss: process deferred messages when we complete the transaction (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Drivers: hv: kvp: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 25819105]  
  - Revert "ipv4: use skb coalescing in defragmentation" (Florian Westphal)  [Orabug: 25819103]  
  - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft)  [Orabug: 25805996]  {CVE-2017-7184} 
  - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)  [Orabug: 25805996]  {CVE-2017-7184} 
  - lpfc cannot establish connection with targets that send PRLI under P2P mode (Joe Jin)  [Orabug: 25802913]  
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25802678]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25802678]  {CVE-2017-2636} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25802599]  {CVE-2017-6345} 
  - ip: fix IP_CHECKSUM handling (Paolo Abeni)  [Orabug: 25802576]  {CVE-2017-6347} 
  - udp: fix IP_CHECKSUM handling (Eric Dumazet)  [Orabug: 25802576]  {CVE-2017-6347} 
  - udp: do not expect udp headers in recv cmsg IP_CMSG_CHECKSUM (Willem de Bruijn)  [Orabug: 25802576]  {CVE-2017-6347} 
  - tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)  [Orabug: 25802549]  {CVE-2017-6214} 
  - sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)  [Orabug: 25802515]  {CVE-2017-5986} 
  - ext4: store checksum seed in superblock (Darrick J. Wong)  [Orabug: 25802481]  {CVE-2016-10208} 
  - ext4: reserve code points for the project quota feature (Theodore Ts'o)  [Orabug: 25802481]  {CVE-2016-10208} 
  - ext4: validate s_first_meta_bg at mount time (Eryu Guan)  [Orabug: 25802481]  {CVE-2016-10208} 
  - ext4: clean up feature test macros with predicate functions (Darrick J. Wong)  [Orabug: 25802481]  {CVE-2016-10208} 
  - KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini)  [Orabug: 25802278]  {CVE-2017-2583} {CVE-2017-2583} 
  - gfs2: fix slab corruption during mounting and umounting gfs file system (Thomas Tai)   
  - gfs2: handle NULL rgd in set_rgrp_preferences (Abhi Das)  [Orabug: 25791662]  
  - Revert "fix minor infoleak in get_user_ex()" (Brian Maly)  [Orabug: 25790370]  {CVE-2016-9644} 
  - sched/wait: Fix signal handling in bit wait helpers (Peter Zijlstra)  [Orabug: 25416990]  
  - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)   
  - IB/CORE: sync the resouce access in fmr_pool (Wengang Wang)   
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766884]  {CVE-2016-8399} {CVE-2016-8399} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751395]  {CVE-2017-7187} 
  - xen-netfront: Rework the fix for Rx stall during OOM and network stress (Dongli Zhang)  [Orabug: 25747721]  
  - xen-netfront: Fix Rx stall during network stress and OOM (Dongli Zhang)  [Orabug: 25747721]  
  - ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso)  [Orabug: 25717094]  {CVE-2017-5669}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-100.el7uek]
changelog:
  - ol7/config: enable nf_tables packet duplication support (Ethan Zhao)  [Orabug: 24694570]  
  - netfilter: nf_dup: add missing dependencies with NF_CONNTRACK (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: nf_tables: add nft_dup expression (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: factor out packet duplication for IPv4/IPv6 (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: xt_TEE: get rid of WITH_CONNTRACK definition (Pablo Neira Ayuso)  [Orabug: 24694570]  
  - netfilter: move tee_active to core (Florian Westphal)  [Orabug: 24694570]  
  - ipv6: Set FLOWI_FLAG_KNOWN_NH at flowi6_flags (Martin KaFai Lau)  [Orabug: 24694570]  
  - ext4: Fix data exposure after failed AIO DIO (Jan Kara)  [Orabug: 24393811]  
  - xfs: fold xfs_vm_do_dio into xfs_vm_direct_IO (Christoph Hellwig)  [Orabug: 24393811]  
  - xfs: don't use ioends for direct write completions (Christoph Hellwig)  [Orabug: 24393811]  
  - direct-io: always call ->end_io if non-NULL (Christoph Hellwig)  [Orabug: 24393811]  
  - Btrfs: send, fix failure to rename top level inode due to name collision (Robbie Ko)  [Orabug: 25994280]  
  - PCI: Check pref compatible bit for mem64 resource of PCIe device (Yinghai Lu)  [Orabug: 22855133]  
  - OF/PCI: Add IORESOURCE_MEM_64 for 64-bit resource (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Keep resource idx order with bridge register number (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Add IORESOURCE_MEM_64 for 64-bit resource in OF parsing (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Reserve legacy mmio after PCI mmio (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Add pci_find_bus_resource() (Yinghai Lu)  [Orabug: 22855133]  
  - sparc/PCI: Use correct offset for bus address to resource (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Remove __pci_mmap_make_offset() (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Let pci_mmap_page_range() take resource address (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Fix proc mmap on sparc (Yinghai Lu)  [Orabug: 22855133]  
  - PCI: Supply CPU physical address (not bus address) to iomem_is_exclusive() (Bjorn Helgaas)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Use correct bus address to resource offset" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Unify pci_register_region()" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Reserve legacy mmio after PCI mmio" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Add IORESOURCE_MEM_64 for 64-bit resource in OF parsing" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc/PCI: Keep resource idx order with bridge register number" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: kill wrong quirk about M7101" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "OF/PCI: Add IORESOURCE_MEM_64 for 64-bit resource" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Only treat non-pref mmio64 as pref if all bridges have MEM_64" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Add has_mem64 for struct host_bridge" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Only treat non-pref mmio64 as pref if host bridge has mmio64" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "PCI: Restore pref MMIO allocation logic for host bridge without mmio64" (Khalid Aziz)  [Orabug: 22855133]  
  - Revert "sparc: Accommodate mem64_offset != mem_offset in pbm configuration" (Khalid Aziz)  [Orabug: 22855133]  
  - PCI: Prevent VPD access for QLogic ISP2722 (Ethan Zhao)  [Orabug: 25975482]  
  - PCI: Prevent VPD access for buggy devices (Babu Moger)  [Orabug: 25975482]  
  - target: consolidate backend attribute implementations (Christoph Hellwig)  [Orabug: 25791789]  
  - target: simplify backend driver registration (Christoph Hellwig)  [Orabug: 25791789]  
  - x86/tsc: Enumerate SKL cpu_khz and tsc_khz via CPUID (Len Brown)  [Orabug: 25948913]  
  - x86/tsc: Save an indentation level in recalibrate_cpu_khz() (Borislav Petkov)  [Orabug: 25948913]  
  - x86/tsc_msr: Remove irqoff around MSR-based TSC enumeration (Len Brown)  [Orabug: 25948913]  
  - perf/x86: Fix time_shift in perf_event_mmap_page (Adrian Hunter)  [Orabug: 25948913]  
  - perf/x86: Improve accuracy of perf/sched clock (Adrian Hunter)  [Orabug: 25948913]  
  - x86/apic: Handle zero vector gracefully in clear_vector_irq() (Keith Busch)  [Orabug: 24515998]  
  - dtrace: proc:::exit should trigger only if thread group exits (Tomas Jedlicka)  [Orabug: 25904298]  
  - HID: hid-cypress: validate length of report (Greg Kroah-Hartman)  [Orabug: 25795985]  {CVE-2017-7273} 
  - ctf: prevent modules on the dedup blacklist from sharing any types at all (Nick Alcock)  [Orabug: 26137220]  
  - ctf: emit bitfields in in-memory order (Nick Alcock)  [Orabug: 25815129]  
  - ctf: bitfield support (Nick Alcock)  [Orabug: 25815129]  
  - ctf: emit file-scope static variables (Nick Alcock)  [Orabug: 25962387]  
  - ctf: speed up the dwarf2ctf duplicate detector some more (Nick Alcock)  [Orabug: 25815306]  
  - ctf: strdup() -> xstrdup() (Nick Alcock)  [Orabug: 25815306]  
  - ctf: speed up the dwarf2ctf duplicate detector (Nick Alcock)  [Orabug: 25815306]  
  - ctf: add module parameter to simple_dwfl_new() and adjust both callers (Nick Alcock)   
  - ctf: fix the size of int and avoid duplicating it (Nick Alcock)  [Orabug: 25815129]  
  - ctf: allow overriding of DIE attributes: use it for parent bias (Nick Alcock)  [Orabug: 25815129]  
  - DTrace tcp/udp provider probes (Alan Maguire)  [Orabug: 25815197]  
  - dtrace: define DTRACE_PROBE_ENABLED to 0 when !CONFIG_DTRACE (Nick Alcock)  [Orabug: 26145788]  
  - dtrace: ensure limit is enforced even when pcs is NULL (Kris Van Hees)  [Orabug: 25949692]  
  - dtrace: make x86_64 FBT return probe detection less restrictive (Kris Van Hees)  [Orabug: 25949048]  
  - dtrace: support passing offset as arg0 to FBT return probes (Kris Van Hees)  [Orabug: 25949086]  
  - dtrace: make FBT entry probe detection less restrictive on x86_64 (Kris Van Hees)  [Orabug: 25949030]  
  - dtrace: adjust FBT entry probe dection for OL7 (Kris Van Hees)  [Orabug: 25921361]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-101.el7uek]
changelog:
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25340071]  {CVE-2016-10088} 
  - tcp: fix potential memory corruption (Eric Dumazet)  [Orabug: 25140382]  
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25134541]  {CVE-2016-7910} 
  - xfs: Correctly lock inode when removing suid and file capabilities (Jan Kara)  [Orabug: 24803533]  
  - fs: Call security_ops->inode_killpriv on truncate (Jan Kara)  [Orabug: 24803533]  
  - fs: Provide function telling whether file_remove_privs() will do anything (Jan Kara)  [Orabug: 24803533]  
  - fs: Rename file_remove_suid() to file_remove_privs() (Jan Kara)  [Orabug: 24803533]  
  - IB/uverbs: Fix leak of XRC target QPs (Tariq Toukan)  [Orabug: 24761732]  
  - Some unsupported ioctls get logged unnecessarily (Venkat Venkatsubra)  [Orabug: 24510137]  
  - IB/ipoib: Expose acl_enable sysfs file as read only (Yuval Shaia)  [Orabug: 25993951]  
  - dtrace: improve io provider coverage (Nicolas Droux)  [Orabug: 25816537]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.7.3.el7uek]
changelog:
  - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen)  [Orabug: 26943541]  {CVE-2017-7541}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.7.4.el7uek]
changelog:
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011255]  {CVE-2017-7542} 
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 26921320]  {CVE-2017-1000112}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.2.el7uek]
changelog:
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Brian Maly)  [Orabug: 27037811]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.3.el7uek]
changelog:
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001717]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036903]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050248]  {CVE-2017-12192} 
  - IB/ipoib: For sendonly join free the multicast group on leave (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: increase the max mcast backlog queue (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Make sendonly multicast joins create the mcast group (Doug Ledford)  [Orabug: 27077718]  
  - IB/ipoib: Expire sendonly multicast joins (Christoph Lameter)  [Orabug: 27077718]  
  - IB/ipoib: Suppress warning for send only join failures (Jason Gunthorpe)  [Orabug: 27077718]  
  - IB/ipoib: Clean up send-only multicast joins (Doug Ledford)  [Orabug: 27077718]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077944]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077944]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077944]  
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052681]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.5.el7uek]
changelog:
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 27076919]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27062498]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27062498]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27062498]  
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.9.6.el7uek]
changelog:
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119628]  
  - ocfs2: code clean up for direct io (Ryan Ding)


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.5.1.el7uek]
changelog:
  - uek-rpm: Build kernel ueknano rpm for OL7 (Somasundaram Krishnasamy)  [Orabug: 26803594]  
  - uek/config: enable NVME SG_IO support by default (Shan Hai)  [Orabug: 26981802]  
  - nvme: report the scsi TUR state correctly (Shan Hai)  [Orabug: 26981802]  
  - scsi: scsi_transport_iscsi: fix the issue that iscsi_if_rx doesn't parse nlmsg properly (Xin Long)  [Orabug: 26988631]  {CVE-2017-14489} 
  - CVE-2016-10318 missing authorization check fscrypt_process_policy (Jack Vogel)  [Orabug: 26989776]  
  - ovl: fix get_acl() on tmpfs (Miklos Szeredi)  [Orabug: 26975443]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.6.1.el7uek]
changelog:
  - ocfs2: fix posix_acl_create deadlock (Junxiao Bi)  [Orabug: 26808507]  
  - rds: Proper init/exit declaration for module init/exit function (Ka-Cheong Poon)  [Orabug: 26937730]  
  - rds: Remove .exit from struct rds_transport (Ka-Cheong Poon)  [Orabug: 26937730]  
  - smartpqi: update driver version (Don Brace)  [Orabug: 26882397]  
  - smartpqi: cleanup raid map warning message (Kevin Barnett)  [Orabug: 26882397]  
  - smartpqi: update controller ids (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: remove the smp_handler stub (Christoph Hellwig)  [Orabug: 26882397]  
  - scsi: smartpqi: change driver version to 1.1.2-125 (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: add in new controller ids (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: update kexec and power down support (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: cleanup doorbell register usage. (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: update pqi passthru ioctl (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: enhance BMIC cache flush (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: add pqi reset quiesce support (Kevin Barnett)  [Orabug: 26882397]  
  - scsi: smartpqi: make pdev pointer names consistent (Kevin Barnett)  [Orabug: 26882397]  
  - udp: consistently apply ufo or fragmentation (Willem de Bruijn)  [Orabug: 26921314]  {CVE-2017-1000112} 
  - be2net: fix TSO6/GSO issue causing TX-stall on Lancer/BEx (Suresh Reddy)  [Orabug: 26928620]  
  - ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca)  [Orabug: 27011248]  {CVE-2017-7542} 
  - xfs: use dedicated log worker wq to avoid deadlock with cil wq (Brian Foster)  [Orabug: 27013239]  
  - nvme: honor RTD3 Entry Latency for shutdowns (Martin K. Petersen)  [Orabug: 26929569]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.7.1.el7uek]
changelog:
  - x86/platform/uv: Fix kdump for UV (Kirtikar Kashyap)  [Orabug: 27031280]  
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27045425]  
  - KEYS: prevent KEYCTL_READ on negative key (Eric Biggers)  [Orabug: 27050237]  {CVE-2017-12192} 
  - NFS: Add static NFS I/O tracepoints (Chuck Lever)   
  - Hang/soft lockup in d_invalidate with simultaneous calls (Al Viro)  [Orabug: 27052680]  
  - scsi: mpt3sas: Bump mpt3sas driver version to v16.100.00.00 (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Adding support for SAS3616 HBA device (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix possibility of using invalid Enclosure Handle for SAS device after host reset (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Display chassis slot information of the drive (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Updated MPI headers to v2.00.48 (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix IO error occurs on pulling out a drive from RAID1 volume created on two SATA drive (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fix removal and addition of vSES device during host reset (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Reduce memory footprint in kdump kernel (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Fixed memory leaks in driver (Sreekanth Reddy)  [Orabug: 26894579]  
  - scsi: mpt3sas: Processing of Cable Exception events (Sreekanth Reddy)  [Orabug: 26894579]  
  - storvsc: don't assume SG list is contiguous (Aruna Ramakrishna)  [Orabug: 27044703]  
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27036905]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - uek-rpm: Update kernel-ueknano's provides list. (Somasundaram Krishnasamy)  [Orabug: 27022769]  
  - uek-rpm: Add more modules to ueknano for OL7 (Somasundaram Krishnasamy)  [Orabug: 27015961]  
  - selinux: fix off-by-one in setprocattr (Stephen Smalley)  [Orabug: 27001687]  {CVE-2017-2618} {CVE-2017-2618} {CVE-2017-2618} 
  - dtrace: Add CTF archive to the UEK nano package (Tomas Jedlicka)  [Orabug: 27039123]  
  - Revert "drivers/char/mem.c: deny access in open operation when securelevel is set" (Dhaval Giani)  [Orabug: 27037801]  
  - thp: run vma_adjust_trans_huge() outside i_mmap_rwsem (Kirill A. Shutemov)  [Orabug: 26763484]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.8.1.el7uek]
changelog:
  - uek-rpm: disable CONFIG_NUMA_BALANCING_DEFAULT_ENABLED (Fred Herard)  [Orabug: 26798697]  
  - uek-rpm: Add more missing modules to OL7 ueknano (Somasundaram Krishnasamy)  [Orabug: 27028326]  
  - fix unbalanced page refcounting in bio_map_user_iov (Vitaly Mayatskikh)  [Orabug: 27069034]  {CVE-2017-12190} 
  - more bio_map_user_iov() leak fixes (Al Viro)  [Orabug: 27069034]  {CVE-2017-12190} 
  - usb: Quiet down false peer failure messages (Don Zickus)  [Orabug: 26669801]  
  - ovl: during copy up, switch to mounter's creds early (Vivek Goyal)  [Orabug: 27052885]  
  - ovl: lookup: do getxattr with mounter's permission (Miklos Szeredi)  [Orabug: 27052885]  
  - ovl: get rid of the dead code left from broken (and disabled) optimizations (Al Viro)  [Orabug: 27052885]  
  - selinux: Implement dentry_create_files_as() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security, overlayfs: Provide hook to correctly label newly created files (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Pass security pointer to determine_inode_label() (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Implementation for inode_copy_up_xattr() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security,overlayfs: Provide security hook for copy up of xattrs for overlay file (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: Implementation for inode_copy_up() hook (Vivek Goyal)  [Orabug: 27052885]  
  - security, overlayfs: provide copy up security hook for unioned files (Vivek Goyal)  [Orabug: 27052885]  
  - selinux: delay inode label lookup as long as possible (Paul Moore)  [Orabug: 27052885]  
  - selinux: Add accessor functions for inode->i_security (Andreas Gruenbacher)  [Orabug: 27052885]  
  - selinux: Create a common helper to determine an inode label [ver #3] (David Howells)  [Orabug: 27052885]  
  - KVM: nVMX: Fix loss of L2's NMI blocking state (Wanpeng Li)  [Orabug: 27056291]  
  - KVM: nVMX: track NMI blocking state separately for each VMCS (Paolo Bonzini)  [Orabug: 27056291]  
  - KVM: VMX: require virtual NMI support (Paolo Bonzini)  [Orabug: 27056291]  
  - KVM: nVMX: Fix the NMI IDT-vectoring handling (Wanpeng Li)  [Orabug: 27056291]  
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27077793]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27077793]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27077793]  
  - uek-rpm: add update-el-x86; fix-up ol6/update-el (Chuck Anderson)  [Orabug: 26844981]  
  - xscore: add dma address check (Zhu Yanjun)  [Orabug: 26994454]  
  - qla2xxx: Update driver version to 9.00.00.00.40.0-k (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix delayed response to command for loop mode/direct connect. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Use IOCB interface to submit non-critical MBX. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add async new target notification (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Allow relogin to proceed if remote login did not finish (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix sess_lock & hardware_lock lock order problem. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix inadequate lock protection for ABTS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix request queue corruption. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix memory leak for abts processing (Quinn Tran)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix ql_dump_buffer (Joe Perches)  [Orabug: 26844197]  
  - scsi: qla2xxx: Fix response queue count for Target mode. (Michael Hernandez)  [Orabug: 26844197]  
  - scsi: qla2xxx: Cleaned up queue configuration code. (Michael Hernandez)  [Orabug: 26844197]  
  - qla2xxx: Fix a warning reported by the "smatch" static checker (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Bart Van Assche)  [Orabug: 26844197]  
  - qla2xxx: Simplify usage of SRB structure in driver (Joe Carnuccio)  [Orabug: 26844197]  
  - qla2xxx: Improve RSCN handling in driver (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add framework for async fabric discovery (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Track I-T nexus as single fc_port struct (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: introduce a private sess_kref (Christoph Hellwig)  [Orabug: 26844197]  
  - qla2xxx: Use d_id instead of s_id for more clarity (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong argument in sp done callback (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove SRR code (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Cleanup TMF code translation from qla_target (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Disable out-of-order processing by default in firmware (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix erroneous invalid handle message (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reduce exess wait during chip reset (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Terminate exchange if corrupted (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Fix crash due to null pointer access (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Collect additional information to debug fw dump (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Reset reserved field in firmware options to 0 (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Include ATIO queue in firmware dump when in target mode (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Fix wrong IOCB type assumption (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Add DebugFS node for target sess list. (Quinn Tran)  [Orabug: 26844197]  
  - tcm_qla2xxx: Convert to target_alloc_session usage (Nicholas Bellinger)  [Orabug: 26844197]  
  - qla2xxx: Use ATIO type to send correct tmr response (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Fix TMR ABORT interaction issue between qla2xxx and TCM (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Move atioq to a different lock to reduce lock contention (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Remove dependency on hardware_lock to reduce lock contention. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Replace QLA_TGT_STATE_ABORTED with a bit. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Wait for all conflicts before ack'ing PLOGI (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Delete session if initiator is gone from FW (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Added interface to send explicit LOGO. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: Add FW resource count in DebugFS. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable Target counters in DebugFS. (Himanshu Madhani)  [Orabug: 26844197]  
  - qla2xxx: terminate exchange when command is aborted by LIO (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: drop cmds/tmrs arrived while session is being deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: disable scsi_transport_fc registration in target mode (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: added sess generations to detect RSCN update races (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: delay plogi/prli ack until existing sessions are deleted (Alexei Potashnik)  [Orabug: 26844197]  
  - qla2xxx: cleanup cmd in qla workqueue before processing TMR (Swapnil Nagle)  [Orabug: 26844197]  
  - qla2xxx: Add flush after updating ATIOQ consumer index. (Quinn Tran)  [Orabug: 26844197]  
  - qla2xxx: Enable target mode for ISP27XX (Himanshu Madhani)  [Orabug: 26844197]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.9.1.el7uek]
changelog:
  - xfs: Fix off-by-in in loop termination in xfs_find_get_desired_pgoff() (Jan Kara)  [Orabug: 26862911]  
  - xfs: Fix missed holes in SEEK_HOLE implementation (Jan Kara)  [Orabug: 26862911]  
  - ext4: fix off-by-in in loop termination in ext4_find_unwritten_pgoff() (Jan Kara)  [Orabug: 26862911]  
  - ext4: fix SEEK_HOLE (Jan Kara)  [Orabug: 26862911]  
  - rtc: cmos: century support (Sylvain Chouleur)  [Orabug: 27025943]  
  - ocfs2: code clean up for direct io (Ryan Ding)  [Orabug: 27117733]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27119610]  
  - ocfs2: fstrim: Fix start offset of first cluster group during fstrim (Ashish Samant)  [Orabug: 26326914]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.10.1.el7uek]
changelog:
  - Revert "Improves clear_huge_page() using work queues" (Jack Vogel)  [Orabug: 27055693]  
  - packet: in packet_do_bind, test fanout with bind_lock held (Willem de Bruijn)  [Orabug: 27069060]  {CVE-2017-15649} 
  - packet: hold bind lock when rebinding to fanout hook (Willem de Bruijn)  [Orabug: 27069060]  {CVE-2017-15649} 
  - net: convert packet_fanout.sk_ref from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 27069060]  {CVE-2017-15649} 
  - packet: fix races in fanout_add() (Eric Dumazet)  [Orabug: 27069060]  {CVE-2017-15649} 
  - refcount_t: Introduce a special purpose refcount type (Peter Zijlstra)  [Orabug: 27069060]  {CVE-2017-15649} 
  - locking/atomics: Add _{acquire|release|relaxed}() variants of some atomic operations (Will Deacon)  [Orabug: 27069060]  {CVE-2017-15649} 
  - scsi: qla2xxx: Fix slow mem alloc behind lock (Quinn Tran)  [Orabug: 27100873]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.11.1.el7uek]
changelog:
  - mm, thp: Do not make page table dirty unconditionally in follow_trans_huge_pmd() (Kirill A. Shutemov)  [Orabug: 27200880]  {CVE-2017-1000405} 
  - uek-rpm: Update linux firmware package for OL7 (Dhaval Giani)  [Orabug: 27210206]  
  - uek-rpm: Update firmware for OL6 UEK spec file (Dhaval Giani)  [Orabug: 27210204]  
  - scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan D. Milne)  [Orabug: 27187218]  
  - xen/time: do not decrease steal time after live migration on xen (Dongli Zhang)  [Orabug: 26770163]  
  - ALSA: usb-audio: Kill stray URB at exiting (Takashi Iwai)  [Orabug: 27148272]  {CVE-2017-16527} 
  - scsi: qla2xxx: Fix NULL pointer access due to redundant fc_host_port_name call (Quinn Tran)  [Orabug: 27149785]  
  - scsi: qla2xxx: Initialize Work element before requesting IRQs (Himanshu Madhani)  [Orabug: 27149785]  
  - scsi: qla2xxx: Fix uninitialized work element (Quinn Tran)  [Orabug: 27149785]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-112.12.1.el7uek]
changelog:
  - ctf: allow dwarf2ctf to run as root but produce no output (Nick Alcock)  [Orabug: 27133094]  
  - net: qmi_wwan: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215221]  {CVE-2017-16650} 
  - ctf: fix thinko preventing linking of out-of-tree modules when CTF is off (Nick Alcock)  [Orabug: 27215293]  
  - Revert "firmware: dmi_scan: add SBMIOS entry and DMI tables" (Dan Duval)  [Orabug: 27100376]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.1.el7uek]
changelog:
  - ext4: fix off-by-one on max nr_pages in ext4_find_unwritten_pgoff() (Eryu Guan)  [Orabug: 27233471]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.2.el7uek]
changelog:
  - fuse: Call end_queued_requests() after releasing fc->lock in fuse_dev_release() (Ashish Samant)  [Orabug: 26431550]  
  - rds: Fix inaccurate accounting of unsignaled wrs in rds_ib_xmit_rdma (Håkon Bugge)  [Orabug: 27097105]  
  - rds: Fix inaccurate accounting of unsignaled wrs (Håkon Bugge)  [Orabug: 27097105]  
  - rds: ib: Fix NULL pointer dereference in debug code (Håkon Bugge)  [Orabug: 27116566]  
  - bnx2x: fix slowpath null crash (Zhu Yanjun)  [Orabug: 27133587]  
  - rds: System panic if RDS netfilter is enabled and RDS/TCP is used (Ka-Cheong Poon)  [Orabug: 27150029]  
  - USB: serial: console: fix use-after-free after failed setup (Johan Hovold)  [Orabug: 27206830]  {CVE-2017-16525} 
  - mlx4: Subscribe to PXM notifier (Konrad Rzeszutek Wilk)   
  - xen/pci: Add PXM node notifier for PXM (NUMA) changes. (Konrad Rzeszutek Wilk)   
  - xen/pcifront: Walk the PCI bus after XenStore notification (Konrad Rzeszutek Wilk)   
  - uwb: properly check kthread_run return value (Andrey Konovalov)  [Orabug: 27206880]  {CVE-2017-16526} 
  - ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor (Takashi Iwai)  [Orabug: 27206923]  {CVE-2017-16529} 
  - USB: uas: fix bug in handling of alternate settings (Alan Stern)  [Orabug: 27206999]  {CVE-2017-16530} 
  - USB: fix out-of-bounds in usb_set_configuration (Greg Kroah-Hartman)  [Orabug: 27207224]  {CVE-2017-16531} 
  - HID: usbhid: fix out-of-bounds bug (Jaejoong Kim)  [Orabug: 27207918]  {CVE-2017-16533} 
  - USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor() (Alan Stern)  [Orabug: 27207970]  {CVE-2017-16535} 
  - [media] cx231xx-cards: fix NULL-deref on missing association descriptor (Johan Hovold)  [Orabug: 27208047]  {CVE-2017-16536} 
  - Replace max_t() with sub_positive() in dequeue_entity_load_avg() (Gayatri Vasudevan)  [Orabug: 27222316]  
  - sched/fair: Fix cfs_rq avg tracking underflow (Gayatri Vasudevan)  [Orabug: 27222316]  
  - KVM: nVMX: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Liran Alon)  [Orabug: 27250111]  
  - KVM: VMX: use kvm_event_needs_reinjection (Wanpeng Li)  [Orabug: 27250111]  
  - KVM: nVMX: Fix pending events injection (Wanpeng Li)  [Orabug: 27250111]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.3.el7uek]
changelog:
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - net: mpls: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - ipv6: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - ipv4: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - Thermal/int340x: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - cw1200: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - bpf: prevent speculative execution in eBPF interpreter (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27340459]  {CVE-2017-5753} 
  - kABI: Make the boot_cpu_data look normal. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kernel.spec: Require the new microcode_ctl. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} {CVE-2017-5715} 
  - x86/microcode/AMD: Add support for fam17h microcode loading (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Set IBPB when running a different VCPU (Dave Hansen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Clear the host registers after setbe (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Use the ibpb_inuse variable. (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - KVM: x86: add SPEC_CTRL to MSR and CPUID lists (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kvm: vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Paolo Bonzini)  [Orabug: 27339995]  {CVE-2017-5715} 
  - Use the "ibrs_inuse" variable. (Jun Nakajima)  [Orabug: 27339995]  {CVE-2017-5715} 
  - kvm: svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/svm: Set IBPB when running a different VCPU (Paolo Bonzini)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: Pad RSB on VM transition (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/cpu/AMD: Add speculative control support for AMD (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS and IBPB feature on microcode reload (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Move IBRS/IBPB feature detection to scattered.c (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: clear registers on VM exit (Tom Lendacky)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/kvm: Set IBPB when switching VM (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - *INCOMPLETE* x86/syscall: Clear unused extra registers on syscall entrance (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec_ctrl: save IBRS MSR value in paranoid_entry (Andrea Arcangeli)  [Orabug: 27339995]  {CVE-2017-5715} 
  - *Scaffolding* x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Add macro that does not save rax, rcx, rdx on stack to disable IBRS (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS and set IBP (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/feature: Report presence of IBPB and IBRS control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86: Add STIBP feature enumeration (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/feature: Enable the x86 feature to control (Tim Chen)  [Orabug: 27339995]  {CVE-2017-5715}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.14.7.el7uek]
changelog:
  - Re-introduce clearing of r12-15, rbp, rbx (Kris Van Hees)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86: more ibrs/pti fixes (Pavel Tatashin)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Actually do the check for in_use on ENABLE_IBRS (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kvm: svm: Expose the CPUID.0x80000008 ebx flag. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Provide the sysfs version of the ibrs_enabled (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Use better #define for FEATURE_ENABLE_IBRS and 0 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Instead of 0x2, 0x4, and 0x1 use #defines. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kpti: Disable when running under Xen PV (Konrad Rzeszutek Wilk)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86: Don't ENABLE_IBRS in nmi when we are still running on user cr3 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts - fix ia32 path (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Fix spectre/kpti integration (Konrad Rzeszutek Wilk)  [Orabug: 27352353]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KAISER KABI tweaks. (Martin K. Petersen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/ldt: fix crash in ldt freeing. (Jamie Iles)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Define 'cpu_current_top_of_stack' for 64-bit code (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Remove unused 'kernel_stack' per-cpu variable (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/entry: Stop using PER_CPU_VAR(kernel_stack) (Denys Vlasenko)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Guenter Roeck)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KPTI: Report when enabled (Kees Cook)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Move feature detection up (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: drop is_atomic arg to kaiser_pagetable_walk() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix unlikely error in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: paranoid_entry pass cr3 need to paranoid_exit (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: PCID 0 for kernel and 128 for user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: enhanced by kernel and user PCIDs (Dave Hansen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: vmstat show NR_KAISERTABLE as nr_overhead (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: delete KAISER_REAL_SWITCH option (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: cleanups while trying for gold link (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: kaiser_remove_mapping() move along the pgd (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: tidied up kaiser_add/remove_mapping slightly (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: tidied up asm/kaiser.h somewhat (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: ENOMEM if kaiser_pagetable_walk() NULL (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix perf crashes (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: KAISER depends on SMP (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: fix build and FIXME in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: do not set _PAGE_NX on pgd_none (Hugh Dickins)  [Orabug: 27352353]  {CVE-2017-5754} 
  - kaiser: merged update (Dave Hansen)  [Orabug: 27352353]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Make flush_tlb_mm_range() more predictable (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Remove flush_tlb() and flush_tlb_current_task() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/irq: Do not substract irq_tlb_count from irq_call_count (Aaron Lu)  [Orabug: 27352353]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - ARM: Hide finish_arch_post_lock_switch() from modules (Steven Rostedt)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27352353]  {CVE-2017-5754}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.10.el7uek]
changelog:
  - x86/ia32: save and clear registers on syscall. (Jamie Iles)  [Orabug: 27355759]  {CVE-2017-5754} 
  - x86/IBRS: Save current status of MSR_IA32_SPEC_CTRL (Boris Ostrovsky)  [Orabug: 27355887]  
  - pti: Rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Pavel Tatashin)  [Orabug: 27352353]  {CVE-2017-5754} 
  - usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)  [Orabug: 27356522]  
  - x86/spec_ctrl: Add missing IBRS_DISABLE (Konrad Rzeszutek Wilk)   
  - Make use of ibrs_inuse consistent. (Jun Nakajima)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.11.el7uek]
changelog:
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27363926] [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27369994]  
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27362581]  
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27363792]  
  - x86/spec_ctrl: Add missing 'lfence' when IBRS is not supported. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/entry_64: TRACE_IRQS_OFF before re-enabling. (Jamie Iles)  [Orabug: 27339995]  {CVE-2017-5715} 
  - ptrace: remove unlocked RCU dereference. (Jamie Iles)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: Adds code hygiene for 32bit SYSCALL instruction entry. (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: don't save registers on audit call (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec/ia32: Sprinkle IBRS and RSB at the 32-bit SYSCALL (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/ia32: Move STUFF_RSB And ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27339995]  {CVE-2017-5715} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT. (Konrad Rzeszutek Wilk)  [Orabug: 27365544]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.12.el7uek]
changelog:
  - xen-blkback: add pending_req allocation stats (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: move indirect req allocation out-of-line (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: pull nseg validation out in a function (Ankur Arora)  [Orabug: 27386890]  
  - xen-blkback: make struct pending_req less monolithic (Ankur Arora)  [Orabug: 27386890]  
  - x86: Clean up IBRS functionality resident in common code (Kanth Ghatraju)  [Orabug: 27403317]  
  - x86: Display correct settings for the SPECTRE_V2 bug (Kanth Ghatraju)  [Orabug: 27403317]  
  - Set CONFIG_GENERIC_CPU_VULNERABILITIES flag (Kanth Ghatraju)  [Orabug: 27403317]  
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27403317]  
  - sysfs/cpu: Fix typos in vulnerability documentation (David Woodhouse)  [Orabug: 27403317]  
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27403317]  
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (David Woodhouse)  [Orabug: 27403317]  
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27403317]  
