The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to cause a soft lockup via a crafted journal size . - CVE-2020-8648: There was a use-after-free vulnerability in the n_tty_receive_buf_common function in drivers/tty/n_tty.c . - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c. It did not check the length of variable elements in a beacon head, leading to a buffer overflow . - CVE-2020-8428: There was a use-after-free bug in fs/namei.c, which allowed local users to cause a denial of service or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9 . - CVE-2019-19045: A memory leak in drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c allowed attackers to cause a denial of service by triggering mlx5_vector2eqn failures, aka CID-c8c2a057fdc7 . - CVE-2019-16994: A memory leak existed in sit_init_net in net/ipv6/sit.c which might have caused denial of service, aka CID-07f12b26e21a . - CVE-2019-19054: A memory leak in the cx23888_ir_probe function in drivers/media/pci/cx23885/cx23888-ir.c allowed attackers to cause a denial of service by triggering kfifo_alloc failures, aka CID-a7b2df76b42b . - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi driver. A remote attacker could cause a denial of service or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP . - CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi driver. An attacker is able to cause a denial of service or, possibly execute arbitrary code, when a STA works in IBSS mode and connects to another STA . - CVE-2020-7053: There was a use-after-free in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c . - CVE-2019-19318: Mounting a crafted btrfs image twice could have caused a use-after-free . - CVE-2019-19036: An issue discovered in btrfs_root_node in fs/btrfs/ctree.c allowed a NULL pointer dereference because rcu_dereference can be zero . - CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures for some Intel Processors . - CVE-2019-19965: There was a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5 . - CVE-2019-19927: A slab-out-of-bounds read access could have been caused when mounting a crafted f2fs filesystem image and performing some operations on it, in drivers/gpu/drm/ttm/ttm_page_alloc.c . - CVE-2019-20095: Several memory leaks were found in drivers/net/wireless/marvell/mwifiex/cfg80211.c, aka CID-003b686ace82 . - CVE-2019-20054: There was a NULL pointer dereference in drop_sysctl_table in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e . - CVE-2019-20096: There was a memory leak in __feat_register_sp in net/dccp/feat.c, aka CID-1d3ff0950e2b . - CVE-2019-19966: There was a use-after-free in cpia2_exit in drivers/media/usb/cpia2/cpia2_v4l.c that could have caused a denial of service, aka CID-dea37a972655 . - CVE-2019-19447: Mounting a crafted ext4 filesystem image, performing some operations, and unmounting could have led to a use-after-free in fs/ext4/super.c . - CVE-2019-19319: A slab-out-of-bounds write access could have occured when setxattr was called after mounting of a specially crafted ext4 image . - CVE-2019-19767: There were multiple use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163 . - CVE-2019-18808: A memory leak in drivers/crypto/ccp/ccp-ops.c allowed attackers to cause a denial of service , aka CID-128c66429247 . - CVE-2019-19066: A memory leak in drivers/scsi/bfa/bfad_attr.c allowed attackers to cause a denial of service , aka CID-0e62395da2bd . - CVE-2019-19051: A memory leak in drivers/net/wimax/i2400m/op-rfkill.c allowed attackers to cause a denial of service , aka CID-6f3ef5c25cc7 . - CVE-2019-19338: There was an incomplete fix for an issue with Transactional Synchronisation Extensions in the KVM code . - CVE-2019-19332: An out-of-bounds memory write issue was found in the way the KVM hypervisor handled the "KVM_GET_EMULATED_CPUID" ioctl request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the "/dev/kvm" device could have used this flaw to crash the system . - CVE-2019-19537: There was a race condition bug that could be caused by a malicious USB character device, aka CID-303911cfc5b9. - CVE-2019-19535: There was an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042 . - CVE-2019-19527: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/hid/usbhid/hiddev.c driver, aka CID-9c09b214f30e . - CVE-2019-19526: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/nfc/pn533/usb.c driver, aka CID-6af3aa57a098 . - CVE-2019-19533: There was an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464 . - CVE-2019-19532: There were multiple out-of-bounds write bugs that can be caused by a malicious USB HID device, aka CID-d9d4b1e46d95 . - CVE-2019-19523: There was a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/adutux.c driver, aka CID-44efc269db79 . - CVE-2019-15213: A use-after-free bug caused by a malicious USB device was found in drivers/media/usb/dvb-usb/dvb-usb-init.c . - CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L1 resources . The following non-security bugs were fixed: - 6pack,mkiss: fix possible deadlock . - ACPI / APEI: Do not wait to serialise with oops messages when panicing . - ACPI / APEI: Switch estatus pool to use vmalloc memory . - ACPI / LPSS: Ignore acpi_device_fix_up_power return value . - ACPI / video: Add force_none quirk for Dell OptiPlex 9020M . - ACPI / watchdog: Fix init failure with overlapping register regions . - ACPI / watchdog: Set default timeout in probe . - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data . - ACPI: fix acpi_find_child_device invocation in acpi_preset_companion . - ACPI: OSL: only free map once in osl.c . - ACPI: PM: Avoid attaching ACPI PM domain to certain devices . - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 . - ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards . - ACPI: watchdog: Allow disabling WDAT at boot . - af_packet: set defaule value for tmo . - ALSA: control: remove useless assignment in .info callback of PCM chmap element . - ALSA: dummy: Fix PCM format loop in proc output . - ALSA: echoaudio: simplify get_audio_levels . - ALSA: fireface: fix return value in error path of isochronous resources reservation . - ALSA: hda - Add docking station support for Lenovo Thinkpad T420s . - ALSA: hda - Apply sync-write workaround to old Intel platforms, too . - ALSA: hda - constify and cleanup static NodeID tables . - ALSA: hda - Downgrade error message for single-cmd fallback . - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen . - ALSA: hda/analog - Minor optimization for SPDIF mux connections . - ALSA: hda/ca0132 - Avoid endless loop . - ALSA: hda/ca0132 - Fix work handling in delayed HP detection . - ALSA: hda/ca0132 - Keep power on during processing DSP response . - ALSA: hda/hdmi - Add new pci ids for AMD GPU display audio . - ALSA: hda/hdmi - add retry logic to parse_intel_hdmi . - ALSA: hda/hdmi - Clean up Intel platform-specific fixup checks . - ALSA: hda/hdmi - fix atpx_present when CLASS is not VGA . - ALSA: hda/hdmi - Fix duplicate unref of pci_dev . - ALSA: hda/hdmi - fix vgaswitcheroo detection for AMD . - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker . - ALSA: hda/realtek - Add headset Mic no shutup for ALC283 . - ALSA: hda/realtek - Add Headset Mic supported for HP cPC . - ALSA: hda/realtek - Add new codec supported for ALCS1200A . - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen . - ALSA: hda/realtek - Apply mic mute LED quirk for Dell E7xx laptops, too . - ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 . - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC . - ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G . - ALSA: hda/realtek - Fix silent output on MSI-GL73 . - ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported . - ALSA: hda/realtek - Line-out jack does not work on a Dell AIO . - ALSA: hda/realtek - More constifications . - ALSA: hda/realtek - Set EAPD control to default for ALC222 . - ALSA: hda: Add Clevo W65_67SB the power_save blacklist . - ALSA: hda: Add JasperLake PCI ID and codec vid . - ALSA: hda: Clear RIRB status before reading WP . - ALSA: hda: constify copied structure . - ALSA: hda: Constify snd_kcontrol_new items . - ALSA: hda: Constify snd_pci_quirk tables . - ALSA: hda: correct kernel-doc parameter descriptions . - ALSA: hda: hdmi - add Tigerlake support . - ALSA: hda: hdmi - fix pin setup on Tigerlake . - ALSA: hda: More constifications . - ALSA: hda: patch_hdmi: remove warnings with empty body . - ALSA: hda: patch_realtek: fix empty macro usage in if block . - ALSA: hda: Reset stream if DMA RUN bit not cleared . - ALSA: hda: Use scnprintf for printing texts for sysfs/procfs . - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code . - ALSA: oxfw: fix return value in error path of isochronous resources reservation . - ALSA: pcm: Avoid possible info leaks from PCM stream buffers . - ALSA: pcm: oss: Avoid potential buffer overflows . - ALSA: seq: Avoid concurrent access to queue flags . - ALSA: seq: Fix concurrent access to queue current tick/time . - ALSA: seq: Fix racy access for queue timer in proc read . - ALSA: sh: Fix compile warning wrt const . - ALSA: sh: Fix unused variable warnings . - ALSA: usb-audio: Apply sample rate quirk for Audioengine D1 . - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 . - ALSA: usb-audio: Fix endianess in descriptor validation . - ALSA: usb-audio: fix set_format altsetting sanity check . - ALSA: usb-audio: fix sync-ep altsetting sanity check . - apparmor: fix unsigned len comparison with less than zero . - ar5523: check NULL before memcpy in ar5523_cmd . - arm64: Revert support for execute-only user mappings . - ASoC: au8540: use 64-bit arithmetic instead of 32-bit . - ASoC: compress: fix unsigned integer overflow check . - ASoC: cs4349: Use PM ops "cs4349_runtime_pm" . - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report . - ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1 . - ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI . - ASoC: sun8i-codec: Fix setting DAI data format . - ASoC: wm8962: fix lambda value . - ata: ahci: Add shutdown to freeze hardware resources of ahci . - ath10k: Correct the DMA direction for management tx buffers . - ath10k: fix fw crash by moving chip reset after napi disabled . - ath10k: pci: Fix comment on ath10k_pci_dump_memory_sram . - ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe . - ath6kl: Fix off by one error in scan completion . - ath9k: fix storage endpoint lookup . - atl1e: checking the status of atl1e_write_phy_reg . - audit: Allow auditd to set pid to 0 to end auditing . - batman-adv: Fix DAT candidate selection on little endian systems . - bcache: add code comment bch_keylist_pop and bch_keylist_pop_front . - bcache: add code comments for state- greater than pool in __btree_sort . - bcache: add code comments in bch_btree_leaf_dirty . - bcache: add cond_resched in __bch_cache_cmp . - bcache: add idle_max_writeback_rate sysfs interface . - bcache: add more accurate error messages in read_super . - bcache: add readahead cache policy options via sysfs interface . - bcache: at least try to shrink 1 node in bch_mca_scan . - bcache: avoid unnecessary btree nodes flushing in btree_flush_write . - bcache: check return value of prio_read . - bcache: deleted code comments for dead code in bch_data_insert_keys . - bcache: do not export symbols . - bcache: explicity type cast in bset_bkey_last . - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock . - bcache: Fix an error code in bch_dump_read . - bcache: fix deadlock in bcache_allocator . - bcache: fix incorrect data type usage in btree_flush_write . - bcache: fix memory corruption in bch_cache_accounting_clear . - bcache: fix static checker warning in bcache_device_free . - bcache: ignore pending signals when creating gc and allocator thread . - bcache: print written and keys in trace_bcache_btree_write . - bcache: reap c- greater than btree_cache_freeable from the tail in bch_mca_scan . - bcache: reap from tail of c- greater than btree_cache in bch_mca_scan . - bcache: remove macro nr_to_fifo_front . - bcache: remove member accessed from struct btree . - bcache: remove the extra cflags for request.o . - bcache: Revert "bcache: shrink btree node cache after bch_btree_check" . - bcma: remove set but not used variable "sizel" . - blk-mq: avoid sysfs buffer overflow with too many CPU cores . - blk-mq: avoid sysfs buffer overflow with too many CPU cores . - blk-mq: make sure that line break can be printed . - blk-mq: make sure that line break can be printed . - Bluetooth: Fix race condition in hci_release_sock . - Bluetooth: hci_bcm: Handle specific unknown packets after firmware loading . - bnxt: apply computed clamp value for coalece parameter . - bnxt_en: Fix MSIX request logic for RDMA driver . - bnxt_en: Return error if FW returns more data than dump length . - bonding: fix active-backup transition after link failure . - bonding: fix potential NULL deref in bond_update_slave_arr . - bonding: fix slave stuck in BOND_LINK_FAIL state . - bonding: fix state transition issue in link monitoring . - bonding: fix unexpected IFF_BONDING bit unset . - bpf, offload: Unlock on error in bpf_offload_dev_create . - bpf/sockmap: Read psock ingress_msg before sk_receive_queue . - bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack . - bpf: add self-check logic to liveness analysis . - bpf: add verifier stats and log_level bit 2 . - bpf: Fix incorrect verifier simulation of ARSH under ALU32 . - bpf: improve stacksafe state comparison . - bpf: improve verification speed by droping states . - bpf: improve verification speed by not remarking live_read . - bpf: improve verifier branch analysis . - bpf: increase complexity limit and maximum program size . - bpf: increase verifier log limit . - bpf: Make use of probe_user_write in probe write helper . - bpf: Reject indirect var_off stack access in raw mode . - bpf: Reject indirect var_off stack access in unpriv mode . - bpf: Sanity check max value for var_off stack access . - bpf: skmsg, fix potential psock NULL pointer dereference . - bpf: speed up stacksafe check . - bpf: Support variable offset stack access from helpers . - bpf: verifier: teach the verifier to reason about the BPF_JSET instruction . - brcmfmac: fix interface sanity check . - brcmfmac: Fix memory leak in brcmf_p2p_create_p2pdev . - brcmfmac: Fix memory leak in brcmf_usbdev_qinit . - brcmfmac: Fix use after free in brcmf_sdio_readframes . - brcmfmac: sdio: Fix OOB interrupt initialization on brcm43362 . - brcmfmac: set F2 watermark to 256 for 4373 . - brcmfmac: set SDIO F1 MesBusyCtrl for CYW4373 . - btrfs: abort transaction after failed inode updates in create_subvol . - btrfs: add missing extents release on file extent cluster relocation error . - btrfs: avoid fallback to transaction commit during fsync of files with holes . - btrfs: dev-replace: remove warning for unknown return codes when finished . - btrfs: do not call synchronize_srcu in inode_tree_del . - btrfs: do not double lock the subvol_sem for rename exchange . - btrfs: Ensure we trim ranges across block group boundary . - btrfs: fix block group remaining RO forever after error during device replace . - btrfs: fix btrfs_write_inode vs delayed iput deadlock . - btrfs: fix infinite loop during fsync after rename operations . - btrfs: fix infinite loop during nocow writeback due to race . - btrfs: fix integer overflow in calc_reclaim_items_nr . - btrfs: fix missing data checksums after replaying a log tree . - btrfs: fix negative subv_writers counter and data space leak after buffered write . - btrfs: fix race between adding and putting tree mod seq elements and nodes . - btrfs: fix removal logic of the tree mod log that leads to use-after-free issues . - btrfs: fix selftests failure due to uninitialized i_mode in test inodes . - btrfs: handle ENOENT in btrfs_uuid_tree_iterate . - btrfs: harden agaist duplicate fsid on scanned devices . - btrfs: inode: Verify inode mode to avoid NULL pointer dereference . - btrfs: make tree checker detect checksum items with overlapping ranges . - btrfs: Move btrfs_check_chunk_valid to tree-check.