The SUSE Linux Enterprise 12 SP4 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of this, an attacker with the ability to run code in kernel space of a guest VM can cause the host kernel to panic . - CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the configuration lacks CONFIG_INIT_STACK_ALL . - CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls . - CVE-2019-9458: In the video driver there was a use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed . - CVE-2019-3701: Fixed an issue in can_can_gw_rcv, which could cause a system crash . - CVE-2019-19770: Fixed a use-after-free in the debugfs_remove function . - CVE-2020-11669: Fixed an issue where arch/powerpc/kernel/idle_book3s.S did not have save/restore functionality for PNV_POWERSAVE_AMR, PNV_POWERSAVE_UAMOR, and PNV_POWERSAVE_AMOR . - CVE-2020-8647: There was a use-after-free vulnerability in the vc_do_resize function in drivers/tty/vt/vt.c . - CVE-2020-8649: There was a use-after-free vulnerability in the vgacon_invert_region function in drivers/video/console/vgacon.c . - CVE-2020-9383: An issue was discovered set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC index is not checked for errors before assigning it . - CVE-2019-19768: Fixed a use-after-free in the __blk_add_trace function in kernel/trace/blktrace.c . The following non-security bugs were fixed: - ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH macro . - ACPI: watchdog: Fix gas- gt;access_width usage . - ALSA: ali5451: remove redundant variable capture_flag . - ALSA: core: Replace zero-length array with flexible-array member . - ALSA: dummy: Fix PCM format loop in proc output . - ALSA: emu10k1: Fix endianness annotations . - ALSA: hda/ca0132 - Replace zero-length array with flexible-array member . - ALSA: hda_codec: Replace zero-length array with flexible-array member . - ALSA: hda: Fix potential access overflow in beep helper . - ALSA: hda/realtek: Fix pop noise on ALC225 . - ALSA: hda/realtek - Set principled PC Beep configuration for ALC256 . - ALSA: hda: remove redundant assignment to variable timeout . - ALSA: hda: Use scnprintf for string truncation . - ALSA: hdsp: remove redundant assignment to variable err . - ALSA: ice1724: Fix invalid access for enumerated ctl items . - ALSA: info: remove redundant assignment to variable c . - ALSA: korg1212: fix if-statement empty body warnings . - ALSA: line6: Fix endless MIDI read loop . - ALSA: pcm: oss: Avoid plugin buffer overflow . - ALSA: pcm: oss: Fix regression by buffer overflow fix . - ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc checks . - ALSA: seq: oss: Fix running status after receiving sysex . - ALSA: seq: virmidi: Fix running status after receiving sysex . - ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status . - ALSA: via82xx: Fix endianness annotations . - ASoC: dapm: Correct DAPM handling of active widgets during shutdown . - ASoC: Intel: atom: Take the drv- gt;lock mutex before calling sst_send_slot_map . - ASoC: Intel: mrfld: fix incorrect check on p- gt;sink . - ASoC: Intel: mrfld: return error codes when an error occurs . - ASoC: jz4740-i2s: Fix divider written at incorrect offset in register . - ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path . - ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output . - ASoC: pcm: update FE/BE trigger order based on the command . - ASoC: samsung: Prevent clk_get_rate calls in atomic context . - ASoC: sun8i-codec: Remove unused dev from codec struct . - ASoC: topology: Fix memleak in soc_tplg_link_elems_load . - ath9k: Handle txpower changes even when TPC is disabled . - atm: zatm: Fix empty body Clang warnings . - atomic: Add irqsave variant of atomic_dec_and_lock . - b43legacy: Fix -Wcast-function-type . - batman-adv: Avoid spurious warnings from bat_v neigh_cmp implementation . - batman-adv: Do not schedule OGM for disabled interface . - batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs . - blk: Fix kabi due to blk_trace_mutex addition . - blk-mq: Allow blocking queue tag iter callbacks . - blktrace: fix dereference after null check . - blktrace: fix trace mutex deadlock . - block: allow gendisk"s request_queue registration to be . - block, bfq: fix use-after-free in bfq_idle_slice_timer_body . - block: keep bdi- gt;io_pages in sync with max_sectors_kb for stacked devices . - Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl . - bnxt_en: Fix TC queue mapping . - bonding/alb: properly access headers in bond_alb_xmit . - bpf: Explicitly memset some bpf info structures declared on the stack . - bpf: Explicitly memset the bpf_attr structure . - bpf: fix ldx in ld_abs rewrite for large offsets . - bpf: implement ld_abs/ld_ind in native bpf . - bpf: make unknown opcode handling more robust . - bpf: prefix cbpf internal helpers with bpf_ . - bpf, x64: remove ld_abs/ld_ind . - bpf, x64: save several bytes by using mov over movabsq when possible . - btrfs: Account for trans_block_rsv in may_commit_transaction . - btrfs: add a flush step for delayed iputs . - btrfs: add assertions for releasing trans handle reservations . - btrfs: add btrfs_delete_ref_head helper . - btrfs: add enospc debug messages for ticket failure . - btrfs: Add enospc_debug printing in metadata_reserve_bytes . - btrfs: add new flushing states for the delayed refs rsv . - btrfs: add space reservation tracepoint for reserved bytes . - btrfs: allow us to use up to 90% of the global rsv for unlink . - btrfs: always reserve our entire size for the global reserve . - btrfs: assert on non-empty delayed iputs . - btrfs: be more explicit about allowed flush states . - btrfs: call btrfs_create_pending_block_groups unconditionally . - btrfs: catch cow on deleting snapshots . - btrfs: change the minimum global reserve size . - btrfs: check if there are free block groups for commit . - btrfs: clean up error handling in btrfs_truncate . - btrfs: cleanup extent_op handling . - btrfs: cleanup root usage by btrfs_get_alloc_profile . - btrfs: cleanup the target logic in __btrfs_block_rsv_release . - btrfs: clear space cache inode generation always . - btrfs: delayed-ref: pass delayed_refs directly to btrfs_delayed_ref_lock . - btrfs: do not account global reserve in can_overcommit . - btrfs: do not allow reservations if we have pending tickets . - btrfs: do not call btrfs_start_delalloc_roots