  - KVM: x86: Add memory barrier on vmcs field lookup (Andrew Honig)   {CVE-2017-5753} 
  - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (Andrew Honig)  [Orabug: 27402301]  {CVE-2017-1000407} {CVE-2017-1000407} 
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 27397568]  
  - ixgbevf: handle mbox_api_13 in ixgbevf_change_mtu (Joao Martins)  [Orabug: 27397001]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.14.el7uek]
changelog:
  - drivers/char/mem.c: deny access in open operation when securelevel is set (Ethan Zhao)  [Orabug: 27234850] [Orabug: 27234850]  
  - hugetlb: fix nr_pmds accounting with shared page tables (Kirill A. Shutemov)  [Orabug: 26988581]  
  - x86/IBRS: Drop unnecessary WRITE_ONCE (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86/IBRS: Don't try to change IBRS mode if IBRS is not available (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86/IBRS: Remove support for IBRS_ENABLED_USER mode (Boris Ostrovsky)  [Orabug: 27416198]  
  - x86: Include linux/device.h in bugs_64.c (Boris Ostrovsky)  [Orabug: 27418896]  
  - x86/spectre: Drop the warning about ibrs being obsolete. (Konrad Rzeszutek Wilk)   
  - x86/spec: Don't print the Missing arguments for option spectre_v2. (Konrad Rzeszutek Wilk)   
  - x86/spec: Also print IBRS if IBPB is disabled. (Konrad Rzeszutek Wilk)   
  - x86/IBPB: Provide debugfs interface for changing IBPB mode (Boris Ostrovsky)  [Orabug: 27449065]  
  - xen: Make PV Dom0 Linux kernel NUMA aware (Elena Ufimtseva)   
  - net/rds: Fix incorrect error handling (Håkon Bugge)  [Orabug: 26848729]  
  - net/rds: use multiple sge than buddy allocation in congestion code (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "RDS: fix the sg allocation based on actual message size" (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "RDS: avoid large pages for sg allocation for TCP transport" (Wei Lin Guay)  [Orabug: 26848729]  
  - Revert "net/rds: Reduce memory footprint in rds_sendmsg" (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: reduce memory footprint during ib_post_recv in IB transport (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: reduce memory footprint during rds_sendmsg with IB transport (Wei Lin Guay)  [Orabug: 26848729]  
  - net/rds: set the rds_ib_init_frag based on supported sge (Wei Lin Guay)  [Orabug: 26848729]  
  - bnxt_en: Fix possible corrupted NVRAM parameters from firmware response. (Michael Chan)  [Orabug: 27199588]  
  - x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27255122]  
  - x86, efi, kasan: Fix build failure on !KASAN && KMEMCHECK=y kernels (Andrey Ryabinin)  [Orabug: 27255122]  
  - x86, efi, kasan: #undef memset/memcpy/memmove per arch (Andrey Ryabinin)  [Orabug: 27255122]  
  - Revert "Makefile: Build with -Werror=date-time if the compiler supports it" (Gayatri Vasudevan)  [Orabug: 27255122]  
  - dccp: CVE-2017-8824: use-after-free in DCCP code (Mohamed Ghannam)  [Orabug: 27290300]  {CVE-2017-8824} 
  - x86/efi: Initialize and display UEFI secure boot state a bit later during init (Daniel Kiper)  [Orabug: 27309477]  
  - x86/espfix: Init espfix on the boot CPU side (Zhu Guihua)  [Orabug: 27344552]  
  - x86/espfix: Add 'cpu' parameter to init_espfix_ap() (Zhu Guihua)  [Orabug: 27344552]  
  - ALSA: pcm: prevent UAF in snd_pcm_info (Robb Glasser)  [Orabug: 27344841]  {CVE-2017-0861} {CVE-2017-0861} 
  - fs/ocfs2: remove page cache for converted direct write (Wengang Wang)   
  - Revert "ocfs2: code clean up for direct io" (Wengang Wang)   
  - assoc_array: Fix a buggy node-splitting case (David Howells)  [Orabug: 27364592]  {CVE-2017-12193} {CVE-2017-12193} 
  - Sanitize 'move_pages()' permission checks (Linus Torvalds)  [Orabug: 27364690]  {CVE-2017-14140} 
  - pti: compile fix for when PTI is disabled (Pavel Tatashin)  [Orabug: 27383147]  {CVE-2017-5754} 
  - sctp: do not peel off an assoc from one netns to another one (Xin Long)  [Orabug: 27386999]  {CVE-2017-15115} 
  - net: ipv4: fix for a race condition in raw_sendmsg (Mohamed Ghannam)  [Orabug: 27390682]  {CVE-2017-17712} 
  - mlx4: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27404202]  
  - x86: Move STUFF_RSB in to the idt macro (Konrad Rzeszutek Wilk)   
  - x86/spec: STUFF_RSB _before_ ENABLE_IBRS (Konrad Rzeszutek Wilk)   
  - x86: Move ENABLE_IBRS in the interrupt macro. (Konrad Rzeszutek Wilk)  [Orabug: 27449045]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.15.el7uek]
changelog:
  - nvme-pci: Remove nvme_setup_prps BUG_ON (Keith Busch)  [Orabug: 27448367]  
  - block: Check for gaps on front and back merges (Jens Axboe)  [Orabug: 27448367]  
  - block: Copy a user iovec if it includes gaps (Sagi Grimberg)  [Orabug: 27448367]  
  - block: Replace SG_GAPS with new queue limits mask (Keith Busch)  [Orabug: 27448367]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.14.16.el7uek]
changelog:
  - x86/spectre_v2: Disable IBRS if spectre_v2=off (Konrad Rzeszutek Wilk)   
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 27525577]  
  - x86/spectre_v2: Remove 0xc2 from spectre_bad_microcodes (Darren Kenny)  [Orabug: 27523395]  
  - x86/speculation: Use Indirect Branch Prediction Barrier in context switch (Tim Chen)  [Orabug: 27524607]  
  - xenbus: track caller request id (Joao Martins)  [Orabug: 27472583]  
  - uek-rpm: configs: remove __stack_chk_fail from kABI list (Todd Vierling)   
  - x86/entry: RESTORE_IBRS needs to be done under kernel CR3 (Ankur Arora)  [Orabug: 27501741]  
  - Fix typo IBRS_ATT, which should be IBRS_ALL (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add spectre_v2_heuristics= (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Do not disable IBPB when disabling IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/scattered: Fix the order. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Favor IBRS on Skylake over retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/speculation: Fix typo IBRS_ATT, which should be IBRS_ALL (Darren Kenny)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Now that we expose 'stbibp' make sure it is correct. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeatures: Clean up Spectre v2 related CPUID flags (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/speculation: Add basic IBPB (Indirect Branch Prediction Barrier) support (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/bugs: Drop one "mitigation" from dmesg (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/nospec: Fix header guards names (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't spam the console with these: (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpu: Keep model defines sorted by model number (Andy Shevchenko)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/msr: Add definitions for new speculation control MSRs (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/cpufeatures: Add AMD feature bits for Speculation Control (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Print what options are available. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add VMEXIT_FILL_RSB instead of RETPOLINE (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: If IBRS is enabled disable "Filling RSB on context switch" (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - KVM: VMX: Allow direct access to MSR_IA32_SPEC_CTRL (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Don't allow {ibrs,ipbp,lfence}_enabled to be toggled if retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Fix retpoline_enabled (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Update sysctl values if toggled only by set_{ibrs,ibpb}_disabled (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - retpoline/module: Taint kernel for missing retpoline in module (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Fill RSB on context switch for affected CPUs (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Optimize inline assembler for vmexit_fill_RSB (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kprobes/x86: Disable optimizing on the function jumps to indirect thunk (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kprobes/x86: Blacklist indirect thunk functions for kprobes (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - retpoline: Introduce start/end markers of indirect thunk (Masami Hiramatsu)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/mce: Make machine check speculation protected (Thomas Gleixner)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kbuild: modversions for EXPORT_SYMBOL() for asm (Nicholas Piggin)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Tom Lendacky)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Remove compile time warning (Thomas Gleixner)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Fill return stack buffer on vmexit (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/irq32: Convert assembler indirect jumps (Andi Kleen)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/checksum32: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/xen: Convert Xen hypercall indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/hyperv: Convert assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/ftrace: Convert ftrace assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/entry: Convert entry assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline/crypto: Convert crypto assembler indirect jumps (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Add disable_ibrs_and_friends (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out if STUFF_RSB macro needs to be used. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre_v2: Figure out when to use IBRS. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Add IBRS option. (Konrad Rzeszutek Wilk)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/spectre: Add boot time option to select Spectre v2 mitigation (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/retpoline: Add initial retpoline support (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - kconfig.h: use __is_defined() to check if MODULE is defined (Masahiro Yamada)  [Orabug: 27478139]  {CVE-2017-5715} 
  - EXPORT_SYMBOL() for asm (Al Viro)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/asm: Make asm/alternative.h safe from assembly (Andy Lutomirski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/kbuild: enable modversions for symbols exported from asm (Adam Borowski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/asm: Use register variable to get stack pointer value (Andrey Ryabinin)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/mm/32: Move setup_clear_cpu_cap(X86_FEATURE_PCID) earlier (Andy Lutomirski)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/alternatives: Add missing '
  ' at end of ALTERNATIVE inline asm (David Woodhouse)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/alternatives: Fix optimize_nops() checking (Borislav Petkov)  [Orabug: 27478139]  {CVE-2017-5715} 
  - x86/microcode/intel: Extend BDW late-loading with a revision check (Jia Zhang)  [Orabug: 27343573]  
  - x86/microcode/intel: Disable late loading on model 79 (Borislav Petkov)  [Orabug: 27343573]  
  - x86/spec: Fix spectre_v1 bug and mitigation indicators (John Haxby)  [Orabug: 27470707]  
  - x86: Fix compile issues if CONFIG_XEN not defined (Konrad Rzeszutek Wilk)   
  - x86/mitigation/spectre_v2: Add reporting of 'lfence' (Konrad Rzeszutek Wilk)   
  - x86/spec: Add 'lfence_enabled' in sysfs (Konrad Rzeszutek Wilk)   
  - x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation (Konrad Rzeszutek Wilk)   
  - x86/IBRS/IBPB: Remove procfs interface to ibrs/ibpb_enable (Boris Ostrovsky)  [Orabug: 27415916]  
  - x86: Use PRED_CMD MSR when ibpb is enabled (Konrad Rzeszutek Wilk)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.14.17.el7uek]
changelog:
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27457402]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27457402]  
  - x86/spectre_v2: Only use IBRS when ibrs_inuse tells us to (Konrad Rzeszutek Wilk)   
  - kernel: on OL6 only, simulate the gcc 4.4 kABI for __stack_chk_fail() (Todd Vierling)  [Orabug: 27509404]  
  - uek-rpm: configs: Don't set HAVE_FENTRY on OL6 builds. (Todd Vierling)  [Orabug: 27509404]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.15.1.el7uek]
changelog:
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27534557]  {CVE-2017-5715} 
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27535442]  
  - x86: make HAVE_FENTRY dependent on !SIMULATE_GCC44_KABI (Todd Vierling)  [Orabug: 27533590]  
  - Revert "uek-rpm: configs: remove __stack_chk_fail from kABI list" (Todd Vierling)  [Orabug: 27540429]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.1.el7uek]
changelog:
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27045425]  
  - Btrfs: fix unexpected EEXIST from btrfs_get_extent (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: fix incorrect block_len in merge_extent_mapping (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: add WARN_ONCE to detect unexpected error from merge_extent_mapping (Liu Bo)  [Orabug: 27033166]  
  - Btrfs: deal with existing encompassing extent map in btrfs_get_extent() (Omar Sandoval)  [Orabug: 27033166]  
  - Btrfs: deal with duplciates during extent_map insertion in btrfs_get_extent (Chris Mason)  [Orabug: 27033166]  
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27215191]  {CVE-2017-16649} 
  - KVM: x86: pvclock: Handle first-time write to pvclock-page contains random junk (Liran Alon)  [Orabug: 27221679]  
  - KVM: x86: always fill in vcpu->arch.hv_clock (Paolo Bonzini)  [Orabug: 27221679]  
  - net/mlx4_core: allow QPs with enable_smi_admin enabled (Zhu Yanjun)  [Orabug: 27256720]  
  - qlcnic: fix deadlock bug (Junxiao Bi)  [Orabug: 27337130]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27534437]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27534437]  {CVE-2017-5715} 
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27578295]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.16.2.el7uek]
changelog:
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27547729]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27556096]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27556096]  
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27516479]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27601790]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27601735]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-112.16.3.el7uek]
changelog:
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27636063]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.4.el7uek]
changelog:
  - scsi: Make __scsi_remove_device go straight from BLOCKED to DEL (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: Protect SCSI device state changes with a mutex (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: Introduce scsi_start_queue() (Bart Van Assche)  [Orabug: 27339736]  
  - scsi: avoid a permanent stop of the scsi device's request queue (Wei Fang)  [Orabug: 27339736]  
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.5.el7uek]
changelog:
  - IB/core: Avoid calling ib_query_device (Or Gerlitz)  [Orabug: 27687710]  
  - IB/core: Save the device attributes on the device structure (Ira Weiny)  [Orabug: 27687710]  
  - KVM: x86: fix singlestepping over syscall (Paolo Bonzini)  [Orabug: 27669907]  {CVE-2017-7518} {CVE-2017-7518} 
  - xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins)  [Orabug: 27655757]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.6.el7uek]
changelog:
  - fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers)  [Orabug: 27290198]  {CVE-2017-17052} 
  - negotiate_mq should happen in all cases of a new VBD being discovered by xen-blkfront, whether called through _probe() or a hot-attached new VBD from dom-0 via xenstore. Otherwise, hot-attached new VBDs are left configured without multi-queue. (Patrick Colp)  [Orabug: 27383895]  
  - rds: Fix NULL pointer dereference in __rds_rdma_map (Håkon Bugge)  [Orabug: 27477007]  
  - nvme: fix uninitialized prp2 value on small transfers (Jan H. Schönherr)  [Orabug: 27581008]  
  - xen-netfront: Improve error handling during initialization (Ross Lagerwall)  [Orabug: 27655820]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27636704]  
  - mstflint: update Makefile and Kconfig (Qing Huang)  [Orabug: 27656465]  
  - target: add inquiry_product module param to override LIO default (Kyle Fortin)  [Orabug: 27679482]  
  - target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin)  [Orabug: 27679482]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27747176]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-112.16.7.el7uek]
changelog:
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718305]  
  - autofs: use dentry flags to block walks during expire (Ian Kent)  [Orabug: 26032471] [Orabug: 27766149]  
  - autofs races (Al Viro)  [Orabug: 27766149] [Orabug: 27766149]  
  - crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller)  [Orabug: 26182706]  
  - crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu)  [Orabug: 26182706]  
  - crypto: xts - consolidate sanity check for keys (Stephan Mueller)  [Orabug: 26182706]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.16.8.el7uek]
changelog:
  - usb: usbtest: fix NULL pointer dereference (Alan Stern)  [Orabug: 27602323]  {CVE-2017-16532} 
  - ACPI / PAD: don't register acpi_pad driver if running as Xen dom0 (Juergen Gross)  [Orabug: 27768622]  
  - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal)  [Orabug: 27774014]  {CVE-2018-1068} 
  - sched/fair: Fix typo in sync_throttle() (Xunlei Pang)  [Orabug: 27787638]  
  - sched/fair: Do not announce throttled next buddy in dequeue_task_fair() (Konstantin Khlebnikov)  [Orabug: 27787638]  
  - sched/fair: Initialize and rework throttle_count for new task-groups (Peter Zijlstra)  [Orabug: 27787638]  
  - KVM/VMX: Clear spec_ctrl status when resetting vcpu (Patrick Colp)   
  - ctf: drop the run-as-root error (Nick Alcock)  [Orabug: 27854093]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.17.1.el7uek]
changelog:
  - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)  [Orabug: 27215075]  {CVE-2017-16643} 
  - Input: ims-psu - check if CDC union descriptor is sane (Dmitry Torokhov)  [Orabug: 27215112]  {CVE-2017-16645} 
  - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount (Olga Kornievskaia)  [Orabug: 27457469]  
  - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang)  [Orabug: 27728388]  
  - uek-rpm: Disable DMA CMA (Jianchao Wang)  [Orabug: 27811840]  
  - nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)  [Orabug: 27811840]  
  - nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)  [Orabug: 27811840]  
  - nvme/pci: Fix stuck nvme reset (Keith Busch)  [Orabug: 27811840]  
  - nvme: don't schedule multiple resets (Keith Busch)  [Orabug: 27811840]  
  - blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)  [Orabug: 27811840]  
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)  [Orabug: 27854374]  {CVE-2018-1093} {CVE-2018-1093} 
  - ocfs2: Take inode cluster lock before moving reflinked inode from orphan dir (Ashish Samant)  [Orabug: 27869407]  
  - driver core: platform: fix race condition with driver_override (Adrian Salido)  [Orabug: 27897876]  {CVE-2017-12146} 
  - USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)  [Orabug: 27898087]  {CVE-2017-17558} 
  - netlink: Add netns check on taps (Kevin Cernekee)  [Orabug: 27898136]  {CVE-2017-17449} 
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27898171]  {CVE-2017-17448} 
  - mm/pagewalk.c: report holes in hugetlb ranges (Jann Horn)  [Orabug: 27913119]  {CVE-2017-16994} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913331]  {CVE-2017-15299} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 27913368]  {CVE-2017-7294} 
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924163]  
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27928096]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27928096]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27928096]  
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27951278]  {CVE-2017-17741} {CVE-2017-17741} 
  - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (Haozhong Zhang)  [Orabug: 27972373]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.17.2.el7uek]
changelog:
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27980214]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-112.17.3.el7uek]
changelog:
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718305]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718305]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.5.1.el7uek]
changelog:
  - trace: declare blk_add_trace_rq non-static on OL6 (Todd Vierling)  [Orabug: 27578618]  
  - x86/ia32/syscall: RESTORE_EXTRA_REGS when returning from syscall (Ankur Arora)  [Orabug: 27461990]  {CVE-2017-5715} 
  - x86/ia32/syscall: don't do RESTORE_EXTRA_REGS prematurely (Ankur Arora)  [Orabug: 27461990]  {CVE-2017-5715} 
  - firmware: dmi_scan: add SBMIOS entry and DMI tables (Ivan Khoronzhuk)  [Orabug: 27586223]  
  - uek-rpm: enable USERFAULTFD in debug kernels (UEK4 QU7) (Mike Kravetz)  [Orabug: 27579702]  
  - vmxnet3: repair memory leak (Neil Horman)  [Orabug: 27479086]  
  - bonding: attempt to better support longer hw addresses (Jarod Wilson)  [Orabug: 27542370]  
  - scsi: Make __scsi_remove_device go straight from BLOCKED to DEL (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: Protect SCSI device state changes with a mutex (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: Introduce scsi_start_queue() (Bart Van Assche)  [Orabug: 27546768]  
  - scsi: avoid a permanent stop of the scsi device's request queue (Wei Fang)  [Orabug: 27546768]  
  - IB/ipoib: ioctls IPOIBACLNADD and IPOIBACLNGET do not work correctly (Ka-Cheong Poon)  [Orabug: 27533123]  
  - x86/spectre: move microcode check before kernel ibrs flags are set (Daniel Jordan)  [Orabug: 27542331]  {CVE-2017-5715}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.6.1.el7uek]
changelog:
  - bnxt_en: Add cache line size setting to optimize performance. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Forward VF MAC address to the PF. (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Add BCM5745X NPAR device IDs (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Expand bnxt_check_rings() to check all resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Implement new method for the PF to assign SRIOV resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Reserve resources for RFS. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Implement new method to reserve rings. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Set initial default RX and TX ring numbers the same in combined mode. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Add the new firmware API to query hardware resources. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Refactor hardware resource data structures. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Restore MSIX after disabling SRIOV. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Refactor bnxt_close_nic(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface to 1.9.0. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix the 'Invalid VF' id check in bnxt_vf_ndo_prep routine. (Venkat Duvvuru)  [Orabug: 27648355]  
  - bnxt_en: Fix sources of spurious netpoll warnings (Calvin Owens)  [Orabug: 27648355]  
  - bnxt_en: Don't print "Link speed -1 no longer supported" messages. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix a variable scoping in bnxt_hwrm_do_send_msg() (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Need to unconditionally shut down RoCE in bnxt_shutdown (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: Fix an error handling path in 'bnxt_get_module_eeprom()' (Christophe JAILLET)  [Orabug: 27648355]  
  - bnxt: fix bnxt_hwrm_fw_set_time for y2038 (Arnd Bergmann)  [Orabug: 27648355]  
  - bnxt_en: Fix IRQ coalescing regression. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: fix typo in bnxt_set_coalesce (Andy Gospodarek)  [Orabug: 27648355]  
  - bnxt_en: Refactor and simplify coalescing code. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Reorganize the coalescing parameters. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Add ethtool reset method (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Optimize .ndo_set_mac_address() for VFs. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Get firmware package version one time. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Check for zero length value in bnxt_get_nvram_item(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: adding PCI ID for SMARTNIC VF support (Rob Miller)  [Orabug: 27648355]  
  - bnxt_en: Add PCIe device ID for bcm58804 (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface to 1.8.3.1 (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix possible corruption in DCB parameters from firmware. (Sankar Patchineelam)  [Orabug: 27648355]  
  - bnxt_en: Fix VF resource checking. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix VF PCIe link speed and width logic. (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Don't use rtnl lock to protect link change logic in workqueue. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Improve VF/PF link change logic. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Remove redundant unlikely() (Tobias Klauser)  [Orabug: 27648355]  
  - drivers: net: bnxt: use setup_timer() helper. (Allen Pais)  [Orabug: 27648355]  
  - bnxt_en: Reduce default rings on multi-port cards. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Improve -ENOMEM logic in NAPI poll loop. (Michael Chan)  [Orabug: 27648355]  
  - bnxt: initialize board_info values with proper enums (Scott Branden)  [Orabug: 27648355]  
  - bnxt: Add PCIe device IDs for bcm58802/bcm58808 (Ray Jui)  [Orabug: 27648355]  
  - bnxt_en: assign CPU affinity hints to bnxt_en IRQs (Vasundhara Volam)  [Orabug: 27648355]  
  - bnxt_en: Improve tx ring reservation logic. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Update firmware interface spec. to 1.8.1.4. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Do not setup MAC address in bnxt_hwrm_func_qcaps(). (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Free MSIX vectors when unregistering the device from bnxt_re. (Michael Chan)  [Orabug: 27648355]  
  - bnxt_en: Fix .ndo_setup_tc() to include XDP rings. (Michael Chan)  [Orabug: 27648355]  
  - bnxt: fix unused variable warnings (stephen hemminger)  [Orabug: 27648355]  
  - bnxt: fix unsigned comparsion with 0 (stephen hemminger)  [Orabug: 27648355]  
  - bnxt_en: Use SWITCHDEV_SET_OPS(). (David S. Miller)  [Orabug: 27648355]  
  - bnxt_en: Set ETS min_bw parameter for older firmware. (Michael Chan)  [Orabug: 27648355]  
  - dccp/tcp: fix routing redirect race (Jon Maxwell)  [Orabug: 27661864]  
  - Revert "RDS: don't commit to queue till transport connection is up" (Santosh Shilimkar)  [Orabug: 27606911]  
  - be2net: locking/atomics: COCCINELLE/treewide: Convert trivial   ACCESS_ONCE() patterns to READ_ONCE()/WRITE_ONCE() (Mark Rutland)  [Orabug: 27615319]  
  - be2net: Handle transmit completion errors in Lancer (Suresh Reddy)  [Orabug: 27615319]  
  - be2net: Fix HW stall issue in Lancer (Suresh Reddy)  [Orabug: 27615319]  
  - be2net: remove redundant initialization of 'head' and pointer txq (Colin Ian King)  [Orabug: 27615319]  
  - be2net: networking block comments don't use an empty /* line (Rohit Visavalia)  [Orabug: 27615319]  
  - be2net: restore properly promisc mode after queues reconfiguration (Ivan Vecera)  [Orabug: 27615319]  
  - be2net: use ARRAY_SIZE for array sizing calculation on array cmd_priv_map (Colin Ian King)  [Orabug: 27615319]  
  - RDS: IB: Fix null pointer issue (Guanglei Li)  [Orabug: 27636711]  
  - xen/acpi: upload _PSD info for non-dom0 CPUs too (Joao Martins)  [Orabug: 27655759]  
  - scsi: lpfc: Update 11.4.0.7 modified files for 2018 Copyright (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.7 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Treat SCSI Write operation Underruns as an error (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix SCSI io host reset causing kernel crash (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix issue_lip if link is disabled (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix soft lockup in lpfc worker thread during LIP testing (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Allow set of maximum outstanding SCSI cmd limit for a target (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix PRLI handling when topology type changes (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: fix a couple of minor indentation issues (Colin Ian King)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.6 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: update driver version to 11.4.0.5 (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: FLOGI failures are reported when connected to a private loop. (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix ndlp ref count for pt2pt mode issue RSCN (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Linux LPFC driver does not process all RSCNs (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Driver fails to detect direct attach storage array (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix crash after bad bar setup on driver attachment (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Fix hard lock up NMI in els timeout handling. (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: change version to 11.4.0.4 (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Extend RDP support (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix secure firmware updates (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: PLOGI failures during NPIV testing (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix crash receiving ELS while detaching driver (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix pci hot plug crash in list_add call (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix pci hot plug crash in timer management routines (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: remove redundant null check on eqe (Colin Ian King)  [Orabug: 27631736]  
  - scsi: lpfc: lpfc version bump 11.4.0.3 (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi)  [Orabug: 27631736]  
  - scsi: lpfc: Add Buffer to Buffer credit recovery support (James Smart)  [Orabug: 27631736]  
  - scsi: lpfc: Correct issues with FAWWN and FDISCs (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: Fix rediscovery on switch blade pull (Dick Kennedy)  [Orabug: 27631736]  
  - scsi: lpfc: remove useless code in lpfc_sli4_bsg_link_diag_test (Gustavo A. R. Silva)  [Orabug: 27631736]  
  - scsi: lpfc: Fix plogi collision that causes illegal state transition (Dick Kennedy)  [Orabug: 27631736]  
  - lpfc: Fix Express lane queue creation (Maurizio Lombardi)  [Orabug: 27631736]  
  - Cosmetic updates to arch/x86/kernel/cpu/microcode/xen.c to pass checkpatch.pl and match UEK5 code. (Aaron Young)  [Orabug: 27640697]  
  - Incorporate arch/x86/kernel/cpu/microcode/xen.c into cpu microcode driver. (Aaron Young)  [Orabug: 27640697]  
  - 1. Move arch/x86/kernel/microcode_xen.c file to proper cpu microcode driver    location and rename to arch/x86/kernel/cpu/microcode/xen.c. (Aaron Young)  [Orabug: 27640697]  
  - fork: fix incorrect fput of ->exe_file causing use-after-free (Eric Biggers)  [Orabug: 27648200]  {CVE-2017-17052} 
  - scsi: megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: NVMe passthrough command support (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid: use ktime_get_real for firmware time (Arnd Bergmann)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: re-work DCMD refire code (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Expose fw_cmds_outstanding through sysfs (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Selectively apply stream detection based on IO type (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Update LD map after populating drv_map driver map copy (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use megasas_wait_for_adapter_operational to detect controller state in IOCTL path (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Avoid firing DCMDs while OCR is in progress (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: unload flag should be set after scsi_remove_host is called (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Error handling for invalid ldcount provided by firmware in RAID map (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Reset ldio_outstanding in megasas_resume (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Return the DCMD status from megasas_get_seq_num (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: memset IOC INIT frame using correct size (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: zero out IOC INIT and stream detection memory (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix spelling mistake: "thershold" -> "threshold" (Colin Ian King)  [Orabug: 27625001]  
  - scsi: megaraid: Remove redundant code in megasas_alloc_cmds (Yisheng Xie)  [Orabug: 27625001]  
  - License cleanup: add SPDX GPL-2.0 license identifier to files with no license (Greg Kroah-Hartman)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Add support for 64bit consistent DMA (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Do not limit queue_depth to 1k in non-RDPQ mode (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Retry with reduced queue depth when alloc fails for higher QD (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Incorrect processing of IOCTL frames for SMP/STP commands (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Resize MFA frame used for IOC INIT to 4k (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Update current host time to FW during IOC Init (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Move controller memory allocations and DMA mask settings from probe to megasas_init_fw (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Move initialization of instance parameters inside newly created function megasas_init_ctrl_params (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: remove instance->ctrl_info (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Pre-allocate frequently used DMA buffers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Create separate functions for allocating and freeing controller DMA buffers (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Create separate functions to allocate ctrl memory (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: reduce size of fusion_context and use kmalloc for allocation (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace is_ventura with adapter_type checks (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Remove redundant checks for ctrl_context (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace instance->ctrl_context checks with instance->adapter_type (Sumit Saxena)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Add support for Crusader controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: use adapter_type for all gen controllers (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: driver version upgrade (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: call megasas_dump_frame with correct IO frame size (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: modified few prints in OCR and IOC INIT path (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: replace internal FALSE/TRUE definitions with false/true (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Return pended IOCTLs with cmd_status MFI_STAT_WRONG_STATE in case adapter is dead (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: use vmalloc for crash dump buffers and driver's local RAID map (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use SMID for Task abort case only (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Check valid aen class range to avoid kernel panic (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Fix endianness issues in DCMD handling (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Do not re-fire shutdown DCMD after OCR (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Call megasas_complete_cmd_dpc_fusion every 1 second while there are pending commands (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: Use synchronize_irq in target reset case (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: set minimum value of resetwaittime to be 1 secs (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: mismatch of allocated MFI frame size and length exposed in MFI MPT pass through command (Shivasharan S)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix error handle in megasas_probe_one (weiping zhang)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix allocate instance->pd_info twice (weiping)  [Orabug: 27625001]  
  - scsi: remove DRIVER_ATTR() usage (Greg Kroah-Hartman)  [Orabug: 27625001]  
  - scsi: megaraid: Replace PCI pool old API (Romain Perier)  [Orabug: 27625001]  
  - scsi: megaraid_sas: fix memleak in megasas_alloc_cmdlist_fusion (Shu Wang)  [Orabug: 27625001]  
  - scsi: megaraid: Fix a sleep-in-atomic bug (Jia-Ju Bai)  [Orabug: 27625001]  
  - drivers/scsi/megaraid: remove expensive inline from megasas_return_cmd (Andi Kleen)  [Orabug: 27625001]  
  - megaraid_sas: remove redundant code initialzing *pDevHandle with MR_DEVHANDLE_INVALID (Sumit Saxena)  [Orabug: 27625001]  
  - usb: usbtest: fix NULL pointer dereference (Alan Stern)  [Orabug: 27602322]  {CVE-2017-16532} 
  - rds: Incorrect reference counting in TCP socket creation (Ka-Cheong Poon)  [Orabug: 27602824]  
  - enic: enable rq before updating rq descriptors (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add sw timestamp support (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add wq clean up budget (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: Add support for 'ethtool -g/-G' (Parvi Kaustubhi)  [Orabug: 27587345]  
  - enic: reset fetch index (Parvi Kaustubhi)  [Orabug: 27587345]  
  - drivers: net: enic: use setup_timer() helper. (Allen Pais)  [Orabug: 27587345]  
  - drivers: net: enic: use setup_timer() helper. (Allen Pais)  [Orabug: 27587345]  
  - enic: update enic maintainers (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - cisco: enic: Fic an error handling path in 'vnic_dev_init_devcmd2()' (Christophe Jaillet)  [Orabug: 27587345]  
  - enic: Fix format truncation warning (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: add devcmds for vxlan offload (Govindarajulu Varadarajan)  [Orabug: 27587345]  
  - enic: increment devcmd2 result ring in case of timeout (Sandeep Pillai)  [Orabug: 27587345]  
  - scsi: fnic: use kzalloc in fnic_fcoe_process_vlan_resp (Rasmus Villemoes)  [Orabug: 27587343]  
  - scsi: fnic: add a space after %p in printf format (Nicolas Iooss)  [Orabug: 27587343]  
  - scsi: fnic: Fix coccinelle warnings (Vasyl Gomonovych)  [Orabug: 27587343]  
  - scsi: fnic: do not call host reset from command abort (Hannes Reinecke)  [Orabug: 27587343]  
  - scsi: fnic: fix format string overflow warning (Arnd Bergmann)  [Orabug: 27587343]  
  - scsi: fnic: correct speed display and add support for 25,40 and 100G (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: added timestamp reporting in fnic debug stats (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: Zero io_cmpl_skip on fw reset completion (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: Ratelimit printks to avoid flooding when vlan is not set by the switch.i (Satish Kharat)  [Orabug: 27587343]  
  - scsi: fnic: use kernel's '%pM' format option to print MAC (Andy Shevchenko)  [Orabug: 27587343]  
  - fnic: pci_dma_mapping_error() doesn't return an error code (Dan Carpenter)  [Orabug: 27587343]  
  - fnic: move printk()s outside of the critical code section. (Maurizio Lombardi)  [Orabug: 27587343]  
  - fnic: check pci_map_single() return value (Maurizio Lombardi)  [Orabug: 27587343]  
