[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2023-12974 -- Oracle kernel-uek

ID: oval:org.secpod.oval:def:1507146Date: (C)2023-11-29   (M)2024-04-25
Class: PATCHFamily: unix




[5.4.17-2136.325.5.el7uek] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 [Orabug: 35905508] - perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number [Orabug: 35905508] - char: misc: increase DYNAMIC_MINORS value [Orabug: 35905508] [5.4.17-2136.325.4.el7uek] - net: nfc: llcp: Add lock when modifying device list - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet - Revert PCI: qcom: Disable write access to read only registers for IP v2.3.3 - rbd: take header_rwsem in rbd_dev_refresh only when updating - rbd: decouple parent info read-in from updating rbd_dev - rbd: decouple header read-in from updating rbd_dev-header - rbd: move rbd_dev_refresh definition - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP - dccp: fix dccp_v4_err/dccp_v6_err again - fix breakage in do_rmdir [Orabug: 35722671] - scsi: target: core: Fix deadlock due to recursive locking [Orabug: 35761341] - rds: Add proper refcnt when an RDS MR references an RDS Socket [Orabug: 35836949] - rds: Check for UAF in rds_destroy_mr [Orabug: 35836949] - i2c: designware: Fix corrupted memory seen in the ISR [Orabug: 35857601] - xfs: reserve less log space when recovering log intent items [Orabug: 35871840] - octeontx_edac: Fix mcc_edac failure at boot [Orabug: 35895526] - bpf: bpf_check must fail when btf_linux is null [Orabug: 35899889] [5.4.17-2136.325.3.el7uek] - LTS tag: v5.4.257 - drm/amdgpu: fix amdgpu_cs_p1_user_fence - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller - ext4: fix rec_len verify error - i2c: aspeed: Reset the i2c controller when timeout occurs - tracefs: Add missing lockdown check to tracefs_create_dir - nfsd: fix change_info in NFSv4 RENAME replies - tracing: Have option files inc the trace array ref count - tracing: Have current_trace inc the trace array ref count - btrfs: fix lockdep splat and potential deadlock after failure running delayed items - attr: block mode changes of symlinks - md/raid1: fix error: ISO C90 forbids mixed declarations - selftests: tracing: Fix to unmount tracefs for recovering environment - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super - btrfs: add a helper to read the superblock metadata_uuid - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h - perf tools: Add an option to build without libbfd - perf jevents: Make build dependency on test JSONs - tools features: Add feature test to check if libbfd has buildid support - kobject: Add sanity check for kset-kobj.ktype in kset_register - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning - serial: cpm_uart: Avoid suspicious locking - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc - media: pci: cx23885: replace BUG with error return - media: tuners: qt1010: replace BUG_ON with a regular error - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer - media: anysee: fix null-ptr-deref in anysee_master_xfer - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer - powerpc/pseries: fix possible memory leak in ibmebus_bus_init - jfs: fix invalid free of JFS_IP-i_imap in diUnmount - fs/jfs: prevent double-free in dbUnmount after failed jfs_remount - ext2: fix datatype of block number in ext2_xattr_set2 - md: raid1: fix potential OOB in raid1_remove_disk - bus: ti-sysc: Configure uart quirks for k3 SoC - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable - wifi: mac80211_hwsim: drop short frames - alx: fix OOB-read compiler warning - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 - tpm_tis: Resend command to recover from data transfer errors - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui - wifi: mwifiex: fix fortify warning - wifi: ath9k: fix printk specifier - devlink: remove reload failed checks in params get/set callbacks - hw_breakpoint: fix single-stepping when using bpf_overflow_handler - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 - kernel/fork: beware of __put_task_struct calling context - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock - btrfs: output extra debug info if we failed to find an inline backref - autofs: fix memory leak of waitqueues in autofs_catatonic_mode - parisc: Drop loops_per_jiffy from per_cpu struct - drm/amd/display: Fix a bug when searching for insert_above_mpcc - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg. - ixgbe: fix timestamp configuration code - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors - kcm: Fix memory leak in error path of kcm_sendmsg - r8152: check budget for r8152_poll - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc - net: ipv4: fix one memleak in __inet_del_ifa - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 - usb: typec: bus: verify partner exists in typec_altmode_attention - usb: typec: tcpm: Refactor tcpm_handle_vdm_request - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling - perf tools: Handle old data in PERF_RECORD_ATTR - perf hists browser: Fix hierarchy mode header - mtd: rawnand: brcmnand: Fix potential false time out warning - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write - mtd: rawnand: brcmnand: Fix crash during the panic_write - btrfs: use the correct superblock to compare fsid in btrfs_validate_super - btrfs: don"t start transaction when joining with TRANS_JOIN_NOSTART - fuse: nlookup missing decrement in fuse_direntplus_link - ata: pata_ftide010: Add missing MODULE_DESCRIPTION - ata: sata_gemini: Add missing MODULE_DESCRIPTION - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory - net: hns3: fix the port information display when sfp is absent - ip_tunnels: use DEV_STATS_INC - idr: fix param name in idr_alloc_cyclic doc - s390/zcrypt: don"t leak memory if dev_set_name fails - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 - kcm: Destroy mutex in kcm_exit_net - net: sched: sch_qfq: Fix UAF in qfq_dequeue - af_unix: Fix data race around sk-sk_err. - af_unix: Fix data-races around sk-sk_shutdown. - af_unix: Fix data-race around unix_tot_inflight. - af_unix: Fix data-races around user-unix_inflight. - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr - veth: Fixing transmit return status for dropped packets - igb: disable virtualization features on 82580 - net: read sk-sk_family once in sk_mc_loop - ipv4: annotate data-races around fi-fib_dead - sctp: annotate data-races around sk-sk_wmem_queued - pwm: lpc32xx: Remove handling of PWM channels - watchdog: intel-mid_wdt: add MODULE_ALIAS to allow auto-load - perf top: Don"t pass an ERR_PTR directly to perf_session__delete - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm - perf annotate bpf: Don"t enclose non-debug code with an assert - kconfig: fix possible buffer overflow - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info - soc: qcom: qmi_encdec: Restrict string length in decode - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock - parisc: led: Reduce CPU overhead for disk lan LED computation - parisc: led: Fix LAN receive and transmit LEDs - lib/test_meminit: allocate pages up to order MAX_ORDER - drm/ast: Fix DRAM init on AST2200 - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev - scsi: qla2xxx: Remove unsupported ql2xenabledif option - scsi: qla2xxx: Turn off noisy message log - scsi: qla2xxx: Fix erroneous link up failure - scsi: qla2xxx: fix inconsistent TMF timeout - net/ipv6: SKB symmetric hash should incorporate transport ports - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create - udf: initialize newblock to 0 - usb: typec: tcpci: clear the fault status bit - serial: sc16is7xx: fix broken port 0 uart init - sc16is7xx: Set iobase to device index - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug - crypto: stm32 - fix loop iterating through scatterlist for DMA - s390/ipl: add missing secure/has_secure file to ipl type "unknown" - pstore/ram: Check start of empty przs during init - fsverity: skip PKCS#7 parser when keyring is empty - net: handle ARPHRD_PPP in dev_is_mac_header_xmit - X.509: if signature is unsupported skip validation - dccp: Fix out of bounds access in DCCP error handler - parisc: Fix /proc/cpuinfo output for lscpu - procfs: block chmod on /proc/thread-self/comm - Revert PCI: Mark NVIDIA T4 GPUs to avoid bus reset - ntb: Fix calculation ntb_transport_tx_free_entry - ntb: Clean up tx tail index on link down - ntb: Drop packets when qp link is down - media: dvb: symbol fixup for dvb_attach - xtensa: PMU: fix base address for the newer hardware - backlight/lv5207lp: Compare against struct fb_info.device - backlight/bd6107: Compare against struct fb_info.device - backlight/gpio_backlight: Compare against struct fb_info.device - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch - ipmi_si: fix a memleak in try_smi_init - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl - PM / devfreq: Fix leak in devfreq_dev_release - igb: set max size RX buffer when store bad packet is enabled - skbuff: skb_segment, Call zero copy functions before using skbuff frags - igmp: limit igmpv3_newpack packet size to IP_MAX_MTU - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed - cpufreq: Fix the race condition while updating the transition_task of policy - dmaengine: ste_dma40: Add missing IRQ check in d40_probe - um: Fix hostaudio build errors - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume - rpmsg: glink: Add check for kstrdup - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 - tracing: Fix race issue between cpu buffer write and swap - HID: multitouch: Correct devm device reference for hidinput input_dev name - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode - RDMA/siw: Correct wrong debug message - RDMA/siw: Balance the reference of cep-kref in the error path - amba: bus: fix refcount leak - serial: tegra: handle clk prepare error in tegra_uart_hw_init - scsi: fcoe: Fix potential deadlock on fip-ctlr_lock - scsi: core: Use 32-bit hostnum in scsi_host_lookup - media: ov2680: Fix regulators being left enabled on ov2680_power_on errors - media: ov2680: Fix vflip / hflip set functions - media: ov2680: Fix ov2680_bayer_order - media: ov2680: Remove auto-gain and auto-exposure controls - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi - media: i2c: ov5640: Configure HVP lines in s_power callback - USB: gadget: f_mass_storage: Fix unused variable warning - media: go7007: Remove redundant if statement - iommu/vt-d: Fix to flush cache of PASID directory table - IB/uverbs: Fix an potential error pointer dereference - driver core: test_async: fix an error code - dma-buf/sync_file: Fix docs syntax - coresight: tmc: Explicit type conversions to prevent integer overflow - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read directly - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read directly - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read directly - x86/APM: drop the duplicate APM_MINOR_DEV macro - serial: sprd: Fix DMA buffer leak issue - serial: sprd: Assign sprd_port after initialized to avoid wrong access - serial: sprd: remove redundant sprd_port cleanup - serial: sprd: getting port index via serial aliases only - scsi: qla4xxx: Add length check when parsing nlattrs - scsi: be2iscsi: Add length check when parsing nlattrs - scsi: iscsi: Add strlen check in iscsi_if_set{_host}_param - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host - media: mediatek: vcodec: Return NULL if no vdec_fb is found - media: cx24120: Add retval check for cx24120_message_send - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer - media: dib7000p: Fix potential division by zero - drivers: usb: smsusb: fix error handling code in smsusb_init_device - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN - NFSD: da_addr_body field missing in some GETDEVICEINFO replies - fs: lockd: avoid possible wrong NULL parameter - jfs: validate max amount of blocks before allocation. - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses - nfs/blocklayout: Use the passed in gfp flags - wifi: ath10k: Use RMW accessors for changing LNKCTL - drm/radeon: Use RMW accessors for changing LNKCTL - drm/radeon: Prefer pcie_capability_read_word - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions - drm/radeon: Correct Transmit Margin masks - drm/amdgpu: Use RMW accessors for changing LNKCTL - drm/amdgpu: Prefer pcie_capability_read_word - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions - drm/amdgpu: Correct Transmit Margin masks - PCI: Add #defines for Enter Compliance, Transmit Margin - powerpc/fadump: reset dump area size if fadump memory reserve fails - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op - PCI/ASPM: Use RMW accessors for changing LNKCTL - PCI: pciehp: Use RMW accessors for changing LNKCTL - PCI: Mark NVIDIA T4 GPUs to avoid bus reset - clk: sunxi-ng: Modify mismatched function name - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init - ipmi:ssif: Fix a memory leak when scanning for an adapter - ipmi:ssif: Add check for kstrdup - of: unittest: Fix overlay type in apply/revert check - drm/mediatek: Fix potential memory leak if vmap fail - audit: fix possible soft lockup in __audit_inode_child - smackfs: Prevent underflow in smk_set_cipso - drm/msm/mdp5: Don"t leak some plane state - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 - drm/armada: Fix off-by-one error in armada_overlay_get_property - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq - drm/tegra: Remove superfluous error messages around platform_get_irq - md/md-bitmap: hold "reconfig_mutex" in backlog_store - md/bitmap: don"t set max_write_behind if there is no write mostly device - drm/amdgpu: Update min to min_t in "amdgpu_info_ioctl" - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices - drm: adv7511: Fix low refresh rate register for ADV7533/5 - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses - ARM: dts: s3c64xx: align pinctrl with dtschema - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 - drm/etnaviv: fix dumping of active MMU context - ARM: dts: BCM53573: Use updated spi-gpio binding properties - ARM: dts: BCM53573: Add cells sizes to PCIe node - ARM: dts: BCM53573: Drop nonexistent default-off LED trigger - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar - quota: fix dqput to follow the guarantees dquot_srcu should provide - quota: add new helper dquot_active - quota: rename dquot_active to inode_quota_active - quota: factor out dquot_write_dquot - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list - drm/bridge: tc358764: Fix debug print parameter order - netrom: Deny concurrent connect. - net/sched: sch_hfsc: Ensure inner classes have fsc curve - mlxsw: i2c: Limit single transaction buffer size - mlxsw: i2c: Fix chunk size setting in output mailbox buffer - net: arcnet: Do not call kfree_skb under local_irq_disable - wifi: ath9k: use IS_ERR with debugfs_create_dir - wifi: mwifiex: avoid possible NULL skb pointer dereference - wifi: ath9k: protect WMI command response buffer replacement with a lock - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx - wifi: mwifiex: Fix missed return in oob checks failed path - wifi: mwifiex: fix memory leak in mwifiex_histogram_read - fs: ocfs2: namei: check return value of ocfs2_add_entry - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly - lwt: Fix return values of BPF xmit ops - hwrng: iproc-rng200 - Implement suspend and resume calls - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements - crypto: caam - fix unchecked return value error - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe - crypto: stm32 - Properly handle pm_runtime_get failing - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management - mwifiex: switch from "pci_" to "dma_" API - wifi: mwifiex: Fix OOB and integer underflow when rx packets - can: gs_usb: gs_usb_receive_bulk_callback: count RX overflow errors also in case of OOM - spi: tegra20-sflash: fix to check return value of platform_get_irq in tegra_sflash_probe - regmap: rbtree: Use alloc_flags for memory allocations - tcp: tcp_enter_quickack_mode should be static - bpf: Clear the probe_addr for uprobe - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit - perf/imx_ddr: don"t enable counter0 if none of 4 counters are used - x86/decompressor: Don"t rely on upper 32 bits of GPRs being preserved - x86/boot: Annotate local functions - x86/asm: Make more symbols local - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd - tmpfs: verify {g,u}id mount options correctly - fs: Fix error checking for d_hash_and_lookup - new helper: lookup_positive_unlocked - eventfd: prevent underflow for eventfd semaphores - eventfd: Export eventfd_ctx_do_read - reiserfs: Check the return value from __getblk - Revert net: macsec: preserve ingress frame ordering - Revert net: macsec: Severe performance regression in ...preserve ordering - udf: Handle error when adding extent to a file - udf: Check consistency of Space Bitmap Descriptor - powerpc/32s: Fix assembler warning about r0 - net: Avoid address overwrite in kernel_connect - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications - ALSA: seq: oss: Fix racy open/close of MIDI devices - scsi: storvsc: Always set no_report_opcodes - cifs: add a warning when the in-flight count goes negative - sctp: handle invalid error codes without calling BUG - bnx2x: fix page fault following EEH recovery - netlabel: fix shift wrapping bug in netlbl_catmap_setlong - scsi: qedi: Fix potential deadlock on