in flushoncommit . - btrfs: do not end the transaction for delayed refs in throttle . - btrfs: do not enospc all tickets on flush failure . - btrfs: do not run delayed_iputs in commit . - btrfs: do not run delayed refs in the end transaction logic . - btrfs: do not use ctl- gt;free_space for max_extent_size . - btrfs: do not use global reserve for chunk allocation . - btrfs: drop min_size from evict_refill_and_join . - btrfs: drop unused space_info parameter from create_space_info . - btrfs: dump block_rsv details when dumping space info . - btrfs: export block group accounting helpers . - btrfs: export block_rsv_use_bytes . - btrfs: export btrfs_block_rsv_add_bytes . - btrfs: export __btrfs_block_rsv_release . - btrfs: export space_info_add_*_bytes . - btrfs: export the block group caching helpers . - btrfs: export the caching control helpers . - btrfs: export the excluded extents helpers . - btrfs: extent-tree: Add lockdep assert when updating space info . - btrfs: extent-tree: Add trace events for space info numbers update . - btrfs: extent-tree: Detect bytes_may_use underflow earlier . - btrfs: extent-tree: Detect bytes_pinned underflow earlier . - btrfs: factor out the ticket flush handling . - btrfs: fix btrfs_wait_ordered_range so that it waits for all ordered extents . - btrfs: fix insert_reserved error handling . - btrfs: fix may_commit_transaction to deal with no partial filling . - btrfs: fix missing delayed iputs on unmount . - btrfs: fix panic during relocation after ENOSPC before writeback happens . - btrfs: fix qgroup double free after failure to reserve metadata for delalloc . - btrfs: fix race leading to metadata space leak after task received signal . - btrfs: fix truncate throttling . - btrfs: force chunk allocation if our global rsv is larger than metadata . - btrfs: Improve global reserve stealing logic . - btrfs: introduce an evict flushing state . - btrfs: introduce delayed_refs_rsv . - btrfs: loop in inode_rsv_refill . - btrfs: make btrfs_destroy_delayed_refs use btrfs_delayed_ref_lock . - btrfs: make btrfs_destroy_delayed_refs use btrfs_delete_ref_head . - btrfs: make caching_thread use btrfs_find_next_key . - btrfs: migrate btrfs_trans_release_chunk_metadata . - btrfs: migrate inc/dec_block_group_ro code . - btrfs: migrate nocow and reservation helpers . - btrfs: migrate the alloc_profile helpers . - btrfs: migrate the block group caching code . - btrfs: migrate the block group cleanup code . - btrfs: migrate the block group lookup code . - btrfs: migrate the block group read/creation code . - btrfs: migrate the block group ref counting stuff . - btrfs: migrate the block group removal code . - btrfs: migrate the block group space accounting helpers . - btrfs: migrate the block-rsv code to block-rsv.c . - btrfs: migrate the chunk allocation code . - btrfs: migrate the delalloc space stuff to it"s own home . - btrfs: migrate the delayed refs rsv code . - btrfs: migrate the dirty bg writeout code . - btrfs: migrate the global_block_rsv helpers to block-rsv.c . - btrfs: move and export can_overcommit . - btrfs: move basic block_group definitions to their own header . - btrfs: move btrfs_add_free_space out of a header file . - btrfs: move btrfs_block_rsv definitions into it"s own header . - btrfs: move btrfs_raid_group values to btrfs_raid_attr table . - btrfs: move btrfs_space_info_add_*_bytes to space-info.c . - btrfs: move dump_space_info to space-info.c . - btrfs: move reserve_metadata_bytes and supporting code to space-info.c . - btrfs: move space_info to space-info.h . - btrfs: move the space_info handling code to space-info.c . - btrfs: move the space info update macro to space-info.h . - btrfs: move the subvolume reservation stuff out of extent-tree.c . - btrfs: only check delayed ref usage in should_end_transaction . - btrfs: only check priority tickets for priority flushing . - btrfs: only free reserved extent if we didn"t insert it . - btrfs: only reserve metadata_size for inodes . - btrfs: only track ref_heads in delayed_ref_updates . - btrfs: Output ENOSPC debug info in inc_block_group_ro . - btrfs: pass root to various extent ref mod functions . - btrfs: refactor block group replication factor calculation to a helper . - btrfs: refactor priority_reclaim_metadata_space . - btrfs: refactor the ticket wakeup code . - btrfs: release metadata before running delayed refs . - btrfs: Remove btrfs_inode::delayed_iput_count . - btrfs: Remove fs_info from do_chunk_alloc . - btrfs: remove orig_bytes from reserve_ticket . - btrfs: Remove redundant argument of flush_space . - btrfs: rename btrfs_space_info_add_old_bytes . - btrfs: rename do_chunk_alloc to btrfs_chunk_alloc . - btrfs: rename the btrfs_calc_*_metadata_size helpers . - btrfs: replace cleaner_delayed_iput_mutex with a waitqueue . - btrfs: reserve delalloc metadata differently . - btrfs: reserve extra space during evict . - btrfs: reset max_extent_size on clear in a bitmap . - btrfs: reset max_extent_size properly . - btrfs: rework btrfs_check_space_for_delayed_refs . - btrfs: rework wake_all_tickets . - btrfs: roll tracepoint into btrfs_space_info_update helper . - btrfs: run btrfs_try_granting_tickets if a priority ticket fails . - btrfs: run delayed iput at unlink time . - btrfs: run delayed iputs before committing . - btrfs: set max_extent_size properly . - btrfs: stop partially refilling tickets when releasing space . - btrfs: stop using block_rsv_release_bytes everywhere . - btrfs: temporarily export btrfs_get_restripe_target . - btrfs: temporarily export fragment_free_space . - btrfs: temporarily export inc_block_group_ro . - btrfs: track DIO bytes in flight . - btrfs: unexport can_overcommit . - btrfs: unexport the temporary exported functions . - btrfs: unify error handling for ticket flushing . - btrfs: update may_commit_transaction to use the delayed refs rsv . - btrfs: use btrfs_try_granting_tickets in update_global_rsv . - btrfs: wait on caching when putting the bg cache . - btrfs: wait on ordered extents on abort cleanup . - btrfs: wakeup cleaner thread when adding delayed iput . - ceph: canonicalize server path in place . - ceph: remove the extra slashes in the server path . - cfg80211: check reg_rule for NULL in handle_channel_custom . - cfg80211: check wiphy driver existence for drvinfo report . - cgroup: memcg: net: do