[ch] and export it . - btrfs: record all roots for rename exchange on a subvol . - btrfs: relocation: fix reloc_root lifespan and access . - btrfs: scrub: Require mandatory block group RO for dev-replace . - btrfs: send, skip backreference walking for extents with many references . - btrfs: simplify inode locking for RWF_NOWAIT . - btrfs: skip log replay on orphaned roots . - btrfs: tree-checker: Check chunk item at tree block read time . - btrfs: tree-checker: Check level for leaves and nodes . - btrfs: tree-checker: Enhance chunk checker to validate chunk profile . - btrfs: tree-checker: Fix wrong check on max devid . - btrfs: tree-checker: get fs_info from eb in block_group_err . - btrfs: tree-checker: get fs_info from eb in check_block_group_item . - btrfs: tree-checker: get fs_info from eb in check_csum_item . - btrfs: tree-checker: get fs_info from eb in check_dev_item . - btrfs: tree-checker: get fs_info from eb in check_dir_item . - btrfs: tree-checker: get fs_info from eb in check_extent_data_item . - btrfs: tree-checker: get fs_info from eb in check_inode_item . - btrfs: tree-checker: get fs_info from eb in check_leaf . - btrfs: tree-checker: get fs_info from eb in check_leaf_item . - btrfs: tree-checker: get fs_info from eb in chunk_err . - btrfs: tree-checker: get fs_info from eb in dev_item_err . - btrfs: tree-checker: get fs_info from eb in dir_item_err . - btrfs: tree-checker: get fs_info from eb in file_extent_err . - btrfs: tree-checker: get fs_info from eb in generic_err . - btrfs: tree-checker: Make btrfs_check_chunk_valid return EUCLEAN instead of EIO . - btrfs: tree-checker: Make chunk item checker messages more readable . - btrfs: tree-checker: Verify dev item . - btrfs: tree-checker: Verify inode item . - btrfs: volumes: Use more straightforward way to calculate map length . - can, slip: Protect tty- greater than disc_data in write_wakeup and close with RCU . - can: can_dropped_invalid_skb: ensure an initialized headroom in outgoing CAN sk_buffs . - can: c_can: D_CAN: c_can_chip_config: perform a sofware reset on open . - can: gs_usb: gs_usb_probe: use descriptors of current altsetting . - can: mscan: mscan_rx_poll: fix rx path lockup when returning from polling to irq mode . - can: peak_usb: report bus recovery as well . - can: rx-offload: can_rx_offload_irq_offload_fifo: continue on error . - can: rx-offload: can_rx_offload_irq_offload_timestamp: continue on error . - can: rx-offload: can_rx_offload_offload_one: increment rx_fifo_errors on queue overflow or OOM . - can: rx-offload: can_rx_offload_offload_one: use ERR_PTR to propagate error value in case of errors . - can: slcan: Fix use-after-free Read in slcan_open . - CDC-NCM: handle incomplete transfer of MTU . - cdrom: respect device capabilities during opening action . - cfg80211/mac80211: make ieee80211_send_layer2_update a public function . - cfg80211: check for set_wiphy_params . - cfg80211: fix deadlocks in autodisconnect work . - cfg80211: fix memory leak in cfg80211_cqm_rssi_update . - cfg80211: fix page refcount issue in A-MSDU decap . - cgroup,writeback: do not switch wbs immediately on dead wbs if the memcg is dead . - cgroup: pids: use atomic64_t for pids- greater than limit . - chardev: Avoid potential use-after-free in "chrdev_open" . - cifs: add support for flock . - cifs: Close cached root handle only if it had a lease . - cifs: Close open handle after interrupted close . - cifs: close the shared root handle on tree disconnect . - cifs: Do not miss cancelled OPEN responses . - cifs: Fix lookup of root ses in DFS referral cache . - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd . - cifs: fix mount option display for sec=krb5i . - cifs: Fix mount options set in automount . - cifs: Fix NULL pointer dereference in mid callback . - cifs: Fix NULL-pointer dereference in smb2_push_mandatory_locks . - cifs: Fix potential softlockups while refreshing DFS cache . - cifs: Fix retrieval of DFS referrals in cifs_mount . - cifs: Fix use-after-free bug in cifs_reconnect . - cifs: Properly process SMB3 lease breaks . - cifs: remove set but not used variables "cinode" and "netfid" . - cifs: Respect O_SYNC and O_DIRECT flags during reconnect . - clk: Do not try to enable critical clocks if prepare failed . - clk: imx: clk-composite-8m: add lock to gate/mux . - clk: mmp2: Fix the order of timer mux parents . - clk: qcom: rcg2: Do not crash if our parent can"t be found; return an error . - clk: rockchip: fix I2S1 clock gate register for rk3328 . - clk: rockchip: fix ID of 8ch clock of I2S1 for rk3328 . - clk: rockchip: fix rk3188 sclk_mac_lbtest parameter ordering . - clk: rockchip: fix rk3188 sclk_smc gate data . - clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock . - clk: sunxi: sun9i-mmc: Implement reset callback for reset controls . - clk: tegra: Mark fuse clock as critical . - clocksource/drivers/bcm2835_timer: Fix memory leak of timer . - clocksource: Prevent double add_timer_on for watchdog_timer . - closures: fix a race on wakeup from closure_sync . - configfs_register_group shouldn"t be called in rmdirable parts . - copy/pasted "Recommends:" instead of "Provides:", "Obsoletes:" and "Conflicts: - Cover up kABI breakage due to DH key verification . - crypto: af_alg - Use bh_lock_sock in sk_destruct . - crypto: api - Check spawn- greater than alg under lock in crypto_drop_spawn . - crypto: api - Fix race condition in crypto_spawn_alg . - crypto: atmel-sha - fix error handling when setting hmac key . - crypto: caam/qi2 - fix typo in algorithm"s driver name . - crypto: ccp - fix uninitialized list head . - crypto: chelsio - fix writing tfm flags to wrong place . - crypto: dh - add public key verification test . - crypto: dh - fix calculating encoded key size . - crypto: dh - fix memory leak . - crypto: dh - update test for public key verification . - crypto: DRBG - add FIPS 140-2 CTRNG for noise source . - crypto: ecdh - add public key verification test . - crypto: ecdh - fix typo of P-192 b value . - crypto: mxc-scc - fix build warnings on ARM64 . - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request . - crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill . - crypto: reexport crypto_shoot_alg . - cxgb4: request the TX CIDX updates to status page . - dma-buf: Fix memory leak in sync_file_merge . - dma-mapping: fix return type of dma_set_max_seg_size . - dmaengine: coh901318: Fix a double-lock bug . - dmaengine: coh901318: Remove unused variable . - dmaengine: Fix access to uninitialized dma_slave_caps . - Documentation: Document arm64 kpti control . - drivers/base/memory.c: cache blocks in radix tree to accelerate lookup . - drivers/base/memory.c: do not access uninitialized memmaps in soft_offline_page_store . - drivers/base/platform.c: kmemleak ignore a known leak . - drivers/regulator: fix a missing check of return value . - drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero . - drm/amd/powerplay: remove set but not used variable "us_mvdd" . - drm/amdgpu/{uvd,vcn}: fetch