qedi_percpu-p_work_lock - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM - net: usb: qmi_wwan: add Quectel EM05GV2 - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM - security: keys: perform capable check only on privileged operations - platform/x86: huawei-wmi: Silence ambient light sensor - platform/x86: intel: hid: Always call BTNL ACPI method - ASoC: atmel: Fix the 8K sample parameter in I2SC master - ASoc: codecs: ES8316: Fix DMIC config - fs/nls: make load_nls take a const parameter - s390/dasd: fix hanging device after request requeue - s390/dasd: use correct number of retries for ERP requests - m68k: Fix invalid .section syntax - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args - ethernet: atheros: fix return value check in atl1c_tso_csum - ASoC: da7219: Check for failure reading AAD IRQ events - ASoC: da7219: Flush pending AAD IRQ when suspending - 9p: virtio: make sure "offs" is initialized in zc_request - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers - fsi: master-ast-cf: Add MODULE_FIRMWARE macro - firmware: stratix10-svc: Fix an NULL vs IS_ERR bug in probe - serial: sc16is7xx: fix bug when first setting GPIO direction - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition - staging: rtl8712: fix race condition - HID: wacom: remove the battery when the EKR is off - USB: serial: option: add FOXCONN T99W368/T99W373 product - USB: serial: option: add Quectel EM05G variant - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index - mmc: au1xmmc: force non-modular build and remove symbol_get usage - ARM: pxa: remove use of symbol_get - erofs: ensure that the post-EOF tails are all zeroed [5.4.17-2136.325.2.el7uek] - Pensando: kpcimgr: Decouple kstate addr from shmem addr [Orabug: 35842998] - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file [Orabug: 35844212] - uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE [Orabug: 35858089] - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block [Orabug: 35859331] [5.4.17-2136.325.1.el7uek] - uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE [Orabug: 35818484] - io_uring: add a sysctl to disable io_uring system-wide [Orabug: 35819375] - KVM: SVM: Set target pCPU during IRTE update if target vCPU is running [Orabug: 35827614] - KVM: SVM: Take and hold ir_list_lock when updating vCPU"s Physical ID entry [Orabug: 35827614] - Pensando: kpcimgr: Zero out mod pointer unconditionally [Orabug: 35842963] - pensando: kpcimgr: Flush i-cache before calling any pciesvc code [Orabug: 35842972] [5.4.17-2136.324.5.el7uek] - netfilter: nfnetlink_osf: avoid OOB read - dlm: fix plock lookup when using multiple lockspaces - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS - Revert IB/isert: Fix incorrect release of isert connection - ALSA: ac97: Fix possible error value of *rac97 - pinctrl: amd: Don"t show Invalid config param errors - netfilter: xt_sctp: validate the flag_info count - netfilter: xt_u32: validate user space input - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c [Orabug: 35824287] {CVE-2023-42753} [5.4.17-2136.324.4.el7uek] - kernfs: fix missing kernfs_iattr_rwsem locking [Orabug: 35796771] - x86/microcode: Stop reprobing mitigations after late microcode load [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fix SRSO mess [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Correct the mitigation status when SMT is disabled [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fixup frame-pointer vs rethunk [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Disable the mitigation on unaffected configurations [Orabug: 35818857] {CVE-2023-20569} - x86/retpoline: Don"t clobber RFLAGS during srso_safe_ret [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Explain the untraining sequences a bit more [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Cleanup the untrain mess [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename srso__alias to srso_alias_\1 [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename original retbleed methods [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Clean up SRSO return thunk mess [Orabug: 35818857] {CVE-2023-20569} - x86/alternative: Make custom return thunk unconditional [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix up srso_safe_ret and __x86_return_thunk [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix __x86_return_thunk symbol type [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix build breakage with the LLVM linker [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Tie SBPB bit setting to microcode patch detection [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix return thunks in generated code [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB on VMEXIT [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add SRSO_NO support [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB_BRTYPE support [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add a Speculative RAS Overflow mitigation [Orabug: 35818857] {CVE-2023-20569} - scsi: megaraid_sas: Fix deadlock on firmware crashdump [Orabug: 35819593] - rds: Fix lack of reentrancy for connection reset with dst addr zero [Orabug: 35819522] {CVE-2023-22024} [5.4.17-2136.324.3.el7uek] - uek-rpm: aarch64: enable ACPI_AGDI [Orabug: 34833165] - arm64: sdei: abort running SDEI handlers during crash [Orabug: 34833165] - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init [Orabug: 34833165] - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device [Orabug: 34833165] - ACPI: tables: Add AGDI to the list of known table signatures [Orabug: 34833165] - ACPICA: iASL: Add suppport for AGDI table [Orabug: 34833165] - ACPI: APEI: explicit init of HEST and GHES in apci_init [Orabug: 34833165] - x86/CPU/AMD: Fix the DIV initial fix attempt [Orabug: 35776936] {CVE-2023-20588} - x86/CPU/AMD: Do not leak quotient data after a division by 0 [Orabug: 35776936] {CVE-2023-20588} - uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config [Orabug: 35787554] [5.4.17-2136.324.2.el7uek] - LTS tag: v5.4.256 - Revert MIPS: Alchemy: fix dbdma2 - powerpc/pmac/smp: Drop unnecessary volatile qualifier - powerpc/pmac/smp: Avoid unused-variable warnings - LTS tag: v5.4.255 - dma-buf/sw_sync: Avoid recursive lock during fence signal - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} - clk: Fix undefined reference to clk_rate_exclusive_{get,put}" - scsi: core: raid_class: Remove raid_component_add - scsi: snic: Fix double free in snic_tgt_create - irqchip/mips-gic: Don"t touch vl_map if a local interrupt is not routable - Documentation/sysctl: document page_lock_unfairness - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - interconnect: Do not skip aggregation for disabled paths - Revert ALSA: pcm: Use SG-buffer only when direct DMA is available - ALSA: pcm: Fix build error on m68k and others - rtnetlink: Reject negative ifindexes in RTM_NEWLINK - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 - drm/display/dp: Fix the DP DSC Receiver cap size - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources only for non-root bus - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup - radix tree: remove unused variable - lib/clz_ctz.c: Fix __clzdi2 and __ctzdi2 for 32-bit kernels - batman-adv: Hold rtnl lock during MTU update via netlink - batman-adv: Fix batadv_v_ogm_aggr_send memory leak - batman-adv: Fix TT global entry leak when client roamed back - batman-adv: Do not get eth header before batadv_check_management_packet - batman-adv: Don"t increase MTU when set by user - batman-adv: Trigger events for auto adjusted MTU - nfsd: Fix race to FREE_STATEID and cl_revoked - clk: Fix slab-out-of-bounds error in devm_clk_release - NFSv4: Fix dropped lock for racing OPEN and delegation return - ibmveth: Use dcbf rather than dcbfl - bonding: fix macvlan over alb bond support - net: remove bond_slave_has_mac_rcu - net/sched: fix a qdisc modification with ambiguous command request - igb: Avoid starting unnecessary workqueues - net: validate veth and vxcan peer ifindexes - net: bcmgenet: Fix return value check for fixed_phy_register - net: bgmac: Fix return value check for fixed_phy_register - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit - dccp: annotate data-races in dccp_poll - sock: annotate data-races around prot-memory_pressure - octeontx2-af: SDP: fix receive link config - tracing: Fix memleak due to race between current_tracer and trace - drm/amd/display: check TG is non-null before checking if enabled - drm/amd/display: do not wait for mpc idle if tg is disabled - ASoC: fsl_sai: Disable bit clock with transmitter - ASoC: fsl_sai: Add new added registers and new bit definition - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger - regmap: Account for register length