  - retpoline: move setting of sysctl_ibrs_enabled and sysctl_ibpb_enabled to where SPEC_CTRL_IBRS_INUSE and SPEC_CTRL_IBPB_INUSE are set (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: set IBRS and IBPB in use only on the boot CPU call to init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: display IBPB feature status along with IBRS status (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: move lock/unlock of spec_ctrl_mutex to check_modinfo() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: call clear_retpoline_fallback() with boot parm spectre_v2_heuristics=off (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: add brackets to check_ibrs_inuse() and clear_ibpb_inuse() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline/module: do not enable IBRS/IPBP if SPEC_CTRL_IBRS_ADMIN_DISABLED/SPEC_CTRL_IBPB_ADMIN_DISABLED is set (Chuck Anderson)  [Orabug: 27625353]  
  - retpoline: microcode incorrectly reported as broken during early boot (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline: move lock/unlock of spec_ctrl_mutex into init_scattered_cpuid_features() (Chuck Anderson)  [Orabug: 27625404]  
  - retpoline/module: fall back to another spectre mitigation when disabling retpoline (Chuck Anderson)  [Orabug: 27457549]  
  - retpoline/module: add bit defs for use_ibpb (Chuck Anderson)  [Orabug: 27457549]  
  - x86/spectre_v2: Fix the documentation to say the right thing. (Konrad Rzeszutek Wilk)   
  - x86/spectre_v2: Don't check bad microcode versions when running under hypervisors. (Konrad Rzeszutek Wilk)  [Orabug: 27601736]  
  - x86/speculation: Use IBRS if available before calling into firmware (David Woodhouse)  [Orabug: 27516477]  
  - Revert "x86/spec_ctrl: Add 'nolfence' knob to disable fallback for spectre_v2 mitigation" (Konrad Rzeszutek Wilk)  [Orabug: 27601789]  
  - Revert "x86/spec: Add 'lfence_enabled' in sysfs" (Konrad Rzeszutek Wilk)   
  - KVM: Disable irq while unregistering user notifier (Ignacio Alvarado)   
  - dtrace: increase instruction limit for FBT entry probe detection (Kris Van Hees)  [Orabug: 27410742]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.7.1.el7uek]
changelog:
  - retpoline: selectively disable IBRS in disable_ibrs_and_friends() (Chuck Anderson)  [Orabug: 27665263]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.8.1.el7uek]
changelog:
  - nvme: fix uninitialized prp2 value on small transfers (Jan H. Schönherr)  [Orabug: 27624149]  
  - bnxt_en: initialize bnxt_pf_wq (Brian Maly)  [Orabug: 27674029]  
  - x86/spectre_v2: Fix cpu offlining with IPBP. (Konrad Rzeszutek Wilk)


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.9.1.el7uek]
changelog:
  - crypto: af_alg - Avoid sock_graft call warning (Herbert Xu)  [Orabug: 26895616]  
  - iscsi-target: Fix initial login PDU asynchronous socket close OOPs (Nicholas Bellinger)  [Orabug: 27701211]  
  - target/iscsi: Fix indentation in iscsi_target_start_negotiation() (Bart Van Assche)  [Orabug: 27701211]  
  - iscsi-target: Fix early sk_data_ready LOGIN_FLAGS_READY race (Nicholas Bellinger)  [Orabug: 27701211]  
  - iscsi-target: Fix rx_login_comp hang after login failure (Nicholas Bellinger)  [Orabug: 27701211]  
  - KVM: x86: fix singlestepping over syscall (Paolo Bonzini)  [Orabug: 27669904]  {CVE-2017-7518} {CVE-2017-7518} 
  - nfs: system crashes after NFS4ERR_MOVED recovery (Bill.Baker@oracle.com)  [Orabug: 27679350]  
  - NFS: Clean up nfs4_set_client() (Anna Schumaker)  [Orabug: 27679350]  
  - NFS4: Avoid migration loops (Benjamin Coddington)  [Orabug: 27679350]  
  - mstflint: update Makefile and Kconfig (Qing Huang)  [Orabug: 27707445]  
  - target: add inquiry_product module param to override LIO default (Kyle Fortin)  [Orabug: 27679431]  
  - target: add inquiry_vendor module param to override LIO-ORG (Kyle Fortin)  [Orabug: 27679431]  
  - IB/core: Avoid calling ib_query_device (Or Gerlitz)  [Orabug: 27687711]  
  - IB/core: Save the device attributes on the device structure (Ira Weiny)  [Orabug: 27687711]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.10.1.el7uek]
changelog:
  - Drivers: hv: utils: fix crash when device is removed from host side (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: introduce HVUTIL_TRANSPORT_DESTROY mode (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: rename outmsg_lock (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: fix memory leak on on_msg() failure (Vitaly Kuznetsov)  [Orabug: 27426102]  
  - Drivers: hv: utils: use memdup_user in hvt_op_write (Olaf Hering)  [Orabug: 27426102]  
  - hv: util: checking the wrong variable (Dan Carpenter)  [Orabug: 27426102]  
  - net/rds: Avoid copy overhead if send buff is full (Gerd Rausch)  [Orabug: 27747165]  
  - ext4: fix ->put_link panic (Junxiao Bi)  [Orabug: 27498770]  
  - KVM/VMX: Clear spec_ctrl status when resetting vcpu (Patrick Colp)   
  - mlx4: change the ICM table allocations to lowest needed size (Daniel Jurgens)  [Orabug: 27718303]  
  - Revert "Drivers: hv: utils: fix a race on userspace daemons registration" (Jack Vogel)  [Orabug: 27673755]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.11.1.el7uek]
changelog:
  - netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal)  [Orabug: 27774012]  {CVE-2018-1068} 
  - ACPI / PAD: don't register acpi_pad driver if running as Xen dom0 (Juergen Gross)  [Orabug: 27796473]  
  - sched/fair: Fix typo in sync_throttle() (Xunlei Pang)  [Orabug: 27787518]  
  - sched/fair: Do not announce throttled next buddy in dequeue_task_fair() (Konstantin Khlebnikov)  [Orabug: 27787518]  
  - sched/fair: Initialize and rework throttle_count for new task-groups (Peter Zijlstra)  [Orabug: 27787518]  
  - perf tools: Move syscall number fallbacks from perf-sys.h to tools/arch/x86/include/asm/ (Arnaldo Carvalho de Melo)  [Orabug: 27240053]  
  - crypto: FIPS - allow tests to be disabled in FIPS mode (Stephan Mueller)  [Orabug: 27809271]  
  - crypto: xts - consolidate sanity check for keys (Stephan Mueller)  [Orabug: 27809271]  
  - crypto: rng - Zero seed in crypto_rng_reset (Herbert Xu)  [Orabug: 27809271]  
  - enic: set IG desc cache flag in open (Govindarajulu Varadarajan)  [Orabug: 27587345]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.12.1.el7uek]
changelog:
  - xfs: remove "no-allocation" reservations for file creations (Darrick J. Wong)  [Orabug: 27609439]  
  - xfs: don't print warnings when xfs_log_force fails (Christoph Hellwig)  [Orabug: 27609404]  
  - xfs: Properly retry failed dquot items in case of error during buffer writeback (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: Properly retry failed inode items in case of error during buffer  writeback (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: Add infrastructure needed for error propagation during buffer IO  failure (Carlos Maiolino)  [Orabug: 27609404]  
  - xfs: remove xfs_trans_ail_delete_bulk (Christoph Hellwig)  [Orabug: 27609404]  
  - xfs: fix and streamline error handling in xfs_end_io (Darrick J. Wong)  [Orabug: 27609404]  
  - xfs: don't leave EFIs on AIL on mount failure (Brian Foster)  [Orabug: 27609404]  
  - xfs: use EFI refcount consistently in log recovery (Brian Foster)  [Orabug: 27609404]  
  - xfs: ensure EFD trans aborts on log recovery extent free failure (Brian Foster)  [Orabug: 27609404]  
  - xfs: fix efi/efd error handling to avoid fs shutdown hangs (Brian Foster)  [Orabug: 27609404]  
  - xfs: return committed status from xfs_trans_roll() (Brian Foster)  [Orabug: 27609404]  
  - xfs: disentagle EFI release from the extent count (Brian Foster)  [Orabug: 27609404]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.13.1.el7uek]
changelog:
  - net: cdc_ether: fix divide by 0 on bad descriptors (Bjørn Mork)  [Orabug: 27841392]  {CVE-2017-16649} 
  - sysctl: Drop reference added by grab_header in proc_sys_readdir (Zhou Chengming)  [Orabug: 27841944]  {CVE-2016-9191} {CVE-2016-9191} {CVE-2016-9191} 
  - Revert "sysctl: Drop reference added by grab_header in proc_sys_readdir" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.14.1.el7uek]
changelog:
  - ctf: drop the run-as-root error (Nick Alcock)  [Orabug: 27852654]  
  - rds: Node crashes when trace buffer is opened (Ka-Cheong Poon)  [Orabug: 27846191]  
  - xfs: fix accidental reversion of aa6a6227435cb (Darrick J. Wong)  [Orabug: 27845869]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.2.el7uek]
changelog:
  - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled (Jianchao Wang)  [Orabug: 27726302]  
  - block: fix bio_will_gap() for first bvec with offset (Ming Lei)  [Orabug: 27775588]  
  - block: relax check on sg gap (Ming Lei)  [Orabug: 27775588]  
  - block: don't optimize for non-cloned bio in bio_get_last_bvec() (Ming Lei)  [Orabug: 27775588]  
  - block: merge: get the 1st and last bvec via helpers (Ming Lei)  [Orabug: 27775588]  
  - block: get the 1st and last bvec via helpers (Ming Lei)  [Orabug: 27775588]  
  - block: check virt boundary in bio_will_gap() (Ming Lei)  [Orabug: 27775588]  
  - block: bio: introduce helpers to get the 1st and last bvec (Ming Lei)  [Orabug: 27775588]  
  - Failing to send a CLOSE if file is opened WRONLY and server reboots on a 4.x mount (Olga Kornievskaia)  [Orabug: 27848303]  
  - ext4: add validity checks for bitmap block numbers (Theodore Ts'o)  [Orabug: 27854373]  {CVE-2018-1093} {CVE-2018-1093} 
  - ocfs2: Take inode cluster lock before moving reflinked inode from orphan dir (Ashish Samant)  [Orabug: 27869411]  
  - Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)  [Orabug: 27869844]  {CVE-2017-16643} 
  - Input: ims-psu - check if CDC union descriptor is sane (Dmitry Torokhov)  [Orabug: 27870333]  {CVE-2017-16645} 
  - vfio/pci: Virtualize Maximum Payload Size (Alex Williamson)   
  - vfio-pci: Virtualize PCIe & AF FLR (Alex Williamson)   
  - uek-rpm: Disable DMA CMA (Jianchao Wang)  [Orabug: 27892359]  
  - nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)  [Orabug: 27892359]  
  - nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)  [Orabug: 27892359]  
  - nvme/pci: Fix stuck nvme reset (Keith Busch)  [Orabug: 27892359]  
  - nvme: don't schedule multiple resets (Keith Busch)  [Orabug: 27892359]  
  - blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)  [Orabug: 27892359]  
  - USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)  [Orabug: 27895909]  
  - driver core: platform: fix race condition with driver_override (Adrian Salido)  [Orabug: 27897874]  {CVE-2017-12146} 
  - usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)  [Orabug: 27908746]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.3.el7uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-100199}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.14.4.el7uek]
changelog:
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27955380]  
  - x86/kernel/traps.c: fix trace_die_notifier return value (Kris Van Hees)   {CVE-2018-8897} 
  - x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski)   {CVE-2018-8897} 
  - kvm/x86: fix icebp instruction handling (gregkh@linuxfoundation.org)   {CVE-2018-1087}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.1.el7uek]
changelog:
  - netfilter: nfnetlink_cthelper: Add missing permission checks (Kevin Cernekee)  [Orabug: 27260771]  {CVE-2017-17448} 
  - netlink: Add netns check on taps (Kevin Cernekee)  [Orabug: 27260799]  {CVE-2017-17449} 
  - KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li)  [Orabug: 27290606]  {CVE-2017-17741} {CVE-2017-17741} 
  - xprtrdma: Detect unreachable NFS/RDMA servers more reliably (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Export xprt_force_disconnect() (Chuck Lever)  [Orabug: 27587008]  
  - sunrpc: Allow xprt->ops->timer method to sleep (Chuck Lever)  [Orabug: 27587008]  
  - KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit (Haozhong Zhang)  [Orabug: 27720128]  
  - x86/microcode: probe CPU features on microcode update (Ankur Arora)  [Orabug: 27878230]  
  - x86/microcode: microcode_write() should not reference boot_cpu_data (Ankur Arora)  [Orabug: 27878230]  
  - x86/cpufeatures: use cpu_data in init_scattered_cpuid_flags() (Ankur Arora)  [Orabug: 27878230]  
  - mm/pagewalk.c: report holes in hugetlb ranges (Jann Horn)  [Orabug: 27913118]  {CVE-2017-16994} 
  - KEYS: don't let add_key() update an uninstantiated key (David Howells)  [Orabug: 27913330]  {CVE-2017-15299} 
  - drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl() (Murray McAllister)  [Orabug: 27913367]  {CVE-2017-7294} 
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 27913411]  
  - tcp: don't use F-RTO on non-recurring timeouts (Yuchung Cheng)  [Orabug: 27901860]  
  - net/rds: ib: Release correct number of frags (Håkon Bugge)  [Orabug: 27924161]  
  - crypto: rng - Remove old low-level rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: drbg - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: ansi_cprng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - crypto: krng - Convert to new rng interface (Herbert Xu)  [Orabug: 27926676]  {CVE-2017-15116} 
  - RDS: Heap OOB write in rds_message_alloc_sgs() (Mohamed Ghannam)  [Orabug: 27934066]  {CVE-2018-5332} 
  - net: Fix double free and memory corruption in get_net_ns_by_id() (Eric W. Biederman)  [Orabug: 27934789]  {CVE-2017-15129}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.2.el7uek]
changelog:
  - KVM: SVM: Move spec control call after restore of GS (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/bugs: Fix the parameters alignment and missing void (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Make cpu_show_common() static (Jiri Kosina)   {CVE-2018-3639} 
  - x86/bugs: Fix __ssb_select_mitigation() return type (Jiri Kosina)   {CVE-2018-3639} 
  - Documentation/spec_ctrl: Do some minor cleanups (Borislav Petkov)   {CVE-2018-3639} 
  - proc: Use underscores for SSBD in 'status' (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Rename _RDS to _SSBD (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Make "seccomp" the default mode for Speculative Store Bypass (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Move speculation migitation control to arch code (Thomas Gleixner)   {CVE-2018-3639} 
  - seccomp: Add filter flag to opt-out of SSB mitigation (Kees Cook)   {CVE-2018-3639} 
  - seccomp: Use PR_SPEC_FORCE_DISABLE (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add force disable speculation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - seccomp: Enable speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - proc: Provide details on speculation flaw mitigations (Kees Cook)   {CVE-2018-3639} 
  - nospec: Allow getting/setting on non-current task (Kees Cook)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Disable SSB (RDS) if IBRS is sslected for spectre_v2. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/speculation: Add prctl for Speculative Store Bypass mitigation (Thomas Gleixner)   {CVE-2018-3639} 
  - x86: thread_info.h: move RDS from index 5 to 23 (Mihai Carabas)   {CVE-2018-3639} 
  - x86/process: Allow runtime control of Speculative Store Bypass (Thomas Gleixner)   {CVE-2018-3639} 
  - prctl: Add speculation control prctls (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/speculation: Create spec-ctrl.h to avoid include hell (Thomas Gleixner)   {CVE-2018-3639} 
  - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Whitelist allowed SPEC_CTRL MSR values (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/intel: Set proper CPU features and setup RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpufeatures: Add X86_FEATURE_RDS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Expose /sys/../spec_store_bypass (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/cpu/intel: Add Knights Mill to Intel family (Piotr Luc)   {CVE-2018-3639} 
  - x86/cpu: Rename Merrifield2 to Moorefield (Andy Shevchenko)   {CVE-2018-3639} 
  - x86/bugs, KVM: Support the combination of guest and host IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Warn if IBRS is enabled during boot. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Use variable instead of defines for enabling IBRS (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug reporting into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs: Concentrate bug detection into a separate function (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/bugs/IBRS: Turn on IBRS in spectre_v2_select_mitigation (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - x86/msr: Add SPEC_CTRL_IBRS.. (Konrad Rzeszutek Wilk)   {CVE-2018-3639} 
  - scsi: libfc: Revisit kref handling (Hannes Reinecke)   
  - scsi: libfc: reset exchange manager during LOGO handling (Hannes Reinecke)   
  - scsi: libfc: send LOGO for PLOGI failure (Hannes Reinecke)   
  - scsi: libfc: Issue PRLI after a PRLO has been received (Hannes Reinecke)   
  - libfc: Update rport reference counting (Hannes Reinecke)   
  - amd/kvm: do not intercept new MSRs for spectre v2 mitigation (Elena Ufimtseva)   
  - RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam)  [Orabug: 27422832]  {CVE-2018-5333} 
  - ACPI: sbshc: remove raw pointer from printk() message (Greg Kroah-Hartman)  [Orabug: 27501257]  {CVE-2018-5750} 
  - futex: Prevent overflow by strengthen input validation (Li Jinyue)  [Orabug: 27539548]  {CVE-2018-6927} 
  - net: ipv4: add support for ECMP hash policy choice (Venkat Venkatsubra)  [Orabug: 27547114]  
  - net: ipv4: Consider failed nexthops in multipath routes (David Ahern)  [Orabug: 27547114]  
  - ipv4: L3 hash-based multipath (Peter Nørlund)  [Orabug: 27547114]  
  - dm: fix race between dm_get_from_kobject() and __dm_destroy() (Hou Tao)  [Orabug: 27677556]  {CVE-2017-18203} 
  - NFS: only invalidate dentrys that are clearly invalid. (NeilBrown)  [Orabug: 27870824]  
  - net: Improve handling of failures on link and route dumps (David Ahern)  [Orabug: 27959177]  
  - mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang)  [Orabug: 27963519]  {CVE-2018-10675} 
  - drm: udl: Properly check framebuffer mmap offsets (Greg Kroah-Hartman)  [Orabug: 27963530]  {CVE-2018-8781} 
  - xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen)  [Orabug: 27963576]  {CVE-2018-10323} 
  - Revert "mlx4: change the ICM table allocations to lowest needed size" (Håkon Bugge)  [Orabug: 27980030]  
  - Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri)  [Orabug: 28030514]  {CVE-2017-1000410} {CVE-2017-1000410}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.3.el7uek]
changelog:
  - perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds)  [Orabug: 27947602]  {CVE-2018-1000199} 
  - Revert "perf/hwbp: Simplify the perf-hwbp code, fix documentation" (Brian Maly)  [Orabug: 27947602]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.15.4.el7uek]
changelog:
  - x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas)   
  - fs/pstore: update the backend parameter in pstore module (Wang Long)  [Orabug: 27994372]  
  - kvm: vmx: Reinstate support for CPUs without virtual NMI (Paolo Bonzini)  [Orabug: 28041210]  
  - dm crypt: add big-endian variant of plain64 IV (Milan Broz)  [Orabug: 28043932]  
  - x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk)  [Orabug: 28063992]  {CVE-2018-3639} 
  - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky)  [Orabug: 28063992] [Orabug: 28069548]  {CVE-2018-3639} 
  - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Rework spec_ctrl base and mask logic (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/speculation: Handle HT correctly on AMD (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner)  [Orabug: 28063992]  {CVE-2018-3639} 
  - x86/cpu/AMD: Fix erratum 1076 (CPB bit) (Borislav Petkov)  [Orabug: 28063992]  {CVE-2018-3639}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.1.el7uek]
changelog:
  - net/rds: prevent RDS connections using stale ARP entries (Wei Lin Guay)  [Orabug: 28149101]  
  - net/rds: Avoid stalled connection due to CM REQ retries (Wei Lin Guay)  [Orabug: 28068627]  
  - net/rds: use one sided reconnection during a race (Wei Lin Guay)  [Orabug: 28068627]  
  - Revert "Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled" (Håkon Bugge)  [Orabug: 28068627]  
  - xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent (Joe Jin)  [Orabug: 22910685]  
  - net/rds: Assign the correct service level (Wei Lin Guay)  [Orabug: 27607213]  
  - target: Re-add missing SCF_ACK_KREF assignment in v4.1.y (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Fix LUN_RESET active I/O handling for ACK_KREF (Nicholas Bellinger)  [Orabug: 27781132]  
  - target: Invoke release_cmd() callback without holding a spinlock (Bart Van Assche)  [Orabug: 27781132]  
  - x86/bugs: Remove the Disabling Spectre v2 mitigation retpoline (Konrad Rzeszutek Wilk)  [Orabug: 27897282]  
  - x86/bugs: Report properly retpoline+IBRS (Konrad Rzeszutek Wilk)   
  - x86/bugs: Don't lie when fallback retpoline is engaged (Konrad Rzeszutek Wilk)   
  - fs: aio: fix the increment of aio-nr and counting against aio-max-nr (Mauricio Faria de Oliveira)  [Orabug: 28079082]  
  - qla2xxx: Enable buffer boundary check when DIF bundling is on. (Rajan Shanmugavelu)  [Orabug: 28130589]  
  - kernel: sys.c: missing break for prctl spec ctrl (Mihai Carabas)  [Orabug: 28144775]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.2.el7uek]
changelog:
  - netlink: add a start callback for starting a netlink dump (Tom Herbert)  [Orabug: 27169581]  {CVE-2017-16939} 
  - ipsec: Fix aborted xfrm policy dump crash (Herbert Xu)  [Orabug: 27169581]  {CVE-2017-16939}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.5.el7uek]
changelog:
  - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff (Eric Dumazet)  [Orabug: 27896802]  {CVE-2017-18017} 
  - kernel/exit.c: avoid undefined behaviour when calling wait4() wait4(-2147483648, 0x20, 0, 0xdd0000) triggers: UBSAN: Undefined behaviour in kernel/exit.c:1651:9 (mridula shastry)  [Orabug: 28049778]  {CVE-2018-10087} 
  - x86/bugs/module: Provide retpoline_modules_only parameter to fail non-retpoline modules (Konrad Rzeszutek Wilk)  [Orabug: 28071992]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.16.6.el7uek]
changelog:
  - add kernel param to pre-allocate NICs (Brian Maly)  [Orabug: 27870400]  
  - mm/mempolicy.c: fix error handling in set_mempolicy and mbind. (Chris Salls)  [Orabug: 28242475]  {CVE-2017-7616} 
  - xhci: Fix USB3 NULL pointer dereference at logical disconnect. (Mathias Nyman)  [Orabug: 27426023]  
  - mlx4_core: restore optimal ICM memory allocation (Eric Dumazet)  [Orabug: 27718303]  
  - mlx4_core: allocate ICM memory in page size chunks (Qing Huang)  [Orabug: 27718303]  
  - kernel/signal.c: avoid undefined behaviour in kill_something_info When running kill(72057458746458112, 0) in userspace I hit the following issue. (mridula shastry)  [Orabug: 28078687]  {CVE-2018-10124} 
  - rds: tcp: compute m_ack_seq as offset from ->write_seq (Sowmini Varadhan)  [Orabug: 28085214]  
  - ext4: fix bitmap position validation (Lukas Czerner)  [Orabug: 28167032]  
  - net/rds: Fix bug in failover_group parsing (Håkon Bugge)  [Orabug: 28198749]  
  - sctp: verify size of a new chunk in _sctp_make_chunk() (Alexey Kodanev)  [Orabug: 28240074]  {CVE-2018-5803}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.1.el7uek]
changelog:
  - block: update integrity interval after queue limits change (Ritika Srivastava)  [Orabug: 27586756]  
  - dccp: check sk for closed state in dccp_sendmsg() (Alexey Kodanev)  [Orabug: 28001529]  {CVE-2017-8824} {CVE-2018-1130} 
  - net/rds: Implement ARP flushing correctly (Håkon Bugge)  [Orabug: 28219857]  
  - net/rds: Fix incorrect bigger vs. smaller IP address check (Håkon Bugge)  [Orabug: 28236599]  
  - ocfs2: Fix locking for res->tracking and dlm->tracking_list (Ashish Samant)  [Orabug: 28256391]  
  - xfrm: policy: check policy direction value (Vladis Dronov)  [Orabug: 28256487]  {CVE-2017-11600} {CVE-2017-11600}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.2.el7uek]
changelog:
  - fs: proc: array.c: fix Speculation_Store_Bypass print format (Mihai Carabas)  [Orabug: 28128750]  
  - xfs: don't chain ioends during writepage submission (Dave Chinner)  [Orabug: 28193043]  
  - xfs: factor mapping out of xfs_do_writepage (Dave Chinner)  [Orabug: 28193043]  
  - xfs: xfs_cluster_write is redundant (Dave Chinner)  [Orabug: 28193043]  
  - xfs: Introduce writeback context for writepages (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove xfs_cancel_ioend (Dave Chinner)  [Orabug: 28193043]  
  - xfs: remove nonblocking mode from xfs_vm_writepage (Dave Chinner)  [Orabug: 28193043]  
  - rds: tcp: cancel all worker threads before shutting down socket (Sowmini Varadhan)  [Orabug: 28298156]  
  - rds: signedness bug (Dan Carpenter)  [Orabug: 28319166]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.3.el7uek]
changelog:
  - rtnetlink: fix rtnl_vfinfo_size (Sabrina Dubroca)  [Orabug: 27998927]  
  - rds: IB: avoid migration to port that is down (Zhu Yanjun)  [Orabug: 28097129]  
  - net/rds: Fix kernel panic caused by a race between setup/teardown (Hans Westgaard Ry)  [Orabug: 28326553]  
  - rds: IB: fix returned value not set error (Zhu Yanjun)  [Orabug: 28356474]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.17.4.el7uek]
changelog:
  - x86/speculation: Implement per-cpu IBRS control (Alexandre Chartre)  [Orabug: 28064081]  
  - IB/mad: Use ID allocator routines to allocate agent number (Hans Westgaard Ry)  [Orabug: 28339815]  
  - x86/mcheck: Reorganize the hotplug callbacks (Sebastian Andrzej Siewior)  [Orabug: 28387566]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.1.el7uek]
changelog:
  - x86/speculation: Support per-process SSBD with IBRS (Alexandre Chartre)  [Orabug: 28354043]  
  - Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent" (Dongli Zhang)  [Orabug: 28441054]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.2.el7uek]
changelog:
  - x86/mm/kmmio: Make the tracer robust against L1TF (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Make set_memory_np() L1TF safe (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm/pat: Ensure cpa->pfn only contains page frame numbers (Matt Fleming)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Invert all not present mappings (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Fix SMT supported evaluation (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (KarimAllah Ahmed)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Remove Yonah processors from not vulnerable list (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86: Don't include linux/irq.h from asm/hardirq.h (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Nicolai Stange)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paolo Bonzini)  [Orabug: 28220625]  {CVE-2018-3646} 
  - KVM: X86: Introduce kvm_get_msr_feature() (Wanpeng Li)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Add a framework for supporting MSR-based features (Tom Lendacky)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: detect SMT disabled by BIOS (Josh Poimboeuf)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation/l1tf: Fix typos (Tony Luck)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Nicolai Stange)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Documentation: Add section about CPU vulnerabilities (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Expose SMT control init function (Jiri Kosina)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/kvm: Allow runtime control of L1D flush (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Serialize L1D flush parameter setter (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Add static key for flush always (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/kvm: Move l1tf setup function (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3646} 
  - x86/l1tf: Handle EPT disabled state proper (Thomas Gleixner)  [Orabug: 28220625]  {CVE-2018-3620} 
  - x86/kvm: Drop L1TF MSR list approach (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/litf: Introduce vmx status variable (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Online siblings when SMT control is turned on (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add find_msr() helper function (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush logic (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D MSR based flush (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add L1D flush algorithm (Paolo Bonzini)  [Orabug: 28220674]  {CVE-2018-3646} 
  - x86/KVM/VMX: Add module argument for L1TF mitigation (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} {CVE-2018-3646} 
  - locking/static_keys: Add static_key_{en,dis}able() helpers (Peter Zijlstra)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3646} 
  - KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks (Suravee Suthikulpanit)  [Orabug: 28220674]  {CVE-2018-3646} 
  - cpu/hotplug: Boot HT siblings at least once (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Michal Hocko)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PAE swap entries against L1TF (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpufeatures: Add detection of L1D cache flush support. (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Extend 64bit swap file size limit (Vlastimil Babka)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/apic: Ignore secondary threads if nosmt=force (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Borislav Petkov)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/intel: Evaluate smp_num_siblings early (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/topology: Provide detect_extended_topology_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/common: Provide detect_ht_early() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu/AMD: Remove the pointless detect_ht() call (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/cpu: Remove the pointless CPU printout (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Provide knobs to control SMT (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Add topology_max_smt_threads() (Andi Kleen)  [Orabug: 28220674]  {CVE-2018-3620} 
  - cpu/hotplug: Split do_cpu_down() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/topology: Provide topology_smt_supported() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/smp: Provide topology_is_primary_thread() (Thomas Gleixner)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/bugs: Move the l1tf function and define pr_fmt properly (Konrad Rzeszutek Wilk)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Add sysfs reporting for l1tf (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Make sure the first page is always reserved (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Protect swap entries against L1TF (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Change order of offset/type in swap entry (Linus Torvalds)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Andi Klein)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Limit mmap() of /dev/mem to valid physical addresses (Craig Bergstrom)  [Orabug: 28220674]  {CVE-2018-3620} 
  - x86/mm: Prevent non-MAP_FIXED mapping across DEFAULT_MAP_WINDOW border (Kirill A. Shutemov)  [Orabug: 28220674]  {CVE-2018-3620}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.3.el7uek]
changelog:
  - posix-timer: Properly check sigevent->sigev_notify (Thomas Gleixner)  [Orabug: 28481412]  {CVE-2017-18344}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.4.el7uek]
changelog:
  - kvm/vmx: Don't mark vmx_exit() __exit (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: Don't mark cpu_no_l1tf __initconst (Boris Ostrovsky)  [Orabug: 28491688]  
  - x86/speculation: parse l1tf boot parameter early (Boris Ostrovsky)  [Orabug: 28491688]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.5.el7uek]
changelog:
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28450977]  
  - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28492122]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.6.el7uek]
changelog:
  - qla2xxx: Update the version to 9.00.00.00.41.0-k1. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. (Giridhar Malavali)  [Orabug: 28172611]  
  - qla2xxx: Correction to total data segment count when local DMA buffers used for DIF PI. (Giridhar Malavali)   
  - scsi: megaraid_sas: fix the wrong way to get irq number (Jianchao Wang)  [Orabug: 28436426]  
  - ALSA: seq: Make ioctls race-free (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - ALSA: seq: Fix racy pool initializations (Takashi Iwai)  [Orabug: 28459728]  {CVE-2018-7566} 
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Fix memory leak (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add ENXIO handling (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Add missing tracepoint (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)  [Orabug: 28506080]  
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 28506080]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.18.5.el7uek]
changelog:
  - inet: frag: enforce memory limits earlier (Eric Dumazet)  [Orabug: 28450977] {CVE-2018-5391} 
  - x86/mm/pageattr.c: fix page prot mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/pgtable.h: fix PMD/PUD mask (Mihai Carabas)  [Orabug: 28492122]  
  - x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Toshi Kani)  [Orabug: 28492122]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.7.el7uek]
changelog:
  - ext4: avoid deadlock when expanding inode size (Jan Kara)  [Orabug: 25718971]  
  - ext4: properly align shifted xattrs when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes part 2 (Jan Kara)  [Orabug: 25718971]  
  - ext4: fix xattr shifting when expanding inodes (Jan Kara)  [Orabug: 25718971]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 27801171]  
  - nfsd: give out fewer session slots as limit approaches (J. Bruce Fields)  [Orabug: 28023821]  
  - nfsd: increase DRC cache limit (J. Bruce Fields)  [Orabug: 28023821]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 28261886]  
  - ipmi: Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (Junichi Nomura)   
  - x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs (Yazen Ghannam)  [Orabug: 28416303]  
  - Fix up non-directory creation in SGID directories (Linus Torvalds)  [Orabug: 28459477]  {CVE-2018-13405} 
  - scsi: libsas: defer ata device eh commands to libata (Jason Yan)  [Orabug: 28459685]  {CVE-2018-10021} 
  - PCI: Allocate ATS struct during enumeration (Bjorn Helgaas)  [Orabug: 28460092]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.18.8.el7uek]
changelog:
  - Cipso: cipso_v4_optptr enter infinite loop (yujuan.qi)  [Orabug: 28563992]  {CVE-2018-10938} 
  - Btrfs: fix list_add corruption and soft lockups in fsync (Liu Bo)  [Orabug: 28119834]  
  - x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Peter Zijlstra)  [Orabug: 28474643]  {CVE-2018-15594}
  - sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() in sym_hipd.c (George Kennedy)  [Orabug: 28481893]  
  - md/raid1: Avoid raid1 resync getting stuck (Jes Sorensen)  [Orabug: 28529228]  
  - x86/spectrev2: Don't set mode to SPECTRE_V2_NONE when retpoline is available. (Boris Ostrovsky)  [Orabug: 28540376]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.1.el7uek]
changelog:
  - x86/entry/64: Ensure %ebx handling correct in xen_failsafe_callback (George Kennedy)  [Orabug: 28402927]  {CVE-2018-14678} 
  - x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Vlastimil Babka)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Sean Christopherson)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Guenter Roeck)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/spectre: Add missing family 6 check to microcode check (Andi Kleen)  [Orabug: 28488808]  {CVE-2018-3620} 
  - KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Thomas Gleixner)  [Orabug: 28488808]  {CVE-2018-3646} 
  - x86/microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf)  [Orabug: 28488808]  {CVE-2018-3620} 
  - x86/microcode: Do not upload microcode if CPUs are offline (Ashok Raj)  [Orabug: 28488808]  {CVE-2018-3620}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.2.el7uek]
changelog:
  - tcp: add tcp_ooo_try_coalesce() helper (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: call tcp_drop() from tcp_data_queue_ofo() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: avoid collapses in tcp_prune_queue() if possible (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: free batches of packets in tcp_prune_ofo_queue() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: use an RB tree for ooo receive queue (Yaogong Wang)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: refine tcp_prune_ofo_queue() to not drop all packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: introduce tcp_under_memory_pressure() (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390} 
  - tcp: increment sk_drops for dropped rx packets (Eric Dumazet)  [Orabug: 28639707]  {CVE-2018-5390}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.3.el7uek]
changelog:
  - btrfs: fix check_shared for fiemap ioctl (Lu Fengqi)  [Orabug: 24716710]  
  - x86/pti: Don't report XenPV as vulnerable (Jiri Kosina)  [Orabug: 28476681]  
  - xfs: give all workqueues rescuer threads (Chris Mason)  [Orabug: 28518694]  
  - x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use (Patrick Colp)  [Orabug: 28274907]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.4.el7uek]
changelog:
  - Revert "x86/spec_ctrl: Only set SPEC_CTRL_IBRS_FIRMWARE if IBRS is actually in use" (Brian Maly)  [Orabug: 28610707]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.5.el7uek]
changelog:
  - nsfs: mark dentry with DCACHE_RCUACCESS (Cong Wang)  [Orabug: 28576290]  {CVE-2018-5873} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 28604628]  
  - IB/ipoib: Improve filtering log message (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Fix wrong update of arp_blocked counter (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Update RX counters after ACL filtering (Yuval Shaia)  [Orabug: 28655409]  
  - IB/ipoib: Filter RX packets before adding pseudo header (Yuval Shaia)  [Orabug: 28655409]  
  - cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status (Scott Bauer)  [Orabug: 28664501]  {CVE-2018-16658} 
  - ACPICA: acpi: acpica: fix acpi operand cache leak in nseval.c (Seunghun Han)  [Orabug: 28664577]  {CVE-2017-13695} 
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28680213]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.6.el7uek]
changelog:
  - exec: Limit arg stack to at most 75% of _STK_LIM (Kees Cook)  [Orabug: 28709994]  {CVE-2018-14634}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.19.7.el7uek]
changelog:
  - sunrpc: increase UNX_MAXNODENAME from 32 to __NEW_UTS_LEN bytes (Jeff Layton)  [Orabug: 28660177]  
  - net: rds: Use address family to designate IPv4 or IPv6 addresses (Håkon Bugge)  [Orabug: 28720071]  
  - net: rds: Fix blank at eol in af_rds.c (Håkon Bugge)  [Orabug: 28720071]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.8.el7uek]
changelog:
  - IB/core: For multicast functions, verify that LIDs are multicast LIDs (Michael J. Ruhl)  [Orabug: 28700490]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.19.9.el7uek]
changelog:
  - rds: crash at rds_ib_inc_copy_to_user+104 due to NULL ptr reference (Venkat Venkatsubra)  [Orabug: 28506569]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.1.el7uek]
changelog:
  - bnxt_en: xdp: don't make drivers report attachment mode (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (Nikita V. Shirokov)  [Orabug: 27988326]  
  - bnxt_en: add meta pointer for direct access (partial backport) (Somasundaram Krishnasamy)  [Orabug: 27988326]  
  - bnxt_en: Fix bug in ethtool -L. (Michael Chan)  [Orabug: 27988326]  
  - bpf: bnxt: Report bpf_prog ID during XDP_QUERY_PROG (Martin KaFai Lau)  [Orabug: 27988326]  