not associate sock with unrelated cgroup . - cifs: add a debug macro that prints \\server\share for errors . - cifs: add missing mount option to /proc/mounts . - cifs: add new debugging macro cifs_server_dbg . - cifs: add passthrough for smb2 setinfo . - cifs: add SMB2_open arg to return POSIX data . - cifs: add smb2 POSIX info level . - cifs: add SMB3 change notification support . - cifs: add support for fallocate mode 0 for non-sparse files . - cifs: Add support for setting owner info, dos attributes, and create time . - cifs: Add tracepoints for errors on flush or fsync . - cifs: Adjust indentation in smb2_open_file . - cifs: allow chmod to set mode bits using special sid . - cifs: Avoid doing network I/O while holding cache lock . - cifs: call wake_up inside of cifs_reconnect . - cifs: Clean up DFS referral cache . - cifs: create a helper function to parse the query-directory response buffer . - cifs: do d_move in rename . - cifs: Do not display RDMA transport on reconnect . - cifs: do not ignore the SYNC flags in getattr . - cifs: do not leak -EAGAIN for stat during reconnect . - cifs: do not use "pre:" for MODULE_SOFTDEP . - cifs: enable change notification for SMB2.1 dialect . - cifs: fail i/o on soft mounts if sessionsetup errors out . - cifs: fix a comment for the timeouts when sending echos . - cifs: fix a white space issue in cifs_get_inode_info . - cifs: fix dereference on ses before it is null checked . - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd . - cifs: fix mode bits from dir listing when mounted with modefromsid . - cifs: Fix mode output in debugging statements . - cifs: Fix mount options set in automount . - cifs: fix NULL dereference in match_prepath . - cifs: Fix potential deadlock when updating vol in cifs_reconnect . - cifs: fix potential mismatch of UNC paths . - cifs: fix rename by ensuring source handle opened with DELETE bit . - cifs: Fix return value in __update_cache_entry . - cifs: fix soft mounts hanging in the reconnect code . - cifs: Fix task struct use-after-free on reconnect . - cifs: fix unitialized variable poential problem with network I/O cache lock patch . - cifs: get mode bits from special sid on stat . - cifs: Get rid of kstrdup_const"d paths . - cifs: handle prefix paths in reconnect . - cifs: ignore cached share root handle closing errors . - cifs: Introduce helpers for finding TCP connection . - cifs: log warning message if out of disk space . - cifs: make sure we do not overflow the max EA buffer size . - cifs: make use of cap_unix in cifs_reconnect_tcon . - cifs: Merge is_path_valid into get_normalized_path . - cifs: modefromsid: make room for 4 ACE . - cifs: modefromsid: write mode ACE first . - cifs: Optimize readdir on reparse points . - cifs: plumb smb2 POSIX dir enumeration . - cifs: potential unintitliazed error code in cifs_getattr . - cifs: prepare SMB2_query_directory to be used with compounding . - cifs: print warning once if mounting with vers=1.0 . - cifs: refactor cifs_get_inode_info . - cifs: remove redundant assignment to pointer pneg_ctxt . - cifs: remove redundant assignment to variable rc . - cifs: remove set but not used variables . - cifs: remove set but not used variable "server" . - cifs: remove unused variable . - cifs: remove unused variable "sid_user" . - cifs: rename a variable in SendReceive . - cifs: rename posix create rsp . - cifs: replace various strncpy with strscpy and similar . - cifs: Return directly after a failed build_path_from_dentry in cifs_do_create . - cifs: set correct max-buffer-size for smb2_ioctl_init . - cifs: smbd: Add messages on RDMA session destroy and reconnection . - cifs: smbd: Invalidate and deregister memory registration on re-send for direct I/O . - cifs: smbd: Only queue work for error recovery on memory registration . - cifs: smbd: Return -EAGAIN when transport is reconnecting . - cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state . - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE . - cifs: Use common error handling code in smb2_ioctl_query_info . - cifs: use compounding for open and first query-dir for readdir . - cifs: Use #define in cifs_dbg . - cifs: Use memdup_user rather than duplicating its implementation . - cifs: use mod_delayed_work for amp;server- gt;reconnect if already queued . - cifs: use PTR_ERR_OR_ZERO to simplify code . - clk: qcom: rcg: Return failure for RCG update . - cls_rsvp: fix rsvp_policy . - configfs: Fix bool initialization/comparison . - cpufreq: powernv: Fix unsafe notifiers . - cpufreq: powernv: Fix use-after-free . - cpufreq: Register drivers only after CPU devices have been registered . - cpuidle: Do not unset the driver if it is there already . - crypto: arm64/sha-ce - implement export/import . - crypto: mxs-dcp - fix scatterlist linearization for hash . - crypto: pcrypt - Fix user-after-free on module unload . - crypto: tcrypt - fix printed skcipher [a]sync mode . - debugfs: add support for more elaborate - gt;d_fsdata . - debugfs: call debugfs_real_fops only after debugfs_file_get . - debugfs: convert to debugfs_file_get and -put . - debugfs: debugfs_real_fops: drop __must_hold sparse annotation . - debugfs: debugfs_use_start/finish do not exist anymore . - debugfs: defer debugfs_fsdata allocation to first usage . - debugfs: fix debugfs_real_fops build error . - debugfs: implement per-file removal protection . - debugfs: purge obsolete SRCU based removal protection . - debugfs: simplify __debugfs_remove_file . - Delete patches which cause regression . - Deprecate NR_UNSTABLE_NFS, use NR_WRITEBACK . - device: Use overflow helpers for devm_kmalloc . - dmaengine: coh901318: Fix a double lock bug in dma_tc_handle . - dmaengine: ste_dma40: fix unneeded variable warning . - dm: fix incomplete request_queue initialization . - driver core: platform: fix u32 greater or equal to zero comparison . - driver core: platform: Prevent resouce overflow from causing infinite loops . - driver core: Print device when resources present in really_probe . - drivers/md/raid5.