ring"s read_ptr after alloc . - drm/amdgpu: add function parameter description in "amdgpu_device_set_cg_state" . - drm/amdgpu: add function parameter description in "amdgpu_gart_bind" . - drm/amdgpu: fix bad DMA from INTERRUPT_CNTL2 - drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 . - drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table . - drm/amdgpu: remove always false comparison in "amdgpu_atombios_i2c_process_i2c_ch" . - drm/amdgpu: remove set but not used variable "amdgpu_connector" . - drm/amdgpu: remove set but not used variable "dig" . - drm/amdgpu: remove set but not used variable "dig_connector" . - drm/amdgpu: remove set but not used variable "invalid" . - drm/amdgpu: remove set but not used variable "mc_shared_chmap" . - drm/amdgpu: remove set but not used variable "mc_shared_chmap" from "gfx_v6_0.c" and "gfx_v7_0.c" . - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ . - drm/fb-helper: Round up bits_per_pixel if possible . - drm/i810: Prevent underflow in ioctl - drm/i915/gvt: Pin vgpu dma address before using - drm/i915/gvt: set guest display buffer as readonly - drm/i915/gvt: use vgpu lock for active state setting - drm/i915/perf: add missing delay for OA muxes configuration . - drm/i915: Add missing include file less than linux/math64.h greater than . - drm/i915: Call dma_set_max_seg_size in i915_driver_hw_probe . - drm/i915: Fix pid leak with banned clients - drm/i915: Handle vm_mmap error during I915_GEM_MMAP ioctl with WC set . - drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV . - drm/i915: Reacquire priolist cache after dropping the engine lock . - drm/i915: Sanity check mmap length against object size . - drm/msm: include linux/sched/task.h - drm/mst: Fix MST sideband up-reply failure handling . - drm/nouveau/bar/gf100: ensure BAR is mapped . - drm/nouveau/bar/nv50: check bar1 vmm return value . - drm/nouveau/mmu: qualify vmm during dtor . - drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new . - drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler . - drm/qxl: Return error if fbdev is not 32 bpp - drm/qxl: Return error if fbdev is not 32 bpp - drm/radeon: fix r1xx/r2xx register checker for POT textures - drm/rect: Avoid division by zero . - drm/rect: update kerneldoc for drm_rect_clip_scaled . - drm/rockchip: lvds: Fix indentation of a #define . - drm/rockchip: Round up _before_ giving to the clock framework - drm/sun4i: hdmi: Remove duplicate cleanup calls - drm/sun4i: tcon: Set min division of TCON0_DCLK to 1 . - drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model . - drm/ttm: ttm_tt_init_fields can be static . - drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add . - drm: bridge: dw-hdmi: constify copied structure . - drm: limit to INT_MAX in create_blob ioctl . - drm: meson: venc: cvbs: fix CVBS mode matching . - drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable . - drm: panel-lvds: Potential Oops in probe error handling - e1000e: Add support for Comet Lake . - e1000e: Add support for Tiger Lake . - e1000e: Increase pause and refresh time . - e100: Fix passing zero to "PTR_ERR" warning in e100_load_ucode_wait . - ecryptfs_lookup_interpose: lower_dentry- greater than d_inode is not stable . - ecryptfs_lookup_interpose: lower_dentry- greater than d_parent is not stable either . - EDAC/ghes: Fix locking and memory barrier issues . EDAC/ghes: Do not warn when incrementing refcount on 0 . - Enable CONFIG_BLK_DEV_SR_VENDOR . - enic: prevent waking up stopped tx queues over watchdog reset . - exit: panic before exit_mm on global init exit . - ext2: check err when partial != NULL . - ext4, jbd2: ensure panic when aborting with zero errno . - ext4: check for directory entries too close to block end . - ext4: fix a bug in ext4_wait_for_tail_page_commit . - ext4: fix checksum errors with indexed dirs . - ext4: fix deadlock allocating crypto bounce page from mempool . - ext4: Fix mount failure with quota configured as module . - ext4: fix mount failure with quota configured as module . - ext4: fix punch hole for inline_data file systems . - ext4: improve explanation of a mount failure caused by a misconfigured kernel . - ext4: update direct I/O read lock pattern for IOCB_NOWAIT . - extcon: max8997: Fix lack of path setting in USB device mode . - firestream: fix memory leaks . - fix autofs regression caused by follow_managed changes . - fix dget_parent fastpath race . - fix partial checked out tree build ... so that bisection does not break. - fix the locking in dcache_readdir and friends . - fjes: fix missed check in fjes_acpi_add . - fs/namei.c: fix missing barriers when checking positivity . - fs/namei.c: pull positivity check into follow_managed . - fs/open.c: allow opening only regular files during execve . - fs: cifs: Fix atime update check vs mtime . - fscrypt: do not set policy for a dead directory . - ftrace: Add comment to why rcu_dereference_sched is open coded . - ftrace: Avoid potential division by zero in function profiler . - ftrace: Protect ftrace_graph_hash with ftrace_sync . - genirq/proc: Return proper error code when irq_set_affinity fails . - genirq: Prevent NULL pointer dereference in resend_irqs . - genirq: Properly pair kobject_del with kobject_add . - gpio: Fix error message on out-of-range GPIO in lookup table . - gtp: avoid zero size hashtable . - gtp: do not allow adding duplicate tid and ms_addr pdp context . - gtp: fix an use-after-free in ipv4_pdp_find . - gtp: fix wrong condition in gtp_genl_dump_pdp . - HID: doc: fix wrong data structure reference for UHID_OUTPUT . - HID: hidraw, uhid: Always report EPOLLOUT . - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll . - HID: intel-ish-hid: fixes incorrect error handling . - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll . - hidraw: Return EPOLLOUT from hidraw_poll . - hotplug/drc-info: Add code to search ibm,drc-info property . - hv_netvsc: Fix offset usage in netvsc_send_table . - hv_netvsc: Fix send_table offset in case of a host bug . - hv_netvsc: Fix tx_table init in rndis_set_subchannel . - hv_netvsc: Fix unwanted rx_table reset . - hwmon: Make volt2reg return same reg as reg2volt input . - hwmon: Do not use device managed functions for memory allocations . - hwmon: Add support for AMD family 17h, model 70h CPUs . - hwmon: Fix voltage limits to wrong registers . - hwmon: Fix PMBus polling of MFR_COMMON definitions . - hwrng: stm32 - fix unbalanced pm_runtime_enable . - i2c: imx: do not print error message on probe defer . - IB/hfi1: Do not cancel unused work item . - IB/mlx5: Fix steering rule of drop and count . - IB/mlx5: Remove dead code . - ibmveth: Detect unsupported packets before sending to the hypervisor . - ibmvnic: Bound waits for device queries . - ibmvnic: Fix completion structure initialization . - ibmvnic: Serialize device queries . - ibmvnic: Terminate waiting device threads after loss of service . - ice: fix stack leakage . - idr: Fix idr_alloc_u32 on 32-bit systems . - iio: adc: max9611: Fix too short conversion time delay . - iio: buffer: align the size of scan bytes to size of the largest element . - inet: protect against too small mtu values . - Input: aiptek - fix endpoint sanity check . - Input: cyttsp4_core - fix use after free bug . - Input: goodix - add upside-down quirk for Teclast X89 tablet . - Input: gtco - fix endpoint sanity check . - Input: keyspan-remote - fix control-message timeouts . - Input: pegasus_notetaker - fix endpoint sanity check . - Input: pm8xxx-vib - fix handling of separate enable register . - Input: rmi_f54 - read from FIFO in 32 byte blocks . - Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register . - Input: sur40 - fix interface sanity checks . - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus . - Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers . - Input: synaptics-rmi4 - simplify data read in rmi_f54_work . - iomap: Fix pipe page leakage during splicing . - iommu/amd: Fix IOMMU perf counter clobbering during init . - iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA . - iommu/io-pgtable-arm: Fix race handling in split_blk_unmap . - iommu/iova: Init the struct iova to fix the possible memleak . - iommu/mediatek: Correct the flush_iotlb_all callback . - iommu/vt-d: Unlink device if failed to add to group . - iommu: Remove device link to group on failure . - ipmi: Do not allow device module unload when in use . - ipv4: Fix table id reference in fib_sync_down_addr . - iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop . - iwlwifi: change monitor DMA to be coherent . - iwlwifi: clear persistence bit according to device family . - iwlwifi: do not throw error when trying to remove IGTK . - iwlwifi: mvm: fix NVM check for 3168 devices . - iwlwifi: mvm: force TCM re-evaluation on TCM resume . - iwlwifi: mvm: Send non offchannel traffic via AP sta . - iwlwifi: mvm: synchronize TID queue removal . - iwlwifi: pcie: fix erroneous print . - iwlwifi: trans: Clear persistence bit when starting the FW . - jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal . - jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer . - jbd2: Fix possible overflow in jbd2_log_space_left . - jbd2: make sure ESHUTDOWN to be recorded in the journal superblock . - jbd2: move the clearing of b_modified flag to the journal_unmap_buffer . - jbd2: switch to use jbd2_journal_abort when failed to submit the commit record . - kABI fix for "ipmi: Do not allow device module unload when in use" . - kABI fixup for alloc_dax_region . - kABI workaround for can/skb.h inclusion . - kABI/severities: Whitelist rpaphp_get_drc_props . - kABI: add _q suffix to exports that take struct dh . - kABI: protect struct sctp_ep_common . - kABI: Protest new fields in BPF structs . - kconfig: fix broken dependency in randconfig-generated .config . - kernel-binary.spec.in: do not recommend firmware for kvmsmall and azure flavor . - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail . - kernfs: Fix range checks in kernfs_get_target_path . - kexec: bail out upon SIGKILL when allocating memory . - KVM: Clean up __kvm_gfn_to_hva_cache_init and its callers . - KVM: fix spectrev1 gadgets . - KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails . - KVM: PPC: Book3S PR: Fix -Werror=return-type build failure . - KVM: PPC: Book3S PR: Free shared page if mmu initialization fails . - KVM: s390: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl . - KVM: s390: Test for bad access register and size at the start of S390_MEM_OP . - KVM: SVM: Override default MMIO mask if memory encryption is enabled . - KVM: x86: Host feature SSBD does not imply guest feature SPEC_CTRL_SSBD . - KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks . - KVM: x86: Protect ioapic_read_indirect from Spectre-v1/L1TF attacks . - KVM: x86: Protect ioapic_write_indirect from Spectre-v1/L1TF attacks . - KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data from Spectre-v1/L1TF attacks . - KVM: x86: Protect kvm_lapic_reg_write from Spectre-v1/L1TF attacks . - KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c . - KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit from Spectre-v1/L1TF attacks . - KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks . - KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks . - KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks . - KVM: x86: Refactor picdev_write to prevent Spectre-v1/L1TF attacks . - KVM: x86: Remove a spurious export of a static function . - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop . - leds: Allow to call led_classdev_unregister unconditionally . - leds: class: ensure workqueue is initialized before setting brightness . - lib/scatterlist.c: adjust indentation in __sg_alloc_table . - lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more . - lib: crc64: include less than linux/crc64.h greater than for "crc64_be" . - libnvdimm/namespace: Differentiate between probe mapping and runtime mapping . - libnvdimm/pfn: Account for PAGE_SIZE greater than info-block-size in nd_pfn_init . - libnvdimm: Fix devm_nsio_enable kabi . - livepatch/samples/selftest: Use klp_shadow_alloc API correctly . - livepatch/selftest: Clean up shadow variable names and type . - locking/rwsem: Prevent decrement of reader count before increment . - loop: fix no-unmap write-zeroes request behavior . - mac80211: Do not send Layer 2 Update frame before authorization . - mac80211: fix ieee80211_txq_setup_flows failure path . - mac80211: fix station inactive_time shortly after boot . - mac80211: Fix TKIP replay protection immediately after key setup . - mac80211: mesh: restrict airtime metric to peered established plinks . - macvlan: do not assume mac_header is set in macvlan_broadcast . - macvlan: use skb_reset_mac_header in macvlan_queue_xmit . - mailbox: mailbox-test: fix null pointer if no mmio . - md/raid0: Fix buffer overflow at debug print . - media/v4l2-core: set pages dirty upon releasing DMA buffers . - media: af9005: uninitialized variable printked . - media: cec.h: CEC_OP_REC_FLAG_ values were swapped . - media: cec: CEC 2.0-only bcast messages were ignored . - media: cec: report Vendor ID after initialization . - media: digitv: do not continue if remote control state can"t be read . - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 . - media: exynos4-is: fix wrong mdev and v4l2 dev order in error path . - media: gspca: zero usb_buf . - media: iguanair: fix endpoint sanity check . - media: ov6650: Fix control handler not freed on init error . - media: ov6650: Fix crop rectangle alignment not passed back . - media: ov6650: Fix incorrect use of JPEG colorspace . - media: pulse8-cec: fix lost cec_transmit_attempt_done call. - media: pulse8-cec: return 0 when invalidating the logical address . - media: stkwebcam: Bugfix for wrong return values . - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors . - media: uvcvideo: Fix error path in control parsing failure . - media: v4l2-ctrl: fix flags for DO_WHITE_BALANCE . - media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT . - media: v4l2-rect.h: fix v4l2_rect_map_inside top/left adjustments . - mei: bus: prefix device names on bus with the bus name . - mfd: da9062: Fix watchdog compatible string . - mfd: dln2: More sanity checking for endpoints . - mfd: rn5t618: Mark ADC control register volatile . - missing escaping of backslashes in macro expansions Fixes: f3b74b0ae86b Fixes: 3fd22e219f77 - mlxsw: spectrum_qdisc: Ignore grafting of invisible FIFO . - mlxsw: spectrum_router: Fix determining underlay for a GRE tunnel . - mm, memory_hotplug: do not clear numa_node association after hot_remove . - mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock . - mm: memory_hotplug: use put_device if device_register fail . - mmc: mediatek: fix CMD_TA to 2 for MT8173 HS200/HS400 mode . - mmc: sdhci-of-esdhc: fix P2020 errata handling . - mmc: sdhci-of-esdhc: Revert "mmc: sdhci-of-esdhc: add erratum A-009204 support" . - mmc: sdhci: Add a quirk for broken command queuing . - mmc: sdhci: fix minimum clock rate for v3 controller . - mmc: sdhci: Workaround broken command queuing on Intel GLK . - mmc: spi: Toggle SPI polarity, do not hardcode it . - mmc: tegra: fix SDR50 tuning override . - moduleparam: fix parameter description mismatch . - mod_devicetable: fix PHY module format . - mqprio: Fix out-of-bounds access in mqprio_dump . - mtd: fix mtd_oobavail incoherent returned