  - bnxt_en: Optimize doorbell write operations for newer chips (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Use short TX BDs for the XDP TX ring. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add ethtool mac loopback self test (reapply). (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add support for XDP_TX action. (Michael Chan)  [Orabug: 27988326]  
  - bnxt_en: Add basic XDP support. (Michael Chan)  [Orabug: 27988326]  
  - x86/ia32: Restore r8 correctly in 32bit SYSCALL instruction entry. (Gayatri Vasudevan)  [Orabug: 28529706]  
  - net: enable RPS on vlan devices (Shannon Nelson)  [Orabug: 28645929]  
  - xen-blkback: hold write vbd-lock while swapping the vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: implement swapping of active vbd (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: emit active physical device to xenstore (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: refactor backend_changed() (Ankur Arora)  [Orabug: 28651655]  
  - xen-blkback: pull out blkif grant features from vbd (Ankur Arora)  [Orabug: 28651655]  
  - mm: get rid of vmacache_flush_all() entirely (Linus Torvalds)  [Orabug: 28701016]  {CVE-2018-17182}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.2.el7uek]
changelog:
  - hugetlbfs: check for reserve page count going negative (Mike Kravetz)  [Orabug: 28734496]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 28734496]  
  - mm/hugetlb.c: don't call region_abort if region_chg fails (Mike Kravetz)  [Orabug: 28734496]  
  - mm: hugetlb: fix hugepage memory leak caused by wrong reserve count (Naoya Horiguchi)  [Orabug: 28734496]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.3.el7uek]
changelog:
  - x86/bugs/IBRS: properly use the _base ops if IBRS is currently unset (Zhenzhong Duan)  [Orabug: 28782729]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.4.el7uek]
changelog:
  - rds: RDS (tcp) hangs on sendto() to unresponding address (Ka-Cheong Poon)  [Orabug: 28762608]  
  - nfs: fix a deadlock in nfs client initialization (Scott Mayhew)  [Orabug: 28486463]  
  - infiniband: fix a possible use-after-free bug (Cong Wang)  [Orabug: 28774517]  {CVE-2018-14734}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.5.el7uek]
changelog:
  - x86/speculation: Add sysfs entry to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Switch to IBRS when loading a non-retpoline module (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Remove unnecessary retpoline alternatives (Alexandre Chartre)  [Orabug: 28607548]  
  - x86/speculation: Use static key to enable/disable retpoline (Alexandre Chartre)  [Orabug: 28607548]  
  - locking/static_keys: Provide DECLARE and well as DEFINE macros (Tony Luck)  [Orabug: 28607548]  
  - jump_label: remove bug.h, atomic.h dependencies for HAVE_JUMP_LABEL (Jason Baron)  [Orabug: 28607548]  
  - locking/static_key: Fix concurrent static_key_slow_inc() (Paolo Bonzini)  [Orabug: 28607548]  
  - jump_label: make static_key_enabled() work on static_key_true/false types too (Tejun Heo)  [Orabug: 28607548]  
  - locking/static_keys: Fix up the static keys documentation (Jonathan Corbet)  [Orabug: 28607548]  
  - locking/static_keys: Fix a silly typo (Jonathan Corbet)  [Orabug: 28607548]  
  - jump label, locking/static_keys: Update docs (Jason Baron)  [Orabug: 28607548]  
  - x86/asm: Add asm macros for static keys/jump labels (Andy Lutomirski)  [Orabug: 28607548]  
  - x86/asm: Error out if asm/jump_label.h is included inappropriately (Andy Lutomirski)  [Orabug: 28607548]  
  - jump_label/x86: Work around asm build bug on older/backported GCCs (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Add a new static_key interface (Peter Zijlstra)  [Orabug: 28607548]  
  - locking/static_keys: Rework update logic (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Add jump_entry_key() helper (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label, locking/static_keys: Rename JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern (Peter Zijlstra)  [Orabug: 28607548]  
  - jump_label: Rename JUMP_LABEL_{EN,DIS}ABLE to JUMP_LABEL_{JMP,NOP} (Peter Zijlstra)  [Orabug: 28607548]  
  - module, jump_label: Fix module locking (Peter Zijlstra)  [Orabug: 28607548]  
  - x86/speculation: Protect against userspace-userspace spectreRSB (Jiri Kosina)  [Orabug: 28631590]  {CVE-2018-15572} 
  - x86/spectre_v2: Remove remaining references to lfence mitigation (Alejandro Jimenez)  [Orabug: 28631590]  {CVE-2018-15572} 
  - Revert "md: allow a partially recovered device to be hot-added to an array." (NeilBrown)  [Orabug: 28702623]  
  - x86/bugs: ssbd_ibrs_selected called prematurely (Daniel Jordan)  [Orabug: 28788839]  
  - net/mlx4_core: print firmware version during driver loading (Qing Huang)  [Orabug: 28809377]  
  - mm: numa: Do not trap faults on shared data section pages. (Henry Willard)  [Orabug: 28814880]  
  - hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz)  [Orabug: 28813968]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.6.el7uek]
changelog:
  - x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre)  [Orabug: 28801831]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.7.el7uek]
changelog:
  - Revert "rds: RDS (tcp) hangs on sendto() to unresponding address" (Brian Maly)  [Orabug: 28837953]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.8.el7uek]
changelog:
  - scsi: lpfc: devloss timeout race condition caused null pointer reference (James Smart)  [Orabug: 27994179]  
  - scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (Ben Hutchings)  [Orabug: 28013813]  
  - i40e: Add programming descriptors to cleaned_count (Alexander Duyck)  [Orabug: 28228724]  
  - i40e: Fix memory leak related filter programming status (Alexander Duyck)  [Orabug: 28228724]  
  - xen-swiotlb: use actually allocated size on check physical continuous (Joe Jin)  [Orabug: 28258102]  
  - Revert "Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent"" (Dongli Zhang)  [Orabug: 28258102]  
  - net/mlx4_en: fix potential use-after-free with dma_unmap_page (Sarah Newman)  [Orabug: 28376051]  
  - ocfs2: fix ocfs2 read block panic (Junxiao Bi)  [Orabug: 28580543]  
  - block: fix bdi vs gendisk lifetime mismatch (Dan Williams)  [Orabug: 28645416]  
  - e1000e: Fix link check race condition (Benjamin Poirier)  [Orabug: 28716958]  
  - Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier)  [Orabug: 28716958]  
  - Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier)  [Orabug: 28716958]  
  - e1000e: Remove Other from EIAC (Benjamin Poirier)  [Orabug: 28716958]  
  - Fix error code in nfs_lookup_verify_inode() (Lance Shelton)  [Orabug: 28789030]  
  - workqueue: Allow modifying low level unbound workqueue cpumask (Lai Jiangshan)  [Orabug: 28813166]  
  - workqueue: Create low-level unbound workqueues cpumask (Frederic Weisbecker)  [Orabug: 28813166]  
  - scsi: sg: mitigate read/write abuse (Jann Horn)  [Orabug: 28824718]  {CVE-2017-13168}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.21.1.el7uek]
changelog:
  - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz)  [Orabug: 28839992]  
  - scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan)  [Orabug: 27927687]  {CVE-2018-7757} 
  - KVM: vmx: shadow more fields that are read/written on every vmexits (Paolo Bonzini)  [Orabug: 28581045]  
  - vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh)  [Orabug: 28775573]  
  - vhost/scsi: Respond to control queue operations (Bijan Mottahedeh)  [Orabug: 28775573]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.2.el7uek]
changelog:
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)  [Orabug: 28650922]  
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)  [Orabug: 28650922]  
  - KVM: MTRR: remove MSR 0x2f8 (Andy Honig)  [Orabug: 23276795]  {CVE-2016-3713} {CVE-2016-3713} 
  - x86/cpu/amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit)  [Orabug: 28783929]  
  - x86/CPU/AMD: Fix Bulldozer topology (Borislav Petkov)  [Orabug: 28783929]  
  - x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature (Yazen Ghannam)  [Orabug: 28783929]  
  - x86/cpu: Get rid of compute_unit_id (Borislav Petkov)  [Orabug: 28783929]  
  - x86/topology: Fix AMD core count (Peter Zijlstra)  [Orabug: 28783929]  
  - perf/x86/amd: Move nodes_per_socket into bsp_init_amd() (Huang Rui)  [Orabug: 28783929]  
  - x86/cpu/amd: Give access to the number of nodes in a physical package (Aravind Gopalakrishnan)  [Orabug: 28783929]  
  - ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen)  [Orabug: 28852806]  {CVE-2017-18204} 
  - Update dracut version requirement within the kernel (Jie Li)  [Orabug: 28873097]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.3.el7uek]
changelog:
  - net: net_failover: fix typo in net_failover_slave_register() (Liran Alon)  [Orabug: 28122104]  
  - virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala)  [Orabug: 28122104]  
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce net_failover driver (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: Introduce generic failover module (Sridhar Samudrala)  [Orabug: 28122104]  
  - net: introduce lower state changed info structure for LAG lowers (Jiri Pirko)  [Orabug: 28122104]  
  - net: introduce change lower state notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: add info struct for LAG changeupper (Jiri Pirko)  [Orabug: 28122104]  
  - net: add possibility to pass information about upper device via notifier (Jiri Pirko)  [Orabug: 28122104]  
  - net: Check CHANGEUPPER notifier return value (Ido Schimmel)  [Orabug: 28122104]  
  - net: introduce change upper device notifier change info (Jiri Pirko)  [Orabug: 28122104]  
  - x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan)  [Orabug: 28271063]  
  - x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan)  [Orabug: 28271063]  
  - xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil)  [Orabug: 28798861]  
  - scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart)  [Orabug: 28855939]  
  - scsi: virtio_scsi: let host do exception handling (Paolo Bonzini)  [Orabug: 28856913]  
  - net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 28857027]  
  - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko)  [Orabug: 28892656]  {CVE-2018-1000204} 
  - cdrom: fix improper type cast, which can leat to information leak. (Young_X)  [Orabug: 28929767]  {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.4.el7uek]
changelog:
  - Revert commit 8bd274934987 ("block: fix bdi vs gendisk lifetime mismatch") (Ashish Samant)  [Orabug: 28968102]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28703712]  
  - x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky)  [Orabug: 28814570]  
  - x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky)  [Orabug: 28814570]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.1.el7uek]
changelog:
  - xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen)  [Orabug: 28898616]  {CVE-2018-13094} 
  - ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai)  [Orabug: 28898636]  {CVE-2018-10902} 
  - md/raid5: fix a race condition in stripe batch (Shaohua Li)  [Orabug: 28917012]  
  - xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE (Darrick J. Wong)  [Orabug: 28924091]  {CVE-2018-18690} 
  - certs: Add Oracle's new X509 cert into the kernel keyring (Eric Snowberg)  [Orabug: 28926203]  
  - block: fix bdi vs gendisk lifetime mismatch (Shan Hai)  [Orabug: 28945039]  
  - Add the following entries to 'uek-rpm/ol[67]/nano_modules.list': kernel/drivers/net/net_failover.ko kernel/net/core/failover.ko Fixes: b3bc7c163fc9 ('net: Introduce generic failover module') (Vijay Balakrishna)  [Orabug: 28953351]  
  - floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft)  [Orabug: 28956547]  {CVE-2018-7755} {CVE-2018-7755} 
  - iov_iter: don't revert iov buffer if csum error (Ding Tianhong)  [Orabug: 28960296]  
  - crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers)  [Orabug: 28976583]  {CVE-2017-17805} 
  - crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers)  [Orabug: 28976653]  {CVE-2017-17806}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.2.el7uek]
changelog:
  - n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds)  [Orabug: 28855335]  {CVE-2018-18386} 
  - nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington)  [Orabug: 28887442]  
  - x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves)  [Orabug: 28933009]  
  - ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai)  [Orabug: 29005188]  {CVE-2018-1000004} 
  - net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun)  [Orabug: 29012346]  {CVE-2018-8043}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.3.el7uek]
changelog:
  - rds: ib: Improve tracing during failover/back (Håkon Bugge)  [Orabug: 28860366]  
  - rds: ib: Remove superfluous add of address on fail-back device (Håkon Bugge)  [Orabug: 28860366]  
  - libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset (Fred Herard)  [Orabug: 28946207]  
  - wil6210: missing length check in wmi_set_ie (Lior David)  [Orabug: 28951265]  {CVE-2018-5848} 
  - netfilter: xt_osf: Add missing permission checks (Kevin Cernekee)  [Orabug: 29037831]  {CVE-2017-17450} 
  - x86/speculation: Fix bad argument to rdmsrl() in cpu_set_bug_bits() (Alejandro Jimenez)  [Orabug: 29044805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.4.el7uek]
changelog:
  - base/memory, hotplug: fix a kernel oops in show_valid_zones() (Toshi Kani)  [Orabug: 29050538]  
  - mm/memory_hotplug.c: check start_pfn in test_pages_in_a_zone() (Toshi Kani)  [Orabug: 29050538]  
  - drivers/base/memory.c: prohibit offlining of memory blocks with missing sections (Seth Jennings)  [Orabug: 29050538]  
  - mm: Check if section present during memory block (un)registering (Yinghai Lu)  [Orabug: 29050538]  
  - hugetlb: take PMD sharing into account when flushing tlb/caches (Mike Kravetz)  [Orabug: 28951854]  
  - mm: migration: fix migration of huge PMD shared pages (Mike Kravetz)  [Orabug: 28951854]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 28896255]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.1.el7uek]
changelog:
  - pinctrl: amd: Use devm_pinctrl_register() for pinctrl registration (Laxman Dewangan)  [Orabug: 27539246]  {CVE-2017-18174} 
  - mlock: fix mlock count can not decrease in race condition (Yisheng Xie)  [Orabug: 27677611]  {CVE-2017-18221} 
  - perf/core: Fix the perf_cpu_time_max_percent check (Tan Xiaojun)  [Orabug: 27823815]  {CVE-2017-18255} 
  - x86/microcode/intel: Fix a wrong assignment of revision in _save_mc (Zhenzhong Duan)  [Orabug: 28190263]  
  - mm: cma: fix incorrect type conversion for size during dma allocation (Rohit Vaswani)  [Orabug: 28407826]  {CVE-2017-9725} 
  - x86/speculation: Make enhanced IBRS the default spectre v2 mitigation (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: Enable enhanced IBRS usage (Alejandro Jimenez)  [Orabug: 28474851]  
  - x86/speculation: functions for supporting enhanced IBRS (Alejandro Jimenez)  [Orabug: 28474851]  
  - xen/blkback: fix disconnect while I/Os in flight (Juergen Gross)  [Orabug: 28744234]  
  - mlx4_vnic: use the mlid while calling ib_detach_mcast (aru kolappan)  [Orabug: 29029705]  
  - ext4: fail ext4_iget for root directory if unallocated (Theodore Ts'o)  [Orabug: 29048557]  {CVE-2018-1092} {CVE-2018-1092} 
  - Bluetooth: hidp: buffer overflow in hidp_process_report (Mark Salyzyn)  [Orabug: 29121215]  {CVE-2018-9363} {CVE-2018-9363} 
  - HID: debug: check length before copy_to_user() (Daniel Rosenberg)  [Orabug: 29128165]  {CVE-2018-9516} 
  - x86/MCE: Serialize sysfs changes (Seunghun Han)  [Orabug: 29149888]  {CVE-2018-7995} 
  - Input: i8042 - fix crash at boot time (Chen Hong)  [Orabug: 29152328]  {CVE-2017-18079}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.2.el7uek]
changelog:
  - KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL (KarimAllah Ahmed)  [Orabug: 28069548]  
  - KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded (Mihai Carabas)  [Orabug: 28069548]  
  - KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28069548]  
  - KVM: x86: pass host_initiated to functions that read MSRs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: make MSR bitmaps per-VCPU (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: VMX: introduce alloc_loaded_vmcs (Paolo Bonzini)  [Orabug: 28069548]  
  - KVM: nVMX: Eliminate vmcs02 pool (Jim Mattson)  [Orabug: 28069548]  
  - KVM: nVMX: fix msr bitmaps to prevent L2 from accessing L0 x2APIC (Radim Krčmář)  [Orabug: 28069548]  
  - ocfs2: don't clear bh uptodate for block read (Junxiao Bi)  [Orabug: 28762940]  
  - ocfs2: clear journal dirty flag after shutdown journal (Junxiao Bi)  [Orabug: 28924775]  
  - ocfs2: fix panic due to unrecovered local alloc (Junxiao Bi)  [Orabug: 28924775]  
  - net: rds: fix rds_ib_sysctl_max_recv_allocation error (Zhu Yanjun)  [Orabug: 28947481]  
  - x86/speculation: Always disable IBRS in disable_ibrs_and_friends() (Alejandro Jimenez)  [Orabug: 29139710]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.3.el7uek]
changelog:
  - ext4: update i_disksize when new eof exceeds it (Shan Hai)  [Orabug: 28940828]  
  - ext4: update i_disksize if direct write past ondisk size (Eryu Guan)  [Orabug: 28940828]  
  - ext4: protect i_disksize update by i_data_sem in direct write path (Eryu Guan)  [Orabug: 28940828]  
  - ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c (Hui Peng)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Replace probing flag with active refcount (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ALSA: usb-audio: Avoid nested autoresume calls (Takashi Iwai)  [Orabug: 29042981]  {CVE-2018-19824} 
  - ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: update inline int ext4_has_metadata_csum(struct super_block *sb) (John Donnelly)  [Orabug: 29114440]  {CVE-2018-1094} 
  - ext4: always initialize the crc32c checksum driver (Theodore Ts'o)  [Orabug: 29114440]  {CVE-2018-1094} {CVE-2018-1094} 
  - Revert "bnxt_en: Reduce default rings on multi-port cards." (Brian Maly)  [Orabug: 28687746]  
  - mlx4_core: Disable P_Key Violation Traps (Håkon Bugge)  [Orabug: 27693633]  
  - rds: RDS connection does not reconnect after CQ access violation error (Venkat Venkatsubra)  [Orabug: 28733324]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.4.el7uek]
changelog:
  - mstflint: Fix coding style issues - left with LINUX_VERSION_CODE (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix coding-style issues (Idan Mehalel)  [Orabug: 28878697]  
  - mstflint: Fix errors found with checkpatch script (Idan Mehalel)  [Orabug: 28878697]  
  - Added support for 5th Gen devices in Secure Boot module and mtcr (Adham Masarwah)  [Orabug: 28878697]  
  - Fix typos in mst_kernel (Adham Masarwah)  [Orabug: 28878697]  
  - bnxt_en: Report PCIe link properties with pcie_print_link_status() (Brian Maly)  [Orabug: 28942099]  
  - selinux: Perform both commoncap and selinux xattr checks (Eric W. Biederman)  [Orabug: 28951521]  
  - Introduce v3 namespaced file capabilities (Serge E. Hallyn)  [Orabug: 28951521]  
  - rds: ib: Use a delay when reconnecting to the very same IP address (Håkon Bugge)  [Orabug: 29138813]  
  - Change mincore() to count "mapped" pages rather than "cached" pages (Linus Torvalds)  [Orabug: 29187415]  {CVE-2019-5489} 
  - NFSD: Set the attributes used to store the verifier for EXCLUSIVE4_1 (Kinglong Mee)  [Orabug: 29204157]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.24.5.el7uek]
changelog:
  - rds: congestion updates can be missed when kernel low on memory (Mukesh Kacker)  [Orabug: 28425811]  
  - net/rds: ib: Fix endless RNR Retries caused by memory allocation failures (Venkat Venkatsubra)  [Orabug: 28127993]  
  - net: rds: fix excess initialization of the recv SGEs (Zhu Yanjun)  [Orabug: 29004503]  
  - xhci: fix usb2 resume timing and races. (Mathias Nyman)  [Orabug: 29028940]  
  - xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices (Mathias Nyman)  [Orabug: 29028940]  
  - userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli)  [Orabug: 29163750]  {CVE-2018-18397} 
  - x86/apic/x2apic: set affinity of a single interrupt to one cpu (Jianchao Wang)  [Orabug: 29196396]  
  - xen/blkback: rework validate_io_op() (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: optimize validate_io_op() to filter BLKIF_OP_RESERVED_1 operation (Dongli Zhang)  [Orabug: 29199843]  
  - xen/blkback: do not BUG() for invalid blkif_request from frontend (Dongli Zhang)  [Orabug: 29199843]  
  - net/rds: WARNING: at net/rds/recv.c:222 rds_recv_hs_exthdrs+0xf8/0x1e0 (Venkat Venkatsubra)  [Orabug: 29201779]  
  - xen-netback: wake up xenvif_dealloc_kthread when it should stop (Dongli Zhang)  [Orabug: 29217927]  
  - Revert "xfs: remove nonblocking mode from xfs_vm_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: remove xfs_cancel_ioend" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: Introduce writeback context for writepages" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: xfs_cluster_write is redundant" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: factor mapping out of xfs_do_writepage" (Wengang Wang)  [Orabug: 29279692]  
  - Revert "xfs: don't chain ioends during writepage submission" (Wengang Wang)  [Orabug: 29279692]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.1.el7uek]
changelog:
  - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR (Tom Lendacky)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/bugs: Add AMD's SPEC_CTRL MSR usage (Konrad Rzeszutek Wilk)  [Orabug: 28870524]  {CVE-2018-3639} 
  - x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD (Mihai Carabas)  [Orabug: 28870524]  {CVE-2018-3639} 
  - Make file credentials available to the seqfile interfaces (Linus Torvalds)  [Orabug: 29114879]  {CVE-2018-17972} 
  - proc: restrict kernel stack dumps to root (Jann Horn)  [Orabug: 29114879]  {CVE-2018-17972} 
  - x86/speculation: Clean up retpoline code in bugs.c (Alejandro Jimenez)  [Orabug: 29211617]  
  - x86, modpost: Replace last remnants of RETPOLINE with CONFIG_RETPOLINE (WANG Chao)  [Orabug: 29211617]  
  - x86/build: Fix compiler support check for CONFIG_RETPOLINE (Masahiro Yamada)  [Orabug: 29211617]  
  - x86/retpoline: Remove minimal retpoline support (Zhenzhong Duan)  [Orabug: 29211617]  
  - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support (Zhenzhong Duan)  [Orabug: 29211617]  
  - nl80211: check for the required netlink attributes presence (Vladis Dronov)  [Orabug: 29245533]  {CVE-2017-12153} {CVE-2017-12153} 
  - scsi: lpfc: Fix PT2PT PRLI reject (reapply patch) (James Smart)  [Orabug: 29281346]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.2.el7uek]
changelog:
  - Enable RANDOMIZE_BASE (John Haxby)  [Orabug: 29305587]  
  - slub: make ->cpu_partial unsigned (Alexey Dobriyan)  [Orabug: 28620592]  
  - dtrace: support kernels built with RANDOMIZE_BASE (Kris Van Hees)  [Orabug: 29204005]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.3.el7uek]
changelog:
  - blk-mq: Do not invoke .queue_rq() for a stopped queue (Bart Van Assche)  [Orabug: 28766011]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29323635]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29323635]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29323635]  
  - KVM: SVM: Add MSR-based feature support for serializing LFENCE (Tom Lendacky)  [Orabug: 29335274]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.25.4.el7uek]
changelog:
  - KEYS: add missing permission check for request_key() destination (Eric Biggers)  [Orabug: 29304551]  {CVE-2017-17807} 
  - KEYS: Don't permit request_key() to construct a new keyring (David Howells)  [Orabug: 29304551]  {CVE-2017-17807} 
  - mlx4_ib: Distribute completion vectors when zero is supplied (Håkon Bugge)  [Orabug: 29318191]  
  - bnxt_en: Fix TX timeout during netpoll. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Fix for system hang if request_irq fails (Vikas Gupta)  [Orabug: 29357977]  
  - bnxt_en: Fix firmware message delay loop regression. (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: reduce timeout on initial HWRM calls (Andy Gospodarek)  [Orabug: 29357977]  
  - bnxt_en: Fix NULL pointer dereference at bnxt_free_irq(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Check valid VNIC ID in bnxt_hwrm_vnic_set_tpa(). (Michael Chan)  [Orabug: 29357977]  
  - bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs. (Michael Chan)  [Orabug: 29357977]  
  - mm: cleancache: fix corruption on missed inode invalidation (Pavel Tikhomirov)  [Orabug: 29364670]  {CVE-2018-16862} 
  - l2tp: fix reading optional fields of L2TPv3 (Jacob Wen)  [Orabug: 29368048]  
  - net/packet: fix a race in packet_bind() and packet_notifier() (Eric Dumazet)  [Orabug: 29385593]  {CVE-2018-18559} 
  - ext4: verify the depth of extent tree in ext4_find_extent() (Theodore Ts'o)  [Orabug: 29396712]  {CVE-2018-10877} {CVE-2018-10877}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.1.el7uek]
changelog:
  - NFS: commit direct writes even if they fail partially (J. Bruce Fields)  [Orabug: 28212440]  
  - rds: update correct congestion map for loopback transport (Mukesh Kacker)  [Orabug: 29175685]  
  - ext4: only look at the bg_flags field if it is valid (Theodore Ts'o)  [Orabug: 29316684]  {CVE-2018-10876} {CVE-2018-10876} 
  - uek-rpm: Add kernel-uek version to kernel-ueknano provides (Somasundaram Krishnasamy)  [Orabug: 29357643]  
  - net: Set sk_prot_creator when cloning sockets to the right proto (Christoph Paasch)  [Orabug: 29422739]  {CVE-2018-9568} 
  - ext4: always check block group bounds in ext4_init_block_bitmap() (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - ext4: make sure bitmaps and the inode table don't overlap with bg descriptors (Theodore Ts'o)  [Orabug: 29428607]  {CVE-2018-10878} 
  - vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells)  [Orabug: 29428607]  {CVE-2018-10878} 
  - iscsi: Capture iscsi debug messages using tracepoints (Fred Herard)  [Orabug: 29429855]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.2.el7uek]
changelog:
  - jiffies: use jiffies64_to_nsecs() to fix 100% steal usage for xen vcpu hotplug (Dongli Zhang)  [Orabug: 28806208]  
  - time: Introduce jiffies64_to_nsecs() (Frederic Weisbecker)  [Orabug: 28806208]  
  - net_failover: delay taking over primary device to accommodate udevd renaming (Si-Wei Liu)   
  - fs/dcache.c: add cond_resched() in shrink_dentry_list() (Nikolay Borisov)  [Orabug: 29412146]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.26.3.el7uek]
changelog:
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 29469714]  
  - Revert x86/apic/x2apic: set affinity of a single interrupt to one cpu (Mridula Shastry)  [Orabug: 29449976]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.4U.el7uek]
changelog:
  - bnxt_en: Fix race conditions in .ndo_get_stats64(). (Michael Chan)  [Orabug: 29129625]  
  - ext4: always verify the magic number in xattr blocks (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - ext4: add corruption check in ext4_xattr_set_entry() (Theodore Ts'o)  [Orabug: 29437127]  {CVE-2018-10879} {CVE-2018-10879} 
  - net: add netif_is_lag_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_lag_master helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_port helper (Jiri Pirko)  [Orabug: 29495360]  
  - net: add netif_is_team_master helper (Jiri Pirko)  [Orabug: 29495360]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.5.el7uek]
changelog:
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 29487790]  
  - xen/blkfront: avoid NULL blkfront_info dereference on device removal (Vasilis Liaskovitis)  [Orabug: 29469740]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.7.el7uek]
changelog:
  - ib_core: initialize shpd field when allocating 'struct ib_pd' (Mukesh Kacker)  [Orabug: 29384815]  
  - Revert "x86/apic: Make arch_setup_hwirq NUMA node aware" (Brian Maly)  [Orabug: 29542185]  
  - qlcnic: fix Tx descriptor corruption on 82xx devices (Shahed Shaikh)  [Orabug: 27708787]  
  - block: Fix a race between blk_cleanup_queue() and timeout handling (Bart Van Assche)  [Orabug: 29158186]  
  - can: gw: ensure DLC boundaries after CAN frame modification (Oliver Hartkopp)  [Orabug: 29215299]  {CVE-2019-3701} {CVE-2019-3701} 
  - CIFS: Enable encryption during session setup phase (Pavel Shilovsky)  [Orabug: 29338239]  {CVE-2018-1066} 
  - ext4: clear i_data in ext4_inode_info when removing inline data (Theodore Ts'o)  [Orabug: 29540709]  {CVE-2018-10881} {CVE-2018-10881} 
  - ext4: add more inode number paranoia checks (Theodore Ts'o)  [Orabug: 29545566]  {CVE-2018-10882} {CVE-2018-10882} 
  - Revert "KVM: nVMX: Eliminate vmcs02 pool" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: introduce alloc_loaded_vmcs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: VMX: make MSR bitmaps per-VCPU" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: x86: pass host_initiated to functions that read MSRs" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/x86: Add IBPB support" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/VMX: Allow direct access to MSR_IA32_SPEC_CTRL - reloaded" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM/SVM: Allow direct access to MSR_IA32_SPEC_CTRL" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "KVM: SVM: Add MSR-based feature support for serializing LFENCE" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/cpufeatures: rename X86_FEATURE_AMD_SSBD to X86_FEATURE_LS_CFG_SSBD" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Add AMD's SPEC_CTRL MSR usage" (Boris Ostrovsky)  [Orabug: 29542029]  
  - Revert "x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR" (Boris Ostrovsky)  [Orabug: 29542029]  
  - arch: x86: remove unsued SET_IBPB from spec_ctrl.h (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SpectreV2 bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: fix late loading SSBD and L1TF bugs eval (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: Re-evaluate bugs in a CPU after microcode loading (Mihai Carabas)  [Orabug: 29336760]  
  - x86: cpu: microcode: update flags for all cpus (Mihai Carabas)  [Orabug: 29336760]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.8.el7uek]
changelog:
  - scsi: target: remove hardcoded T10 Vendor ID in INQUIRY response (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: add device vendor id, product id and revision configfs attributes (Alan Adamson)  [Orabug: 29344862]  
  - scsi: target: consistently null-terminate t10_wwn strings (David Disseldorp)  [Orabug: 29344862]  
  - scsi: target: use consistent left-aligned ASCII INQUIRY data (David Disseldorp)  [Orabug: 29344862]  
  - ext4: fix data corruption caused by unaligned direct AIO (Lukas Czerner)  [Orabug: 29553371]  
  - swiotlb: checking whether swiotlb buffer is full with io_tlb_used (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: add debugfs to track swiotlb buffer usage (Dongli Zhang)  [Orabug: 29582587]  
  - swiotlb: fix comment on swiotlb_bounce() (Dongli Zhang)  [Orabug: 29582587]  
  - NFSv4.1: nfs4_fl_prepare_ds must be careful about reporting success. (NeilBrown)  [Orabug: 29617508]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.26.9.el7uek]
changelog:
  - KEYS: encrypted: fix buffer overread in valid_master_desc() (Eric Biggers)  [Orabug: 29591025]  {CVE-2017-13305}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.11.el7uek]
changelog:
  - x86/speculation: Support 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - cpu/speculation: Add 'mitigations=' cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Konrad Rzeszutek Wilk)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Fix comment (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: update mds_mitigation to reflect debugfs configuration (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: fix microcode late loading (Mihai Carabas)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Improve coverage for MDS vulnerability (Boris Ostrovsky)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add SMT warning message (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds=full,nosmt cmdline option (Josh Poimboeuf)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Add MDS vulnerability documentation (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation: Move L1TF to separate directory (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation mode VMWERV (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add sysfs reporting for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mitigation control for MDS (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Clear CPU buffers on exit to user (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add mds_clear_cpu_buffers() (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add BUG_MSBDS_ONLY (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add basic bug infrastructure for MDS (Andi Kleen)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Consolidate CPU whitelists (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/msr-index: Cleanup bit defines (Thomas Gleixner)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - Documentation/l1tf: Fix small spelling typo (Salvatore Bonaccorso)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation: Simplify the CPU bug detection logic (Dominik Brodowski)  [Orabug: 29526900]  {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.26.12.el7uek]
changelog:
  - x86/mds: Add empty commit for CVE-2019-11091 (Konrad Rzeszutek Wilk)  [Orabug: 29721935]  {CVE-2019-11091} 
  - x86/microcode: Add loader version file in debugfs (Boris Ostrovsky)  [Orabug: 29754165]  
  - x86/microcode: Fix CPU synchronization routine (Borislav Petkov)  [Orabug: 29754165]  
  - x86/microcode: Synchronize late microcode loading (Borislav Petkov)  [Orabug: 29754165]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.1.el7uek]
changelog:
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: use configured rport E_D_TOV (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: additional debugging messages (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: don't advance state machine for incoming FLOGI (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not login if the port is already started (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not drop down to FLOGI for fc_rport_login() (Hannes Reinecke)  [Orabug: 25933179]  
  - scsi: libfc: Do not take rdata->rp_mutex when processing a -FC_EX_CLOSED ELS response. (Chad Dupuis)  [Orabug: 25933179]  
  - scsi: libfc: Fixup disc_mutex handling (Hannes Reinecke)  [Orabug: 25933179]  
  - xve: arm ud tx cq to generate completion interrupts (Ajaykumar Hotchandani)  [Orabug: 28267050]  
  - net: sched: run ingress qdisc without locks (Alexei Starovoitov)  [Orabug: 29395374]  
  - bnxt_en: Fix typo in firmware message timeout logic. (Michael Chan)  [Orabug: 29412112]  
  - bnxt_en: Wait longer for the firmware message response to complete. (Michael Chan)  [Orabug: 29412112]  
  - mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed. (Tetsuo Handa)  [Orabug: 29456281]  
  - X.509: Handle midnight alternative notation in GeneralizedTime (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Support leap seconds (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} 
  - X.509: Fix the time validation [ver #2] (David Howells)  [Orabug: 29460344]  {CVE-2015-5327} {CVE-2015-5327} 
  - be2net: enable new Kconfig items in kernel configs (Brian Maly)  [Orabug: 29475071]  
  - benet: remove broken and unused macro (Lubomir Rintel)  [Orabug: 29475071]  
  - be2net: don't flip hw_features when VXLANs are added/deleted (Davide Caratti)  [Orabug: 29475071]  
  - be2net: Fix memory leak in be_cmd_get_profile_config() (Petr Oros)  [Orabug: 29475071]  
  - be2net: Use Kconfig flag to support for enabling/disabling adapters (Petr Oros)  [Orabug: 29475071]  
  - be2net: Mark expected switch fall-through (Gustavo A. R. Silva)  [Orabug: 29475071]  
  - be2net: fix spelling mistake "seqence" -> "sequence" (Colin Ian King)  [Orabug: 29475071]  
  - be2net: Update the driver version to 12.0.0.0 (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (Suresh Reddy)  [Orabug: 29475071]  
  - be2net: move rss_flags field in rss_info to ensure proper alignment (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: re-order fields in be_error_recovert to avoid hole (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused tx_jiffies field from be_tx_stats (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: move txcp field in be_tx_obj to eliminate holes in the struct (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: reorder fields in be_eq_obj structure (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old custom busy-poll fields (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: remove unused old AIC info (Ivan Vecera)  [Orabug: 29475071]  
  - be2net: Fix error detection logic for BE3 (Suresh Reddy)  [Orabug: 29475071]  
  - scsi: sd: Do not override max_sectors_kb sysfs setting (Martin K. Petersen)  [Orabug: 29596510]  
  - USB: serial: io_ti: fix div-by-zero in set_termios (Johan Hovold)  [Orabug: 29487834]  {CVE-2017-18360} 
  - bnxt_en: Drop oversize TX packets to prevent errors. (Michael Chan)  [Orabug: 29516462]  
  - x86/speculation: Read per-cpu value of x86_spec_ctrl_priv in x86_virt_spec_ctrl() (Alejandro Jimenez)  [Orabug: 29526401]  
  - x86/speculation: Keep enhanced IBRS on when prctl is used for SSBD control (Alejandro Jimenez)  [Orabug: 29526401]  
  - USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data (Hui Peng)  [Orabug: 29605982]  {CVE-2018-19985} {CVE-2018-19985} 
  - swiotlb: save io_tlb_used to local variable before leaving critical section (Dongli Zhang)  [Orabug: 29637525]  
  - swiotlb: dump used and total slots when swiotlb buffer is full (Dongli Zhang)  [Orabug: 29637525]  
  - x86/bugs, kvm: don't miss SSBD when IBRS is in use. (Quentin Casasnovas)  [Orabug: 29642113]  
  - cifs: Fix use after free of a mid_q_entry (Shuning Zhang)  [Orabug: 29654888]  
  - binfmt_elf: switch to new creds when switching to new mm (Linus Torvalds)  [Orabug: 29677233]  {CVE-2019-11190} 
  - x86/microcode: Don't return error if microcode update is not needed (Boris Ostrovsky)  [Orabug: 29759756]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.2.el7uek]
changelog:
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29797118]  
  - vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra)  [Orabug: 29710939]  
  - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet)  [Orabug: 29710939]  
  - nvme: allow timed-out ios to retry (James Smart)  [Orabug: 29301607]  
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29391909]  
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Fix gratuitous ARP storm (Håkon Bugge)  [Orabug: 29391909]  
  - IB/mlx4: Increase the timeout for CM cache (Håkon Bugge)  [Orabug: 29391909]  
  - kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez)  [Orabug: 29423804]  
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 29510356]  
  - bnxt_en: Reset device on RX buffer errors. (Michael Chan)  [Orabug: 29651238]  
  - x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky)  [Orabug: 29774291]  
  - x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju)  [Orabug: 29791036]  {CVE-2018-12127} {CVE-2018-12130}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.3.el7uek]
changelog:
  - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (Shuning Zhang)  [Orabug: 29233739]  
  - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - HID: debug: fix the ring buffer implementation (Vladis Dronov)  [Orabug: 29629481]  {CVE-2019-3819} {CVE-2019-3819} 
  - scsi: target: iscsi: Use hex2bin instead of a re-implementation (Vincent Pelletier)  [Orabug: 29778875]  {CVE-2018-14633} {CVE-2018-14633} 
  - scsi: libsas: fix a race condition when smp task timeout (Jason Yan)  [Orabug: 29783225]  {CVE-2018-20836} 
  - scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan)  [Orabug: 29783254]  {CVE-2019-11810} 
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786786]  {CVE-2011-1079} {CVE-2019-11884} 