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET . - drivers/md/raid5: Do not disable irq on release_inactive_stripe_list call . - drivers/md/raid5-ppl.c: use the new spelling of RWH_WRITE_LIFE_NOT_SET . - drivers/md/raid5: Use irqsave variant of atomic_dec_and_lock . - drm/amd/display: remove duplicated assignment to grph_obj_type . - drm/amdkfd: fix a use after free race with mmu_notifer unregister - drm: atmel-hlcdc: enable clock before configuring timing engine - drm/bochs: downgrade pci_request_region failure from error to warning . - drm/bridge: dw-hdmi: fix AVI frame colorimetry . - drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read . - drm/drm_dp_mst:remove set but not used variable "origlen" . - drm/etnaviv: fix dumping of iommuv2 - drm/gma500: Fixup fbdev stolen size usage evaluation . - drm/i915/gvt: Separate display reset from ALL_ENGINES reset - drm/i915/selftests: Fix return in assert_mmap_offset - drm/i915/userptr: fix size calculation - drm/i915/userptr: Try to acquire the page lock around - drm/i915: Wean off drm_pci_alloc/drm_pci_free - drm/mediatek: Add gamma property according to hardware capability - drm/mediatek: disable all the planes in atomic_disable - drm/mediatek: handle events when enabling/disabling crtc . - drm/mipi_dbi: Fix off-by-one bugs in mipi_dbi_blank - drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable - drm/msm: Set dma maximum segment size for mdss . - drm/msm: stop abusing dma_map/unmap for cache . - drm/msm: Use the correct dma_sync calls harder . - drm/msm: Use the correct dma_sync calls in msm_gem . - drm/nouveau/disp/nv50-: prevent oops when no channel method map provided . - drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw . - drm: rcar-du: Recognize renesas,vsps in addition to vsps - drm: remove the newline for CRC source name . - dt-bindings: allow up to four clocks for orion-mdio . - EDAC/mc: Fix use-after-free and memleaks during device removal . - efi: Fix a race and a buffer overflow while reading efivars via sysfs . - ethtool: Factored out similar ethtool link settings for virtual devices to core . - ext4: add cond_resched to __ext4_find_entry . - ext4: Avoid ENOSPC when avoiding to reuse recently deleted inodes . - ext4: Check for non-zero journal inum in ext4_calculate_overhead . - ext4: do not assume that mmp_nodename/bdevname have NUL . - ext4: fix a data race in EXT4_I- gt;i_disksize . - ext4: fix incorrect group count in ext4_fill_super error message . - ext4: fix incorrect inodes per group in error message . - ext4: fix potential race between online resizing and write operations . - ext4: fix potential race between s_flex_groups online resizing and access . - ext4: fix potential race between s_group_info online resizing and access . - ext4: fix race between writepages and enabling EXT4_EXTENTS_FL . - ext4: fix support for inode sizes gt; 1024 bytes . - ext4: potential crash on allocation error in ext4_alloc_flex_bg_array . - ext4: rename s_journal_flag_rwsem to s_writepages_rwsem . - ext4: validate the debug_want_extra_isize mount option at parse time . - fat: fix uninit-memory access for partial initialized inode . - fat: work around race with userspace"s read via blockdev while mounting . - fbdev/g364fb: Fix build failure . - fbdev: potential information leak in do_fb_ioctl - fbmem: Adjust indentation in fb_prepare_logo and fb_blank - fcntl: fix typo in RWH_WRITE_LIFE_NOT_SET r/w hint name . - fix memory leak in large read decrypt offload . - fs/cifs/cifssmb.c: use true,false for bool variable . - fs: cifs: cifsssmb: remove redundant assignment to variable ret . - fs: cifs: Initialize filesystem timestamp ranges . - fs: cifs: mute -Wunused-const-variable message . - fs/cifs/sess.c: Remove set but not used variable "capabilities" . - fs/cifs/smb2ops.c: use true,false for bool variable . - fs/cifs/smb2pdu.c: Make SMB2_notify_init static . - fs/xfs: fix f_ffree value for statfs when project quota is set . - ftrace/kprobe: Show the maxactive number on kprobe_events . - gtp: make sure only SOCK_DGRAM UDP sockets are accepted . - gtp: use __GFP_NOWARN to avoid memalloc warning . - HID: apple: Add support for recent firmware on Magic Keyboards . - HID: core: fix off-by-one memset in hid_report_raw_event . - HID: hiddev: Fix race in in hiddev_disconnect . - hv_netvsc: Fix memory leak when removing rndis device . - hv_netvsc: pass netvsc_device to rndis halt - hwmon: Fix an error return in ADT7462_REG_VOLT . - i2c: hix5hd2: add missed clk_disable_unprepare in remove . - i2c: jz4780: silence log flood on txabrt . - IB/hfi1: Close window for pq and request coliding . - IB/hfi1: convert to debugfs_file_get and -put . - ibmvfc: do not send implicit logouts prior to NPIV login . - ibmvfc: Fix NULL return compiler warning . - ibmvnic: Do not process device remove during device reset . - ibmvnic: Warn unknown speed message only when carrier is present . - iio: gyro: adis16136: check ret val for non-zero vs less-than-zero . - iio: imu: adis16400: check ret val for non-zero vs less-than-zero . - iio: imu: adis16480: check ret val for non-zero vs less-than-zero . - iio: imu: adis: check ret val for non-zero vs less-than-zero . - iio: magnetometer: ak8974: Fix negative raw values in sysfs . - iio: potentiostat: lmp9100: fix iio_triggered_buffer_{predisable,postenable} positions . - Input: add safety guards to input_set_keycode . - Input: avoid BIT macro usage in the serio.h UAPI header . - Input: edt-ft5x06 - work around first register access error . - Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger . - Input: synaptics - enable RMI on HP Envy 13-ad105ng . - Input: synaptics - enable SMBus on ThinkPad L470 . - Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list . - Input: synaptics - switch T470s to RMI4 by default . - intel_th: Fix user-visible error codes . - intel_th: pci: Add Elkhart Lake CPU support . - iommu/amd: Check feature support bit before accessing MSI capability registers . - iommu/amd: Fix the configuration of GCR3 table root pointer . - iommu/amd: Only support x2APIC with IVHD type 11h/40h . - iommu/dma: Fix MSI reservation allocation . - iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint . - iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys for huge page . - iommu/vt-d: Fix compile warning from intel-svm.h . - iommu/vt-d: Fix the wrong printing in RHSA parsing . - iommu/vt-d: Ignore devices with out-of-spec domain number . - iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint . - ipmi: fix hung processes in __get_guid . - ipmi:ssif: Handle a possible NULL pointer reference . - ipv4: ensure rcu_read_lock in cipso_v4_error . - ipv6: Fix nlmsg_flags when splitting a multipath route . - ipv6: Fix route replacement with dev-only route . - ipvlan: do not add hardware address of master to its unicast filter list . - irqchip/bcm2835: Quiesce IRQs left enabled by bootloader . - irqdomain: Fix a memory leak in irq_domain_push_irq . - iwlegacy: Fix -Wcast-function-type . - iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices . - iwlwifi: mvm: Fix thermal zone registration . - kABI: fixes for debugfs per-file removal protection backports . - kabi fix for . - kabi: invoke bpf_gen_ld_abs directly . - kABI: restore debugfs_remove_recursive . - kernel/module.c: Only return -EEXIST for modules that have finished loading . - kernel/module.c: wakeup processes in module_wq on module unload . - KVM: arm64: Store vcpu on the stack during __guest_enter . - KVM: s390: do not clobber registers during guest reset/store status . - KVM: s390: ENOTSUPP - gt; EOPNOTSUPP fixups . - KVM: s390: vsie: Fix possible race when shadowing region 3 tables . - KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks . - KVM: VMX: check descriptor table exits on instruction emulation . - l2tp: Allow duplicate session creation with UDP . - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop . - libfs: fix infoleak in simple_attr_read . - lib/raid6: add missing include for raid6test . - lib/raid6: add option to skip algo benchmarking . - lib/raid6/altivec: Add vpermxor implementation for raid6 Q syndrome . - lib/raid6: avoid __attribute_const__ redefinition . - locking/rwsem: Prevent decrement of reader count before increment . - mac80211: consider more elements in parsing CRC . - mac80211: Do not send mesh HWMP PREQ if HWMP is disabled . - mac80211: free peer keys before vif down in mesh . - mac80211: mesh: fix RCU warning . - mac80211: only warn once on chanctx_conf being NULL . - mac80211: rx: avoid RCU list traversal under mutex . - macsec: add missing attribute validation for port . - macsec: fix refcnt leak in module exit routine . - md: add __acquires/__releases annotations to handle_active_stripes . - md: add __acquires/__releases annotations to lock_two_stripes . - md: add a missing endianness conversion in check_sb_changes . - md: add bitmap_abort label in md_run . - md: add feature flag MD_FEATURE_RAID0_LAYOUT . - md: allow last device to be forcibly removed from RAID1/RAID10 . - md: avoid invalid memory access for array sb- gt;dev_roles . - md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit . - md-bitmap: create and destroy wb_info_pool with the change of backlog . - md-bitmap: create and destroy wb_info_pool with the change of bitmap . - md-bitmap: small cleanups . - md/bitmap: use mddev_suspend/resume instead of - gt;quiesce . - md-cluster/bitmap: do not call md_bitmap_sync_with_cluster during reshaping stage . - md-cluster: introduce resync_info_get interface for sanity check . - md-cluster/raid10: call update_size in md_reap_sync_thread . - md-cluster/raid10: do not call remove_and_add_spares during reshaping stage . - md-cluster/raid10: resize all the bitmaps before start reshape . - md-cluster/raid10: support add disk under grow mode . - md-cluster: remove suspend_info . - md-cluster: send BITMAP_NEEDS_SYNC message if reshaping is interrupted . - md: convert to kvmalloc . - md: do not call spare_active in md_reap_sync_thread if all member devices can"t work . - md: do not set In_sync if array is frozen . - md: fix an error code format and remove unsed bio_sector . - md: fix a typo s/creat/create . - md: fix for divide error in status_resync . - md: fix spelling typo and add necessary space . - md: introduce mddev_create/destroy_wb_pool for the change of member device . - md: introduce new personality funciton start . - md-linear: use struct_size in kzalloc . - md: Make bio_alloc_mddev use bio_alloc_bioset . - md: make sure desc_nr less than MD_SB_DISKS . - md: md.c: Return -ENODEV when mddev is NULL in rdev_attr_show . - md: no longer compare spare disk superblock events in super_load . - md/r5cache: remove redundant pointer bio . - md/raid0: Fix an error message in raid0_make_request . - md raid0/linear: Mark array as "broken" and fail BIOs if a member is gone . - md/raid10: end bio when the device faulty . - md/raid10: Fix raid10 replace hang when new added disk faulty . - md/raid10: prevent access of uninitialized resync_pages offset . - md/raid10: read balance chooses idlest disk for SSD . - md: raid10: Use struct_size in kmalloc . - md/raid1: avoid soft lockup under high load . - md: raid1: check rdev before reference in raid1_sync_request func . - md/raid1: end bio when the device faulty . - md/raid1: fail run raid1 array when active disk less than one . - md/raid1: Fix a warning message in remove_wb . - md/raid1: fix potential data inconsistency issue with write behind device . - md/raid1: get rid of extra blank line and space . - md/raid5: Assigning NULL to sh- gt;batch_head before testing bit R5_Overlap of a stripe . - md/raid5: use bio_end_sector to calculate last_sector . - md/raid6: fix algorithm choice under larger PAGE_SIZE . - md/raid6: implement recovery using ARM NEON intrinsics . - md: remove a bogus comment . - md: remove redundant code that is no longer reachable . - md: remove set but not used variable "bi_rdev" . - md: rename wb stuffs . - md: return -ENODEV if rdev has no mddev assigned . - md: use correct type in super_1_load . - md: use correct type in super_1_sync . - md: use correct types in md_bitmap_print_sb . - media: dib0700: fix rc endpoint lookup . - media: flexcop-usb: fix endpoint sanity check . - media: go7007: Fix URB type for interrupt handling . - media: ov519: add missing endpoint sanity checks . - media: ov6650: Fix .get_fmt V4L2_SUBDEV_FORMAT_TRY support . - media: ov6650: Fix some format attributes not under control . - media: ov6650: Fix stored crop rectangle not in sync with hardware . - media: ov6650: Fix stored frame format not in sync with hardware . - media: stv06xx: add missing descriptor sanity checks . - media: tda10071: fix unsigned sign extension overflow . - media: usbtv: fix control-message timeouts . - media: uvcvideo: Refactor teardown of uvc on USB disconnect . - media: v4l2-core: fix entity initialization in device_register_subdev . - media: vsp1: tidyup VI6_HGT_LBn_H macro . - media: xirlink_cit: add missing descriptor sanity checks . - mfd: dln2: Fix sanity checking for endpoints . - misc: pci_endpoint_test: Fix to support gt; 10 pci-endpoint-test devices . - mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2 . - mm/filemap.c: do not initiate writeback if mapping has no dirty pages . - mm/memory_hotplug.c: only respect mem= parameter during boot stage . - MM: replace PF_LESS_THROTTLE with PF_LOCAL_THROTTLE . - mm: Use overflow helpers in kvmalloc . - mwifiex: set needed_headroom, not hard_header_len . - net: core: another layer of lists, around PF_MEMALLOC skb handling . - net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM . - net: dsa: bcm_sf2: Fix overflow checks . - net: dsa: mv88e6xxx: Preserve priority when setting CPU port . - net: dsa: tag_qca: fix doubled Tx statistics . - net: dsa: tag_qca: Make sure there is headroom for tag . - net: ena: Add PCI shutdown handler to allow safe kexec . - net/ethtool: Introduce link_ksettings API for virtual network devices . - net: fib_rules: Correctly set table field when table number exceeds 8 bits . - netfilter: conntrack: sctp: use distinct states for new SCTP connections . - net: hns: fix soft lockup when there is not enough memory . - net: hsr: fix possible NULL deref in hsr_handle_frame . - net: ip6_gre: fix moving ip6gre between namespaces . - net, ip6_tunnel: fix namespaces move . - net, ip_tunnel: fix namespaces move . - net: macb: Limit maximum GEM TX length in TSO . - net: macb: Remove unnecessary alignment check for TSO . - net/mlxfw: Verify FSM error code translation does not exceed array size . - net: mvneta: move rx_dropped and rx_errors in per-cpu stats . - net/nfc: Avoid stalls when nfc_alloc_send_skb returned NULL . - net: nfc: fix bounds checking bugs on pipe . - net: phy: micrel: kszphy_resume: add delay after genphy_resume before accessing PHY registers . - net: phy: restore mdio regs in the iproc mdio driver . - net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link . - net_sched: ematch: reject invalid TCF_EM_SIMPLE . - net_sched: fix an OOB access in cls_tcindex . - net_sched: fix a resource leak in tcindex_set_parms . - net_sched: fix datalen for ematch . - net/sched: flower: add missing validation of TCA_FLOWER_FLAGS . - net_sched: keep alloc_hash updated after hash allocation . - net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS . - net: sch_prio: When ungrafting, replace with FIFO . - net/smc: add fallback check to connect . - net/smc: fix leak of kernel memory to user space . - net/smc: fix refcount non-blocking connect -part 2 . - net: stmmac: Delete txtimer in suspend . - net: stmmac: dwmac-sunxi: Allow all RGMII modes . - net-sysfs: Fix reference count leak . - net: systemport: Avoid RBUF stuck in Wake-on-LAN mode . - net: usb: lan78xx: Add .ndo_features_check . - net: usb: lan78xx: fix possible skb leak . - net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info . - NFC: fdp: Fix a signedness bug in fdp_nci_send_patch . - NFC: pn544: Fix a typo in a debug message . - nfc: pn544: Fix occasional HW initialization failure . - NFC: port100: Convert cpu_to_le16 to use le16_add_cpu . - NFS: send state management on a single connection . - nvme-multipath: fix possible I/O hang when paths are updated . - objtool: Add is_static_jump helper . - objtool: Add relocation check for alternative sections . - OMAP: DSS2: remove non-zero check on variable r - orinoco: avoid assertion in case of NULL pointer . - padata: always acquire cpu_hotplug_lock before pinst- gt;lock . - partitions/efi: Fix partition name parsing in GUID partition entry . - PCI/ASPM: Clear the correct bits when enabling L1 substates . - PCI: endpoint: Fix clearing start entry in configfs . - PCI: pciehp: Fix MSI interrupt race . - PCI/switchtec: Fix init_completion race condition with poll_wait . - perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag . - perf: qcom_l2: fix column exclusion check . - pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins . - pinctrl: core: Remove extra kref_get which blocks hogs being freed . - pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs . - pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs . - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM . - platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table . - PM: core: Fix handling of devices deleted during system-wide resume . - powerpc/64: mark start_here_multiplatform as __ref . - powerpc/64s: Fix section mismatch warnings from boot code . - powerpc/64/tm: Do not let userspace set regs- gt;trap via sigreturn . - powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems . - powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries . - powerpc/kprobes: Ignore traps that happened in real mode . - powerpc/mm: Fix section mismatch warning in stop_machine_change_mapping . - powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable . - powerpc/pseries: group lmb operation and memblock"s . - powerpc/pseries/memory-hotplug: Only update DT once per memory DLPAR request . - powerpc/pseries: update device tree before ejecting hotplug uevents . - powerpc/smp: Use nid as fallback for package_id . - powerpc/vmlinux.lds: Explicitly retain .gnu.hash . - powerpc/xive: Replace msleep with msleep . - powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs . - pwm: bcm2835: Dynamically allocate base . - pwm: meson: Fix confusing indentation . - pwm: pca9685: Fix PWM/GPIO inter-operation . - pwm: rcar: Fix late Runtime PM enablement . - pwm: renesas-tpu: Fix late Runtime PM enablement . - pxa168fb: fix release function mismatch in probe failure . - qede: Fix race between rdma destroy workqueue and link change event . - qmi_wwan: re-add DW5821e pre-production variant . - qmi_wwan: unconditionally reject 2 ep interfaces . - raid10: refactor common wait code from regular read/write request . - raid1: factor out a common routine to handle the completion of sync write . - raid1: simplify raid1_error function . - raid1: use an int as the return value of raise_barrier . - raid5: block failing device if raid will be failed . - raid5-cache: Need to do start part job after adding journal device . - raid5: copy write hint from origin bio to stripe . - raid5: do not increment read_errors on EILSEQ return . - raid5: do not set STRIPE_HANDLE to stripe which is in