value . - mwifiex: debugfs: correct histogram spacing, formatting . - mwifiex: delete unused mwifiex_get_intf_num . - mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame . - mwifiex: fix potential NULL dereference and use after free . - mwifiex: update set_mac_address logic . - namei: only return -ECHILD from follow_dotdot_rcu . - nbd: prevent memory leak . - net, sysctl: Fix compiler warning when only cBPF is present . - net/ibmvnic: Fix typo in retry check . - net/mlx4_en: fix mlx4 ethtool -N insertion . - net/mlx4_en: Fix wrong limitation for number of TX rings . - net/mlx5: Accumulate levels for chains prio namespaces . - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq . - net/mlx5: Update the list of the PCI supported devices . - net/mlx5e: Fix set vf link state error flow . - net/mlx5e: Fix SFF 8472 eeprom length . - net/mlx5e: Query global pause state before setting prio2buffer . - net/mlxfw: Fix out-of-memory error in mfa2 flash burning . - net/sched: act_pedit: fix WARN in the traffic path . - net: add sendmsg_locked and sendpage_locked to af_inet6 . - net: bridge: deny dev_set_mac_address when unregistering . - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size . - net: dst: Force 4-byte alignment of dst_metrics . - net: ena: fix napi handler misbehavior when the napi budget is zero . - net: ethernet: octeon_mgmt: Account for second possible VLAN header . - net: ethernet: ti: cpsw: fix extra rx interrupt . - net: fix data-race in neigh_event_send . - net: hisilicon: Fix a BUG trigered by wrong bytes_compl . - net: hns3: fix ETS bandwidth validation bug . - net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive . - net: phy: at803x: Change error to EINVAL for invalid MAC . - net: phy: broadcom: Use strlcpy for ethtool::get_strings . - net: phy: Check against net_device being NULL . - net: phy: dp83867: Set up RGMII TX delay . - net: phy: Fix not to call phy_resume if PHY is not attached . - net: phy: Fix the register offsets in Broadcom iProc mdio mux driver . - net: phy: fixed_phy: Fix fixed_phy not checking GPIO . - net: phy: marvell: clear wol event before setting it . - net: phy: marvell: Use strlcpy for ethtool::get_strings . - net: phy: meson-gxl: check phy_write return value . - net: phy: micrel: Use strlcpy for ethtool::get_strings . - net: phy: mscc: read "vsc8531, edge-slowdown" as an u32 . - net: phy: mscc: read "vsc8531,vddmac" as an u32 . - net: phy: xgene: disable clk on error paths . - net: phy: xgmiitorgmii: Check phy_driver ready before accessing . - net: phy: xgmiitorgmii: Check read_status results . - net: phy: xgmiitorgmii: Support generic PHY status read . - net: psample: fix skb_over_panic . - net: qlogic: Fix error paths in ql_alloc_large_buffers . - net: rtnetlink: prevent underflows in do_setvfinfo . - net: sched: correct flower port blocking . - net: sched: ensure opts_len less than = IP_TUNNEL_OPTS_MAX in act_tunnel_key . - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues . - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues . - net: usb: lan78xx: Fix suspend/resume PHY register access error . - net: usb: lan78xx: limit size of local TSO packets . - net: usb: qmi_wwan: add support for DW5821e with eSIM support . - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules . - netfilter: nf_queue: enqueue skbs with NULL dst . - new helper: lookup_positive_unlocked . - NFC: fdp: fix incorrect free object . - NFC: pn533: fix bulk-message timeout . - NFC: pn544: Adjust indentation in pn544_hci_check_presence . - NFC: st21nfca: fix double free . - nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info . - ocfs2: fix panic due to ocfs2_wq is null . - ocfs2: fix passing zero to "PTR_ERR" warning . - openvswitch: drop unneeded BUG_ON in ovs_flow_cmd_build_info . - openvswitch: remove another BUG_ON . - openvswitch: support asymmetric conntrack . - orinoco_usb: fix interface sanity check . - PCI/IOV: Fix memory leak in pci_iov_add_virtfn . - PCI/MSI: Return -ENOSPC from pci_alloc_irq_vectors_affinity . - PCI/switchtec: Fix vep_vector_number ioread width . - PCI: Add DMA alias quirk for Intel VCA NTB . - PCI: Do not disable bridge BARs when assigning bus resources . - PCI: pciehp: Avoid returning prematurely from sysfs requests . - PCI: rpaphp: Add drc-info support for hotplug slot registration . - PCI: rpaphp: Annotate and correctly byte swap DRC properties . - PCI: rpaphp: Avoid a sometimes-uninitialized warning . - PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info . - PCI: rpaphp: Do not rely on firmware feature to imply drc-info support . - PCI: rpaphp: Fix up pointer to first drc-info entry . - percpu: Separate decrypted varaibles anytime encryption can be enabled . - perf/x86/intel: Fix inaccurate period in context switch for auto-reload . - phy: qualcomm: Adjust indentation in read_poll_timeout . - pinctrl: cherryview: Fix irq_valid_mask calculation . - pinctrl: qcom: ssbi-gpio: fix gpio-hog related boot issues . - pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B . - pinctrl: xway: fix gpio-hog related boot issues . - pktcdvd: remove warning on attempting to register non-passthrough dev . - platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 . - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size . - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer . - platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes . - platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table . - PM / AVS: SmartReflex: NULL check before some freeing functions is not needed . - PM / Domains: Deal with multiple states but no governor in genpd . - power: supply: ltc2941-battery-gauge: fix use-after-free . - powerpc/archrandom: fix arch_get_random_seed_int . - powerpc/irq: fix stack overflow verification . - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr . - powerpc/mm: Remove kvm radix prefetch workaround for Power9 DD2.2 . - powerpc/papr_scm: Do not enable direct map for a region by default . - powerpc/papr_scm: Fix leaking "bus_desc.provider_name" in some paths . - powerpc/pkeys: remove unused pkey_allows_readwrite . - powerpc/powernv: Disable native PCIe port management . - powerpc/pseries/hotplug-memory: Change rc variable to bool . - powerpc/pseries/lparcfg: Fix display of Maximum Memory . - powerpc/pseries/mobility: notify network peers after migration . - powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning . - powerpc/pseries: Add cpu DLPAR support for drc-info property . - powerpc/pseries: Advance pfn if section is not present in lmb_is_removable . - powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW . - powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init . - powerpc/pseries: Enable support for ibm,drc-info property . - powerpc/pseries: Fix bad drc_index_start value parsing of drc-info entry . - powerpc/pseries: Fix drc-info mappings of logical cpus to drc-index . - powerpc/pseries: Fix vector5 in ibm architecture vector table . - powerpc/pseries: Revert support for ibm,drc-info devtree property . - powerpc/security: Fix debugfs data leak on 32-bit . - powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery . - powerpc/tools: Do not quote $objdump in scripts . - powerpc/xive: Discard ESB load value when interrupt is invalid . - powerpc/xive: Skip ioremap of ESB pages for LSI interrupts . - powerpc/xmon: do not access ASDR in VMs . - powerpc: Allow 64bit VDSO __kernel_sync_dicache to work across ranges greater than 4GB . - powerpc: Allow flush_icache_range to work across ranges greater than 4GB . - powerpc: avoid adjusting memory_limit for capture kernel memory reservation . - powerpc: Enable support for ibm,drc-info devtree property . - powerpc: Fix vDSO