in SMBus I/O limits - ALSA: pcm: Fix potential data race at PCM memory allocation helpers - ALSA: pcm: Use SG-buffer only when direct DMA is available - ALSA: pcm: Set per-card upper limit of PCM buffer allocations - dm integrity: reduce vmalloc space footprint on 32-bit architectures - dm integrity: increase RECALC_SECTORS to improve recalculate speed - fbdev: fix potential OOB read in fast_imageblit - fbdev: Fix sys_imageblit for arbitrary image widths - fbdev: Improve performance of sys_imageblit - MIPS: cpu-features: Use boot_cpu_type for CPU type based features - MIPS: cpu-features: Enable octeon_cache by cpu_type - fs: dlm: fix mismatch of plock results from userspace - fs: dlm: use dlm_plock_info for do_unlock_close - fs: dlm: change plock interrupted message to debug again - fs: dlm: add pid to debug log - dlm: replace usage of found with dedicated list iterator variable - dlm: improve plock logging if interrupted - PCI: acpiphp: Reassign resources on bridge if necessary - net: phy: broadcom: stub c45 read/write for 54810 - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled - virtio-net: set queues after driver_ok - af_unix: Fix null-ptr-deref in unix_stream_sendpage. - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state - mmc: block: Fix in_flight[issue_type] value error - mmc: wbsd: fix double mmc_free_host in wbsd_init - cifs: Release folio lock on fscache read hit. - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. - serial: 8250: Fix oops for port-pm on uart_change_pm - ASoC: meson: axg-tdm-formatter: fix channel slot allocation - ASoC: rt5665: add missed regulator_bulk_disable - ARM: dts: imx: Set default tuning step for imx6sx usdhc - ARM: dts: imx: Set default tuning step for imx7d usdhc - ARM: dts: imx: Adjust dma-apbh node name - ARM: dts: imx7s: Drop dma-apb interrupt-names - bus: ti-sysc: Flush posted write on enable before reset - bus: ti-sysc: Improve reset to work with modules with no sysconfig - net: do not allow gso_size to be set to GSO_BY_FRAGS - sock: Fix misuse of sk_under_memory_pressure - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset - i40e: fix misleading debug logs - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - netfilter: nft_dynset: disallow object maps - ipvs: fix racy memcpy in proc_do_sync_threshold - selftests: mirror_gre_changes: Tighten up the TTL test match - xfrm: add NULL check in xfrm_update_ae_params - ip_vti: fix potential slab-use-after-free in decode_session6 - ip6_vti: fix slab-use-after-free in decode_session6 - xfrm: fix slab-use-after-free in decode_session6 - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c - net: af_key: fix sadb_x_filter validation - net: xfrm: Fix xfrm_address_filter OOB read - btrfs: fix BUG_ON condition in btrfs_cancel_balance - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms - powerpc/rtas_flash: allow user copy to flash block cache objects - fbdev: mmp: fix value check in mmphw_probe - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue - virtio-mmio: don"t break lifecycle of vm_dev - virtio-mmio: Use to_virtio_mmio_device to simply code - virtio-mmio: convert to devm_platform_ioremap_resource - nfsd: Remove incorrect check in nfsd4_validate_stateid - nfsd4: kill warnings on testing stateids with mismatched clientids - net/ncsi: Fix gma flag setting after response - tracing/probes: Fix to update dynamic data counter if fetcharg uses it - tracing/probes: Have process_fetch_insn take a void * instead of pt_regs - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename - mmc: sunxi: fix deferred probing - mmc: bcm2835: fix deferred probing - USB: dwc3: qcom: fix NULL-deref on suspend - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs - interconnect: Add helpers for enabling/disabling a path - interconnect: Move internal structs into a separate file - irqchip/mips-gic: Use raw spinlock for gic_lock - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online - ALSA: hda: Fix unhandled register update during auto-suspend period - PM: runtime: Add pm_runtime_get_if_active - PM-runtime: add tracepoints for usage_count changes - iio: addac: stx104: Fix race condition when converting analog-to-digital - iio: addac: stx104: Fix race condition for stx104_write_raw - iio: stx104: Move to addac subdirectory - iio: adc: stx104: Implement and utilize register structures - iio: adc: stx104: Utilize iomap interface - iio: add addac subdirectory - IMA: allow/fix UML builds - powerpc/kasan: Disable KCOV in KASAN code - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 Q760 - drm/amdgpu: Fix potential fence use-after-free v2 - Bluetooth: L2CAP: Fix use-after-free - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db - gfs2: Fix possible data races in gfs2_show_options - usb: chipidea: imx: don"t request QoS for imx8ulp - media: platform: mediatek: vpu: fix NULL ptr dereference - media: v4l2-mem2mem: add lock to protect parameter num_rdy - FS: JFS: Check for read-only mounted filesystem in txBegin - FS: JFS: Fix null-ptr-deref Read in txBegin - MIPS: dec: prom: Address -Warray-bounds warning - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev - udf: Fix uninitialized array access for some pathnames - ovl: check type and offset of struct vfsmount in ovl_entry - HID: add quirk for 03f0:464a HP Elite Presenter Mouse - quota: fix warning in dqgrab - quota: Properly disable quotas when add_dquot_ref fails - ALSA: emu10k1: roll up loops in DSP setup code for Audigy - drm/radeon: Fix integer overflow in radeon_cs_parser_init - macsec: use DEV_STATS_INC - macsec: Fix traffic counters/statistics - selftests: forwarding: tc_flower: Relax success criterion - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource - LTS tag: v5.4.254 - sch_netem: fix issues in netem_change vs get_dist_table - alpha: remove __init annotation from exported page_is_ram - scsi: core: Fix possible memory leak if device_add fails - scsi: snic: Fix possible memory leak if device_add fails - scsi: 53c700: Check that command slot is not NULL - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts - scsi: core: Fix legacy /proc parsing buffer overflow - netfilter: nf_tables: report use refcount overflow - nvme-rdma: fix potential unbalanced freeze unfreeze - nvme-tcp: fix potential unbalanced freeze unfreeze - btrfs: set cache_block_group_error if we find an error - btrfs: don"t stop integrity writeback too early - ibmvnic: Handle DMA unmapping of login buffs in release functions - net/mlx5: Allow 0 for total host VFs - dmaengine: mcf-edma: Fix a potential un-allocated memory access - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN - IB/hfi1: Fix possible panic during hotplug remove - drivers: net: prevent tun_build_skb to exceed the packet size limit - dccp: fix data-race around dp-dccps_mss_cache - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves - net/packet: annotate data-races around tp-status - mISDN: Update parameter type of dsp_cmx_send - selftests/rseq: Fix build with undefined __weak - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes - x86: Move gds_ucode_mitigated declaration to header - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none - usb: dwc3: Properly handle processing of pending events - usb-storage: alauda: Fix uninit-value in alauda_check_media - binder: fix memory leak in binder_init - iio: cros_ec: Fix the allocation size for cros_ec_command - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput - radix tree test suite: fix incorrect allocation size for pthreads - drm/nouveau/gr: enable memory loads on helper invocation on all channels - dmaengine: pl330: Return DMA_PAUSED when transaction is paused - ipv6: adjust ndisc_is_useropt to also return true for PIO - mmc: moxart: read scr register without changing byte order - LTS tag: v5.4.253 - Revert driver core: Annotate dev_err_probe with __must_check - drivers: core: fix kernel-doc markup for dev_err_probe - driver code: print symbolic error code - driver core: Annotate dev_err_probe with __must_check - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node - ARM: dts: imx6sll: fixup of operating points - ARM: dts: imx: add usb alias - ARM: dts: imx: Align L2 cache-controller nodename with dtschema - ARM: dts: imx6sll: Make ssi node name same as other platforms - arm64: dts: stratix10: fix incorrect I2C property for SCL signal - ceph: defer stopping mdsc delayed_work - ceph: use kill_anon_super helper - ceph: show tasks waiting on caps in debugfs caps file - PM: sleep: wakeirq: fix wake irq arming - PM / wakeirq: support enabling wake-up irq after runtime_suspend called - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ - selftests/rseq: check if libc rseq support is registered - powerpc/mm/altmap: Fix altmap boundary check - mtd: rawnand: omap_elm: Fix incorrect type in assignment - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation - test_firmware: prevent race conditions by a correct implementation of locking - ext2: Drop fragment support - fs: Protect reconfiguration of sb read-write from racing writes - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb - fs/sysv: Null check to prevent null-ptr-deref bug - net: tap_open: set sk_uid from current_fsuid - net: tun_chr_open: set sk_uid from current_fsuid - mtd: rawnand: meson: fix OOB available bytes for ECC - mtd: spinand: toshiba: Fix ecc_get_status - USB: zaurus: Add ID for A-300/B-500/C-700 - libceph: fix potential hang in ceph_osdc_notify - scsi: zfcp: Defer fc_rport blocking until after ADISC response - tcp_metrics: fix data-race in tcpm_suck_dst vs fastopen - tcp_metrics: annotate data-races around tm-tcpm_net - tcp_metrics: annotate data-races around tm-tcpm_vals[] - tcp_metrics: annotate data-races around tm-tcpm_lock - tcp_metrics: annotate data-races around tm-tcpm_stamp - tcp_metrics: fix addr_same helper - ip6mr: Fix skb_under_panic in ip6mr_cache_report - net: dcb: choose correct policy to parse DCB_ATTR_BCN - net: ll_temac: fix error checking of irq_of_parse_and_map - net: ll_temac: Switch to use dev_err_probe helper - driver core: add device probe log helper - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free - net: add missing data-race annotation for sk_ll_usec - net: add missing data-race annotations around sk-sk_peek_off - net: add missing READ_ONCE annotation - net: add missing READ_ONCE annotation - net: add missing READ_ONCE annotation - net: annotate data-races around sk-sk_max_pacing_rate - mISDN: hfcpci: Fix potential deadlock on hc-lock - net: sched: cls_u32: Fix match key mis-addressing - perf test uprobe_from_different_cu: Skip if there is no gcc - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx - KVM: s390: fix sthyi error handling - word-at-a-time: use the same return type for has_zero regardless of endianness - loop: Select I/O scheduler "none" from inside add_disk - perf: Fix function pointer case - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL macro - ASoC: cs42l51: fix driver to properly autoload with automatic module loading - net/sched: sch_qfq: account for stab overhead in qfq_enqueue - btrfs: fix race between quota disable and quota assign ioctls - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled - btrfs: qgroup: remove one-time use variables for quota_root checks - cpufreq: intel_pstate: Drop ACPI _PSS states table patching - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily - ACPI: processor: perflib: Use the no limit frequency QoS - dm cache policy smq: ensure IO doesn"t prevent cleaner policy progress - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register - s390/dasd: fix hanging device after quiesce/resume - virtio-net: fix race between set queues and probe - btrfs: check if the transaction was aborted at btrfs_wait_for_commit - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping - tpm_tis: Explicitly check for error code - btrfs: check for commit error at btrfs_attach_transaction_barrier - hwmon: Fix for temp6 processed even if PECI1 disabled - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext - Documentation: security-bugs.rst: clarify CVE handling - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group - Revert usb: xhci: tegra: Fix error check - usb: xhci-mtk: set the dma max_seg_size - USB: quirks: add quirk for Focusrite Scarlett - usb: ohci-at91: Fix the unhandle interrupt when resume - usb: dwc3: don"t reset device side if dwc3 was configured as host-only - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy - Revert usb: dwc3: core: Enable AutoRetry feature in the controller - can: gs_usb: gs_can_close: add missing set of CAN state to CAN_STATE_STOPPED - USB: serial: simple: sort driver entries - USB: serial: simple: add Kaufmann RKS+CAN VCP - USB: serial: option: add Quectel EC200A module support - USB: serial: option: support Quectel EM060K_128 - serial: sifive: Fix sifive_serial_console_setup section - serial: 8250_dw: Preserve original value of DLF register - tracing: Fix warning in trace_buffered_event_disable - ring-buffer: Fix wrong stat of cpu_buffer-read - ata: pata_ns87415: mark ns87560_tf_read static - dm raid: fix missing reconfig_mutex unlock in raid_ctr error paths - block: Fix a source code comment in include/uapi/linux/blkzoned.h - ASoC: fsl_spdif: Silence output on stop - drm/msm: Fix IS_ERR_OR_NULL vs NULL check in a5xx_submit_in_rb - drm/msm/adreno: Fix snapshot BINDLESS_DATA size - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id - RDMA/mlx4: Make check for invalid flags stricter - benet: fix return value check in be_lancer_xmit_workarounds - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 - net/sched: mqprio: add extack to mqprio_parse_nlattr - net/sched: mqprio: refactor nlattr parsing to a separate function - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 - team: reset team"s flags when down link is P2P device - bonding: reset bond"s flags when down link is P2P device - tcp: Reduce chance of collisions in inet6_hashfn. - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address - ethernet: atheros: fix return value check in atl1e_tso_csum - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe - vxlan: calculate correct header length for GPE - i40e: Fix an NULL vs IS_ERR bug for debugfs_create_dir - ext4: fix to check return value of freeze_bdev in ext4_shutdown - keys: Fix linking a duplicate key to a keyring"s assoc_array - uapi: General notification queue definitions - scsi: qla2xxx: Array index may go out of bound - pwm: meson: fix handling of period/duty if greater than UINT_MAX - pwm: meson: Simplify duplicated per-channel tracking - pwm: meson: Remove redundant assignment to variable fin_freq - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs - ftrace: Store the order of pages allocated in ftrace_page - ftrace: Check if pages were allocated before calling free_pages - ftrace: Add information on number of page groups allocated - fs: dlm: interrupt posix locks only when process is killed - dlm: rearrange async condition return - dlm: cleanup plock_op vs plock_xop - PCI/ASPM: Avoid link retraining race - PCI/ASPM: Factor out pcie_wait_for_retrain - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link - ext4: Fix reusing stale buffer heads from last failed mounting - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info - btrfs: fix extent buffer leak after tree mod log failure at split_node - btrfs: fix race between quota disable and relocation - btrfs: qgroup: catch reserved space leaks at unmount time - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent - bcache: remove "int n" from parameter list of bch_bucket_alloc_set - gpio: tps68470: Make tps68470_gpio_output always set the initial value - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - jbd2: recheck chechpointing non-dirty buffer - jbd2: remove redundant buffer io error checks - jbd2: fix kernel-doc markups - jbd2: fix incorrect code style - LTS tag: v5.4.252 - x86: fix backwards merge of GDS/SRSO bit - xen/netback: Fix buffer overrun triggered by unusual packet - x86/cpu, kvm: Add support for CPUID_80000021_EAX - tools headers cpufeatures: Sync with the kernel sources - x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] - x86/cpu: Add VM page flush MSR availablility as a CPUID feature - x86/cpufeatures: Add SEV-ES CPU feature - x86/mm: fix poking_init for Xen PV guests [5.4.17-2136.324.1.el7uek] - io_uring: add support for registering ring file descriptors [Orabug: 35485491] - mm,shmem,thp: limit shmem THP allocations to requested zones [Orabug: 35655117] - mm,thp,shm: limit gfp mask to no more than specified [Orabug: 35655117] - mm,thp,shmem: limit shmem THP alloc gfp_mask [Orabug: 35655117] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade [Orabug: 35741866] - rds: Remove gratuitous include of time.h from rds.h [Orabug: 35742761] - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device [Orabug: 35750824] - smp: Reduce NMI traffic from CSD waiters to CSD destination [Orabug: 35752501] - smp: Reduce logging due to dump_stack of CSD waiters [Orabug: 35752501] [5.4.17-2136.323.8.el7uek] - vhost-scsi: Fix alignment handling with windows [Orabug: 35769318] - Revert vhost/scsi: support non zerocopy iovecs [Orabug: 35769318] [5.4.17-2136.323.7.el7uek] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl [Orabug: 35725160] - KVM: SVM: Add support for Virtual SPEC_CTRL [Orabug: 35725160] - x86/cpufeatures: Add the Virtual SPEC_CTRL feature [Orabug: 35725160] - x86/mm: Initialize text poking earlier [Orabug: 35744495] - mm: Move mm_cachep