  - x86/speculation/mds: Add 'mitigations=' support for MDS (Kanth Ghatraju)  [Orabug: 29791046]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29802785]  {CVE-2019-11815}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.1.el7uek]
changelog:
  - hugetlbfs: don't retry when pool page allocations start to fail (Mike Kravetz)  [Orabug: 29324267]  
  - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus (William Roche)  [Orabug: 29660924]  
  - x86/speculation: reformatting RSB overwrite macro (William Roche)  [Orabug: 29660924]  
  - x86/speculation: Dynamic enable and disable of RSB stuffing with IBRS&!SMEP (William Roche)  [Orabug: 29660924]  
  - x86/speculation: STUFF_RSB dynamic enable (William Roche)  [Orabug: 29660924]  
  - int3 handler better address space detection on interrupts (William Roche)  [Orabug: 29660924]  
  - repairing out-of-tree build functionality (Mark Nicholson)  [Orabug: 29755100]  
  - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Shuning Zhang)  [Orabug: 29797007]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.28.2.el7uek]
changelog:
  - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: limit payload size of sacked skbs (Eric Dumazet)  [Orabug: 29884306]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.28.3.el7uek]
changelog:
  - Add CVE numbers for CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 (Chuck Anderson)  [Orabug: 29890820]  {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} 
  - tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins)  [Orabug: 29890820]  
  - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet)  [Orabug: 29886598]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.4.el7uek]
changelog:
  - x86/microcode: add SPEC_CTRL_SSBD to x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29642139]  
  - block: do not use interruptible wait anywhere (Alan Jenkins)  [Orabug: 29674055]  
  - vxlan: fix use-after-free on deletion (Mark Bloch)  [Orabug: 29755932]  
  - vxlan: reduce usage of synchronize_net in ndo_stop (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: synchronously and race-free destruction of vxlan sockets (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: support both IPv4 and IPv6 sockets in a single vxlan device (Jiri Benc)  [Orabug: 29755932]  
  - vxlan: make vxlan_sock_add and vxlan_sock_release complementary (Jiri Benc)  [Orabug: 29755932]  
  - openvswitch: Re-add CONFIG_OPENVSWITCH_VXLAN (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Use regular VXLAN net_device device (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Abstract vport name through ovs_vport_name() (Thomas Graf)  [Orabug: 29755932]  
  - openvswitch: Move dev pointer into vport itself (Thomas Graf)  [Orabug: 29755932]  
  - ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel generic (Thomas Graf)  [Orabug: 29755932]  
  - vxlan: Factor out device configuration (Thomas Graf)  [Orabug: 29755932]  
  - kexec: generate VMCOREINFO for module symbols (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for tasks and pid (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for trace dump (Isaac Chen)  [Orabug: 29770217]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.5.el7uek]
changelog:
  - vxlan: fix use-after-free on deletion (part 2) (Venkat Venkatsubra)  [Orabug: 29927196]  
  - vxlan: use a more suitable function when assigning NULL (Mark Bloch)  [Orabug: 29927196]  
  - vxlan: avoid using stale vxlan socket. (pravin shelar)  [Orabug: 29927196]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.6.el7uek]
changelog:
  - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke)  [Orabug: 29511036]  
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke)  [Orabug: 29511036]  
  - sysctl: Fix kabi breakage (Shuning Zhang)  [Orabug: 29689925]  
  - proc: Fix proc_sys_prune_dcache to hold a sb reference (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: Don't grab i_lock under sysctl_lock. (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: prune stale dentries during unregistering (Konstantin Khlebnikov)  [Orabug: 29689925]  
  - scsi: smartpqi: correct lun reset issues (Kevin Barnett)  [Orabug: 29848621]  
  - fork: record start_time late (David Herrmann)  [Orabug: 29850581]  {CVE-2019-6133} 
  - mm: avoid taking zone lock in pagetypeinfo_showmixed() (Vinayak Menon)  [Orabug: 29905302]  
  - x86/retpoline/ia32entry: Convert to non-speculative calls (Ankur Arora)  [Orabug: 29909295]  {CVE-2017-5715} 
  - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang)  [Orabug: 29925555]  {CVE-2018-7191} 
  - mm/madvise.c: fix madvise() infinite loop under special circumstances (chenjie)  [Orabug: 29925610]  {CVE-2017-18208}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.1.el7uek]
changelog:
  - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 29755247]  {CVE-2018-20169} 
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29924849]  
  - ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan)  [Orabug: 29925523]  {CVE-2019-11833} {CVE-2019-11833} 
  - ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang)  [Orabug: 29926005]  {CVE-2019-12381} 
  - ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang)  [Orabug: 29926057]  {CVE-2019-12378} 
  - x86/microcode: fix x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29941248]  
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30034815]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.2.el7uek]
changelog:
  - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery)  [Orabug: 30052805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.3.1.el7uek]
changelog:
  - x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.el7uek]
changelog:
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30028200]  
  - scsi: megaraid_sas: fix panic on loading firmware crashdump (Junxiao Bi)  [Orabug: 29993112]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.1.el7uek]
changelog:
  - Revert "xen-netback: stop netif TX queue on guest queuing failure" (Brian Maly)  [Orabug: 30128203]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.1.el7uek]
changelog:
  - xen: let alloc_xenballooned_pages() fail if not enough memory free (Juergen Gross)  [Orabug: 30073695]  
  - mm/page_alloc.c: calculate 'available' memory in a separate function (Igor Redko)  [Orabug: 30073695]  
  - Input: gtco - bounds check collection indent level (Grant Hernandez)  [Orabug: 30074413]  {CVE-2019-13631} 
  - Documentation/Docbook/Makefile: process xml files in parallel, based on nproc --all value (Alexander Burmashev)  [Orabug: 30079814]  
  - net: rds: fix compile warning (Zhu Yanjun)  [Orabug: 30118035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.2.el7uek]
changelog:
  - SUNRPC fix regression in umount of a secure mount (Olga Kornievskaia)  [Orabug: 29926734]  
  - block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 30159928]  
  - retpoline: Show correct spectrev2 mitigation after loading non-retpoline module (Alejandro Jimenez)  [Orabug: 30185537]  
  - tun: allow positive return values on dev_get_valid_name() call (Julien Gomes)  [Orabug: 30085611]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.1.el7uek]
changelog:
  - dm bufio: fix deadlock with loop device (Junxiao Bi)  [Orabug: 29964645]  
  - dm bufio: don't take the lock in dm_bufio_shrink_count (Mikulas Patocka)  [Orabug: 29964645]  
  - rds: rds-info shows IPv4 address as '0.0.0.0' (aru kolappan)  [Orabug: 30022915]  
  - restore cond_resched() in shrink_dcache_parent() (Al Viro)  [Orabug: 30101895]  
  - retpoline: Move retpoline_mode_selected() out of .init.text section (Alejandro Jimenez)  [Orabug: 30250332]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.1.1.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.2.el7uek]
changelog:
  - blk-mq: don't complete un-started request in timeout handler (Ming Lei)  [Orabug: 29903684]  
  - tcp: fix a stale ooo_last_skb after a replace (Eric Dumazet)  [Orabug: 29997352]  
  - mm: keep kabi compatibility of may_expand_vm() etc (Tong Chen)  [Orabug: 30145754]  
  - mm: always print RLIMIT_DATA warning (David Woodhouse)  [Orabug: 30145754]  
  - mm: enable RLIMIT_DATA by default with workaround for valgrind (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: warn about VmData over RLIMIT_DATA (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: rework virtual memory accounting (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: add the "struct mm_struct *mm" local into (Oleg Nesterov)  [Orabug: 30145754]  
  - mm: fix the racy mm->locked_vm change in (Oleg Nesterov)  [Orabug: 30145754]  
  - mm/mmap.c: remove redundant local variables for may_expand_vm() (Chen Gang)  [Orabug: 30145754]  
  - block: loop: fix another reread part failure (Ming Lei)  [Orabug: 30264603]  
  - block: loop: don't hold lo_ctl_mutex in lo_open (Ming Lei)  [Orabug: 30264603]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.3.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} 
  - qla2xxx: Fix List corruption due to Get Name List (Himanshu Madhani)  [Orabug: 29894072]  
  - qla2xxx: Update driver version 9.00.00.00.42.0-k1 (Himanshu Madhani)  [Orabug: 29894072]  
  - xen/swiotlb: remember having called xen_create_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: simplify range_straddles_page_boundary() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)  [Orabug: 30240133]  {CVE-2019-15239}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.4.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821} 
  - Revert "KVM: coalesced_mmio: add bounds checking" (Jack Vogel)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.5.el7uek]
changelog:
  - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink (YueHaibing)  [Orabug: 30322230]  {CVE-2019-15666} 
  - x86/tsc: Make calibration refinement more robust (Daniel Vacek)  [Orabug: 30217489]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.1.el7uek]
changelog:
  - NFSv4: Don't try to reclaim unused state owners (Trond Myklebust)  [Orabug: 30124013]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30302412]  
  - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov)  [Orabug: 30318219]  {CVE-2019-14283} 
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30351050]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.el7uek]
changelog:
  - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 26941755]  {CVE-2017-14991} 
  - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu)  [Orabug: 29707258]  
  - Revert "net_failover: delay taking over primary device to accommodate udevd renaming" (Si-Wei Liu)  [Orabug: 29707258]  
  - build: Revert "repairing out-of-tree build functionality" (Todd Vierling)  [Orabug: 30257829]  
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)   
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.1.el7uek]
changelog:
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 29967631]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.2.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.4.el7uek]
changelog:
  - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 27124665]  {CVE-2017-15102} 
  - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Andrea Arcangeli)  [Orabug: 27422557]  {CVE-2017-15128} 
  - tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue (Tim Froidcoeur)  [Orabug: 30317608]  {CVE-2019-11478} 
  - tcp: be more careful in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478} {CVE-2019-11478} 
  - tcp: refine memory limit test in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.5.el7uek]
changelog:
  - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447843]  {CVE-2019-14284} 
  - x86/cpufeatures: Make CPU bugs sticky (Thomas Gleixner)  [Orabug: 30473385]  
  - x86/cpu: Factor out application of forced CPU caps (Andy Lutomirski)  [Orabug: 30473385]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.1.el7uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to probe failure (himanshu.madhani@cavium.com)  [Orabug: 30161119]  
  - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Jeremy Compostella)  [Orabug: 30210503]  {CVE-2017-18551} 
  - scsi: qla2xxx: Ability to process multiple SGEs in Command SGL for CT passthrough commands. (Giridhar Malavali)  [Orabug: 30256423]  
  - net-sysfs: Fix mem leak in netdev_register_kobject (YueHaibing)  [Orabug: 30350263]  {CVE-2019-15916} 
  - Drivers: hv: vmbus: add special crash handler (Vitaly Kuznetsov)  [Orabug: 30374399]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.2.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.3.el7uek]
changelog:
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316058]  
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30327671]  
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29994551]  
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29994550]  
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29994553]  
  - RDMA/cma: Make # CM retries configurable (Håkon Bugge)  [Orabug: 29994555]  
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29994558]  
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29994560]  
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29994561]  
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29994566]  
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29994564]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.4.el7uek]
changelog:
  - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (Shuning Zhang)  [Orabug: 30036349]  
  - ocfs2: direct-IO: protect get_blocks (Junxiao Bi)  [Orabug: 30036349]  
  - SUNRPC: Remove xprt_connect_status() (Trond Myklebust)  [Orabug: 30165838]  
  - SUNRPC: Handle ENETDOWN errors (Trond Myklebust)  [Orabug: 30165838]  
  - vhost: make sure log_num < in_num (yongduan)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: block speculation of translated descriptors (Michael S. Tsirkin)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: Fix Spectre V1 vulnerability (Jason Wang)  [Orabug: 30312787]  
  - array_index_nospec: Sanitize speculative array de-references (Dan Williams)  [Orabug: 30312787]  
  - net: hsr: fix memory leak in hsr_dev_finalize() (Mao Wenan)  [Orabug: 30444853]  {CVE-2019-16995} 
  - ieee802154: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30444946]  {CVE-2019-17053} 
  - mISDN: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30445158]  {CVE-2019-17055} 
  - net: sit: fix memory leak in sit_init_net() (Mao Wenan)  [Orabug: 30445305]  {CVE-2019-16994} 
  - media: dvb: usb: fix use after free in dvb_usb_device_exit (Oliver Neukum)  [Orabug: 30490491]  {CVE-2019-15213} 
  - media: cpia2_usb: first wake up, then free in disconnect (Oliver Neukum)  [Orabug: 30511741]  {CVE-2019-15215} 
  - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Vandana BN)  [Orabug: 30532774]  {CVE-2019-15217} 
  - target: Propagate backend read-only to core_tpg_add_lun (Nicholas Bellinger)  [Orabug: 30538419]  
  - kvm: mmu: ITLB_MULTIHIT mitigation selection (Kanth Ghatraju)  [Orabug: 30539766]  
  - cpu/speculation: Uninline and export CPU mitigations helpers (Kanth Ghatraju)  [Orabug: 30539766]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.5.el7uek]
changelog:
  - net/mlx5: bump driver rev (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5: Add 25G and 50G types (John Donnelly)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 VF device ID (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix pci error recovery flow (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Add timeout handle to commands with callback (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix potential deadlock in command mode change (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix wait_vital for VFs and remove fixed sleep (Daniel Jurgens)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Add missing 50G baseSR2 link mode (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5_core: Add ConnectX-5 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Fix MLX5E_100BASE_T define (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5e: Fix soft lockup when HW Timestamping is enabled (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5: Make command timeout way shorter (Or Gerlitz)  [Orabug: 30479538]  
  - net/mlx5: Fix teardown errors that happen in pci error handler (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - IB/mlx5: Support setting Ethernet priority for Raw Packet QPs (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add Raw Packet QP query functionality (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Warn on unsupported events of QP/RQ/SQ (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Add RQ and SQ event handling (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Export transport objects (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add CQE version 1 support to user QPs and SRQs (Haggai Abramovsky)  [Orabug: 30479538]  
  - net/mlx5_core: Fix trimming down IRQ number (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5_core: Export flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Make ipv4/ipv6 location more clear (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Enable flow steering support for the IB driver (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Initialize namespaces only when supported by device (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Set priority attributes (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Connect flow tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce modify flow table command (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Managing root flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add utilities to find next and prev flow-tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering autogrouped flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Add PTP Hardware Clock (PHC) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Add HW timestamping (TS) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to read internal timer (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Do not modify the TX SKB (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add setting ATOMIC endian mode (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access functions to enable/disable RoCE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Break down the vport mac address query function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename en_flow_table.c to en_fs.c (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5: Use flow steering infrastructure for mlx5_en (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Flow steering tree initialization (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering lookup algorithms (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering base data structures (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering firmware commands (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Assign random MAC address if needed (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix query E-Switch capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add support for SR-IOV ndos (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce get vf statistics (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce set vport vlan (VST mode) (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce HCA cap and E-Switch vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce Vport administration functions (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Add SR-IOV (FDB) support (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce FDB hardware capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introducing E-Switch and l2 table (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write vlan list into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write UC/MC list and promisc mode into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport vlans (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport promisc mode (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport state (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport mac lists (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Update access functions to Query/Modify vport MAC address (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Add base sriov support (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Modify enable/disable hca functions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: support napi_complete_done() (Eric Dumazet)  [Orabug: 30479538]  
  - mlx5: add busy polling support (Eric Dumazet)  [Orabug: 30479538]  
  - net/mlx5e: Use the right DMA free function on TX path (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Max mtu comparison fix (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5e: Added self loopback prevention (Tariq Toukan)  [Orabug: 30479538]  
  - net/mlx5e: Fix inline header size calculation (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix LSO vlan insertion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Re-eanble client vlan TX acceleration (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Return error in case mlx5e_set_features() fails (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Don't allow more than max supported channels (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Use the the real irqn in eq->irqn (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Wait for RX buffers initialization in a more proper manner (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid NULL pointer access in case of configuration failure (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Wait for FW readiness on startup (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Add pci error handlers to mlx5_core driver (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix internal error detection conditions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: stop including <asm-generic/kmap_types.h> (Christoph Hellwig)  [Orabug: 30479538]  
  - net/mlx5e: Disable VLAN filter in promiscuous mode (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5: Fix typo in mlx5_query_port_pvlc (Jiri Pirko)  [Orabug: 30479538]  
  - net/mlx5_core: Use private health thread for each device (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Use accessor functions to read from device memory (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Prepare cmd interface to system errors handling (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Improve mlx5 messages (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Update health syndromes (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix wrong name in struct (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: New init and exit flow for mlx5_core (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix notification of page supplement error (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix async commands return code (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Remove redundant "err" variable usage (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Priv state flag not rolled-back upon netdev open error (Achiad Shochat)  [Orabug: 30479538]  
  - IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose max_sge_rd correctly (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose correct page_size_cap in device attributes (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix missing device local_dma_lkey (Sagi Grimberg)  [Orabug: 30479538]  
  - net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Rana Shahout)  [Orabug: 30479538]  
  - mlx5e: Fix sparse warnings in mlx5e_handle_csum(). (David S. Miller)  [Orabug: 30479538]  
  - net/mlx5e: Support RX CHECKSUM_COMPLETE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support ethtool get/set_pauseparam (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Ethtool link speed setting fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: HW LRO changes/fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support smaller RX/TX ring sizes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Add ethtool RSS configuration options (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Make RSS indirection table size a constant (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Have a single RSS Toeplitz hash key (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Carol L Soto)  [Orabug: 30479538]  
  - net/mlx5_core: Support physical port counters (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Take advantage of the light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Disable async events before unregister_netdev() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename/move functions following the ndo_stop flow change (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to modify RSS/LRO params (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce the "Drop RQ" (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Unify the RX flow (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove the mlx5e_update_priv_params() function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce create/destroy RSS indir table access functions (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Do not use netdev_err() before the netdev is registered (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant de-reference (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant assignment of sq->user_index (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return value of mlx5_command_exec() (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Cosmetics: use BIT() instead of "1 <<", and others (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: TX latency optimization to save DMA reads (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support TX packet copy into WQE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Support ETH_RSS_HASH_XOR (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Prefetch skb data on RX (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Pop cq outside mlx5e_get_cqe (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove extra spaces (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add transport domain alloc/dealloc support (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support NETIF_F_SG (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Enforce max flow-tables level >= 3 (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Disable client vlan TX acceleration (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add HW cacheline start padding (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix HW MTU settings (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: fix an error code (Dan Carpenter)  [Orabug: 30479538]  
  - net/mlx5_core: Fix static checker warnings around system guid query flow (Majd Dibbiny)  [Orabug: 30479538]  
  - mlx5: Enable mutual support for IB and Ethernet (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Add more query port helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number when querying port ptys (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number in the query port mtu helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Get vendor-id using the query adapter command (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Add new query HCA vport commands (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Make the vport helpers available for the IB driver too (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return bitmask when querying ISSI (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Apply proper name convention to helpers (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_en: Add missing check for memory allocation failure (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet resource handling files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet Datapath files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5_core: Set/Query port MTU commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Modify CQ moderation parameters (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement get/set port status (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement access functions of ptys register fields (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: New device capabilities handling (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: HW data structs/types definitions cleanup (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Set irq affinity hints (Saeed Mahameed)  [Orabug: 30479538]  
  - mlx5: add kcompat.h (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5_core,mlx5_ib: Do not use vmap() on coherent memory (Amir Vadai)  [Orabug: 30479538]  
  - mlx5: enable module in kernel configs (Brian Maly)  [Orabug: 30479538]  
  - config: disable mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - nano: remove mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - fix retpoline build breakage when CONFIG_RETPOLINE is not set (Brian Maly)  [Orabug: 30479538]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.1.el7uek]
changelog:
  - block/loop: set hw_sectors (Shaohua Li)  [Orabug: 30244514]  
  - block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 30273956]  
  - oled: export symbols (Wengang Wang)  [Orabug: 30512063]  
  - oled: give panic handler chance to run before kexec (Wengang Wang)  [Orabug: 30512063]  
  - USB: sisusbvga: fix oops in error path of sisusb_probe (Oliver Neukum)  [Orabug: 30548565]  {CVE-2019-15219}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.2.el7uek]
changelog:
  - scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Make PBDE optimizations configurable (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Update driver version to 11.4.0.8 and Copyright updates (Ketan Mukadam)  [Orabug: 30569875]  
  - scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Correct race with abort on completion path (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Code cleanup for 128byte wqe data type (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: use __raw_writeX on DPP copies (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add embedded data pointers for enhanced performance (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enable fw download on if_type=6 devices (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add if_type=6 support for cycling valid bits (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add 64G link speed support (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add PCI Ids for if_type=6 hardware (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add push-to-adapter support to sli4 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add SLI-4 if_type=6 support to the code base (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework sli4 doorbell infrastructure (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers (James Smart)  [Orabug: 30569875]  
  - x86/bugs: use check_bugs instead of microcode_late_select_mitigation (Mihai Carabas)  [Orabug: 30332499]  
  - x86/bugs: spec_ctrl_mutex taken in stop_machine context (Mihai Carabas)  [Orabug: 30332499]  
  - x86/microcode: moved cpu feature late eval to stop_machine (Mihai Carabas)  [Orabug: 30332499]  
  - x86/cpu: Re-apply forced caps every time CPU caps are re-read (Andy Lutomirski)  [Orabug: 30332499]  
  - x86/microcode/intel: Check microcode revision before updating sibling threads (Ashok Raj)  [Orabug: 30332499]  
  - tracing: Fix possible double free on failure of allocating trace buffer (Steven Rostedt (VMware))  [Orabug: 30633873]  {CVE-2017-18595}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.1.el7uek]
changelog:
  - ixgbe: protect TX timestamping from API misuse (Manjunath Patil)  [Orabug: 30275491]  
  - block: init flush rq ref count to 1 (Josef Bacik)  [Orabug: 30360559]  
  - block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu)  [Orabug: 30360559]  
  - blk-mq: Remove generation seqeunce (Keith Busch)  [Orabug: 30360559]  
  - scsi: libsas: delete sas port if expander discover failed (Jason Yan)  [Orabug: 30580687]  {CVE-2019-15807} 
  - scsi: qla2xxx: fix a potential NULL pointer dereference (Allen Pais)  [Orabug: 30618784]  {CVE-2019-16233} 
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657070]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.3.el7uek]
changelog:
  - mm/slub: don't wait for high-order page allocation (Mridula Shastry)  [Orabug: 30651572]  
  - scsi: lpfc: Handle new link fault code returned by adapter firmware. (James Smart)  [Orabug: 30708960]  
  - IB/mlx4: Fix leak in id_map_find_del (Haakon Bugge)  [Orabug: 30778457]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.4.el7uek]
changelog:
  - IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil)   
  - IB/mlx4: Fix leak in id_map_find_del (Håkon Bugge)  [Orabug: 30800573]  
  - Revert "IB/mlx4: Fix leak in id_map_find_del" (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.5.el7uek]
changelog:
  - x86: microcode: propagate return value to siblings (Mihai Carabas)  [Orabug: 30557086]  
  - x86/bugs: TSX not disabled at late loading (Mihai Carabas)  [Orabug: 30557086]  
  - mlx5: lock mlx5_core to prevent module unload (Brian Maly)  [Orabug: 30566775]  
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30576433]  
  - x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas)  [Orabug: 30649400]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.el7uek]
changelog:
  - iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider)  [Orabug: 30459537]  
  - x86/microcode: Issue update message only once (Borislav Petkov)  [Orabug: 30528904]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30528904]  
  - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini)  [Orabug: 30658695]  {CVE-2019-19332} 
  - rtlwifi: Fix potential overflow on P2P code (Laura Abbott)  [Orabug: 30807748]  {CVE-2019-17666}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.1.el7uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30847137]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30847137]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30847137]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.2.el7uek]
changelog:
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868399]  
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 29797476]  
  - CIFS: fix POSIX lock leak and invalid ptr deref (Aurelien Aptel)  [Orabug: 30399972]  
  - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (qize wang)  [Orabug: 30819439]  {CVE-2019-14901} 
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)  [Orabug: 30864533]  {CVE-2019-15291} 
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30865080]  
  - KVM: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini)  [Orabug: 30867886]  
  - slub: do not sanity check if SLAB_DEBUG_FREE is not set (Dongli Zhang)  [Orabug: 30903145]  
  - slub: extend slub debug to handle multiple slabs (Aaron Tomlin)  [Orabug: 30903145]  
  - Fix kmalloc slab creation sequence (Christoph Lameter)  [Orabug: 30903145]  
  - slab: correct size_index table before replacing the bootstrap kmem_cache_node (Daniel Sanders)  [Orabug: 30903145]  
  - mm/slab_common: support the slub_debug boot option on specific object size (Gavin Guo)  [Orabug: 30903145]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.3.el7uek]
changelog:
  - Fix KABI error by keeping the struct field being removed by the below patch (Ritika Srivastava)  [Orabug: 30902926]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Ritika Srivastava)  [Orabug: 30902926]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.4.el7uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30944739]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.1.el7uek]
changelog:
  - Revert "printk: Default console logging level should be set to 4" (Cesar Roque)  [Orabug: 30931820]  
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30870743]  
  - xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (kaixuxia)  [Orabug: 30902190]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.2.el7uek]
changelog:
  - xenbus: req->err should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]  
  - xenbus: req->body should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.3.el7uek]
changelog:
  - kernel: cpu.c: fix return in void function cpu_smt_disable (Mihai Carabas)  [Orabug: 31047871]  
  - net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost)  [Orabug: 31055327]  {CVE-2019-18806} 
  - swiotlb: clean up reporting (Kees Cook)  [Orabug: 31085017]  {CVE-2018-5953} 
  - KVM: x86: Expose more Intel AVX512 feature to guest (Luwei Kang)  [Orabug: 31085086]  
  - x86/cpufeature: Enable new AVX-512 features (Fenghua Yu)  [Orabug: 31085086]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.1.el7uek]
changelog:
  - rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 31031928]  
  - KVM: X86: Fix NULL deref in vcpu_scan_ioapic (Wanpeng Li)  [Orabug: 31078882]  
  - vhost: Check docket sk_family instead of call getname (Eugenio Pérez)  [Orabug: 31085993]  {CVE-2020-10942} 
  - Revert "oled: give panic handler chance to run before kexec" (Wengang Wang)  [Orabug: 31098797]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.2.el7uek]
changelog:
  - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu)  [Orabug: 30770962]  {CVE-2016-5244} 
  - xfs: do async inactivation only when fs freezed (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: fix deadlock between shrinker and fs freeze (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: increase the default parallelism levels of pwork clients (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: decide if inode needs inactivation (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: refactor the predicate part of xfs_free_eofblocks (Junxiao Bi)  [Orabug: 30944736]  
  - floppy: check FDC index for errors before assigning it (Linus Torvalds)  [Orabug: 31067516]  {CVE-2020-9383} 
  - KVM: x86: clear stale x86_emulate_ctxt->intercept value (Vitaly Kuznetsov)  [Orabug: 31118691]  
  - slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe)  [Orabug: 31136753]  {CVE-2020-11494}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.3.el7uek]
changelog:
  - ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address (Paolo Abeni)  [Orabug: 30292825]  
  - vt: selection, push sel_lock up (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, push console lock down (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, close sel_buffer race (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} {CVE-2020-8648} 
  - xfs: stop searching for free slots in an inode chunk when there are none (Carlos Maiolino)  [Orabug: 31030659]  
  - xfs: fix up xfs_swap_extent_forks inline extent handling (Eric Sandeen)  [Orabug: 31032831]  
  - xfs: validate sb_logsunit is a multiple of the fs blocksize (Darrick J. Wong)  [Orabug: 31034071]  
  - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Wen Huang)  [Orabug: 31104481]  {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816} {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.4.el7uek]
changelog:
  - HID: Fix assumption that devices have inputs (Alan Stern)  [Orabug: 31208622]  {CVE-2019-19532} 
  - qla2xxx: DBG: disable 3D mailbox. (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Fix mtcp dump collection failure (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Add Serdes support for ISP27XX (Joe Carnuccio)  [Orabug: 30890687]  
  - vgacon: Fix a UAF in vgacon_invert_region (Zhang Xiaoxu)  [Orabug: 31143947]  {CVE-2020-8649} {CVE-2020-8647} {CVE-2020-8647} {CVE-2020-8649} {CVE-2020-8649} {CVE-2020-8647} 
  - HID: hiddev: do cleanup in failure of opening a device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - HID: hiddev: avoid opening a disconnected device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - USB: adutux: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31233769]  {CVE-2019-19523}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.5.el7uek]
changelog:
