[4.18.0-305.OL8] - Update Oracle Linux certificates - Disable signing for aarch64 - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 [4.18.0-305] - perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 [1950388] [4.18.0-304] - mm: Revert "remove the account_page_dirtied export" [1941257] - Revert "[netdrv] net/broadcom: Clean broadcom code from driver versions" [1940842] [4.18.0-303] - redhat: switch secureboot kernel image signing to release keys - Revert "[md] md/raid5: add a new member of offset into r5dev" [1936903] - Revert "[md] md/raid5: make async_copy_data to support different page offset" [1936903] - Revert "[crypto] md/raid5: add new xor function to support different page offset" [1936903] - Revert "[md] md/raid5: convert to new xor compution interface" [1936903] - Revert "[crypto] md/raid6: let syndrome computor support different page offset" [1936903] - Revert "[crypto] md/raid6: let async recovery function support different page offset" [1936903] - Revert "[md] md/raid5: let multiple devices of stripe_head share page" [1936903] - Revert "[md] md/raid5: resize stripe_head when reshape array" [1936903] - Revert "[md] md/raid5: reallocate page array after setting new stripe_size" [1936903] - ACPI: PNP: compare the string length in the matching_id [1933702] - ceph: add missing break when parsing "nowsync" mount option [1932753] - get_maintainer.conf: Update with new location of RHMAINTAINERS - redhat: make pathspec exclusion compatible with old git versions - redhat/scripts: Update merge-subtrees.sh with new subtree location - tree: Add RHMAINTAINERS soft link in 8.4 - tree: remove existing redhat/rhdocs subtree in 8.4 [4.18.0-302] - PCI: rpadlpar: Fix potential drc_name corruption in store functions [1938116] - selftests: kvm: Add basic Hyper-V clocksources tests [1931782] - KVM: x86: hyper-v: Dont touch TSC page values when guest opted for re-enlightenment [1931782] - KVM: x86: hyper-v: Track Hyper-V TSC page status [1931782] - KVM: x86: hyper-v: Prevent using not-yet-updated TSC page by secondary CPUs [1931782] - KVM: x86: hyper-v: Limit guest to writing zero to HV_X64_MSR_TSC_EMULATION_STATUS [1931782] - drm/i915/guc: Update to use firmware v49.0.1 [1935281] {CVE-2020-12362} - time: Enable __kernel_timespec for 32-bit vdso build [1936282] - lib/idr.c: document calling context for IDA APIs mustnt use locks [1917764] - ida: Free allocated bitmap in error path [1917764] - radix tree test suite: Fix compilation [1917764] - vmalloc: convert to XArray [1917764] - mm: pass addr as unsigned long to vb_free [1917764] - radix tree: Remove multiorder support [1917764] - radix tree test: Convert multiorder tests to XArray [1917764] - radix tree tests: Convert item_delete_rcu to XArray [1917764] - radix tree tests: Convert item_kill_tree to XArray [1917764] - radix tree tests: Move item_insert_order [1917764] - radix tree test suite: Remove multiorder benchmarking [1917764] - radix tree test suite: Remove __item_insert [1917764] - radix tree: Remove radix_tree_clear_tags [1917764] - radix tree: Remove split/join code [1917764] - radix tree: Remove radix_tree_update_node_t [1917764] - mm: Convert truncate to XArray [1917764] - copy rh_kabi.h to tools/testing/radix-tree/linux [1917764] [4.18.0-301] - ibmvnic: fix a race between open and reset [1940042] - ibmvnic: Set to CLOSED state even on error [1940042] - ibmvnic: device remove has higher precedence over reset [1940042] - ibmvnic: merge do_change_param_reset into do_reset [1940042] - ibmvfc: disable MQ channelization by default [1939359] - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process [1926945] - scsi: iscsi: Verify lengths on passthrough PDUs [1930833] {CVE-2021-27365} - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE [1930856] {CVE-2021-27363} - scsi: iscsi: Restrict sessions and handles to admin capabilities [1930809] {CVE-2021-27364} - futex: Handle faults correctly for PI futexes [1924635] - futex: Simplify fixup_pi_state_owner [1924635] - futex: Use