initialization to mm_init [Orabug: 35744495] - x86/mm: Use mm_alloc in poking_init [Orabug: 35744495] - mips: add support for TIF_NOTIFY_SIGNAL [Orabug: 35749111] [5.4.17-2136.323.6.el7uek] - ek-rpm: Update kernel"s linux-firmware dependency. [Orabug: 35742717] - nbd: make sure request completion won"t concurrent [Orabug: 35339589] - nbd: don"t handle response without a corresponding request message [Orabug: 35339589] - nvme: handle effects after freeing the request [Orabug: 35411534] - x86/pkeys: Revert a5eff7259790 [Orabug: 35714800] {CVE-2022-40982} - Documentation/x86: Fix backwards on/off logic about YMM support [Orabug: 35714800] {CVE-2022-40982} - x86/xen: Fix secondary processors" FPU initialization [Orabug: 35714800] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Move FPU initialization into arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Mark init functions __init [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Remove cpuinfo argument from init functions [Orabug: 35714800] {CVE-2022-40982} - init, x86: Move mem_encrypt_init into arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - init: Invoke arch_cpu_finalize_init earlier [Orabug: 35714800] {CVE-2022-40982} - init: Remove check_bugs leftovers [Orabug: 35714800] {CVE-2022-40982} - um/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - sparc/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - sh/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - mips/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - m68k/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - ia64/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - ARM: cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - x86/cpu: Switch to arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - init: Provide arch_cpu_finalize_init [Orabug: 35714800] {CVE-2022-40982} - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp [Orabug: 35729915] [5.4.17-2136.323.5.el7uek] - io_uring/net: save msghdr-msg_control for retries [Orabug: 35495339] - io_uring/net: clear msg_controllen on partial sendmsg retry [Orabug: 35495339] - io_uring/net: disable partial retries for recvmsg with cmsg [Orabug: 35495339] - io_uring: hold uring mutex around poll removal [Orabug: 35495339] - io_uring: avoid null-ptr-deref in io_arm_poll_handler [Orabug: 35495339] - io_uring/poll: allow some retries for poll triggering spuriously [Orabug: 35495339] - io_uring: remove MSG_NOSIGNAL from recvmsg [Orabug: 35495339] - io_uring/rsrc: disallow multi-source reg buffers [Orabug: 35495339] - io_uring: add a conditional reschedule to the IOPOLL cancelation loop [Orabug: 35495339] - io_uring: mark task TASK_RUNNING before handling resume/task work [Orabug: 35495339] - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work [Orabug: 35495339] - io_uring: ensure that io_init_req passes in the right issue_flags [Orabug: 35495339] - io_uring: add missing lock in io_get_file_fixed [Orabug: 35495339] - io_uring/rw: remove leftover debug statement [Orabug: 35495339] - io_uring/rw: ensure kiocb_end_write is always called [Orabug: 35495339] - io_uring: fix double poll leak on repolling [Orabug: 35495339] - io_uring: Clean up a false-positive warning from GCC 9.3.0 [Orabug: 35495339] - io_uring/net: fix fast_iov assignment in io_setup_async_msg [Orabug: 35495339] - io_uring: io_kiocb_update_pos should not touch file for non -1 offset [Orabug: 35495339] - io_uring/rw: defer fsnotify calls to task context [Orabug: 35495339] - io_uring: do not recalculate ppos unnecessarily [Orabug: 35495339] - io_uring: update kiocb-ki_pos at execution time [Orabug: 35495339] - io_uring: remove duplicated calls to io_kiocb_ppos [Orabug: 35495339] - io_uring: ensure that cached task references are always put on exit [Orabug: 35495339] - io_uring: fix CQ waiting timeout handling [Orabug: 35495339] - io_uring: lock overflowing for IOPOLL [Orabug: 35495339] - io_uring: check for valid register opcode earlier [Orabug: 35495339] - io_uring: fix async accept on O_NONBLOCK sockets [Orabug: 35495339] - io_uring: allow re-poll if we made progress [Orabug: 35495339] - io_uring: support MSG_WAITALL for IORING_OP_SEND [Orabug: 35495339] - io_uring: add flag for disabling provided buffer recycling [Orabug: 35495339] - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly [Orabug: 35495339] - io_uring: improve send/recv error handling [Orabug: 35495339] - io_uring: don"t gate task_work run on TIF_NOTIFY_SIGNAL [Orabug: 35495339] - io_uring/io-wq: only free worker if it was allocated for creation [Orabug: 35495339] - io_uring/io-wq: free worker if task_work creation is canceled [Orabug: 35495339] - io_uring: Fix unsigned "res" comparison with zero in io_fixup_rw_res [Orabug: 35495339] - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups [Orabug: 35495339] - eventpoll: add EPOLL_URING_WAKE poll wakeup flag [Orabug: 35495339] - epoll: simplify ep_poll_safewake for CONFIG_DEBUG_LOCK_ALLOC [Orabug: 35495339] - eventfd: provide a eventfd_signal_mask helper [Orabug: 35495339] - signal: kill JOBCTL_TASK_WORK [Orabug: 35495339] - net: remove cmsg restriction from io_uring based send/recvmsg calls [Orabug: 35495339] - io_uring: import 5.15-stable io_uring [Orabug: 35495339] - fs: provide locked helper variant of close_fd_get_file [Orabug: 35495339] - file: Rename __close_fd_get_file close_fd_get_file [Orabug: 35495339] - fs: push the getname from do_rmdir into the callers [Orabug: 35495339] - task_work: unconditionally run task_work from get_signal [Orabug: 35495339] - Revert proc: don"t allow async path resolution of /proc/self components [Orabug: 35495339] - tools headers UAPI: Sync openat2.h with the kernel sources [Orabug: 35495339] - fs: expose LOOKUP_CACHED through openat2 RESOLVE_CACHED [Orabug: 35495339] - fix handling of nd-depth on LOOKUP_CACHED failures in try_to_unlazy* [Orabug: 35495339] - fs: add support for LOOKUP_CACHED [Orabug: 35495339] - x86/process: setup io_threads more like normal user space threads [Orabug: 35495339] - arch: setup PF_IO_WORKER threads like PF_KTHREAD [Orabug: 35495339] - task_work: remove legacy TWA_SIGNAL path [Orabug: 35495339] - Make sure nd-path.mnt and nd-path.dentry are always valid pointers [Orabug: 35495339] - fs: make do_renameat2 take struct filename [Orabug: 35495339] - kernel: allow fork with TIF_NOTIFY_SIGNAL pending [Orabug: 35495339] - coredump: Limit what can interrupt coredumps [Orabug: 35495339] - arm64: add support for TIF_NOTIFY_SIGNAL [Orabug: 35495339] - arm: add support for TIF_NOTIFY_SIGNAL [Orabug: 35495339] - task_work: Use TIF_NOTIFY_SIGNAL if available [Orabug: 35495339] - entry: Add support for TIF_NOTIFY_SIGNAL [Orabug: 35495339] - x86: Wire up TIF_NOTIFY_SIGNAL [Orabug: 35495339] - signal: Add task_sigpending helper [Orabug: 35495339] - net: add accept helper not installing fd [Orabug: 35495339] - net: provide __sys_shutdown_sock that takes a socket [Orabug: 35495339] - task_work: add helper for more targeted task_work canceling [Orabug: 35495339] - kernel: don"t call do_exit for PF_IO_WORKER threads [Orabug: 35495339] - kernel: stop masking signals in create_io_thread [Orabug: 35495339] - iov_iter: add helper to save iov_iter state [Orabug: 35495339] - kernel: provide create_io_thread helper [Orabug: 35495339] - io_uring: add missing item types for splice request [Orabug: 35495339] - io_uring: don"t hold uring_lock when calling io_run_task_work* [Orabug: 35495339] - io_uring: kill goto error handling in io_sqpoll_wait_sq [Orabug: 35495339] {CVE-2022-47946} - io_uring: correct pinned_vm accounting [Orabug: 35495339] - io_uring: Use original task for req identity in io_identity_cow [Orabug: 35495339] - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe-ioprio [Orabug: 35495339] - io_uring: use separate list entry for iopoll requests [Orabug: 35495339] - io_uring: add missing item types for various requests [Orabug: 35495339] {CVE-2022-2327} - io_uring: fix using under-expanded iters [Orabug: 35495339] {CVE-2022-1508} - io_uring: don"t re-import iovecs from callbacks [Orabug: 35495339] - arm64: Remove TIF_NOHZ [Orabug: 35495339] - arm: Remove TIF_NOHZ [Orabug: 35495339] - x86: Remove TIF_NOHZ [Orabug: 35495339] - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ [Orabug: 35495339] - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY [Orabug: 35495339] - mm: allow a controlled amount of unfairness in the page lock [Orabug: 35565406] [5.4.17-2136.323.4.el7uek] - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf [Orabug: 35676248] - uek-rpm: Update kernel"s linux-firmware dependency. [Orabug: 35678692] - Revert sched/fair: sanitize vruntime of entity being placed [Orabug: 35683806] - Revert sched/fair: Sanitize vruntime of entity being migrated [Orabug: 35683806] [5.4.17-2136.323.3.el7uek] - LTS