  - i40e: Increment the driver version for FW API update (Jack Vogel)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Update FW API version to 1.9 (Piotr Azarewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Changed maximum supported FW API version to 1.8 (Adam Ludkiewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Stop dropping 802.1ad tags - eth proto 0x88a8 (Scott Peterson)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix reading LLDP configuration (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Add capability flag for stopping FW LLDP (Krzysztof Galazka)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: refactor FW version checking (Mitch Williams)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: shutdown all IRQs and disable MSI-X when suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: prevent service task from running while we're suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: don't clear suspended state until we finish resuming (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use newer generic PM support instead of legacy PM callbacks (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use separate state bit for miscellaneous IRQ setup (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix for flow director counters not wrapping as expected (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: relax warning message in case of version mismatch (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: simplify member variable accesses (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix link down message when interface is brought up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix unqualified module message while bringing link up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.1.el7uek]
changelog:
  - qla2xxx: Update driver version to 9.00.00.00.42.0-k1-v2 (Arun Easi)  [Orabug: 30372266]  
  - qla2xxx: Fix device discovery when FCP2 device is lost. (Arun Easi)  [Orabug: 30372266]  
  - brcmfmac: add subtype check for event handling in data path (John Donnelly)  [Orabug: 30776354]  {CVE-2019-9503} 
  - percpu-refcount: fix reference leak during percpu-atomic transition (Douglas Miller)  [Orabug: 30867060]  
  - blk-mq: Allow timeouts to run while queue is freezing (Gabriel Krisman Bertazi)  [Orabug: 30867060]  
  - fs/dcache.c: fix spin lockup issue on nlru->lock (Junxiao Bi)  [Orabug: 30953290]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31234664]  
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (Navid Emamdoost)  [Orabug: 31246302]  {CVE-2019-19056} 
  - drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (Vladis Dronov)  [Orabug: 31262557]  {CVE-2017-7346}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.2.el7uek]
changelog:
  - genirq: Use rcu in kstat_irqs_usr() (Eric Dumazet)   
  - genirq: Make sparse_irq_lock protect what it should protect (Thomas Gleixner)  [Orabug: 30953676]  
  - genirq: Free irq_desc with rcu (Thomas Gleixner)  [Orabug: 30953676]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.3.el7uek]
changelog:
  - Input: add safety guards to input_set_keycode() (Dmitry Torokhov)  [Orabug: 31200558]  {CVE-2019-20636} 
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31200579]  {CVE-2020-11609} 
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)  [Orabug: 31213758]  {CVE-2020-11608} 
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31213767]  {CVE-2020-11668} 
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (Navid Emamdoost)  [Orabug: 31263147]  {CVE-2019-19057} 
  - USB: core: Fix races in character device registration and deregistraion (Alan Stern)  [Orabug: 31317667]  {CVE-2019-19537}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.4.el7uek]
changelog:
  - acpi: disable erst (Wengang Wang)  [Orabug: 31194253]  
  - mdio_bus: Fix use-after-free on device_register fails (YueHaibing)  [Orabug: 31222292]  {CVE-2019-12819} 
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302708]  
  - vxlan: dont migrate permanent fdb entries during learn (Roopa Prabhu)  [Orabug: 31325318]  
  - USB: iowarrior: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31351061]  {CVE-2019-19528} 
  - usb: iowarrior: fix deadlock on disconnect (Oliver Neukum)  [Orabug: 31351061]  {CVE-2019-19528} 
  - mremap: properly flush TLB before releasing the page (Linus Torvalds)  [Orabug: 31352011]  {CVE-2018-18281}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.el7uek]
changelog:
  - Input: ff-memless - kill timer in destroy() (Oliver Neukum)  [Orabug: 31213691]  {CVE-2019-19524} 
  - libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang)  [Orabug: 31351307]  {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897} 
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Kees Cook)  [Orabug: 31352068]  {CVE-2017-1000370} {CVE-2017-1000371} {CVE-2017-1000370} 
  - NFSv4.0: Remove transport protocol name from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - NFSv4.0: Remove cl_ipaddr from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387466]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.1.el7uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31352782]  {CVE-2020-0543}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.2.el7uek]
changelog:
  - MCE: Restrict MCE banks to 6 on AMD platform (Zhenzhong Duan)  [Orabug: 30000521]  
  - can: peak_usb: fix slab info leak (Johan Hovold)  [Orabug: 31351141]  {CVE-2019-19534} 
  - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351250]  {CVE-2019-19536} 
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430876]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.3.el7uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31475612]  {CVE-2020-0543}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.4.el7uek]
changelog:
  - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (Tomas Bortoli)  [Orabug: 31351119]  {CVE-2019-19533} 
  - NFS: Fix a performance regression in readdir (Trond Myklebust)  [Orabug: 31409061]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.5.el7uek]
changelog:
  - Revert "bnxt_en: Remove busy poll logic in the driver." (Brian Maly)  [Orabug: 28151475]  
  - md: batch flush requests. (NeilBrown)  [Orabug: 31332821]  
  - ALSA: core: Fix card races between register and disconnect (Takashi Iwai)  [Orabug: 31351891]  {CVE-2019-15214} 
  - media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - atomic_open(): fix the handling of create_error (Al Viro)  [Orabug: 31493395]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.6.el7uek]
changelog:
  - ipv4: ipv4_default_advmss() should use route mtu (Eric Dumazet)  [Orabug: 31563095]  
  - net: ipv4: Refine the ipv4_default_advmss (Gao Feng)  [Orabug: 31563095]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.6.2.el7uek]
changelog:
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31555658]  
  - Revert "x86/efi: Request desired alignment via the PE/COFF headers" (Matt Fleming)  [Orabug: 31668549]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.1.el7uek]
changelog:
  - can, slip: Protect tty->disc_data in write_wakeup and close with RCU (Richard Palethorpe)  [Orabug: 31516085]  {CVE-2020-14416} 
  - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout() (himanshu.madhani@cavium.com)  [Orabug: 31530589]  
  - scsi: qla2xxx: Fix NULL pointer access for fcport structure (Quinn Tran)  [Orabug: 31530589]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.2.el7uek]
changelog:
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351672]  {CVE-2019-19054} 
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/pci: Mask buggy SR-IOV VF INTx support (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio_pci: Enable memory accesses before calling pci_map_rom (Eric Auger)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - mm: bring in additional flag for fixup_user_fault to signal unlock (Dominik Dingel)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31514993]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31514993]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31514993]  
  - Revert "x86/efi: Request desired alignment via the PE/COFF headers" (Matt Fleming)  [Orabug: 31602576]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.3.el7uek]
changelog:
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: Serialize session free in qlt_free_session_done (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: v2: Change abort wait_loop from msleep to wait_event_timeout (Giridhar Malavali)  [Orabug: 26932683]  
  - scsi: qla2xxx: v2: Move ABTS code behind qpair (Quinn Tran)  [Orabug: 31517449]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31027042]  
  - block_dev: don't test bdev->bd_contains when it is not stable (NeilBrown)  [Orabug: 31554143]  
  - KVM: x86: Remove spurious semicolon (Joao Martins)  [Orabug: 31584727]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.4.el7uek]
changelog:
  - uek-rpm: Add OL6 shim conflict for new signing key (Eric Snowberg)  [Orabug: 31688239]  
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31688223]  
  - blk-mq: don't overwrite rq->mq_ctx (Jens Axboe)  [Orabug: 31457304]  
  - blk-mq: mark ctx as pending at batch in flush plug path (Ming Lei)  [Orabug: 31457304]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.1.el7uek]
changelog:
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350639]  {CVE-2020-10732} 
  - crypto: user - fix memory leak in crypto_report (Navid Emamdoost)  [Orabug: 31351640]  {CVE-2019-19062} 
  - of: unittest: fix memory leak in unittest_data_add (Navid Emamdoost)  [Orabug: 31351702]  {CVE-2019-19049} 
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31656992]  
  - net-sysfs: call dev_hold if kobject_init_and_add success (YueHaibing)  [Orabug: 31687545]  {CVE-2019-20811}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.2.el7uek]
changelog:
  - mm: create alloc_last_chance debugfs entries (Mike Kravetz)  [Orabug: 31295499]  
  - mm: perform 'last chance' reclaim efforts before allocation failure (Mike Kravetz)  [Orabug: 31295499]  
  - mm: let page allocation slowpath retry 'order' times (Mike Kravetz)  [Orabug: 31295499]  
  - fix kABI breakage from "netns: provide pure entropy for net_hash_mix()" (Dan Duval)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - netns: provide pure entropy for net_hash_mix() (Eric Dumazet)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380495]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648141]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648141]  
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666975]  
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723450]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.3.el7uek]
changelog:
  - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351221]  {CVE-2019-19535} 
  - media: hdpvr: Fix an error handling path in hdpvr_probe() (Arvind Yadav)  [Orabug: 31352053]  {CVE-2017-16644} 
  - fs/binfmt_misc.c: do not allow offset overflow (Thadeu Lima de Souza Cascardo)  [Orabug: 31588258]  
  - clear inode and truncate pages before enqueuing for async inactivation (Gautham Ananthakrishna)  [Orabug: 31744270]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.4.el7uek]
changelog:
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 30634865]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31683116]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31683116]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.1.el7uek]
changelog:
  - blktrace: Protect q->blk_trace with RCU (Jan Kara)  [Orabug: 31123576]  {CVE-2019-19768} 
  - media: technisat-usb2: break out of loop at end of buffer (Sean Young)  [Orabug: 31224554]  {CVE-2019-15505} 
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31351746]  {CVE-2019-18885} 
  - RDMA/cxgb4: Do not dma memory off of the stack (Greg KH)  [Orabug: 31351783]  {CVE-2019-17075} 
  - mwifiex: Abort at too short BSS descriptor element (Takashi Iwai)  [Orabug: 31351916]  {CVE-2019-3846} 
  - mwifiex: Fix possible buffer overflows at parsing bss descriptor (Takashi Iwai)  [Orabug: 31351916]  {CVE-2019-3846} {CVE-2019-3846} 
  - repair kABI breakage from "fs: prevent page refcount overflow in pipe_buf_get" (Dan Duval)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: prevent get_user_pages() from overflowing page refcount (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: add 'try_get_page()' helper function (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - fs: prevent page refcount overflow in pipe_buf_get (Matthew Wilcox)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: make page ref count overflow check tighter and more explicit (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31351960]  {CVE-2019-3874} 
  - sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin)  [Orabug: 31351995]  {CVE-2018-16884} 
  - sunrpc: use-after-free in svc_process_common() (Vasily Averin)  [Orabug: 31351995]  {CVE-2018-16884} 
  - af_packet: set defaule value for tmo (Mao Wenan)  [Orabug: 31439107]  {CVE-2019-20812} 
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439369]  {CVE-2020-10751} 
  - selinux: Print 'sclass' as string when unrecognized netlink message occurs (Marek Milkovic)  [Orabug: 31439369]  {CVE-2020-10751} 
  - mac80211: Do not send Layer 2 Update frame before authorization (Jouni Malinen)  [Orabug: 31473652]  {CVE-2019-5108} 
  - cfg80211/mac80211: make ieee80211_send_layer2_update a public function (Dedy Lansky)  [Orabug: 31473652]  {CVE-2019-5108} 
  - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers)  [Orabug: 31535529]  {CVE-2020-10769} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705121]  {CVE-2020-14331} {CVE-2020-14331} 
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783151]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.2.el7uek]
changelog:
  - ALSA: seq: Cancel pending autoload work at unbinding device (Takashi Iwai)  [Orabug: 31352045]  {CVE-2017-16528} 
  - USB: serial: io_ti: fix information leak in completion handler (Johan Hovold)  [Orabug: 31352084]  {CVE-2017-8924} 
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543032]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543032]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543032]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31543032]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543032]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543032]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543032]  
  - tracing: Kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543032]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.3.el7uek]
changelog:
  - ARM: amba: Fix race condition with driver_override (Geert Uytterhoeven)  [Orabug: 29671212]  {CVE-2018-9415} 
  - block: blk_init_allocated_queue() set q->fq as NULL in the fail case (xiao jin)  [Orabug: 30120513]  {CVE-2018-20856} 
  - USB: serial: omninet: fix reference leaks at open (Johan Hovold)  [Orabug: 30484761]  {CVE-2017-8925} 
  - nl80211: validate beacon head (Johannes Berg)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: Use const more consistently in for_each_element macros (Jouni Malinen)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: add and use strongly typed element iteration macros (Johannes Berg)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: add helper to find an IE that matches a byte-array (Luca Coelho)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: allow finding vendor with OUI without specifying the OUI type (Emmanuel Grumbach)  [Orabug: 30556264]  {CVE-2019-16746} 
  - dccp: Fix memleak in __feat_register_sp (YueHaibing)  [Orabug: 30732821]  {CVE-2019-20096} 
  - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (YueHaibing)  [Orabug: 30732938]  {CVE-2019-20054} 
  - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (YueHaibing)  [Orabug: 30732938]  {CVE-2019-20054} 
  - scsi: libsas: stop discovering if oob mode is disconnected (Jason Yan)  [Orabug: 30770913]  {CVE-2019-19965} 
  - kernel/sysctl.c: fix out-of-bounds access when setting file-max (Will Deacon)  [Orabug: 31350720]  {CVE-2019-14898} 
  - sysctl: handle overflow for file-max (Christian Brauner)  [Orabug: 31350720]  {CVE-2019-14898} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351572]  {CVE-2019-19073} 
  - can: gs_usb: gs_can_open(): prevent memory leak (Navid Emamdoost)  [Orabug: 31351682]  {CVE-2019-19052} 
  - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() (Takashi Iwai)  [Orabug: 31351837]  {CVE-2019-15927} 
  - media: usb: siano: Fix general protection fault in smsusb (Alan Stern)  [Orabug: 31351875]  {CVE-2019-15218} 
  - crypto: vmac - separate tfm and request context (Eric Biggers)  [Orabug: 31584410]  
  - SUNRPC: Fix a race with XPRT_CONNECTING (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Fix disconnection races (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Add a helper to wake up a sleeping rpc_task and set its status (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Reduce latency when send queue is congested (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: RPC transport queue must be low latency (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Fix a potential race in xprt_connect() (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: ensure correct error is reported by xs_tcp_setup_socket() (NeilBrown)  [Orabug: 31796770]  
  - SUNRPC: Fix races between socket connection and destroy code (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Prevent SYN+SYNACK+RST storms (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Report TCP errors to the caller (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Ensure we release the TCP socket once it has been closed (Trond Myklebust)  [Orabug: 31796770]  
  - net-gro: fix use-after-free read in napi_gro_frags() (Eric Dumazet)  [Orabug: 31856195]  {CVE-2020-10720} 
  - PCI: Probe bridge window attributes once at enumeration-time (Bjorn Helgaas)  [Orabug: 31867577]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.4.el7uek]
changelog:
  - kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) (Jann Horn)  [Orabug: 29434845]  {CVE-2019-6974} 
  - KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) (Peter Shier)  [Orabug: 29434898]  {CVE-2019-7221} 
  - KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) (Paolo Bonzini)  [Orabug: 29434924]  {CVE-2019-7222} 
  - net: arc_emac: fix koops caused by sk_buff free (Alexander Kochetkov)  [Orabug: 30254239]  {CVE-2016-10906} 
  - GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob Peterson)  [Orabug: 30254251]  {CVE-2016-10905} 
  - GFS2: Fix rgrp end rounding problem for bsize < page size (Bob Peterson)  [Orabug: 30254251]  {CVE-2016-10905} 
  - x86/apic/msi: update address_hi on set msi affinity (Joe Jin)  [Orabug: 31477035]  
  - x86/apic/msi: check and sync apic IRR on msi_set_affinity (Joe Jin)  [Orabug: 31477035]  
  - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (Sabrina Dubroca)  [Orabug: 31872821]  {CVE-2020-1749} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872910]  {CVE-2020-25212} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884169]  {CVE-2020-25284} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884239]  {CVE-2020-25285} 
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895331]  {CVE-2020-14314}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.1.el7uek]
changelog:
  - oracleasm: Retrieve d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31832592]  
  - KVM: VMX: fixes for vmentry_l1d_flush module parameter (Paolo Bonzini)  [Orabug: 31962487]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.2.el7uek]
changelog:
  - usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neukum)  [Orabug: 31351088]  {CVE-2019-19530} 
  - net/rds: migration of a delayed initialized port present in down state (Praveen Kumar Kannoju)  [Orabug: 31729995]  
  - net: add high_order_alloc_disable sysctl (Eric Dumazet)  [Orabug: 31835223]  
  - mm, page_alloc: double zone's batchsize (Aaron Lu)  [Orabug: 31835223]  
  - mm/free_pcppages_bulk: prefetch buddy while not holding lock (Aruna Ramakrishna)  [Orabug: 31835223]  
  - mm/free_pcppages_bulk: do not hold lock when picking pages to free (Aruna Ramakrishna)  [Orabug: 31835223]  
  - mm, page_alloc: remove unnecessary variable from free_pcppages_bulk (Mel Gorman)  [Orabug: 31835223]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872865]  {CVE-2020-25211} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880144]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31974559]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.3.el7uek]
changelog:
  - qed: Reduce verbosity of unimplemented MFW messages (Mintz, Yuval)  [Orabug: 31959299]  
  - kexec: validate pe files against the system_blacklist_keyring (Eric Snowberg)  [Orabug: 31961119]  {CVE-2020-26541}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.4.el7uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS (himanshu.madhani@cavium.com)  [Orabug: 32020790]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.4.1.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040806]  {CVE-2020-8694} {CVE-2020-8695}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.1.el7uek]
changelog:
  - Revert "x86/efi: Initialize and display UEFI secure boot state a bit later during init" (Eric Snowberg)  [Orabug: 31887248]  
  - xfs: fix xfs_inode use after free (Wengang Wang)  [Orabug: 31932452]  
  - SUNRPC: ECONNREFUSED should cause a rebind. (NeilBrown)  [Orabug: 32070175]  
  - netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull)  [Orabug: 30658635]  {CVE-2016-7917} 
  - xc2028: Fix use-after-free bug properly (Takashi Iwai)  [Orabug: 30658659]  {CVE-2016-7913} 
  - [media] xc2028: avoid use after free (Mauro Carvalho Chehab)  [Orabug: 30658659]  {CVE-2016-7913} 
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 30821411]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989190]  {CVE-2020-25643} 
  - tracing: Reverse the order of trace_types_lock and event_mutex (Alan Maguire)  [Orabug: 32002706]  
  - ocfs2/dlm: move lock to the tail of grant queue while doing in-place convert (xuejiufei)  [Orabug: 32071234]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.2.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32137965]  {CVE-2020-8694} {CVE-2020-8695}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.3.el7uek]
changelog:
  - drm/vmwgfx: Make sure backup_handle is always valid (Sinclair Yeh)  [Orabug: 31352076]  {CVE-2017-9605} 
  - random32: move the pseudo-random 32-bit definitions to prandom.h (Linus Torvalds)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random32: remove net_rand_state from the latent entropy gcc plugin (Linus Torvalds)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random: fix circular include dependency on arm64 after addition of percpu.h (Willy Tarreau)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698086]  {CVE-2020-16166} 
  - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context (WANG Chao)  [Orabug: 32021856]  
  - kvm: x86: do not leak guest xcr0 into host interrupt handlers (David Matlack)  [Orabug: 32021856]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.4.el7uek]
changelog:
  - block: Move part of bdi_destory() to del_gendisk() as bdi_unregister(). (Jan Kara)  [Orabug: 32124131]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32138039]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.6.el7uek]
changelog:
  - qla2xxx: disable target reset during link reset and update version (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix early srb free on abort (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (Masanari Iida)  [Orabug: 32095664]  
  - scsi: qla2xxx: Enable Async TMF processing (himanshu.madhani@cavium.com)  [Orabug: 32095664]  
  - qla2xxx: tweak debug message for task management path (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (Arun Easi)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix fabric scan hang (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Do command completion on abort timeout (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix abort timeout race condition. (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix race between switch cmd completion and timeout (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx:v2: Fix double scsi_done for abort path (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2 Fix a race condition between aborting and completing a SCSI command (Bart Van Assche)  [Orabug: 32095664]  
  - scsi: qla2xxx: Really fix qla2xxx_eh_abort() (Bart Van Assche)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2 Reject EH_{abort|device_reset|target_request} (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2: Fix race conditions in the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 32095664]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.1.el7uek]
changelog:
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722767]  
  - KVM: x86: Manually flush collapsible SPTEs only when toggling flags (Sean Christopherson)  [Orabug: 31722767]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722767]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722767]  
  - xfs: catch inode allocation state mismatch corruption (Gautham Ananthakrishna)  [Orabug: 32071488]  
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122731]  {CVE-2020-25668} 
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136900]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.2.el7uek]
changelog:
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 31780626]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176264]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176264]  {CVE-2020-28915} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177993]  
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187749]  {CVE-2020-28974} 
  - block: Fix use-after-free in blkdev_get() (Jason Yan)  [Orabug: 32194609]  {CVE-2020-15436} 
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227971]  {CVE-2020-25705}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.3.el7uek]
changelog:
  - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat)  [Orabug: 30781859]  {CVE-2019-14895} {CVE-2019-14895} 
  - ext4: fix ext4_empty_dir() for directories with holes (Jan Kara)  [Orabug: 31265320]  {CVE-2019-19037} {CVE-2019-19037} 
  - netlabel: cope with NULL catmap (Paolo Abeni)  [Orabug: 31350493]  {CVE-2020-10711} 
  - scsi: mptfusion: Fix double fetch bug in ioctl (Dan Carpenter)  [Orabug: 31350941]  {CVE-2020-12652} 
  - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() (Dan Carpenter)  [Orabug: 31350941]  {CVE-2020-12652} 
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350967]  {CVE-2020-12464} 
  - drivers: usb: core: Minimize irq disabling in usb_sg_cancel() (David Mosberger)  [Orabug: 31350967]  {CVE-2020-12464} 
  - drivers: usb: core: Don't disable irqs in usb_sg_wait() during URB submit. (David Mosberger)  [Orabug: 31350967]  {CVE-2020-12464} 
  - ext4: work around deleting a file with i_nlink == 0 safely (Theodore Ts'o)  [Orabug: 31351014]  {CVE-2019-19447} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 31984319]  
  - xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage (Josh Abraham)  [Orabug: 31984319]  
  - ext4: fix fencepost in s_first_meta_bg validation (Theodore Ts'o)  [Orabug: 32197511]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32202000]  
  - sched/fair: Don't free p->numa_faults with concurrent readers (Jann Horn)  [Orabug: 32212524]  {CVE-2019-20934} 
  - netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Vasily Averin)  [Orabug: 32222844]  {CVE-2020-14305} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233360]  {CVE-2020-14351} 
  - ext4: fix calculation of meta_bg descriptor backups (Andy Leiserson)  [Orabug: 32245133]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.4.el7uek]
changelog:
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32223358]  {CVE-2020-29569}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.47.2.el7uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350932]  {CVE-2020-12653} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 31435700]  
  - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (Takashi Iwai)  [Orabug: 32240688]  {CVE-2020-27786} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251907]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266682]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266682]  {CVE-2020-29660} 
  - tty: core: Use correct spinlock flavor in tiocspgrp() (Peter Hurley)  [Orabug: 32266682]  {CVE-2020-29660} 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349208]  {CVE-2020-36158}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.1.el7uek]
changelog:
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350996]  
  - rds: Add code to debug rds_tcp loopback hang (Rao Shoaib)  [Orabug: 32382656]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.48.3.1.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492113]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.4.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32520758]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.5.el7uek]
changelog:
  - kernel/acct.c: fix the acct->needcheck check in check_free_space() (Oleg Nesterov)  [Orabug: 31587485]  
  - HID: hid-input: clear unmapped usages (Dmitry Torokhov)  [Orabug: 32464790]  {CVE-2020-0431} 
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498826]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.6.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603382]  
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603382]  
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.49.2.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32640641]  
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32640641]  
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.49.3.el7uek]
changelog:
  - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32485156]  
  - audit: fix error handling in audit_data_to_entry() (Paul Moore)  [Orabug: 32608451]  {CVE-2020-0444}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.50.1.el7uek]
changelog:
  - floppy: fix lock_fdc() signal handling (Jiri Kosina)  [Orabug: 32624116]  {CVE-2021-20261} 
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651478]  {CVE-2021-28038} 
  - n_tty: Fix stall at n_tty_receive_char_special(). (Tetsuo Handa)  [Orabug: 32656942]  {CVE-2021-20219} 
  - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (Eddy Wu)  [Orabug: 32695783]  {CVE-2020-35508} 
  - Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen)  [Orabug: 32696741]  
  - SecureBoot Digicert 2021 certificates update (Brian Maly)  [Orabug: 32734505]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.50.2.el7uek]
changelog:
  - btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669454]  {CVE-2021-28964} 
  - xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697855]  {CVE-2021-28688} 
  - netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709125]  {CVE-2021-29650} 
  - netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal)  [Orabug: 32709125]  {CVE-2021-29650} 
  - do_epoll_ctl(): clean the failure exits up a bit (Al Viro)  [Orabug: 32759496]  {CVE-2020-0466} 
  - epoll: Keep a reference on files added to the check list (Marc Zyngier)  [Orabug: 32759496]  {CVE-2020-0466} 
  - HID: core: Sanitize event code and type when mapping input (Marc Zyngier)  [Orabug: 32759553]  {CVE-2020-0465}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.51.2.el7uek]
changelog:
  - IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32219842]  
  - mm: madv_doexec_flag sysctl (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: introduce MADV_DOEXEC (Anthony Yznaga)  [Orabug: 32387889]  
  - exec, elf: require opt-in for accepting preserved mem (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: introduce VM_EXEC_KEEP (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: fail exec if stack expansion will overlap another vma (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: do not assume only the stack vma exists in setup_arg_pages() (Anthony Yznaga)  [Orabug: 32387889]  
  - ELF: when loading PIE binaries check for overlap with existing mappings (Anthony Yznaga)  [Orabug: 32387889]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.1.el7uek]
changelog:
  - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860494]  {CVE-2021-31916}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.2.el7uek]
changelog:
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021289]  {CVE-2020-12352} 
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926868]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.3.el7uek]
changelog:
  - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)  [Orabug: 32974492]  
  - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)  [Orabug: 32974492]  
  - secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly)  [Orabug: 32978042]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.4.el7uek]
changelog:
  - IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge)  [Orabug: 32816368]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820278]  
  - Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912103]  {CVE-2021-33034} 
  - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (Peilin Ye)  [Orabug: 33013890]  {CVE-2020-36386} 
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v5 (Quinn Tran)  [Orabug: 33015884]  
  - scsi: qla2xxx: v2: Fix login retry count (Quinn Tran)  [Orabug: 29411891] [Orabug: 33015884]  
  - scsi: qla2xxx: Properly extract ADISC error codes (Quinn Tran)  [Orabug: 33015884]  
  - scsi: qla2xxx: Replace GPDB with async ADISC command (Quinn Tran)  [Orabug: 33015884]  
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v4 (Quinn Tran)  [Orabug: 33015884]  
  - qla2xxx: fix relogin stalled. (Quinn Tran)  [Orabug: 27700529] [Orabug: 33015884]  
  - net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry)  [Orabug: 33017263]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.5.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135634]  {CVE-2021-33909}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.5.1.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33116628]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33116628]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.1.el7uek]
changelog:
  - xfs: fix lockup issue (Junxiao Bi)  [Orabug: 32836026]  
  - bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912036]  {CVE-2021-32399} {CVE-2021-32399}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.3.el7uek]
changelog:
  - net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk)  [Orabug: 31895301]  {CVE-2020-14304} 
  - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (Erez Alfasi)  [Orabug: 31895301]  {CVE-2020-14304} 
  - netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)  [Orabug: 33093028]  {CVE-2021-22555} 
  - xen/blkback: Make sure all vbd fields are initialized (Boris Ostrovsky)  [Orabug: 33131620]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33143006]  {CVE-2021-33909}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.1.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33195559]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33195559]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.2.el7uek]
changelog:
  - iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse)  [Orabug: 33215470]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.1.el7uek]
changelog:
  - can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)  [Orabug: 33030701]  {CVE-2021-34693} 
  - CIFS: 511c54a2f691 adds a check for session expiry (Aruna Ramakrishna)  [Orabug: 33063858]  
  - CIFS: Reconnect expired SMB sessions (Pavel Shilovsky)  [Orabug: 33063858]  
  - media: v4l: event: Add subscription to list before calling "add" operation (Sakari Ailus)  [Orabug: 33113344]  {CVE-2019-9458} 
  - media: v4l: event: Prevent freeing event subscriptions while accessed (Sakari Ailus)  [Orabug: 33113344]  {CVE-2019-9458} 
  - chardev: Avoid potential use-after-free in 'chrdev_open()' (Will Deacon)  [Orabug: 33113412]  {CVE-2020-0305} 
  - kobject: Export kobject_get_unless_zero() (Jan Kara)  [Orabug: 33113412]  {CVE-2020-0305} 
  - cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE (Sergey Matyukevich)  [Orabug: 33114443]  {CVE-2020-27068}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.2.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33196002]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33196002]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.3.el7uek]
changelog:
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 32060376]  
  - config: remove CONFIG_VGACON_SOFT_SCROLLBACK from kernel configs (Brian Maly)  [Orabug: 33047770]  {CVE-2020-28097} {CVE-2020-28097} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 33047770]  {CVE-2020-28097} 
  - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114649]  {CVE-2021-3609} 
  - iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse)  [Orabug: 33199774]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.4.el7uek]
changelog:
  - USB: mon: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33113260]  {CVE-2019-9456} 
  - usb: usbmon: Read text within supplied buffer size (Pete Zaitcev)  [Orabug: 33113260]  {CVE-2019-9456}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.5.el7uek]
changelog:
  - l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: ensure sessions are freed after their PPPOL2TP socket (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: Refactor the codes with existing macros instead of literal number (Gao Feng)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: fix duplicate session creation (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: ensure session can't get removed during pppol2tp_session_ioctl() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: fix race in l2tp_recv_common() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - net: l2tp: Make l2tp_ip6 namespace aware (Shmulik Ladkani)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: Correctly return -EBADF from pppol2tp_getname. (phil.turnbull@oracle.com)  [Orabug: 33113975]  {CVE-2020-0429}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.6.1.el7uek]
changelog:
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 33369433]  {CVE-2020-12114} {CVE-2020-12114} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 33369414]  {CVE-2019-19448} {CVE-2019-19448} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 33369390]  {CVE-2019-17133} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 33369374]  {CVE-2019-3900} 
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: check defrag PN against current frame (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: add fragment cache to sta_info (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-26147} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33369303]  {CVE-2021-3655} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33369276]  {CVE-2021-38160} 
  - net_sched: cls_route: remove the right filter from hashtable (Cong Wang)  [Orabug: 33369231]  {CVE-2021-3715} 
  - HID: make arrays usage and value to be the same (Will McVicker)  [Orabug: 33369121]  {CVE-2021-0512} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33369043]  {CVE-2021-40490}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.1.el7uek]
changelog:
  - cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE (Srinivas Dasari)  [Orabug: 31351335]  {CVE-2017-11089} 
  - ocfs2: issue zeroout to EOF blocks (Junxiao Bi)  [Orabug: 32974989]  
  - ocfs2: fix zero out valid data (Junxiao Bi)  [Orabug: 32974989]  
  - ocfs2: fix data corruption by fallocate (Junxiao Bi)  [Orabug: 32974989]  
  - l2tp: fix l2tp_eth module loading (Guillaume Nault)  [Orabug: 33114384]  {CVE-2020-27067} 
  - af_key: pfkey_dump needs parameter validation (Mark Salyzyn)  [Orabug: 33114539]  {CVE-2021-0605} 
  - af_key: Add lock to key dump (Yuejie Shi)  [Orabug: 33114539]  {CVE-2021-0605} 
  - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)  [Orabug: 33114989]  {CVE-2021-3612} 
  - Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)  [Orabug: 33114989]  {CVE-2021-3612} 
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33198437]  {CVE-2021-3679} 