pi_state_update_owner in put_pi_state [1924635] - rtmutex: Remove unused argument from rt_mutex_proxy_unlock [1924635] - futex: Provide and use pi_state_update_owner [1924635] - futex: Replace pointless printk in fixup_owner [1924635] - futex: Ensure the correct return value from futex_lock_pi [1924635] - futex: Dont enable IRQs unconditionally in put_pi_state [1924635] - futex: Fix incorrect should_fail_futex handling [1924635] - futex: Consistently use fshared as boolean [1924635] - futex: Remove needless gotos [1924635] - futex: Remove put_futex_key [1924635] - NFS: Correct size calculation for create reply length [1934903] - SUNRPC: Set memalloc_nofs_save for sync tasks [1934098] - net/mlx5: CT: Add support for matching on ct_state reply flag [1919651] - net/mlx5e: CT: manage the lifetime of the ct entry object [1919651] - net/mlx5e: CT: Use per flow counter when CT flow accounting is enabled [1919651] - net/mlx5e: Fix a use after free on error in mlx5_tc_ct_shared_counter_get [1919651] - net/mlx5e: CT: Use the same counter for both directions [1919651] - ethtool: fix the check logic of at least one channel for RX/TX [1907406] [4.18.0-300] - [scsi] scsi: qedi: Correct max length of CHAP secret [1909180] - redhat: use tags from git notes for zstream to generate changelog - redhat: add CI file for kernel-private - CI: Drop unused variable - CI: Enable RT verification - KVM: SVM: Clear the CR4 register on reset [1920788] - net: flow_offload: Add original direction flag to ct_metadata [1921946] - net/sched: cls_flower: Add match on the ct_state reply flag [1921946] - net/sched: cls_flower add CT_FLAGS_INVALID flag support [1921946] - net/sched: cls_flower: Reject invalid ct_state flags rules [1921946] - netlink: add mask validation [1921946] - netlink: create helpers for checking type is an int [1921946] - netlink: policy: correct validation type check [1921946] - netlink: make NLA_BINARY validation more flexible [1921946] [4.18.0-299] - md: Set prev_flush_start and flush_bio in an atomic way [1901598] - md: improve variable names in md_flush_request [1901598] - hpsa: fix regression issue for old controllers [1925711] - scsi: hpsa: Correct dev cmds outstanding for retried cmds [1925711] - vt: Disable KD_FONT_OP_COPY [1903937] {CVE-2020-28974} - drm/i915/rkl: Remove require_force_probe protection [1937558] - drm/i915/tgl/psr: Disable PSR on Tigerlake for now [1924702] - dm raid: fix discard limits for raid0 and raid10 [1934274] - dm: fix __send_changing_extent_only to avoid duplicate dm_target_offset [1934274] - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing [1934212] - mm: memcontrol: fix slub memory accounting [1934212] - mm: memcontrol: fix swap undercounting in cgroup2 [1934212] - mm: memcontrol: fix NR_ANON_THPS accounting in charge moving [1934212] - mm, slub: better heuristic for number of cpus when calculating slab order [1934212] - Revert "mm: memcontrol: avoid workload stalls when lowering memory.high" [1934212] - selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed [1931732] - selftests/bpf: No need to drop the packet when there is no geneve opt [1931732] [4.18.0-298] - drm/i915/gen11+: Only load DRAM information from pcode [1934537] - drm/i915/dg1: Wait for pcode/uncore handshake at startup [1934537] - powercap/intel_rapl: add support for TigerLake Desktop [1932457] - powerpc/perf: Fix handling of privilege level checks in perf interrupt context [1918411] - NFSv4.2: fix error return on memory allocation failure [1917689] - NFSv4.2: improve page handling for GETXATTR [1917689] - NFSv4.2: Fix up the get/listxattr calls to rpc_prepare_reply_pages [1917689] - NFS: Fix rpcrdma_inline_fixup crash with new LISTXATTRS operation [1917689] - SUNRPC: Fix up xdr_set_page [1917689] - NFSv4: Fix open coded xdr_stream_remaining [1917689] - SUNRPC: Clean up the handling of page padding in rpc_prepare_reply_pages [1917689] - SUNRPC: Fix up xdr_read_pages to take arbitrary object lengths [1917689] - SUNRPC: Clean up helpers xdr_set_iov and