clock_getres . - powerpc: reserve memory for capture kernel after hugepages init . - ppp: Adjust indentation into ppp_async_input . - prevent active file list thrashing due to refault detection . - pseries/drc-info: Search DRC properties for CPU indexes . - pstore/ram: Write new dumps to start of recycled zones . - pwm: Clear chip_data in pwm_put . - pwm: clps711x: Fix period calculation . - pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional . - pwm: Remove set but not set variable "pwm" . - pxa168fb: Fix the function used to release some memory in an error - qede: Disable hardware gro when xdp prog is installed . - qede: Fix multicast mac configuration . - qede: fix NULL pointer deref in __qede_remove . - qmi_wwan: Add support for Quectel RM500Q . - quota: Check that quota is not dirty before release . - quota: fix livelock in dquot_writeback_dquots . - r8152: add missing endpoint sanity check . - r8152: get default setting of WOL before initializing . - random: move FIPS continuous test to output functions . - RDMA/bnxt_re: Avoid freeing MR resources if dereg fails . - RDMA/bnxt_re: Enable SRIOV VF support on Broadcom"s 57500 adapter series . - RDMA/bnxt_re: Fix chip number validation Broadcom"s Gen P5 series . - RDMA/bnxt_re: Fix missing le16_to_cpu . - RDMA/hns: Bugfix for qpc/cqc timer configuration . - RDMA/hns: Correct the value of srq_desc_size . - RDMA/hns: Fix to support 64K page for srq . - RDMA/hns: Prevent memory leaks of eq- greater than buf_list . - README.BRANCH: Removing myself from the maintainer list - README.BRANCH: Update the branch name to cve/linux-4.12 - regulator: Fix return value of _set_load stub . - regulator: rk808: Lower log level on optional GPIOs being not available . - regulator: rn5t618: fix module aliases . - regulator: tps65910: fix a missing check of return value . - reiserfs: Fix memory leak of journal device string . - reiserfs: Fix spurious unlock in reiserfs_fill_super error handling . - reset: fix reset_control_ops kerneldoc comment . - resource: fix locking in find_next_iomem_res . - Revert "ath10k: fix DMA related firmware crashes on multiple devices" . - Revert "Input: synaptics-rmi4 - do not increment rmiaddr for SMBus transfers" . - Revert "locking/pvqspinlock: Do not wait if vCPU is preempted" . - Revert "mmc: sdhci: Fix incorrect switch to HS mode" . - rpm/kabi.pl: support new Module.symvers format - rpm/kernel-binary.spec.in: Conflict with too old powerpc-utils . - rpm/kernel-binary.spec.in: Replace Novell with SUSE - rpm/kernel-subpackage-spec: Exclude kernel-firmware recommends For reducing the dependency on kernel-firmware in sub packages - rpm/kernel-subpackage-spec: Fix empty Recommends tag - rpm/kernel-subpackage-spec: fix kernel-default-base build There were some issues with recent changes to subpackage dependencies handling: - rpm/kernel-subpackage-spec: Unify dependency handling. - rpm/modules.fips: update module list - rsi_91x_usb: fix interface sanity check . - rt2800: remove errornous duplicate condition . - rtc: cmos: Stop using shared IRQ . - rtc: dt-binding: abx80x: fix resistance scale . - rtc: hym8563: Return -EINVAL if the time is known to be invalid . - rtc: max8997: Fix the returned value in case of error in "max8997_rtc_read_alarm" . - rtc: msm6242: Fix reading of 10-hour digit . - rtc: pcf8523: set xtal load capacitance from DT . - rtc: s35390a: Change buf"s type to u8 in s35390a_init . - rtl818x: fix potential use after free . - rtl8xxxu: fix interface sanity check . - rtlwifi: Fix MAX MPDU of VHT capability . - rtlwifi: Remove redundant semicolon in wifi.h . - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer . - s390/qeth: clean up page frag creation . - s390/qeth: consolidate skb allocation . - s390/qeth: ensure linear access to packet headers . - s390/qeth: guard against runt packets . - sched/fair: Add tmp_alone_branch assertion . - sched/fair: Fix insertion in rq- greater than leaf_cfs_rq_list . - sched/fair: Fix O in the load balancing path . - sched/fair: Optimize update_blocked_averages . - sched/fair: WARN and refuse to set buddy when !se- greater than on_rq . - scsi: lpfc: fix build failure with DEBUGFS disabled . - scsi: qla2xxx: Add a shadow variable to hold disc_state history of fcport . - scsi: qla2xxx: Add D-Port Diagnostic reason explanation logs . - scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX . - scsi: qla2xxx: Cleanup unused async_logout_done . - scsi: qla2xxx: Consolidate fabric scan . - scsi: qla2xxx: Correct fcport flags handling . - scsi: qla2xxx: Correctly retrieve and interpret active flash region . - scsi: qla2xxx: Fix a NULL pointer dereference in an error path . - scsi: qla2xxx: Fix fabric scan hang . - scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd . - scsi: qla2xxx: Fix mtcp dump collection failure . - scsi: qla2xxx: Fix RIDA Format-2 . - scsi: qla2xxx: Fix stuck login session using prli_pend_timer . - scsi: qla2xxx: Fix stuck session in GNL . - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size return type . - scsi: qla2xxx: Fix unbound NVME response length . - scsi: qla2xxx: Fix update_fcport for current_topology . - scsi: qla2xxx: Improve readability of the code that handles qla_flt_header . - scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss . - scsi: qla2xxx: Update driver version to 10.01.00.22-k . - scsi: qla2xxx: Use common routine to free fcport struct . - scsi: qla2xxx: Use get_unaligned_* instead of open-coding these functions . - scsi: zfcp: trace channel log even for FCP command responses . - sctp: cache netns in sctp_ep_common . - sctp: fully initialize v4 addr in some functions . - serial: 8250_bcm2835aux: Fix line mismatch on driver unbind . - serial: ifx6x60: add missed pm_runtime_disable . - serial: max310x: Fix tx_empty callback . - serial: pl011: Fix DMA - greater than flush_buffer . - serial: serial_core: Perform NULL checks for break_ctl ops . - serial: stm32: fix transmit_chars when tx is stopped . - sfc: Only cancel the PPS workqueue if it exists . - sfc: Remove "PCIE error reporting unavailable" . - sh_eth: check sh_eth_cpu_data::dual_port when dumping registers . - sh_eth: fix dumping ARSTR . - sh_eth: fix invalid context bug while calling auto-negotiation by ethtool . - sh_eth: fix invalid context bug while changing link options by ethtool . - sh_eth: fix TSU init on SH7734/R8A7740 . - sh_eth: fix TXALCR1 offsets . - sh_eth: TSU_QTAG0/1 registers the same as TSU_QTAGM0/1 . - smb3: Fix crash in SMB2_open_init due to uninitialized field in compounding path . - smb3: Fix persistent handles reconnect . - smb3: fix refcount underflow warning on unmount when no directory leases . - smb3: remove confusing dmesg when mounting with encryption . - soc/tegra: fuse: Correct straps" address for older Tegra124 device trees . - soc: renesas: rcar-sysc: Add goto to of_node_put before return . - soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot . - spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch . - spi: omap2-mcspi: Set FIFO DMA trigger level to word length . - spi: tegra114: clear packed bit for unpacked mode . - spi: tegra114: configure dma burst size to fifo trig level . - spi: tegra114: fix for unpacked mode transfers . - spi: tegra114: flush fifos . - spi: tegra114: terminate dma and reset on transfer timeout . - sr_vendor: support Beurer GL50 evo CD-on-a-chip devices . - staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 . - Staging: iio: adt7316: Fix i2c data reading, set the data field . - staging: rtl8188eu: fix interface sanity check . - staging: rtl8192e: fix potential use after free . - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids . - staging: rtl8723bs: Drop ACPI device