batch list . - raid5 improve too many read errors msg by adding limits . - raid5: need to set STRIPE_HANDLE for batch head . - raid5: remove STRIPE_OPS_REQ_PENDING . - raid5: remove worker_cnt_per_group argument from alloc_thread_groups . - raid5: set write hint for PPL . - raid5: use bio_end_sector in r5_next_bio . - raid6/test: fix a compilation error . - raid6/test: fix a compilation warning . - remoteproc: Initialize rproc_class before use . - Revert HID: add NOGET quirk for Eaton Ellipse MAX UPS . - Revert locking/pvqspinlock: Do not wait if vCPU is preempted . - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer . - rtlwifi: rtl_pci: Fix -Wcast-function-type . - rxrpc: Fix insufficient receive notification generation . - s390/cio: avoid duplicated "ADD" uevents . - s390/cio: generate delayed uevent for vfio-ccw subchannels . - s390/cpuinfo: fix wrong output when CPU0 is offline . - s390/diag: fix display of diagnose call statistics . - s390/gmap: return proper error code on ksm unsharing . - s390/mm: fix dynamic pagetable upgrade for hugetlbfs . - s390/qeth: cancel RX reclaim work earlier . - s390/qeth: do not return -ENOTSUPP to userspace . - s390/qeth: do not warn for napi with 0 budget . - s390/qeth: fix off-by-one in RX copybreak check . - s390/qeth: fix promiscuous mode after reset . - s390/qeth: fix qdio teardown after early init error . - s390/qeth: handle error due to unsupported transport mode . - s390/qeth: handle error when backing RX buffer . - s390/qeth: lock the card while changing its hsuid . - s390/qeth: support net namespaces for L3 devices . - s390/time: Fix clk type in get_tod_clock . - scsi: core: avoid repetitive logging of device offline messages . - scsi: core: kABI fix offline_already . - scsi: fnic: do not queue commands during fwreset . - scsi: ibmvfc: Add failed PRLI to cmd_status lookup array . - scsi: ibmvfc: Avoid loss of all paths during SVC node reboot . - scsi: ibmvfc: Byte swap status and error codes when logging . - scsi: ibmvfc: Clean up transport events . - scsi: ibmvfc: constify dev_pm_ops structures . - scsi: ibmvfc: Do not call fc_block_scsi_eh on host reset . - scsi: ibmvfc: Fix NULL return compiler warning . Refresh sorted patches. - scsi: ibmvfc: ibmvscsi: ibmvscsi_tgt: constify vio_device_id . - scsi: ibmvfc: Mark expected switch fall-throughs . - scsi: ibmvfc: Remove failed from logged errors . - scsi: ibmvfc: Remove unneeded semicolons . - scsi: ibmvscsi: change strncpy+truncation to strlcpy . - scsi: ibmvscsi: constify dev_pm_ops structures . - scsi: ibmvscsi: Do not use rc uninitialized in ibmvscsi_do_work . - scsi: ibmvscsi: fix tripping of blk_mq_run_hw_queue WARN_ON . - scsi: ibmvscsi: Improve strings handling . - scsi: ibmvscsi: redo driver work thread to use enum action states . - scsi: ibmvscsi: Wire up host_reset in the driver"s scsi_host_template . - scsi: qla2xxx: Add 16.0GT for PCI String . - scsi: qla2xxx: Add beacon LED config sysfs interface . - scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP . - scsi: qla2xxx: Add deferred queue for processing ABTS and RDP . - scsi: qla2xxx: Add endianizer macro calls to fc host stats . - scsi: qla2xxx: Add fixes for mailbox command . - scsi: qla2xxx: add more FW debug information . - scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP . - scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data . - scsi: qla2xxx: Add vendor extended FDMI commands . - scsi: qla2xxx: Add vendor extended RDP additions and amendments . - scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options . - scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb . - scsi: qla2xxx: Cleanup ELS/PUREX iocb fields . - scsi: qla2xxx: Convert MAKE_HANDLE from a define into an inline function . - scsi: qla2xxx: Correction to selection of loopback/echo test . - scsi: qla2xxx: Display message for FCE enabled . - scsi: qla2xxx: Fix control flags for login/logout IOCB . - scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error . - scsi: qla2xxx: fix FW resource count values . - scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted . - scsi: qla2xxx: Fix NPIV instantiation after FW dump . - scsi: qla2xxx: Fix qla2x00_echo_test based on ISP type . - scsi: qla2xxx: Fix RDP respond data format . - scsi: qla2xxx: Fix RDP response size . - scsi: qla2xxx: Fix sparse warning reported by kbuild bot . - scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code . - scsi: qla2xxx: Force semaphore on flash validation failure . - scsi: qla2xxx: Handle cases for limiting RDP response payload length . - scsi: qla2xxx: Handle NVME status iocb correctly . - scsi: qla2xxx: Improved secure flash support messages . - scsi: qla2xxx: Move free of fcport out of interrupt context . - scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry . - scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe . - scsi: qla2xxx: Return appropriate failure through BSG Interface . - scsi: qla2xxx: Save rscn_gen for new fcport . - scsi: qla2xxx: Serialize fc_port alloc in N2N . - scsi: qla2xxx: Set Nport ID for N2N . - scsi: qla2xxx: Show correct port speed capabilities for RDP command . - scsi: qla2xxx: Simplify the code for aborting SCSI commands . - scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop . - scsi: qla2xxx: Update BPM enablement semantics . - scsi: qla2xxx: Update driver version to 10.01.00.24-k . - scsi: qla2xxx: Update driver version to 10.01.00.25-k . - scsi: qla2xxx: Use a dedicated interrupt handler for "handshake-required" ISPs . - scsi: qla2xxx: Use correct ISP28xx active FW region . - scsi: qla2xxx: Use endian macros to assign static fields in fwdump header . - scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx . - scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag . - scsi: tcm_qla2xxx: Make qlt_alloc_qfull_cmd set cmd- gt;se_cmd.map_tag . - scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point . - sctp: free cmd- gt;obj.chunk for the unprocessed SCTP_CMD_REPLY . - sctp: move the format error check out of __sctp_sf_do_9_1_abort . - serdev: ttyport: restore client ops on deregistration . - smb3: add debug messages for closing unmatched open . - smb3: Add defines for new information level, FileIdInformation . - smb3: add dynamic tracepoints for flush and close . - smb3: add missing flag definitions . - smb3: Add missing