xdr_set_page_base [1917689] - SUNRPC: Split out a function for setting current page [1917689] - SUNRPC: Fix up typo in xdr_init_decode [1917689] - NFSv4: Fix the alignment of page data in the getdeviceinfo reply [1917689] - net: fix pos incrementment in ipv6_route_seq_next [1926608] - ipv6_route_seq_next should increase position index [1926608] - bpf: Clear subreg_def for global function return values [1934062] - igc: Fix returning wrong statistics [1910873] [4.18.0-297] - KVM: SVM: Make symbol "svm_gp_erratum_intercept" static [1769283] - KVM: SVM: Fix #GP handling for doubly-nested virtualization [1769283] - KVM: SVM: Add support for SVM instruction address check change [1769283] - KVM: SVM: Add emulation support for #GP triggered by SVM instructions [1769283] - KVM: x86: Factor out x86 instruction emulation with decoding [1769283] - gfs2: In gfs2_ail1_start_one unplug the IO when needed [1648446] - gfs2: Free rd_bits later in gfs2_clear-rgrpd to fix use-after-free [1648446] - gfs2: Only access gl_delete for iopen glocks [1648446] - gfs2: Fix case in which ail writes are done to jdata holes [1648446] - gfs2: simplify gfs2_block_map [1648446] - gfs2: Only set PageChecked if we have a transaction [1648446] - gfs2: dont lock sd_ail_lock in gfs2_releasepage [1648446] - gfs2: make gfs2_ail1_empty_one return the count of active items [1648446] - gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe [1648446] - gfs2: enhance log_blocks trace point to show log blocks free [1648446] - gfs2: rename gfs2_write_full_page to gfs2_write_jdata_page, remove parm [1648446] - PM: hibernate: flush swap writer after marking [1898677] - cpufreq: Avoid cpufreq_suspend deadlock on system shutdown [1898677] - PM / hibernate: memory_bm_find_bit: Tighten node optimisation [1898677] - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation [1882215] - ice, xsk: clear the status bits for the next_to_use descriptor [1906820] - net/mlx4_en: Handle TX error CQE [1925690] - net/mlx4_en: Avoid scheduling restart task if it is already running [1925690] - blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue [1922013] - blk-mq: Improve performance of non-mq IO schedulers with multiple HW queues [1922013] - Revert "blk-mq, elevator: Count requests per hctx to improve performance" [1922013] - bpftool: Disable CAP_BPF check for feature command [1921542] - RDMA/siw: Fix calculation of tx_valid_cpus size [1919502] - net/mlx5e: Disable performance optimization for IPv4/IPv6 ethertype [1928671 1919807] - IB/mlx5: Return appropriate error code instead of ENOMEM [1928671] - net/mlx5: Disable devlink reload for lag devices [1928671 1929166] - net/mlx5: Disable devlink reload for multi port slave device [1928671 1929166] - net/mlx5: Disallow RoCE on lag device [1928671 1929166] - net/mlx5: Disallow RoCE on multi port slave device [1928671 1929166] - net/mlx5: Fix health error state handling [1928671] - net/mlx5e: Change interrupt moderation channel params also when channels are closed [1928671] - net/mlx5e: Dont change interrupt moderation params when DIM is enabled [1928671] - net/mlx5e: E-switch, Fix rate calculation for overflow [1928671] - net/mlx5e: Release skb in case of failure in tc update skb [1928671 1929119] - net/mlx5e: Check tunnel offload is required before setting SWP [1928671 1925439] - net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context [1928671 1928706] - net/mlx5e: Fix CQ params of ICOSQ and async ICOSQ [1928671 1928706] - net/mlx5e: Replace synchronize_rcu with synchronize_net [1928671 1913616] - net/mlx5e: Enable XDP for Connect-X IPsec capable devices [1928671 1856795] - net/mlx5e: Enable striding RQ for Connect-X IPsec capable devices [1928671 1926120] - fix regression in "epoll: Keep a reference on files added to the check list" [1920776] {CVE-2020-0466} - do_epoll_ctl: clean the failure exits up a bit [1920776] {CVE-2020-0466} - epoll: Keep a reference on files added to the check list [1920776] {CVE-2020-0466} [4.18.0-296] - perf/x86/intel/uncore: With