  - dtrace: Corrects - warning: assignment makes pointer from integer without a cast (John Donnelly)  [Orabug: 33314947]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.2.el7uek]
changelog:
  - x86/mm: Fix compiler warning in pageattr.c (John Donnelly)  [Orabug: 33332673]  
  - security: Make inode argument of inode_getsecid non-const (Andreas Gruenbacher)  [Orabug: 33337179]  
  - security: Make inode argument of inode_getsecurity non-const (Andreas Gruenbacher)  [Orabug: 33337179]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.3.el7uek]
changelog:
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 31350976]  {CVE-2020-12114} {CVE-2020-12114} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 31351025]  {CVE-2019-19448} {CVE-2019-19448} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 31351800]  {CVE-2019-17133} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 31351950]  {CVE-2019-3900} 
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: check defrag PN against current frame (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: add fragment cache to sta_info (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-26147} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33198409]  {CVE-2021-3655} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33209274]  {CVE-2021-38160} 
  - net_sched: cls_route: remove the right filter from hashtable (Cong Wang)  [Orabug: 33326887]  {CVE-2021-3715} 
  - HID: make arrays usage and value to be the same (Will McVicker)  [Orabug: 33326939]  {CVE-2021-0512} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33327200]  {CVE-2021-40490}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.56.1.el7uek]
changelog:
  - ocfs2: subsystem.su_mutex is required while accessing the item->ci_parent (alex chen)  [Orabug: 29184589]  {CVE-2017-18216} 
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)   {CVE-2020-12771} 
  - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (Linus Torvalds)  [Orabug: 31351271]  {CVE-2019-10220} 
  - Make filldir[64]() verify the directory entry filename is valid (Linus Torvalds)  [Orabug: 31351271]  {CVE-2019-10220} 
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351559]  {CVE-2019-19074} 
  - scsi: bfa: release allocated memory in case of error (Navid Emamdoost)  [Orabug: 31351615]  {CVE-2019-19066} 
  - rtlwifi: prevent memory leak in rtl_usb_probe (Navid Emamdoost)  [Orabug: 31351626]  {CVE-2019-19063} 
  - perf/core: Fix perf_event_open() vs. execve() race (Peter Zijlstra)  [Orabug: 31351766]  {CVE-2019-3901} 
  - l2tp: pass tunnel pointer to ->session_create() (Guillaume Nault)  [Orabug: 31352004]  {CVE-2018-9517} 
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33039295]  
  - Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw)  [Orabug: 33359684]  
  - ksplice: Fix build warning with ksplice_sysctls (John Donnelly)  [Orabug: 33365274]  
  - kvm:vmx Fix build error in kvm/vmx.c (John Donnelly)  [Orabug: 33375485]  
  - vmscan: Fix build error in mm/vmscan.c (John Donnelly)  [Orabug: 33375931]  
  - constify iov_iter_count() and iter_is_iovec() (Al Viro)  [Orabug: 33381741]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.56.2.el7uek]
changelog:
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864610]  {CVE-2019-19813} 
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864610]  {CVE-2019-19813} 
  - net: create skb_gso_validate_mac_len() (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026} 
  - bnx2x: disable GSO where gso_size is too big for hardware (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026} 
  - Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33014035]  {CVE-2021-3564} {CVE-2021-3564} 
  - l2tp: Avoid schedule while atomic in exit_net (Ridge Kennedy)  [Orabug: 33360013]  
  - l2tp: remove skb_dst_set() from l2tp_xmit_skb() (Xin Long)  [Orabug: 33360013]  
  - dtrace: remove unused variables (John Donnelly)  [Orabug: 33387203]  
  - scsi: treat lun as 64-bit in scsi_report_lun_scan() error message (Henry Willard)  [Orabug: 33387203]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.57.1.el7uek]
changelog:
  - target; fix print statement warning (John Donnelly)  [Orabug: 33495661]  
  - enic;: fix warning on module_param disable_vlan0, (John Donnelly)  [Orabug: 33495661]  
  - bnx2fc: correct BNX2FC_TM_TIMEOUT to be 60 sec (John Donnelly)  [Orabug: 33495661]  
  - target: Fix linux-4.1.y specific compile warning (Nicholas Bellinger)  [Orabug: 33495661]  
  - net/mlx4: Fixing warning in mlx4_get_module_info() (John Donnelly)  [Orabug: 33495661]  
  - rds: Avoid compiler warning in ib_send.c: opcode (John Donnelly)  [Orabug: 33495661]  
  - RDMA/mad: correct build warning (John Donnelly)  [Orabug: 33495661]  
  - dtrace: Fix warning in dtrace_sync() (Tomas Jedlicka)  [Orabug: 33495661]  
  - virtio: Silence uninitialized variable warning (Dan Carpenter)  [Orabug: 33495661]  
  - scsi: correct uninitialized variable (John Donnelly)  [Orabug: 33495661]  
  - media: smsusb: better handle optional alignment (Mauro Carvalho Chehab)  [Orabug: 33495661]  
  - media: usb: siano: Fix false-positive "uninitialized variable" warning (Alan Stern)  [Orabug: 33495661]  
  - toshiba_acpi: correct build warning (John Donnelly)  [Orabug: 33495661]  
  - RDS/IB: corrects build warning (John Donnelly)  [Orabug: 33495661]  
  - x86/mce: correct return warning (John Donnelly)  [Orabug: 33495661]  
  - x86/asm/msr: Make wrmsrl_safe() a function (Andy Lutomirski)  [Orabug: 33495661]  
  - x86/mitigations: fix warnings in taa_select_mitigation() (John Donnelly)  [Orabug: 33495661]  
  - mm: correct build warning with pgprot (John Donnelly)  [Orabug: 33495661]  
  - Thermal: remove unused variable (John Donnelly)  [Orabug: 33495661]  
  - ixgbe: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - i40e: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - mlx4: remove unused variables and functions, (John Donnelly)  [Orabug: 33495661]  
  - nvme: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - ocfs2: remove unused function: ocfs2_prepare_inode_for_refcount() (John Donnelly)  [Orabug: 33495661]  
  - ipv6: remove unused variable: payload_len (John Donnelly)  [Orabug: 33495661]  
  - Revert "efi: Fix out-of-bounds read in variable_matches()" (John Donnelly)  [Orabug: 33495661]  
  - dtrace: remove unused variable "iph" (John Donnelly)  [Orabug: 33495661]  
  - ext4: remove unused function ext4_init_inode_bitmap() (John Donnelly)  [Orabug: 33495661]  
  - cpuidle: remove unused function: call_cpuidle() (John Donnelly)  [Orabug: 33495661]  
  - cifs: remove unused label (John Donnelly)  [Orabug: 33495661]  
  - block: remove unused out: label (John Donnelly)  [Orabug: 33495661]  
  - Bluetooth: hci_uart: check for missing tty operations (Vladis Dronov)  [Orabug: 30244627]  {CVE-2019-10207} {CVE-2019-10207} 
  - Bluetooth: hci_uart: Add basic support for Intel Lightning Peak devices (Loic Poulain)  [Orabug: 30244627]  {CVE-2019-10207} 
  - Bluetooth: hci_uart: Add new line discipline enhancements (Ilya Faenson)  [Orabug: 30244627]  {CVE-2019-10207} 
  - Bluetooth: hci_uart: Support operational speed during setup (Frederic Danis)  [Orabug: 30244627]  {CVE-2019-10207}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-25.el7uek]
changelog:
  - NFSoRDMA: for local permissions, pull lkey value from the correct ib_mr (Todd Vierling)  [Orabug: 22202841]  
  - Revert "nfs: take extra reference to fl->fl_file when running a LOCKU operation" (Dan Duval)  [Orabug: 22186705]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-26.el7uek]
changelog:
  - dtrace: ensure return value of access_process_vm() is > 0 (Todd Vierling)  [Orabug: 22295336]  
  - ocfs2: fix umask ignored issue (Junxiao Bi)   
  - ksplice: correctly clear garbage on signal handling. (Jamie Iles)  [Orabug: 22194459]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-28.el7uek]
changelog:
  - ixgbe: make a workaround to tx hang issue under dom (Ethan Zhao)  [Orabug: 22171500]  
  - mm-hugetlb-resv-map-memory-leak-for-placeholder-entries-v2 (Mike Kravetz)  [Orabug: 22302415]  
  - mm/hugetlb.c: fix resv map memory leak for placeholder entries (Mike Kravetz)  [Orabug: 22302415]  
  - Prevent syncing frozen file system (Tariq Saeed)  [Orabug: 22332381]  
  - ocfs2: fix SGID not inherited issue (Junxiao Bi)   
  - kbuild: Set objects.builtin dependency to bzImage for CONFIG_CTF (Jerry Snitselaar)  [Orabug: 17510915] [Orabug: 22329011]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-29.el7uek]
changelog:
  - uek-rpm: module signing key verification on sparc (Allen Pais)  [Orabug: 21900415]  
  - scsi: Fix a bdi reregistration race (Bart Van Assche)  [Orabug: 22250360]  
  - i40e: Fix for recursive RTNL lock during PROMISC change (Anjali Singhai)  [Orabug: 22328907]  
  - KABI: padding optimization (Manjunath Govindashetty)   
  - uek-rpm: rebuild module kabi list (Guru Anbalagane)   
  - ib_core: Add udata argument to alloc_shpd() (Mukesh Kacker)  [Orabug: 21884873]  
  - Revert "netlink: Fix autobind race condition that leads to zero port ID" (Dan Duval)  [Orabug: 22284865]  
  - Revert "netlink: Replace rhash_portid with bound" (Dan Duval)  [Orabug: 22284865]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-30.el7uek]
changelog:
  - conditionalize Secure Boot initialization on x86 platform (Dan Duval)  [Orabug: 22353360]  
  - x86/efi: Set securelevel when loaded without efi stub (Dan Duval)  [Orabug: 22353360]  
  - KVM: svm: unconditionally intercept #DB (Paolo Bonzini)  [Orabug: 22333633]  {CVE-2015-8104} 
  - KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup)  [Orabug: 22333632]  {CVE-2015-5307} {CVE-2015-5307}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-32.el7uek]
changelog:
  - KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells)  [Orabug: 22373388]  {CVE-2015-7872} 
  - KEYS: Fix race between key destruction and finding a keyring by name (David Howells)  [Orabug: 22373388]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-32.1.1.el7uek]
changelog:
  - ocfs2: return non-zero st_blocks for inline data (John Haxby)  [Orabug: 22218243]  
  - xen/events/fifo: Consume unprocessed events when a CPU dies (Ross Lagerwall)  [Orabug: 22498877]  
  - Revert "xen/fb: allow xenfb initialization for hvm guests" (Konrad Rzeszutek Wilk)   
  - xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set. (Konrad Rzeszutek Wilk)   
  - xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled. (Konrad Rzeszutek Wilk)   
  - xen/pciback: Do not install an IRQ handler for MSI interrupts. (Konrad Rzeszutek Wilk)   
  - xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled (Konrad Rzeszutek Wilk)   
  - xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled (Konrad Rzeszutek Wilk)   
  - xen/pciback: Save xen_pci_op commands before processing it (Konrad Rzeszutek Wilk)   
  - xen-scsiback: safely copy requests (David Vrabel)   
  - xen-blkback: read from indirect descriptors only once (Roger Pau Monné)   
  - xen-blkback: only read request operation from shared ring once (Roger Pau Monné)   
  - xen-netback: use RING_COPY_REQUEST() throughout (David Vrabel)   
  - xen-netback: don't use last request to determine minimum Tx credit (David Vrabel)   
  - xen: Add RING_COPY_REQUEST() (David Vrabel)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-32.1.3.el7uek]
changelog:
  - IPoIB: Protect tx_outstanding from parallel access (Wengang Wang)  [Orabug: 22217400]  
  - xprtrdma: xprt_rdma_free() must not release backchannel reqs (Chuck Lever)  [Orabug: 22365704]  
  - Revert "i40e: Set defport behavior for the Main VSI when in promiscuous mode" (Brian Maly)  [Orabug: 22519254]  
  - block: bump BLK_DEF_MAX_SECTORS to 2560 (Jeff Moyer)  [Orabug: 22611290]  
  - Revert "block: remove artifical max_hw_sectors cap" (Jeff Moyer)  [Orabug: 22611290]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-32.2.2.el7uek]
changelog:
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 22997978]  {CVE-2016-3157}
  - fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (Mike Kravetz)  [Orabug: 22667863]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-23.el7uek]
changelog:
  - mm: do not ignore mapping_gfp_mask in page cache allocation paths (Michal Hocko)  [Orabug: 22066703]  
  - PCI: Set SR-IOV NumVFs to zero after enumeration (Bjorn Helgaas)  [Orabug: 21547430]  
  - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang)  [Orabug: 22154074]  {CVE-2015-5156} 
  - blk-mq: avoid excessive boot delays with large lun counts (Jeff Moyer)  [Orabug: 21879600]  
  - RDS: establish connection for legitimate remote RDMA message (Santosh Shilimkar)  [Orabug: 22139696]  
  - rds: remove the _reuse_ rds ib pool statistics (Wengang Wang)  [Orabug: 22124214]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22190837]  
  - KABI PADDING FOR ORACLE SPECIFIC FUTURE EXTENSIONS (Manjunath Govindashetty)   
  - uek-rpm: configs: Sparc64: enable RDS modules (Allen Pais)  [Orabug: 22194248]  
  -     SPARC64: UEK4 LDOMS DOMAIN SERVICES UPDATE 1 (Aaron Young)  [Orabug: 22185080]  
  - i40e: Look up MAC address in Open Firmware or IDPROM (Sowmini Varadhan)   
  - RDS: Fix out-of-order RDS_CMSG_RDMA_SEND_STATUS (Wei Lin Guay)  [Orabug: 22126982]  
  - uek-rpm: ol7: update linux-firmware dependency to 20140911-0.1.git365e80c.0.4 (Dan Duval)  [Orabug: 22146380]  
  - uek-rpm: configs: disable PS2_VMMOUSE to avoid vmware platform breakage (Santosh Shilimkar)  [Orabug: 22166599]  
  - uek-rpm: configs: ol7: don't set EFI_VARS_PSTORE_DEFAULT_DISABLE (Santosh Shilimkar)  [Orabug: 21806900]  
  - Disable VLAN 0 tagging for none VLAN traffic (Brian Maly)  [Orabug: 22074114]  
  - Integrate Uvnic functionality into uek-4.1 Revision 8008 (Pradeep Gopanapalli)   
  - 1) S_IRWXU causing kernel soft crash changing to 0644 WARNING: CPU: 0 PID: 20907 at fs/sysfs/group.c:61 create_files+0x171/0x180() Oct 12 21:43:14 ovn87-180 kernel: [252606.588541] Attribute vhba_default_scsi_timeout: Invalid permissions 0700 [Rev 8008] (Pradeep Gopanapalli)   
  - 1) Support vnic for EDR based platform(uVnic) 2) Supported Types now Type 0 - XSMP_XCM_OVN - Xsigo VP780/OSDN standalone Chassis, (add pvi) Type 1 - XSMP_XCM_NOUPLINK - EDR Without uplink (add public-network) Type 2 - XSMP_XCM_UPLINK -EDR with uplink (add public-network <with -if> 3) Intelligence in driver to support all the modes 4) Added Code for printing Multicast LID [Revision 8008] 5) removed style errors (Pradeep Gopanapalli)   
  - sparc64, vdso: update the CLOCK_MONOTONIC_COARSE clock (Nick Alcock)  [Orabug: 22137842]  
  - net/rds: start rdma listening after ib/iw initialization is done (Qing Huang)  [Orabug: 21684447]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-24.el7uek]
changelog:
  - uek-rpm: builds: Enable kabi check (Manjunath Govindashetty)  [Orabug: 21882206]  
  - uek-rpm: builds: generate module kabi files (Guru Anbalagane)  [Orabug: 17437969]  
  - uek-rpm: builds: add kabi whitelist debug version (Santosh Shilimkar)   
  - uek-rpm: builds: add kabi name tags (Guru Anbalagane)  [Orabug: 17437969]  
  - uek-rpm: builds: Add kabi whitelist (Guru Anbalagane)  [Orabug: 17437969]  
  - mm-hugetlbfs-fix-bugs-in-fallocate-hole-punch-of-areas-with-holes-v3 (Mike Kravetz)  [Orabug: 22220400]  
  - mm/hugetlbfs: fix bugs in fallocate hole punch of areas with holes (Mike Kravetz)  [Orabug: 22220400]  
  - btrfs: Print Warning only if ENOSPC_DEBUG is enabled (Ashish Samant)  [Orabug: 21626666]  
  - rtnetlink: RTEXT_FILTER_SKIP_STATS support to avoid dumping inet/inet6 stats (Sowmini Varadhan)  [Orabug: 21857538]  
  - pci: Limit VPD length for megaraid_sas adapter (Babu Moger)  [Orabug: 22104511]  
  - uek-rpm: configs: change the x86_64 default governor to ondemand (Todd Vierling)  [Orabug: 21910845]  
  - uek-rpm: configs: sync up the EFIVAR_FS between ol6 and ol7 (Santosh Shilimkar)  [Orabug: 21806900]  
  - KABI Padding to allow future extensions (Manjunath Govindashetty)  [Orabug: 22227652]  
  - uek-rpm: use the latest 0.5 version of linux-firmware (Santosh Shilimkar)  [Orabug: 22227047]  
  - dtrace: fire proc:::signal-send for queued signals too (Nick Alcock)  [Orabug: 22027302]  
  - dtrace: correct signal-handle probe semantics (Kris Van Hees)  [Orabug: 21974641]  
  - dtrace: remove trailing space in psargs (Kris Van Hees)  [Orabug: 21974606]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-33.el7uek]
changelog:
  - xen-netback: correctly check failed allocation (Insu Yun)   
  - xen/blkback: free requests on disconnection (Roger Pau Monne)   
  - x86/xen/p2m: hint at the last populated P2M entry (David Vrabel)   
  - x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map (Malcolm Crossley)   
  - x86/xen: Support kexec/kdump in HVM guests by doing a soft reset (Vitaly Kuznetsov)   
  - xen/x86: Don't try to write syscall-related MSRs for PV guests (Boris Ostrovsky)   
  - xen: use correct type for HYPERVISOR_memory_op() (Juergen Gross)   
  - xen/xenbus: Rename the variable xen_store_mfn to xen_store_gfn (Julien Grall)   
  - xen/privcmd: Further s/MFN/GFN/ clean-up (Julien Grall)   
  - hvc/xen: Further s/MFN/GFN clean-up (Julien Grall)   
  - video/xen-fbfront: Further s/MFN/GFN clean-up (Julien Grall)   
  - xen/tmem: Use xen_page_to_gfn rather than pfn_to_gfn (Julien Grall)   
  - xen: Use correctly the Xen memory terminologies (Julien Grall)   
  - arm/xen: implement correctly pfn_to_mfn (Julien Grall)   
  - xen: Make clear that swiotlb and biomerge are dealing with DMA address (Julien Grall)   
  - xen: switch extra memory accounting to use pfns (Juergen Gross)   
  - xen: limit memory to architectural maximum (Juergen Gross)   
  - xen: avoid another early crash of memory limited dom0 (Juergen Gross)   
  - xen: avoid early crash of memory limited dom0 (Juergen Gross)   
  - arm/xen: Remove helpers which are PV specific (Julien Grall)   
  - xen/x86: Don't try to set PCE bit in CR4 (Boris Ostrovsky)   
  - xen/PMU: PMU emulation code (Boris Ostrovsky)   
  - xen/PMU: Intercept PMU-related MSR and APIC accesses (Boris Ostrovsky)   
  - xen/PMU: Describe vendor-specific PMU registers (Boris Ostrovsky)   
  - xen/PMU: Initialization code for Xen PMU (Boris Ostrovsky)   
  - xen/PMU: Sysfs interface for setting Xen PMU mode (Boris Ostrovsky)   
  - xen: xensyms support (Boris Ostrovsky)   
  - xen: remove no longer needed p2m.h (Juergen Gross)   
  - xen: allow more than 512 GB of RAM for 64 bit pv-domains (Juergen Gross)   
  - xen: move p2m list if conflicting with e820 map (Juergen Gross)   
  - xen: add explicit memblock_reserve() calls for special pages (Juergen Gross)   
  - mm: provide early_memremap_ro to establish read-only mapping (Juergen Gross)   
  - xen: check for initrd conflicting with e820 map (Juergen Gross)   
  - xen: check pre-allocated page tables for conflict with memory map (Juergen Gross)   
  - xen: check for kernel memory conflicting with memory layout (Juergen Gross)   
  - xen: find unused contiguous memory area (Juergen Gross)   
  - xen: check memory area against e820 map (Juergen Gross)   
  - xen: split counting of extra memory pages from remapping (Juergen Gross)   
  - xen: move static e820 map to global scope (Juergen Gross)   
  - xen: eliminate scalability issues from initial mapping setup (Juergen Gross)   
  - xen: don't build mfn tree if tools don't need it (Juergen Gross)   
  - xen: save linear p2m list address in shared info structure (Juergen Gross)   
  - xen: sync with xen headers (Juergen Gross)   
  - arm/xen: Drop the definition of xen_pci_platform_unplug (Julien Grall)   
  - xen/events: Support event channel rebind on ARM (Julien Grall)   
  - xen-blkfront: convert to blk-mq APIs (Bob Liu)   
  - xen/preempt: use need_resched() instead of should_resched() (Konstantin Khlebnikov)   
  - x86/xen: fix non-ANSI declaration of xen_has_pv_devices() (Colin Ian King)   
  - KEYS: Fix race between read and revoke (David Howells)  [Orabug: 22623890]  {CVE-2015-7550} 
  - rhashtable: Fix walker list corruption (Herbert Xu)  [Orabug: 22623889]  
  - tcp: restore fastopen with no data in SYN packet (Eric Dumazet)  [Orabug: 22623888]  
  - fou: clean up socket with kfree_rcu (Hannes Frederic Sowa)  [Orabug: 22623887]  
  - rhashtable: Enforce minimum size on initial hash table (Herbert Xu)  [Orabug: 22623886]  
  - net: fix uninitialized variable issue (tadeusz.struk@intel.com)  [Orabug: 22623885]  
  - bluetooth: Validate socket address length in sco_sock_bind(). (David S. Miller)  [Orabug: 22641775]  
  - net: check both type and procotol for tcp sockets (WANG Cong)  [Orabug: 22623884]  
  - skbuff: Fix offset error in skb_reorder_vlan_header (Vlad Yasevich)  [Orabug: 22623883]  
  - pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (WANG Cong)  [Orabug: 22641753]  
  - net: fix IP early demux races (Eric Dumazet)  [Orabug: 22623882]  
  - sh_eth: fix kernel oops in skb_put() (Sergei Shtylyov)  [Orabug: 22623881]  
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 22623880]  {CVE-2015-8543} 
  - ipv6: sctp: clone options to avoid use after free (Eric Dumazet)  [Orabug: 22623879]  
  - vxlan: fix incorrect RCO bit in VXLAN header (Jiri Benc)  [Orabug: 22623878]  
  - ipv6: keep existing flags when setting IFA_F_OPTIMISTIC (Bjørn Mork)  [Orabug: 22623877]  
  - pppoe: fix memory corruption in padt work structure (Guillaume Nault)  [Orabug: 22623876]  
  - usb: core : hub: Fix BOS 'NULL pointer' kernel panic (Hans Yang)  [Orabug: 22623875]  
  - nfs4: start callback_ident at idr 1 (Benjamin Coddington)  [Orabug: 22623874]  
  - nfsd: eliminate sending duplicate and repeated delegations (Andrew Elble)  [Orabug: 22623873]  
  - nfsd: serialize state seqid morphing operations (Jeff Layton)  [Orabug: 22623872]  
  - ext4, jbd2: ensure entering into panic after recording an error in superblock (Daeho Jeong)  [Orabug: 22623871]  
  - ext4: fix potential use after free in __ext4_journal_stop (Lukas Czerner)  [Orabug: 22623870]  
  - ext4 crypto: fix memory leak in ext4_bio_write_page() (Theodore Ts'o)  [Orabug: 22623868]  
  - rbd: don't put snap_context twice in rbd_queue_workfn() (Ilya Dryomov)  [Orabug: 22623867]  
  - Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow (Filipe Manana)  [Orabug: 22623866]  
  - Btrfs: fix race leading to incorrect item deletion when dropping extents (Filipe Manana)  [Orabug: 22623865]  
  - Btrfs: fix truncation of compressed and inlined extents (Filipe Manana)  [Orabug: 22623864]  
  - Btrfs: fix file corruption and data loss after cloning inline extents (Filipe Manana)  [Orabug: 22623863]  
  - net_sched: fix qdisc_tree_decrease_qlen() races (Eric Dumazet)  [Orabug: 22623862]  
  - ipv6: sctp: implement sctp_v6_destroy_sock() (Eric Dumazet)  [Orabug: 22623861]  
  - net/neighbour: fix crash at dumping device-agnostic proxy entries (Konstantin Khlebnikov)  [Orabug: 22623860]  
  - ipv6: add complete rcu protection around np->opt (Eric Dumazet)  [Orabug: 22623859]  
  - bpf, array: fix heap out-of-bounds access when updating elements (Daniel Borkmann)  [Orabug: 22641739]  
  - net: ip6mr: fix static mfc/dev leaks on table destruction (Nikolay Aleksandrov)  [Orabug: 22641732]  
  - net: ipmr: fix static mfc/dev leaks on table destruction (Nikolay Aleksandrov)  [Orabug: 22641722]  
  - net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds (Daniel Borkmann)  [Orabug: 22641707]  
  - tcp: fix potential huge kmalloc() calls in TCP_REPAIR (Eric Dumazet)  [Orabug: 22623857]  
  - ip_tunnel: disable preemption when updating per-cpu tstats (Jason A. Donenfeld)  [Orabug: 22623856]  
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 22623855]  
  - netlink: Add missing goto statement to netlink_insert (Herbert Xu)  [Orabug: 22623854]  
  - tty: Fix tty_send_xchar() lock order inversion (Peter Hurley)  [Orabug: 22623853]  
  - tty: audit: Fix audit source (Peter Hurley)  [Orabug: 22641700]  
  - KVM: Provide function for VCPU lookup by id (David Hildenbrand)  [Orabug: 22623852]  
  - can: Use correct type in sizeof() in nla_put() (Marek Vasut)  [Orabug: 22623851]  
  - mwifiex: fix mwifiex_rdeeprom_read() (Dan Carpenter)  [Orabug: 22641689]  
  - fs/proc, core/debug: Don't expose absolute kernel addresses via wchan (Ingo Molnar)  [Orabug: 22641681]  
  - nl80211: Fix potential memory leak from parse_acl_data (Ola Olsson)  [Orabug: 22623850]  
  - mac80211: fix divide by zero when NOA update (Janusz.Dziedzic@tieto.com)  [Orabug: 22623849]  
  - mac80211: allow null chandef in tracing (Arik Nemtsov)  [Orabug: 22641673]  
  - x86/cpu: Fix SMAP check in PVOPS environments (Andrew Cooper)  [Orabug: 22623848]  
  - x86/setup: Fix low identity map for >= 2GB kernel range (Krzysztof Mazur)  [Orabug: 22623847]  
  - x86/setup: Extend low identity map to cover whole kernel range (Paolo Bonzini)  [Orabug: 22623846]  
  - kvm: x86: set KVM_REQ_EVENT when updating IRR (Radim Krčmář)  [Orabug: 22623845]  
  - net: fix a race in dst_release() (Eric Dumazet)  [Orabug: 22623844]  
  - packet: race condition in packet_bind (Francesco Ruggeri)  [Orabug: 22623843]  
  - sfc: push partner queue for skb->xmit_more (Martin Habets)  [Orabug: 22623841]  
  - sit: fix sit0 percpu double allocations (Eric Dumazet)  [Orabug: 22623840]  
  - ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH() in preemptible context. (Ani Sinha)  [Orabug: 22623839]  
  - net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes (Carol L Soto)  [Orabug: 22623838]  
  - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv (Sowmini Varadhan)  [Orabug: 22623837]  
  - fib_trie: leaf_walk_rcu should not compute key if key is less than pn->key (Alexander Duyck)  [Orabug: 22623836]  
  - ipv6: gre: support SIT encapsulation (Eric Dumazet)  [Orabug: 22623835]  
  - ppp: fix pppoe_dev deletion condition in pppoe_release() (Guillaume Nault)  [Orabug: 22623834]  
  - xen: fix backport of previous kexec patch (Greg Kroah-Hartman)  [Orabug: 22623832]  
  - thp: use is_zero_pfn() only after pte_present() check (Minchan Kim)  [Orabug: 22623830]  
  - drm/vmwgfx: Fix up user_dmabuf refcounting (Thomas Hellstrom)  [Orabug: 22623829]  
  - NVMe: Fix memory leak on retried commands (Keith Busch)  [Orabug: 22623828]  
  - cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL) (Srinivas Pandruvada)  [Orabug: 22623827]  
  - IB/cm: Fix rb-tree duplicate free and use-after-free (Doron Tsur)  [Orabug: 22623826]  
  - btrfs: fix possible leak in btrfs_ioctl_balance() (Christian Engelmayer)  [Orabug: 22623825]  
  - mvsas: Fix NULL pointer dereference in mvs_slot_task_free (Dāvis Mosāns)  [Orabug: 22623824]  
  - md/raid5: fix locking in handle_stripe_clean_event() (Roman Gushchin)  [Orabug: 22623823]  
  - md/raid10: submit_bio_wait() returns 0 on success (Jes Sorensen)  [Orabug: 22623822]  
  - md/raid1: submit_bio_wait() returns 0 on success (Jes Sorensen)  [Orabug: 22623821]  
  - crypto: api - Only abort operations on fatal signal (Herbert Xu)  [Orabug: 22623820]  
  - ovl: fix dentry reference leak (David Howells)  [Orabug: 22641610]  
  - ovl: free lower_mnt array in ovl_put_super (Konstantin Khlebnikov)  [Orabug: 22641588]  
  - ovl: free stack of paths in ovl_fill_super (Konstantin Khlebnikov)  [Orabug: 22641563]  
  - PCI: Prevent out of bounds access in numa_node override (Sasha Levin)  [Orabug: 22623819]  
  - module: Fix locking in symbol_put_addr() (Peter Zijlstra)  [Orabug: 22623818]  
  - dm btree: fix leak of bufio-backed block in btree_split_beneath error path (Mike Snitzer)  [Orabug: 22623817]  
  - dm btree remove: fix a bug when rebalancing nodes after removal (Joe Thornber)  [Orabug: 22623816]  
  - rbd: prevent kernel stack blow up on rbd map (Ilya Dryomov)  [Orabug: 22623815]  
  - rbd: don't leak parent_spec in rbd_dev_probe_parent() (Ilya Dryomov)  [Orabug: 22623813]  
  - rbd: require stable pages if message data CRCs are enabled (Ronny Hegewald)  [Orabug: 22623812]  
  - mm: make sendfile(2) killable (Jan Kara)  [Orabug: 22623811]  
  - ALSA: hda - Fix deadlock at error in building PCM (Takashi Iwai)  [Orabug: 22623810]  
  - si2168: Bounds check firmware (Laura Abbott)  [Orabug: 22623809]  
  - si2157: Bounds check firmware (Laura Abbott)  [Orabug: 22623808]  
  - iommu/amd: Don't clear DTE flags when modifying it (Joerg Roedel)  [Orabug: 22623807]  
  - iommu/amd: Fix BUG when faulting a PROT_NONE VMA (Jay Cornwall)  [Orabug: 22623806]  
  - iommu/vt-d: fix range computation when making room for large pages (Christian Zander)  [Orabug: 22623805]  
  - iwlwifi: mvm: flush fw_dump_wk when mvm fails to start (Andrei Otcheretianski)  [Orabug: 22623804]  
  - rtlwifi: rtl8821ae: Fix system lockups on boot (Larry Finger)  [Orabug: 22623802]  
  - ath9k: declare required extra tx headroom (Felix Fietkau)  [Orabug: 22623801]  
  - fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (Mike Kravetz)  [Orabug: 22514912]  
  - Btrfs: incremental send, fix clone operations for compressed extents (Filipe Manana)  [Orabug: 22466327]  
  - IB/mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Wengang Wang)  [Orabug: 22487409]  
  - net/mlx4_core: Fix FMR unmapping to allow remapping afterward (Maor Gottlieb)  [Orabug: 21473880]  
  - sparc64: Fix perf performance counter overflow calculation (Dave Aldridge)  [Orabug: 22607658]  
  - sparc64: Fix for perf event counts sometimes reported as negative numbers (Dave Aldridge)  [Orabug: 22607658]  
  - sparc64: Fix numa node distance initialization (Nitin Gupta)  [Orabug: 22495713]  
  - sparc64: fix incorrect sign extension in sys_sparc64_personality (Dmitry V. Levin)   
  - sparc64: Add ADI capability to cpu capabilities (Khalid Aziz)   
  - sunvnet: Initialize network_header and transport_header in vnet_rx_one() (Sowmini Varadhan)   
  - dtrace: support multiple instances of the same probe in a function (Kris Van Hees)  [Orabug: 22514493]  
  - dtrace: ensure signal-handled is fired with correct signal (Kris Van Hees)  [Orabug: 22573604]  
  - dtrace: ensure that PID 0 has a psinfo struct (Kris Van Hees)  [Orabug: 22561297]  
  - Add support for polling to the sunhv serial driver. (Allen Pais)   
  - Add sun4v_wdt watchdog driver (Wim Coekaerts)   
  - sparc64: Make memory allocations ATOMIC to fix lockdep warnings (Babu Moger)  [Orabug: 22392548]  
  - sunvnet: hack to work around Solaris VIO bug (Sowmini Varadhan)   
  - sparc64: fix FP corruption in user copy functions (Rob Gardner)  [Orabug: 22506897]  
  - sparc64: Don't set %pil in rtrap_nmi too early (Rob Gardner)  [Orabug: 22322473]  
  - sparc: increase NR_syscalls properly (Nick Alcock)  [Orabug: 22390316]  
  - sparc64: 'NULL' char after break when sysrq enabled (Vijay Kumar)  [Orabug: 22456721]  
  - sparc64: Fix numa distance values (Nitin Gupta)  [Orabug: 21896119]  
  - sparc64: Fix segfaults and incorrect data collection by perf (Dave Aldridge)  [Orabug: 22350940]  
  - ldoms: VDS panics with regular file backend. ldoms: VIO FLUSH not implemented correctly. (Bijan Mottahedeh)   
  - i40e: Temporary workaround for DMA map issue (Tushar Dave)   
  -     SPARC64: UEK4 LDOMS DOMAIN SERVICES UPDATE 2 (Aaron Young)  [Orabug: 22347667]  
  - VCC panics after guest is deleted. VCC sends HUP instead of BREAK. (Bijan Mottahedeh)  [Orabug: 21086161]  
  - Do not execute i40e_macaddr_init if the macaddr is default (Sowmini Varadhan)   
  - drivers/pci: Update the quirks for megaraid_sas adapter (Babu Moger)  [Orabug: 22104511]  
  - perf bench numa: Fix to show proper convergence stats (Srikar Dronamraju)   
  - ALSA: pci: depend on ZONE_DMA (Dan Williams)  [Orabug: 22107914]  
  - pci: Limit VPD length for megaraid_sas adapter (Babu Moger)  [Orabug: 22104511]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-34.el7uek]
changelog:
  - config: Enable CONFIG_XEN_PCIDEV_BACKEND by to be built-in. (Konrad Rzeszutek Wilk)   
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 22377612]  
  - svcrdma: Fix NFS server crash triggered by 1MB NFS WRITE (Chuck Lever)  [Orabug: 22204799]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22630180]  
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)   
  - ocfs2: o2hb: increase unsteady iterations (Junxiao Bi)   
  - vmxnet3: Bump up driver version number (Shreyas Bhatewara)  [Orabug: 22380674]  
  - vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (Shreyas Bhatewara)  [Orabug: 22380674]  
  - vmxnet3: Fix memory leaks in rx path (fwd) (Shreyas Bhatewara)  [Orabug: 22380674]  
  - vmxnet3: Register shutdown handler for device (fwd) (Shreyas Bhatewara)  [Orabug: 22380674]  
  - lpfc driver updates for UEK4 R1 11.0.0.13 (rkennedy)  [Orabug: 22493326]  
  - lpfc: Use kzalloc instead of kmalloc (Punit Vara)  [Orabug: 22493326]  
  - lpfc: Add logging for misconfigured optics. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix external loopback failure. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix mbox reuse in PLOGI completion (James Smart)  [Orabug: 22493326]  
  - lpfc: Use new FDMI speed definitions for 10G, 25G and 40G FCoE. (James Smart)  [Orabug: 22493326]  
  - lpfc: Make write check error processing more resilient (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix RDP ACC being too long. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix RDP Speed reporting. (James Smart)  [Orabug: 22493326]  
  - lpfc: Modularize and cleanup FDMI code in driver (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix crash in fcp command completion path. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix driver crash when module parameter lpfc_fcp_io_channel set to 16 (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix RegLogin failed error seen on Lancer FC during port bounce (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix the FLOGI discovery logic to comply with T11 standards (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix FCF Infinite loop in lpfc_sli4_fcf_rr_next_index_get. (James Smart)  [Orabug: 22493326]  
  - lpfc: fix memory leak and NULL dereference (Sudip Mukherjee)  [Orabug: 22493326]  
  - lpfc: Fix rport leak. (James Smart)  [Orabug: 22493326]  
  - Drivers: hv: vmbus: Fix a Host signaling bug (K. Y. Srinivasan)  [Orabug: 22725962]  
  - cpu-hotplug: export cpu_hotplug_enable/cpu_hotplug_disable (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - clockevents: Add helpers to check the state of a clockevent device (Viresh Kumar)  [Orabug: 21886720]  
  - clockevents: Introduce CLOCK_EVT_STATE_ONESHOT_STOPPED state (Viresh Kumar)  [Orabug: 21886720]  
  - Drivers: hv: util: introduce hv_utils_transport abstraction (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: util: introduce state machine for util drivers (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: use cpu_hotplug_enable/disable (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: add a sysfs attr to show the binding of channel/VP (Dexuan Cui)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Implement a clocksource based on the TSC page (K. Y. Srinivasan)  [Orabug: 21886720]  
  - drivers/hv: Migrate to new 'set-state' interface (Viresh Kumar)  [Orabug: 21886720]  
  - Drivers: hv_vmbus: Fix signal to host condition (Christopher Oo)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Improve the CPU affiliation for channels (K. Y. Srinivasan)  [Orabug: 21886720]  
  - drivers:hv: Move MMIO range picking from hyper_fb to hv_vmbus (Jake Oshins)  [Orabug: 21886720]  
  - drivers:hv: Modify hv_vmbus to search for all MMIO ranges available. (Jake Oshins)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Consider ND NIC in binding channels to CPUs (K. Y. Srinivasan)  [Orabug: 21886720]  
  - mshyperv: fix recognition of Hyper-V guest crash MSR's (Denis V. Lunev)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: prefer 'die' notification chain to 'panic' (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: unregister panic notifier on module unload (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: fix typo in hv_port_info struct (Nik Nyby)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Permit sending of packets without payload (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: balloon: Enable dynamic memory protocol negotiation with Windows 10 hosts (Alex Ng)  [Orabug: 21886720]  
  - Drivers: hv: don't do hypercalls when hypercall_page is NULL (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: add special kexec handler (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: remove hv_synic_free_cpu() call from hv_synic_cleanup() (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: kill tasklets on module unload (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - hv_netvsc: Add structs and handlers for VF messages (Haiyang Zhang)  [Orabug: 21886720]  
  - hv_netvsc: Wait for sub-channels to be processed during probe (KY Srinivasan)  [Orabug: 21886720]  
  - hv_netvsc: Add close of RNDIS filter into change mtu call (Haiyang Zhang)  [Orabug: 21886720]  
  - x86: hyperv: add CPUID bit for crash handlers (Paolo Bonzini)  [Orabug: 21886720]  
  - hv_netvsc: Add support to set MTU reservation from guest side (Haiyang Zhang)  [Orabug: 21886720]  
  - kvm: add hyper-v crash msrs values (Andrey Smetanin)  [Orabug: 21886720]  
  - storvsc: use shost_for_each_device() instead of open coding (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - storvsc: be more picky about scmnd->sc_data_direction (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Allocate ring buffer memory in NUMA aware fashion (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Implement NUMA aware CPU affinity for channels (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Use the vp_index map even for channels bound to CPU 0 (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: distribute subchannels among all vcpus (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: balloon: check if ha_region_mutex was acquired in MEM_CANCEL_ONLINE case (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - hv_netvsc: Allocate the sendbuf in a NUMA aware way (K. Y. Srinivasan)  [Orabug: 21886720]  
  - hv_netvsc: Allocate the receive buffer from the correct NUMA node (K. Y. Srinivasan)  [Orabug: 21886720]  
  - hv_netvsc: Properly size the vrss queues (KY Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus:Update preferred vmbus protocol version to windows 10. (Keith Mange)  [Orabug: 21886720]  
  - hv_netvsc: use per_cpu stats to calculate TX/RX data (sixiao@microsoft.com)  [Orabug: 21886720]  
  - hv_netvsc: Use the xmit_more skb flag to optimize signaling the host (KY Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: move init_vp_index() call to vmbus_process_offer() (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: briefly comment num_sc and next_oc (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: unify calls to percpu_channel_enq() (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: do cleanup on all vmbus_open() failure paths (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Implement the protocol for tearing down vmbus state (K. Y. Srinivasan)  [Orabug: 21886720]  
  - drivers: hv: vmbus: Get rid of some unused definitions (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: full handshake support (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Tools: hv: vss: use misc char device to communicate with kernel (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Tools: hv: kvp: use misc char device to communicate with kernel (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: set .owner reference for file operations (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: rename fcopy_work -> fcopy_timeout_work (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: process deferred messages when we complete the transaction (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: rename kvp_work -> kvp_timeout_work (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: move poll_channel() to hyperv_vmbus.h (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: util: move kvp/vss function declarations to hyperv_vmbus.h (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: reset kvp_context (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. (Vijay Pandurangan)  [Orabug: 22720928]  