reparse tags . - smb3: add missing worker function for SMB3 change notify . - smb3: add mount option to allow forced caching of read only share . - smb3: add mount option to allow RW caching of share accessed by only 1 client . - smb3: add one more dynamic tracepoint missing from strict fsync path . - smb3: add some more descriptive messages about share when mounting cache=ro . - smb3: allow decryption keys to be dumped by admin for debugging . - smb3: allow disabling requesting leases . - smb3: allow parallelizing decryption of reads . - smb3: allow skipping signature verification for perf sensitive configurations . - SMB3: Backup intent flag missing from some more ops . - smb3: cleanup some recent endian errors spotted by updated sparse . - smb3: display max smb3 requests in flight at any one time . - smb3: dump in_send and num_waiters stats counters by default . - smb3: enable offload of decryption of large reads via mount option . - smb3: fix default permissions on new files when mounting with modefromsid . - smb3: fix mode passed in on create for modetosid mount option . - smb3: fix performance regression with setting mtime . - smb3: fix potential null dereference in decrypt offload . - smb3: fix problem with null cifs super block with previous patch . - smb3: Fix regression in time handling . - smb3: improve check for when we send the security descriptor context on create . - smb3: log warning if CSC policy conflicts with cache mount option . - smb3: missing ACL related flags . - smb3: only offload decryption of read responses if multiple requests . - smb3: pass mode bits into create calls . - smb3: print warning once if posix context returned on open . - smb3: query attributes on file close . - smb3: remove noisy debug message and minor cleanup . - smb3: remove unused flag passed into close functions . - staging: ccree: use signal safe completion wait . - staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table . - staging: rtl8188eu: Fix potential overuse of kernel memory . - staging: rtl8188eu: Fix potential security hole . - staging: rtl8723bs: Fix potential overuse of kernel memory . - staging: rtl8723bs: Fix potential security hole . - staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi . - staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb . - staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback . - SUNRPC: defer slow parts of rpc_free_client to a workqueue . - tcp_bbr: improve arithmetic division in bbr_update_bw . - tcp: clear tp- gt;data_segs{in|out} in tcp_disconnect . - tcp: clear tp- gt;delivered in tcp_disconnect . - tcp: clear tp- gt;segs_{in|out} in tcp_disconnect . - tcp: clear tp- gt;total_retrans in tcp_disconnect . - tcp: fix marked lost packets not being retransmitted . - tcp: fix old stuff D-SACK causing SACK to be treated as D-SACK . - thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n . - thunderbolt: Prevent crash if non-active NVMem file is read . - tick: broadcast-hrtimer: Fix a race in bc_set_next . - tools lib traceevent: Do not free tep- gt;cmdlines in add_new_comm on failure . - tools: Update include/uapi/linux/fcntl.h copy from the kernel . - tpm: ibmvtpm: Wait for buffer to be set before proceeding . - tty: evh_bytechan: Fix out of bounds accesses . - ttyprintk: fix a potential deadlock in interrupt context issue . - tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode . - tty: serial: imx: setup the correct sg entry for tx dma . - USB: cdc-acm: fix rounding error in TIOCSSERIAL . - USB: core: add endpoint-blacklist quirk . - USB: core: hub: do error out if usb_autopm_get_interface fails . - USB: core: port: do error out if usb_autopm_get_interface fails . - USB: Disable LPM on WD19"s Realtek Hub . - USB: dwc2: Fix in ISOC request length checking . - USB: Fix novation SourceControl XL after suspend . - USB: gadget: composite: Fix bMaxPower for SuperSpeedPlus . - USB: gadget: f_fs: Fix use after free issue as part of queue failure . - USB: host: xhci-plat: add a shutdown . - USB: host: xhci: update event ring dequeue pointer on purpose . - USB: hub: Do not record a connect-change event during reset-resume . - usbip: Fix uninitialized symbol "nents" in stub_recv_cmd_submit . - USB: misc: iowarrior: add support for 2 OEMed devices . - USB: misc: iowarrior: add support for the 100 device . - USB: misc: iowarrior: add support for the 28 and 28L devices . - USB: musb: Disable pullup at init . - USB: musb: fix crash with highmen PIO and usbmon . - USB: quirks: add NO_LPM quirk for Logitech Screen Share . - USB: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters . - USB: quirks: blacklist duplicate ep on Sound Devices USBPre2 . - USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback . - USB: serial: option: add ME910G1 ECM composition 0x110b . - USB: serial: pl2303: add device-id for HP LD381 . - USB: storage: Add quirk for Samsung Fit flash . - USB: uas: fix a plug amp; unplug racing . - USB: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c . - uvcvideo: Refactor teardown of uvc on USB disconnect - vgacon: Fix a UAF in vgacon_invert_region - virtio-blk: fix hw_queue stopped on arbitrary error . - vlan: fix memory leak in vlan_dev_set_egress_priority . - vlan: vlan_changelink should propagate errors . - vxlan: fix tos value before xmit . - x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF . - x86/mce/amd: Fix kobject lifetime . - x86/mce/amd: Publish the bank pointer only after setup has succeeded . - x86/mce: Fix logic and comments around MSR_PPIN_CTL . - x86/mm: Split vmalloc_sync_all . - x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes . - x86/xen: fix booting 32-bit pv guest . - x86/xen: Make the boot CPU idle task reliable . - x86/xen: Make the secondary CPU idle tasks reliable . - xen/blkfront: fix memory allocation flags in blkfront_setup_indirect . - xfs: also remove cached ACLs when removing the underlying attr . - xfs: bulkstat should copy lastip whenever userspace supplies one . - xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms . - xhci: Do not open code __print_symbolic in xhci trace events . - xhci: fix runtime pm enabling for quirky Intel hosts . - xhci: Force Maximum Packet size for Full-speed bulk devices to valid range . Special Instructions and Notes: Please reboot the system after installing this update.