tag: v5.4.251 - tracing/histograms: Return an error if we fail to add histogram to hist_vars list - tcp: annotate data-races around fastopenq.max_qlen - tcp: annotate data-races around tp-notsent_lowat - tcp: annotate data-races around rskq_defer_accept - tcp: annotate data-races around tp-linger2 - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX - tcp: annotate data-races around tp-tcp_tx_delay - netfilter: nf_tables: can"t schedule in nft_chain_validate - netfilter: nf_tables: fix spurious set element insertion failure - llc: Don"t drop packet from non-root netns. - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe - Revert tcp: avoid the lookup process failing to get sk in ehash table - net:ipv6: check return value of pskb_trim - iavf: Fix use-after-free in free_netdev - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field/cpsw_ale_set_field - pinctrl: amd: Use amd_pinconf_set for all config options - fbdev: imxfb: warn about invalid left/right margin - spi: bcm63xx: fix max prepend length - igb: Fix igb_down hung on surprise removal - wifi: iwlwifi: mvm: avoid baid size integer overflow - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point - devlink: report devlink_port_type_warn source device - bpf: Address KCSAN report on bpf_lru_list - sched/fair: Don"t balance task to its current running CPU - arm64: mm: fix VA-range sanity check - posix-timers: Ensure timer ID search-loop limit is valid - md/raid10: prevent soft lockup while flush writes - md: fix data corruption for raid456 when reshape restart while grow up - nbd: Add the maximum limit of allocated index in nbd_dev_add - debugobjects: Recheck debug_objects_enabled before reporting - ext4: correct inline offset when handling xattrs in inode body - drm/client: Fix memory leak in drm_client_modeset_probe - drm/client: Fix memory leak in drm_client_target_cloned - can: bcm: Fix UAF in bcm_proc_show - selftests: tc: set timeout to 15 minutes - fuse: revalidate: don"t invalidate if interrupted - btrfs: fix warning when putting transaction with qgroups enabled after abort - perf probe: Add test for regression introduced by switch to die_get_decl_file - drm/atomic: Fix potential use-after-free in nonblocking commits - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue - scsi: qla2xxx: Pointer may be dereferenced - scsi: qla2xxx: Correct the index of array - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport - scsi: qla2xxx: Fix potential NULL pointer dereference - scsi: qla2xxx: Wait for io return on terminate rport - tracing/probes: Fix not to count error code to total length - tracing: Fix null pointer dereference in tracing_err_log_open - xtensa: ISS: fix call to split_if_spec - ring-buffer: Fix deadloop issue on reading trace_pipe - tracing/histograms: Add histograms to hist_vars if they have referenced variables - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk when iterating clk - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk in case of error - Revert 8250: add support for ASIX devices with a FIFO bug - meson saradc: fix clock divider mask length - ceph: don"t let check_caps skip sending responses for revoke msgs - hwrng: imx-rngc - fix the timeout for init and self check - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool - serial: atmel: don"t enable IRQs prematurely - drm/rockchip: vop: Leave vblank enabled in self-refresh - drm/atomic: Allow vblank-enabled + self-refresh disable - fs: dlm: return positive pid value for F_GETLK - md/raid0: add discard support for the "original" layout - misc: pci_endpoint_test: Re-init completion for every test - misc: pci_endpoint_test: Free IRQs before removing the device - PCI: rockchip: Set address alignment for endpoint mode - PCI: rockchip: Use u32 variable to access 32-bit registers - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked - PCI: rockchip: Write PCI Device ID to correct register - PCI: rockchip: Assert PCI Configuration Enable bit after probe - PCI: qcom: Disable write access to read only registers for IP v2.3.3 - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold - jfs: jfs_dmap: Validate db_l2nbperpage while mounting - ext4: only update i_reserved_data_blocks on successful block allocation - ext4: fix wrong unit use in ext4_mb_clear_bb - erofs: fix compact 4B support for 16k block size - SUNRPC: Fix UAF in svc_tcp_listen_data_ready - misc: fastrpc: Create fastrpc scalar with correct buffer count - powerpc: Fail build if using recordmcount with binutils v2.37 - net: bcmgenet: Ensure MDIO unregistration has clocks enabled - mtd: rawnand: meson: fix unaligned DMA buffers handling - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation - pinctrl: amd: Only use special debounce behavior for GPIO 0 - pinctrl: amd: Detect internal GPIO0 debounce handling - pinctrl: amd: Fix mistake in handling clearing pins at startup - net/sched: make psched_mtu RTNL-less safe - net/sched: flower: Ensure both minimum and maximum ports are specified - cls_flower: Add extack support for src and dst port range options - wifi: airo: avoid uninitialized warning in airo_get_rate - erofs: avoid infinite loop in z_erofs_do_read_page when reading beyond EOF - platform/x86: wmi: Break possible infinite loop when parsing GUID - platform/x86: wmi: move variables - platform/x86: wmi: use guid_t and guid_equal - platform/x86: wmi: remove unnecessary argument - platform/x86: wmi: Fix indentation in some cases - platform/x86: wmi: Replace UUID redefinitions by their originals - ipv6/addrconf: fix a potential refcount underflow for idev - NTB: ntb_tool: Add check for devm_kcalloc - NTB: ntb_transport: fix possible memory leak while device_register fails - ntb: intel: Fix error handling in intel_ntb_pci_driver_init - NTB: amd: Fix error handling in amd_ntb_pci_driver_init - ntb: idt: Fix error handling in idt_pci_driver_init - udp6: fix udp6_ehashfn typo - icmp6: Fix null-ptr-deref of ip6_null_entry-rt6i_idev in icmp6_dev. - ionic: remove WARN_ON to prevent panic_on_warn - net/sched: cls_fw: Fix improper refcount update leads to use-after-free - net: mvneta: fix txq_map in case of txq_number==1 - scsi: qla2xxx: Fix error code in qla2x00_start_sp - igc: set TP bit in "supported" and "advertising" fields of ethtool_link_ksettings - igc: Remove delay during TX ring configuration - drm/panel: simple: Add connector_type for innolux_at043tn24 - drm/panel: Add and fill drm_panel type field - drm/panel: Initialise panel dev and funcs through drm_panel_init - workqueue: clean up WORK_* constant types, clarify masking - net: lan743x: Don"t sleep in atomic context - block/partition: fix signedness issue for Amiga partitions - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free - netfilter: nf_tables: fix scheduling-while-atomic splat - netfilter: nf_tables: unbind non-anonymous set if rule construction fails - netfilter: nf_tables: reject unbound anonymous set before commit phase - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE - netfilter: nf_tables: add rescheduling points during loop detection walks - netfilter: nf_tables: use net_generic infra for transaction data - netfilter: add helper function to set up the nfnetlink header and use it - netfilter: nftables: add helper function to set the base sequence number - netfilter: nf_tables: fix nat hook table deletion - block: add overflow checks for Amiga partition support - fanotify: disallow mount/sb marks on kernel internal pseudo fs - fs: no need to check source - ARM: orion5x: fix d2net gpio initialization - btrfs: fix race when deleting quota root from the dirty cow roots list - fs: Lock moved directories - fs: Establish locking order for unrelated directories - Revert f2fs: fix potential corruption when moving a directory - ext4: Remove ext4 locking of moved directory - fs: avoid empty option when generating legacy mount string - jffs2: reduce stack usage in jffs2_build_xattr_subsystem - integrity: Fix possible multiple allocation in integrity_inode_get - bcache: Remove unnecessary NULL point check in node allocations - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M - mmc: core: disable TRIM on Kingston EMMC04G-M627 - NFSD: add encoding of op_recall flag for write delegation - ALSA: jack: Fix mutex call in snd_jack_report - i2c: xiic: Don"t try to handle more interrupt events after error - i2c: xiic: Defer xiic_wakeup and __xiic_start_xfer in xiic_process - sh: dma: Fix DMA channel offset calculation - net: dsa: tag_sja1105: fix MAC DA patching from meta frames - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX - xsk: Honor SO_BINDTODEVICE on bind - xsk: Improve documentation for AF_XDP - tcp: annotate data races in __tcp_oow_rate_limited - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y - f2fs: fix error path handling in truncate_dnode - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available - Add MODULE_FIRMWARE for FIRMWARE_TG357766. - sctp: fix potential deadlock on net-sctp.addr_wq_lock - rtc: st-lpc: Release some resources in st_rtc_probe in case of error - pwm: sysfs: Do not apply state to already disabled PWMs - pwm: imx-tpm: force "real_period" to be zero in suspend - mfd: stmpe: Only disable the regulators if they are enabled - KVM: s390: vsie: fix the length of APCB bitmap - mfd: stmfx: Fix error path in stmfx_chip_init - serial: 8250_omap: Use force_suspend and resume for system suspend - mfd: intel-lpss: Add missing check for platform_get_resource - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes - mfd: rt5033: Drop rt5033-battery sub-device - usb: hide unused usbfs_notify_suspend/resume functions - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe - extcon: Fix kernel doc of property capability fields to avoid warnings - extcon: Fix kernel doc of property fields to avoid warnings - usb: dwc3: qcom: Fix potential memory leak - media: usb: siano: Fix warning due to null work_func_t function pointer - media: videodev2.h: Fix struct v4l2_input tuner index comment - media: usb: Check az6007_read return value - sh: j2: Use ioremap to translate device tree address into kernel memory - w1: fix loop in w1_fini - block: change all __u32 annotations to __be32 in affs_hardblocks.h - block: fix signed int overflow in Amiga partition support - usb: dwc3: gadget: Propagate core init errors to UDC during pullup - USB: serial: option: add LARA-R6 01B PIDs - hwrng: st - keep clock enabled while hwrng is registered - hwrng: st - Fix W=1 unused variable warning - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION - ARC: define ASM_NL and __ALIGN outside #ifdef __ASSEMBLY__ guard - modpost: fix off by one in is_executable_section - crypto: marvell/cesa - Fix type mismatch warning - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} - modpost: fix section mismatch message for R_ARM_ABS32 - crypto: nx - fix build warnings when DEBUG_FS is not enabled - hwrng: virtio - Fix race on data_avail and actual data - hwrng: virtio - always add a pending request - hwrng: virtio - don"t waste entropy - hwrng: virtio - don"t wait on cleanup - hwrng: virtio - add an internal buffer - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary - pinctrl: at91-pio4: check return value of devm_kasprintf - perf dwarf-aux: Fix off-by-one in die_get_varname - pinctrl: cherryview: Return correct value if pin in push-pull mode - PCI: Add pci_clear_master stub for non-CONFIG_PCI - PCI: ftpci100: Release the clock resources - PCI: pciehp: Cancel bringup sequence if card is not present - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free - scsi: qedf: Fix NULL dereference in error handling - ASoC: imx-audmix: check return value of devm_kasprintf - clk: keystone: sci-clk: check return value of kasprintf - clk: cdce925: check return value of kasprintf - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer - clk: tegra: tegra124-emc: Fix potential memory leak - drm/radeon: fix possible division-by-zero errors - drm/amdkfd: Fix potential deallocation of previously deallocated memory. - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 - IB/hfi1: Fix sdma.h tx-num_descs off-by-one errors - soc/fsl/qe: fix usb.c build errors - ASoC: es8316: Do not set rate constraints for unsupported MCLKs - ASoC: es8316: Increment max value for ALC Capture Target Volume control - memory: brcmstb_dpfe: fix testing array offset after use - ARM: ep93xx: fix missing-prototype warnings - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H - arm64: dts: qcom: msm8916: correct camss unit address - ARM: dts: gta04: Move model property out of pinctrl node - RDMA/bnxt_re: Fix to remove an unnecessary log - drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks - Input: adxl34x - do not hardcode interrupt trigger type - ARM: dts: BCM5301X: Drop clock-names from the SPI node - Input: drv260x - sleep between polling GO bit - radeon: avoid double free in ci_dpm_init - netlink: Add __sock_i_ino for __netlink_diag_dump. - ipvlan: Fix return value of ipvlan_queue_xmit - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param return value. - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one - lib/ts_bm: reset initial match offset for every block of text - net: nfc: Fix use-after-free caused by nfc_llcp_find_local - nfc: llcp: simplify llcp_sock_connect error paths - gtp: Fix use-after-free in __gtp_encap_destroy. - selftests: rtnetlink: remove netdevsim device after ipsec offload test - netlink: do not hard code device address lenth in fdb dumps - netlink: fix potential deadlock in netlink_set_err - wifi: ath9k: convert msecs to jiffies where needed - wifi: cfg80211: rewrite merging of inherited elements - wifi: iwlwifi: pull from TXQs with softirqs disabled - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key - memstick r592: make memstick_debug_get_tpc_name static - kexec: fix a memory leak in crash_shrink_memory - watchdog/perf: more properly prevent false positives with turbo modes - watchdog/perf: define dummy watchdog_update_hrtimer_threshold on correct config - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown - wifi: ath9k: don"t allow to overwrite ENDPOINT0 attributes - wifi: ray_cs: Fix an error handling path in ray_probe - wifi: ray_cs: Drop useless status variable in parse_addr - wifi: ray_cs: Utilize strnlen in parse_addr - wifi: wl3501_cs: Fix an error handling path in wl3501_probe - wl3501_cs: use eth_hw_addr_set - net: create netdev-dev_addr assignment helpers - wl3501_cs: Fix misspelling and provide missing documentation - wl3501_cs: Remove unnecessary NULL check - wl3501_cs: Fix a bunch of formatting issues related to function docs - wifi: atmel: Fix an error handling path in atmel_probe - wifi: orinoco: Fix an error handling path in orinoco_cs_probe - wifi: orinoco: Fix an error handling path in spectrum_cs_probe - regulator: core: Streamline debugfs operations - regulator: core: Fix more error checking for debugfs_create_dir - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect - nfc: constify several pointers to u8, char and sk_buff - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG - samples/bpf: Fix buffer overflow in tcp_basertt - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation - ima: Fix build warnings - pstore/ram: Add check for kstrdup - evm: Complete description of evm_inode_setattr - ARM: 9303/1: kprobes: avoid missing-declaration warnings - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency - PM: domains: fix integer overflow issues in genpd_parse_state - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode. - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors - irqchip/jcore-aic: Kill use of irq_create_strict_mappings - md/raid10: fix io loss while replacement replace rdev - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request - md/raid10: fix wrong setting of max_corr_read_errors - md/raid10: fix overflow of md/safe_mode_delay - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter - x86/resctrl: Only show tasks" pid in current pid namespace - x86/resctrl: Use is_closid_match in more places - bgmac: fix *initial* chip reset to support BCM5358 - drm/amdgpu: Validate VM ioctl flags. - scripts/tags.sh: Resolve gtags empty index generation - drm/i915: Initialise outparam for error return from wait_for_register - HID: wacom: Use ktime_t rather than int when dealing with timestamps - fbdev: imsttfb: Fix use after free bug in imsttfb_probe - video: imsttfb: check for ioremap failures - x86/smp: Use dedicated cache-line for mwait_play_dead - gfs2: Don"t deref jdesc in evict - LTS tag: v5.4.250 [5.4.17-2136.323.2.el7uek] - x86/cpu/amd: Add a Zenbleed fix [Orabug: 35641578] - x86/cpu/amd: Move the errata checking functionality up [Orabug: 35641578] - ocfs2: always read both high and low parts of dinode link count [Orabug: 35643003] - ovl: Always reevaluate the file signature for IMA [Orabug: 35646439] - bpf: fix NULL pointer dereferences when vmlinux BTF is absent [Orabug: 35623657] - SUNRPC: Ensure the transport backchannel association [Orabug: 35643879] [5.4.17-2136.323.1.el7uek] - uek-rpm: Change the toolchain version in OL8 [Orabug: 35378775] - net/rds: Allow MSG_NOSIGNAL in sendmsg [Orabug: 35640816]

Platform:
Oracle Linux 7
Product:
kernel-uek
Reference:
ELSA-2023-12974
CVE-2023-1989
CVE-2023-42753
CVE-2023-20569
CVE-2023-22024
CVE-2023-20588
CVE-2022-40982
CVE-2022-47946
CVE-2022-2327
CVE-2022-1508
CVE    9
CVE-2022-2327
CVE-2022-47946
CVE-2022-40982
CVE-2023-20569
...
CPE    2
cpe:/o:oracle:kernel-uek:5.x
cpe:/o:oracle:linux:7

© SecPod Technologies