  - btrfs: Avoid truncate tailing page if fallocate range doesn't exceed inode size (Qu Wenruo)  [Orabug: 22573877]  
  - Btrfs: send, fix file corruption due to incorrect cloning operations (Filipe Manana)  [Orabug: 22579887]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-35.el7uek]
changelog:
  - bpf: fix branch offset adjustment on backjumps after patching ctx expansion (Daniel Borkmann)  [Orabug: 22740787]  {CVE-2016-2383} 
  - ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)  [Orabug: 22740866]  {CVE-2016-2384} 
  - bio: Fix kabi error (Jason Luo)  [Orabug: 22820562]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22847528]  
  - rds: add infrastructure to find more details for reconnect failure (Ajaykumar Hotchandani)  [Orabug: 22631108]  
  - rds: find connection drop reason (Ajaykumar Hotchandani)  [Orabug: 22631108]  
  - xhci: Workaround to get Intel xHCI reset working more reliably (Rajmohan Mani)  [Orabug: 22805913]  
  - hpsa: fix rmmod issues (Don Brace)  [Orabug: 22075051]  
  - hpsa: fix issues with multilun devices (shane.seymour)  [Orabug: 22075051]  
  - hpsa: add in new offline mode (Scott Benesh)  [Orabug: 22075051]  
  - hpsa: add in new controllers (Don Brace)  [Orabug: 22075051]  
  - hpsa: cleanup update scsi devices (Don Brace)  [Orabug: 22075051]  
  - hpsa: add sysfs entry path_info to show box and bay information (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: add PMC-Sierra to copyright (Don Brace)  [Orabug: 22075051]  
  - hpsa: correct static checker warnings on driver init cleanup (Don Brace)  [Orabug: 22075051]  
  - hpsa: correct decode sense data (Don Brace)  [Orabug: 22075051]  
  - hpsa: Correct double unlock of mutex (Don Brace)  [Orabug: 22075051]  
  - hpsa: change driver version (Don Brace)  [Orabug: 22075051]  
  - hpsa: add in new controller id (Don Brace)  [Orabug: 22075051]  
  - hpsa: dont meddle with hw which isn't ours (Don Brace)  [Orabug: 22075051]  
  - hpsa: cleanup reset (Webb Scales)  [Orabug: 22075051]  
  - hpsa: propagate the error code in hpsa_kdump_soft_reset (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: use scsi host_no as hpsa controller number (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: use block layer tag for command allocation (Webb Scales)  [Orabug: 22075051]  
  - hpsa: add interrupt number to /proc/interrupts interrupt name (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: create workqueue after the driver is ready for use (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: fix try_soft_reset error handling (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: cleanup for init_one step 2 in kdump (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: skip free_irq calls if irqs are not allocated (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: call pci_release_regions after pci_disable_device (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: performance tweak for hpsa_scatter_gather() (Webb Scales)  [Orabug: 22075051]  
  - hpsa: refactor and rework support for sending TEST_UNIT_READY (Webb Scales)  [Orabug: 22075051]  
  - hpsa: don't return abort request until target is complete (Webb Scales)  [Orabug: 22075051]  
  - hpsa: use helper routines for finishing commands (Webb Scales)  [Orabug: 22075051]  
  - hpsa: add support sending aborts to physical devices via the ioaccel2 path (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: do not print ioaccel2 warning messages about unusual completions. (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: clean up some error reporting output in abort handler (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: clean up driver init (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: correct return values from driver functions. (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: do not check cmd_alloc return value - it cannnot return NULL (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: add more ioaccel2 error handling, including underrun statuses. (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: add ioaccel sg chaining for the ioaccel2 path (Webb Scales)  [Orabug: 22075051]  
  - hpsa: refactor freeing of resources into more logical functions (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: clean up error handling (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: break hpsa_free_irqs_and_disable_msix into two functions (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: Get queue depth from identify physical bmic for physical disks. (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: use ioaccel2 path to submit IOs to physical drives in HBA mode. (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: print accurate SSD Smart Path Enabled status (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: factor out hpsa_ioaccel_submit function (Webb Scales)  [Orabug: 22075051]  
  - hpsa: try resubmitting down raid path on task set full (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: do not ignore return value of hpsa_register_scsi (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: factor out hpsa_init_cmd function (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: make function names consistent (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: allow lockup detected to be viewed via sysfs (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: hpsa decode sense data for io and tmf (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: decrement h->commands_outstanding in fail_all_outstanding_cmds (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: clean up aborts (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: rework controller command submission (Webb Scales)  [Orabug: 22075051]  
  - hpsa: clean up host, channel, target, lun prints (Webb Scales)  [Orabug: 22075051]  
  - hpsa: add masked physical devices into h->dev[] array (Stephen Cameron)  [Orabug: 22075051]  
  - i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: let go of the past (Mitch Williams)  [Orabug: 22342532]  
  - i40e: suspend scheduling during driver unload (Pandi Kumar Maharajan)  [Orabug: 22342532]  
  - i40e: Use the new rx ctl register helpers. Don't use AQ calls from clear_hw. (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: implement and use Rx CTL helper functions (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add adminq commands for Rx CTL registers (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add check for null VSI (John Underwood)  [Orabug: 22342532]  
  - i40e: Expose some registers to program parser, FD and RSS logic (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Fix for unexpected messaging (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: Do not wait for Rx queue disable in DCB reconfig (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: Increase timeout when checking GLGEN_RSTAT_DEVSTATE bit (Kevin Scott)  [Orabug: 22342532]  
  - i40e: Fix led blink capability for 10GBaseT PHY (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: Add functions to blink led on 10GBaseT PHY (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: Move Tx checksum closer to TSO (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Add support for ATR w/ IPv6 extension headers (Alexander Duyck)  [Orabug: 22342532]  
  - i40evf: Update feature flags to reflect newly enabled features (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Update feature flags to reflect newly enabled features (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Do not drop support for IPv6 VXLAN or GENEVE tunnels (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Fix ATR in relation to tunnels (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Enable support for SKB_GSO_UDP_TUNNEL_CSUM (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Clean-up Rx packet checksum handling (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Add exception handling for Tx checksum (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Do not write to descriptor unless we complete (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Handle IPv6 extension headers in checksum offload (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Add support for IPv4 encapsulated in IPv6 (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Replace header pointers with unions of pointers in Tx checksum path (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Consolidate all header changes into TSO function (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Factor out L4 header and checksum from L3 bits in TSO path (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Use u64 values instead of casting them in TSO function (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Drop outer checksum offload that was not requested (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11. (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: clean event descriptor before use (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: set adapter state on reset failure (Mitch Williams)  [Orabug: 22342532]  
  - i40e: better error reporting for nvmupdate (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: expand comment (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Do not disable queues in the Legacy/MSI Interrupt handler (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: avoid atomics (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Removal of code which relies on BASE VEB SEID (Kiran Patil)  [Orabug: 22342532]  
  - i40e: Add a SW workaround for lost interrupts (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: trivial: cleanup use of pf->hw (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: support packet split receive (Mitch Williams)  [Orabug: 22342532]  
  - i40e: drop unused debugfs file "dump" (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: get rid of magic number (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: Bump version (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: properly show packet split status in debugfs (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use logical operators, not bitwise (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use pages correctly in Rx (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use __GFP_NOWARN (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: dump descriptor indexes in hex (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: try again after failure (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: don't lose interrupts (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: Change vf driver string to reflect all products i40evf supports (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Refactor force_wb and WB_ON_ITR functionality code (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: use new add_veb calling with VEB stats control (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add VEB stat control and remove L2 cloud filter (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: set shared bit for multicast filters (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Make the DCB firmware checks for X710/XL710 only (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: move sync_vsi_filters up in service_task (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add priv flag for automatic rule eviction (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Enable Geneve offload for FW API ver > 1.4 for XL710/X710 devices (Anjali Singhai)  [Orabug: 22342532]  
  - i40e/i40evf: bump version to 1.4.12/1.4.8 (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: avoid large memcpy by assigning struct (Jacob Keller)  [Orabug: 22342532]  
  - i40e: count allocation errors (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: drop unused function (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: negate PHY int mask bits (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: APIs to Add/remove port mirroring rules (Kiran Patil)  [Orabug: 22342532]  
  - i40e: fix: do not sleep in netdev_ops (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: allocate memory safer (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: do TSO only if CHECKSUM_PARTIAL is set (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: fix bug in dma sync (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: trivial: fix missing space (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: trivial: remove unnecessary local var (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: remove VF device IDs from PF (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add netdev info to VSI dump (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: enable bus master after reset (Mitch Williams)  [Orabug: 22342532]  
  - i40e: add a little more to an NVM update debug message (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: refactor DCB function (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add 20G speed for Tx bandwidth calculations (Mitch Williams)  [Orabug: 22342532]  
  - i40e: add counter for arq overflows (Mitch Williams)  [Orabug: 22342532]  
  - i40e: fix write-back-on-itr to work with legacy itr (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Store lan_vsi_idx and lan_vsi_id in the right size (Pandi Maharajan)  [Orabug: 22342532]  
  - i40e: Bump AQ minor version to 1.5 for new FW features (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ thermal sensor control struct (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Add VXLAN-GPE tunnel type (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Add set_switch_config (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Shared resource flags (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add 100Mb ethtool reporting (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: AQ Add external power class to get link status (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Geneve cloud tunnel type (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Add Run PHY Activity struct (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Limit DCB FW version checks to X710/XL710 devices (Greg Bowers)  [Orabug: 22342532]  
  - i40e: add new proxy-wol bit for X722 (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: Use private workqueue (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: add new write-back mode (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: Fix for UDP/TCP RSS for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Extend ethtool RSS hooks for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: add new device IDs for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: bump version to 1.4.10 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: update features with right offload (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Cleanup the code with respect to restarting autoneg (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40evf: null out ring pointers on free (Mitch Williams)  [Orabug: 22342532]  
  - i40e: define function capabilities in only one place (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: allow channel bonding of VFs (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Replace X722 mac check in ethtool get_settings (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Add mac_filter_element at the end of the list instead of HEAD (Kiran Patil)  [Orabug: 22342532]  
  - i40e: fix build warnings (Eric Dumazet)  [Orabug: 22342532]  
  - i40e: remove forever unused ID (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Fix Rx hash reported to the stack by our driver (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: allow zero MAC address for VFs (Mitch Williams)  [Orabug: 22342532]  
  - i40e: change log messages and error returns (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: avoid mutex re-init (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Call geneve_get_rx_port to get the existing Geneve ports (Singhai, Anjali)  [Orabug: 22342532]  
  - i40e: geneve tunnel offload support (Singhai, Anjali)  [Orabug: 22342532]  
  - i40e: bring firmware API version inline with sourceforge (Brian Maly)  [Orabug: 22342532]  
  - i40e: only report NVM image is newer than expected (Brian Maly)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: change version string generation (Mitch Williams)  [Orabug: 22342532]  
  - i40e: clean whole mac filter list (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: hush little warnings (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Michal Kosiarz)  [Orabug: 22342532]  
  - i40e: use explicit cast from u16 to u8 (Kamil Krawczyk)  [Orabug: 22342532]  
  - i40evf: check rings before freeing resources (Mitch Williams)  [Orabug: 22342532]  
  - i40e: don't add zero MAC filter (Mitch Williams)  [Orabug: 22342532]  
  - i40e: properly delete VF MAC filters (Mitch Williams)  [Orabug: 22342532]  
  - i40e: chomp the BIT(_ULL) (Jesse Brandeburg)  [Orabug: 22342532]  
  - Revert "i40e: remove CONFIG_I40E_VXLAN" (Singhai, Anjali)  [Orabug: 22342532]  
  - i40e: trivial fixes (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump version to 1.4.7 for i40e and 1.4.3 for i40evf (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: use logical operator (Mitch Williams)  [Orabug: 22342532]  
  - i40e: fix whitespace (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Remove separate functions gathering XOFF Rx stats (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: remove CONFIG_I40E_VXLAN (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: use priv flags to control packet split (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: use correct types (Mitch Williams)  [Orabug: 22342532]  
  - i40e: propagate properly (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: don't use atomic allocation (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Fix memory leaks, sideband filter programming (Kiran Patil)  [Orabug: 22342532]  
  - i40e: Detection and recovery of TX queue hung logic moved to service_task from tx_timeout (Kiran Patil)  [Orabug: 22342532]  
  - i40evf: remove duplicate string (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: set real num queues (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: increase max number of queues (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Fix i40e_print_features() VEB mode output (Joe Perches)  [Orabug: 22342532]  
  - i40e: remove unused argument (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix: do not sleep in netdev_ops (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e version to 1.4.4 and i40evf to 1.4.1 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: allocate ring structs dynamically (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: allocate queue vectors dynamically (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: quoth the VF driver, Nevermore (Mitch Williams)  [Orabug: 22342532]  
  - i40e: make error message more useful (Mitch Williams)  [Orabug: 22342532]  
  - i40e: fix confusing message (Helin Zhang)  [Orabug: 22342532]  
  - i40e: Update error messaging (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40evf: add new fields to store user configuration of RSS (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: create a generic get RSS function (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: create a generic config RSS function (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: rename VF adapter specific RSS function (Helin Zhang)  [Orabug: 22342532]  
  - i40e/i40evf: prefetch skb data on transmit (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Fix RS bit update in Tx path and disable force WB workaround (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: rename rss_size to alloc_rss_size in i40e_pf (Helin Zhang)  [Orabug: 22342532]  
  - i40e: add new fields to store user configuration (Helin Zhang)  [Orabug: 22342532]  
  - i40e: Bump version to 1.4.2 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: create a generic configure rss function (Helin Zhang)  [Orabug: 22342532]  
  - i40e: rework the functions to configure RSS with similar parameters (Helin Zhang)  [Orabug: 22342532]  
  - i40e: return the number of enabled queues for ETHTOOL_GRXRINGS (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: handle many MAC filters correctly (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: clean up error messages (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: Add comment to #endif (Helin Zhang)  [Orabug: 22342532]  
  - i40e: Move the saving of old link info from handle_link_event to link_event (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Add a stat to track how many times we have to do a force WB (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: remove BUG_ON from FCoE setup (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: remove BUG_ON from feature string building (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Change BUG_ON to WARN_ON in service event complete (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: remove unused tunnel parameter (Shannon Nelson)  [Orabug: 22342532]  
  - intel: i40e: fix confused code (Rasmus Villemoes)  [Orabug: 22342532]  
  - i40evf: fix compiler warning of unused variable (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix unconditional execution of cpu_to_le16() (Jean Sacren)  [Orabug: 22342532]  
  - i40e: clean up local variable initialization (Jean Sacren)  [Orabug: 22342532]  
  - i40evf: clean up local variable initialization (Jean Sacren)  [Orabug: 22342532]  
  - i40e: add missing kernel-doc argument (Jean Sacren)  [Orabug: 22342532]  
  - i40evf: add missing kernel-doc argument (Jean Sacren)  [Orabug: 22342532]  
  - i40e: re-use %*ph specifier to hexdump a data (Andy Shevchenko)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.3.46 and i40evf to 1.3.33 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Disable VEB bridge mode with SR-IOV failure (Akeem G Abodunrin)  [Orabug: 22342532]  
  - i40e: Fix an incorrect OEM version string (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: fix inconsistent statuses after a PF reset (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: use correct struct for list manipulation (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Fix VEB/VEPA bridge mode mismatch issue (Akeem G Abodunrin)  [Orabug: 22342532]  
  - i40e: fix a bug in debugfs with add/del macaddr (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: Add a workaround to drop all flow control frames (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.3.38 and i40evf to 1.3.25 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: declare rather than initialize int object (Jean Sacren)  [Orabug: 22342532]  
  - i40e: fix kernel-doc argument name (Jean Sacren)  [Orabug: 22342532]  
  - i40e: Move error message to debug level (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Fix order of checks when enabling/disabling autoneg in ethtool (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Fix an accidental error with BIT_ULL replacement (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: fix for PHY NVM interaction problem (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: Fix for Tools loopback test failing after driver load (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: adjust interrupt throttle less frequently (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: change dynamic interrupt thresholds (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: fix bug in throttle rate math (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: refactor IRQ enable function (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: don't give up (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use napi_schedule_irqoff() (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Fix basic support for X722 devices (Anjali Singhai)  [Orabug: 22342532]  
  - i40evf: fix overlong BIT defines (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Lock for VSI's MAC filter list (Kiran Patil)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.3.34 and i40evf to 1.3.21 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: increase AQ work limit (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: relax and stagger init timing a bit (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Recognize 1000Base_T_Optical phy type when link is up (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: correctly populate vlan_features (Mitch Williams)  [Orabug: 22342532]  
  - i40e: reset the invalid msg counter in vf when a valid msg is received (Jingjing Wu)  [Orabug: 22342532]  
  - i40e/i40evf: moderate interrupts differently (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Add support for non-willing Apps (Greg Bowers)  [Orabug: 22342532]  
  - i40e: priv flag for controlling VEB stats (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Removed unused defines (Greg Rose)  [Orabug: 22342532]  
  - i40e: remove read/write failed messages from nvmupdate (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: Fix compile issue related to const string (Jingjing Wu)  [Orabug: 22342532]  
  - i40e: generate fewer startup messages (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: Add support for netpoll (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Drop useless "IN_NETPOLL" flag (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Fix handling of napi budget (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e version to 1.3.28 and i40evf to 1.3.19 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: speed up init (Mitch Williams)  [Orabug: 22342532]  
  - i40e: remove unnecessary string copy operations (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: X722 is on the IOSF bus and does not report the PCI bus info (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Store off PHY capabilities (Kevin Scott)  [Orabug: 22342532]  
  - i40e/i40evf: remove redundant declarations of a variable and a function (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: remove FD atr control from debugfs (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: allow FD SB if MFP mode only has 1 partition (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: remove obsolete version check (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: Add WB_ON_ITR offload support (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Remove 100M SGMII unless hw is X722 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Change some messages from info to debug only (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: use priv flags to control flow director (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Add missing parameter comment to ndo_bridge_setlink (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e version to 1.3.25 and i40evf to 1.3.17 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Refactor PHY structure and add phy_capabilities enum (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Add module_types and update_link_info (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: split device ids into a separate file (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: update fw version text string per previous product formats (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: don't panic on VSI allocation failure (Mitch Williams)  [Orabug: 22342532]  
  - i40e: remove redundant call (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Convert CEE App TLV selector to IEEE selector (Greg Bowers)  [Orabug: 22342532]  
  - i40e/i40evf: Add info to nvm info struct for OEM version data (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40evf: properly handle ndo_set_mac_address calls (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Use BIT() macro for priority map parsing (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: Make it clear a parameter is never used (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: Add new link status defines (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: print neato new features (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: pass QOS handle to VF (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: use capabilities flags properly (Mitch Williams)  [Orabug: 22342532]  
  - i40e: refactor code to remove indent (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: clean up some code (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: detect reset more reliably (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Support FW CEE DCB UP to TC map nibble swap (Greg Bowers)  [Orabug: 22342532]  
  - i40e/i40evf: Explicitly assign enum index for VSI type (Serey Kong)  [Orabug: 22342532]  
  - i40e: add switch for link polling (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Fix multiple link up messages (Matt Jared)  [Orabug: 22342532]  
  - i40e: Fix for extra Flow Director filter in table after error (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: Store CEE DCBX DesiredCfg and RemoteCfg (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: Add parsing for CEE DCBX TLVs (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: add more verbose error messages (Mitch Williams)  [Orabug: 22342532]  
  - i40e: inline interrupt enable (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix erroneous WARN_ON (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: remove unused opcode (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: propagate interrupt allocation failure (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Additional checks for CEE APP priority validity (Neerav Parikh)  [Orabug: 22342532]  
  - i40e/i40evf: Add a stat to keep track of linearization count (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: fix unicast mac address add (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: fix bug in return from get_link_status and avoid spurious link messages (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add little endian conversion for checksum (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: give up the __func__ (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Never let speed get set to 0 in get_settings (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Fix for truncated interrupt name (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: assure clean asq status report (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: make i40e_init_pf_fcoe to void (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: fix bad CEE status shift value (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: fix a potential type compare issue (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: add driver support for new device ids (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: stop VF rings (Mitch Williams)  [Orabug: 22342532]  
  - i40e: enable WoL operation if config bit show WoL capable (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Increase the amount of time we wait for reset to be done (Paul M Stillwell Jr)  [Orabug: 22342532]  
  - i40evf: don't blow away MAC address (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: grab the AQ spinlocks before clearing registers (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Fix a memory leak in X722 rss config path (Anjali Singhai)  [Orabug: 22342532]  
  - i40evf: Use numa_mem_id() to better support memoryless node (Jiang Liu)  [Orabug: 22342532]  
  - i40e: Use numa_mem_id() to better support memoryless node (Jiang Liu)  [Orabug: 22342532]  
  - i40e: fix 32 bit build warnings (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix kbuild warnings (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: tweak init timing (Mitch Williams)  [Orabug: 22342532]  
  - i40e: warn on double free (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: refactor interrupt enable (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Strip VEB stats if they are disabled in HW (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: add new device id 1588 (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Remove useless message (Greg Rose)  [Orabug: 22342532]  
  - i40e: limit debugfs io ops (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: use QOS field consistently (Mitch Williams)  [Orabug: 22342532]  
  - i40e: count drops in netstat interface (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: fix Tx hang workaround code (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fixup padding issue in get_cee_dcb_cfg_v1_resp (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Fix a port VLAN configuration bug (Greg Rose)  [Orabug: 22342532]  
  - i40e/i40evf: fix up type clash in i40e_aq_rc_to_posix conversion (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: rtnl_lock called twice in i40e_pci_error_resume() (Vasily Averin)  [Orabug: 22342532]  
  - i40evf: missing rtnl_unlock in i40evf_resume() (Vasily Averin)  [Orabug: 22342532]  
  - i40e: Fix RS bit update in Tx path and disable force WB workaround (Anjali Singhai)  [Orabug: 22342532]  
  - i40e: add GRE tunnel type to csum encoding (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: refactor tx timeout logic (Kiran Patil)  [Orabug: 22342532]  
  - i40e: Move i40e_get_head into header file (Kiran Patil)  [Orabug: 22342532]  
  - logging errors that get masked to EIO inside drivers/block/loop.c (Manjunath Patil)  [Orabug: 22505557]  
  - be2iscsi: Update the driver version (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix memory leak in beiscsi_alloc_mem() (Maurizio Lombardi)  [Orabug: 22725588]  
  - be2iscsi: Add lock to protect WRB alloc and free (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: _bh for io_sgl_lock and mgmt_sgl_lock (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix ExpStatSn in management tasks (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Couple MCC tag and WRB alloc and free (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix MCC WRB leak in open_connection (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Cleanup processing of BMBX completion (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix be_mcc_compl_poll to use tag_state (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Remove be_mbox_notify_wait function (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Rename MCC and BMBX processing functions (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Remove redundant MCC processing code (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Use macros for MCC WRB and CQE fields (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Remove unused mcc_cq_lock (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: add checks for dma mapping errors (Alexey Khoroshilov)  [Orabug: 22725588]  
  - be2iscsi: Fix WRB leak in login/logout path (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix async link event processing (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to process 25G link speed info from FW (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix IOPOLL implementation (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix return value for MCC completion (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Add FW config validation (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to handle misconfigured optics events (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix VLAN support for IPv6 network (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to remove shutdown entry point (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Added return value check for mgmt_get_all_if_id (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Set mbox timeout to 30s (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to synchronize tag allocation using spin_lock (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to use atomic bit operations for tag_state (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix mbox synchronization replacing spinlock with mutex (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix soft lockup in mgmt_get_all_if_id path using bmbx (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix bogus WARN_ON length check (Tim Gardner)  [Orabug: 22725588]  
  - scsi_transport_iscsi: Add 25G and 40G speed definition (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi : Fix the retry count for boot targets (John Soni Jose)  [Orabug: 22725588]  
  - be2net: don't report EVB for older chipsets when SR-IOV is disabled (Ivan Vecera)   
  - be2net: Interpret and log new data that's added to the port misconfigure async event (Ajit Khaparde)  [Orabug: 22725582]  
  - be2net: Request RSS capability of Rx interface depending on number of Rx rings (Ajit Khaparde)  [Orabug: 22725582]  
  - be2net: Fix interval calculation in interrupt moderation (Padmanabh Ratnakar)  [Orabug: 22725582]  
  - be2net: Add retry in case of error recovery failure (Padmanabh Ratnakar)  [Orabug: 22725582]  
  - be2net: Fix Lancer error recovery (Padmanabh Ratnakar)  [Orabug: 22725582]  
  - be2net: Don't run ethtool self-tests for VFs (Somnath Kotur)  [Orabug: 22725582]  
  - be2net: SRIOV Queue distribution should factor in EQ-count of VFs (Sriharsha Basavapatna)  [Orabug: 22725582]  
  - be2net: Fix be_vlan_rem_vid() to check vlan id being removed (Sriharsha Basavapatna)  [Orabug: 22725582]  
  - be2net: check for INSUFFICIENT_PRIVILEGES error (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: return error status from be_set_phys_id() (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: Avoid accessing eq object in be_msix_register routine, when i < 0. (Venkat Duvvuru)  [Orabug: 22725582]  
  - be2net: bump up the driver version to 11.0.0.0 (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: support ethtool get-dump option (Venkat Duvvuru)  [Orabug: 22725582]  
  - be2net: fix port-res desc query of GET_PROFILE_CONFIG FW cmd (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: remove unused error variables (Venkat Duvvuru)  [Orabug: 22725582]  
  - be2net: remove a line of code that has no effect (Sathya Perla)  [Orabug: 22725582]  
  - be2net: log digital signature errors while flashing FW image (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: move FW flash cmd code to be_cmds.c (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: cleanup FW flash image related macro defines (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: avoid configuring VEPA mode on BE3 (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: fix VF link state transition from disabled to auto (Suresh Reddy)  [Orabug: 22725582]  
  - net: provide generic busy polling to all NAPI drivers (Eric Dumazet)  [Orabug: 22725582]  
  - net: move skb_mark_napi_id() into core networking stack (Eric Dumazet)  [Orabug: 22725582]  
  - be2net: remove local variable 'status' (Ivan Vecera)  [Orabug: 22725582]  
  - be2net: replace hardcoded values with existing define (Ivan Vecera)  [Orabug: 22725582]  
  - be2net: remove unused local rsstable array (Ivan Vecera)  [Orabug: 22725582]  
  - drivers/net: get rid of unnecessary initializations in .get_drvinfo() (Ivan Vecera)  [Orabug: 22725582]  
  - Revert "scsi: Fix a bdi reregistration race" (Dan Duval)  [Orabug: 22679087]  
  - block: remove management of bi_remaining when restoring original bi_end_io (Mike Snitzer)  [Orabug: 22820562]  
  - bio: skip atomic inc/dec of ->bi_cnt for most use cases (Jens Axboe)  [Orabug: 22820562]  
  - bio: skip atomic inc/dec of ->bi_remaining for non-chains (Jens Axboe)  [Orabug: 22820562]  
  - VSOCK: Fix lockdep issue. (Jorgen Hansen)  [Orabug: 22820522]  
  - VSOCK: sock_put wasn't safe to call in interrupt context (Jorgen Hansen)  [Orabug: 22820522]  
  - xfs: checksum log record ext headers based on record size (Brian Foster)  [Orabug: 22682565]  
  - xfs: always drain dio before extending aio write submission (Brian Foster)   
  - iw_cxgb3: Fix incorrectly returning error on success (Hariprasad S)  [Orabug: 22713209]  
  - Btrfs: use received_uuid of parent during send (Josef Bacik)  [Orabug: 22580612]