ids . - staging: vt6656: correct packet types for CTS protect, mode . - staging: vt6656: Fix false Tx excessive retries reporting . - staging: vt6656: use NULLFUCTION stack on mac80211 . - staging: wlan-ng: ensure error return is actually returned . - stm class: Fix a double free of stm_source_device . - stop_machine, sched: Fix migrate_swap vs. active_balance deadlock . - stop_machine: Atomically queue and wake stopper threads . - stop_machine: Disable preemption after queueing stopper threads . - stop_machine: Disable preemption when waking two stopper threads . - tcp: clear tp- greater than packets_out when purging write queue . - tcp: do not send empty skb from tcp_write_xmit . - tcp: exit if nothing to retransmit on RTO timeout . - tcp: md5: fix potential overestimation of TCP option space . - thermal: Fix deadlock in thermal thermal_zone_device_check . - tipc: fix a missing check of genlmsg_put . - tipc: fix link name length check . - tipc: fix memory leak in tipc_nl_compat_publ_dump . - tipc: fix skb may be leaky in tipc_link_input . - tracing: Annotate ftrace_graph_hash pointer with __rcu . - tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu . - tracing: Fix tracing_stat return values in error handling paths . - tracing: Fix very unlikely race of registering two stat tracers . - tracing: Have the histogram compare functions convert to u64 first . - tracing: xen: Ordered comparison of function pointers . - tty/serial: atmel: Add is_half_duplex helper . - tty: n_hdlc: fix build on SPARC . - tty: serial: msm_serial: Fix lockup for sysrq and oops . - tty: vt: keyboard: reject invalid keycodes . - uaccess: Add non-pagefault user-space write function . - ubifs: Correctly initialize c- greater than min_log_bytes . - ubifs: do not trigger assertion on invalid no-key filename . - ubifs: Fix deadlock in concurrent bulk-read and writepage . - ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag . - ubifs: Limit the number of pages in shrink_liability . - ubifs: Reject unsupported ioctl flags explicitly . - udp: fix integer overflow while computing available space in sk_rcvbuf . - usb-storage: Disable UAS on JMicron SATA enclosure . - usb: adutux: fix interface sanity check . - usb: Allow USB device to be warm reset in suspended state . - usb: atm: ueagle-atm: add missing endpoint check . - usb: chipidea: host: Disable port power only if previously enabled . - usb: core: fix check for duplicate endpoints . - usb: core: hub: Improved device recognition on remote wakeup . - usb: core: urb: fix URB structure initialization function . - usb: documentation: flags on usb-storage versus UAS . - usb: dwc3: debugfs: Properly print/set link state for HS . - usb: dwc3: do not log probe deferrals; but do log other error codes . - usb: dwc3: ep0: Clear started flag on completion . - usb: dwc3: turn off VBUS when leaving host mode . - usb: EHCI: Do not return -EPIPE when hub is disconnected . - usb: gadget: f_ecm: Use atomic_t to track in-flight request . - usb: gadget: f_ncm: Use atomic_t to track in-flight request . - usb: gadget: legacy: set max_speed to super-speed . - usb: gadget: pch_udc: fix use after free . - usb: gadget: u_serial: add missing port entry locking . - usb: gadget: Zero ffs_io_data . - usb: host: xhci-hub: fix extra endianness conversion . - usb: idmouse: fix interface sanity checks . - usb: mon: Fix a deadlock in usbmon between mmap and read . - usb: mtu3: fix dbginfo in qmu_tx_zlp_error_handler . - usb: musb: dma: Correct parameter passed to IRQ handler . - usb: musb: fix idling for suspend after disconnect interrupt . - usb: roles: fix a potential use after free . - usb: serial: ch341: handle unbound port at reset_resume . - usb: serial: ftdi_sio: add device IDs for U-Blox C099-F9P . - usb: serial: io_edgeport: add missing active-port sanity check . - usb: serial: io_edgeport: fix epic endpoint lookup . - usb: serial: io_edgeport: handle unbound ports on URB completion . - usb: serial: io_edgeport: use irqsave in USB"s complete callback . - usb: serial: ir-usb: add missing endpoint sanity check . - usb: serial: ir-usb: fix IrLAP framing . - usb: serial: ir-usb: fix link-speed handling . - usb: serial: keyspan: handle unbound ports . - usb: serial: opticon: fix control-message timeouts . - usb: serial: option: Add support for Quectel RM500Q . - usb: serial: option: add support for Quectel RM500Q in QDL mode . - usb: serial: option: add Telit ME910G1 0x110a composition . - usb: serial: option: add ZLP support for 0x1bc7/0x9010 . - usb: serial: quatech2: handle unbound ports . - usb: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx . - usb: serial: suppress driver bind attributes . - usb: typec: tcpci: mask event interrupts when remove driver . - usb: uas: heed CAPACITY_HEURISTICS . - usb: uas: honor flag to avoid CAPACITY16 . - usb: xhci: Fix build warning seen with CONFIG_PM=n . - usb: xhci: only set D3hot for pci device . - usbip: Fix error path of vhci_recv_ret_submit . - usbip: Fix receive error in vhci-hcd when using scatter-gather . - vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1 . - vhost/vsock: accept only packets with the right dst_cid . - video: backlight: Add devres versions of of_find_backlight Taken for 6010831dde5. - video: backlight: Add of_find_backlight helper in backlight.c Taken for 6010831dde5. - watchdog: max77620_wdt: fix potential build errors . - watchdog: rn5t618_wdt: fix module aliases . - watchdog: sama5d4: fix WDD value to be always set to max . - watchdog: wdat_wdt: fix get_timeleft call for wdat_wdt . - wireless: fix enabling channel 12 for custom regulatory domain . - wireless: wext: avoid gcc -O3 warning . - workqueue: Fix pwq ref leak in rescuer_thread . - x86/amd_nb: Add PCI device IDs for family 17h, model 70h . - x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR . - x86/intel_rdt: Split resource group removal in two . - x86/intel_rdt: Split resource group removal in two . - x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI . - x86/mce/AMD: Allow any CPU to initialize the smca_banks array . - x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks . - x86/MCE/AMD: Do not use rdmsr_safe_on_cpu in smca_configure . - x86/mce: Fix possibly incorrect severity calculation on AMD . - x86/resctrl: Check monitoring static key in the MBM overflow handler . - x86/resctrl: Fix a deadlock due to inaccurate reference . - x86/resctrl: Fix a deadlock due to inaccurate reference . - x86/resctrl: Fix an imbalance in domain_remove_cpu . - x86/resctrl: Fix potential memory leak . - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup . - x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup . - x86/resctrl: Fix use-after-free when deleting resource groups . - x86/speculation: Fix incorrect MDS/TAA mitigation status . - x86/speculation: Fix redundant MDS mitigation message . - xen-blkfront: switch kcalloc to kvcalloc for large array allocation . - xen/balloon: Support xend-based toolstack take two . - xen/blkback: Avoid unmapping unmapped grant pages . - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk . - xen: Enable interrupts when calling _cond_resched . - xfrm: Fix transport mode skb control buffer usage . - xfs: Fix tail rounding in xfs_alloc_file_space . - xfs: Sanity check flags of Q_XQUOTARM call . - xhci: Fix memory leak in xhci_add_in_port . - xhci: fix USB3 device initiated resume race with roothub autosuspend . - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour . - xhci: Increase STS_HALT timeout in xhci_suspend . - xhci: make sure interrupts are restored to correct state . - zd1211rw: fix storage endpoint lookup . Special Instructions and Notes: Please reboot the system after installing this update.