The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features: - Support for Enhanced-IBRS on new Intel CPUs The following security bugs were fixed: - CVE-2018-9568: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. - CVE-2018-12232: In net/socket.c there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sock_close and sockfs_setattr functions. fchownat did not increment the file descriptor reference count, which allowed close to set the socket to NULL during fchownat"s execution, leading to a NULL pointer dereference and system crash . - CVE-2018-14625: A flaw was found where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect and close function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients . - CVE-2018-16862: A security flaw was found in the way that the cleancache subsystem clears an inode after the final file truncation . The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one . - CVE-2018-16884: NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out . - CVE-2018-18281: The mremap syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate removes entries from the pagetables of a task that is in the middle of mremap, a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. - CVE-2018-18397: The userfaultfd implementation mishandled access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file , related to fs/userfaultfd.c and mm/userfaultfd.c . - CVE-2018-18710: An information leak in cdrom_ioctl_select_disc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658 . - CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service via crafted system calls that reach a situation where ioapic is uninitialized . - CVE-2018-19824: A local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device that is mishandled in usb_audio_probe in sound/usb/card.c . - CVE-2018-19854: An issue was discovered in the crypto_report_one and related functions in crypto/crypto_user.c do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker did not need a capability . - CVE-2018-19985: The function hso_probe read if_num from the USB device and used it without a length check to index an array, resulting in an OOB memory read in hso_probe or hso_get_config_data that could be used by local attackers . - CVE-2018-20169: The USB subsystem mishandled size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c . The following non-security bugs were fixed: - acpi/apei: Handle GSIV and GPIO notification types . - acpica: Tables: Add WSMT support . - acpi/cpcc: Check for valid PCC subspace only if PCC is used . - acpi/cpcc: Update all pr_ messages to log the susbspace id . - acpi/iort: Fix iort_get_platform_device_domain uninitialized pointer value . - acpi/LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers . - acpi/nfit: Fix ARS overflow continuation . - acpi/nfit, x86/mce: Handle only uncorrectable machine checks . - acpi/nfit, x86/mce: Validate a MCE"s address before using it . - acpi/platform: Add SMB0001 HID to forbidden_id_list . - acpi/watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM . - act_ife: fix a potential use-after-free . - aio: fix spectre gadget in lookup_ioctx . - alsa: ac97: Fix incorrect bit shift at AC97-SPSA control write . - alsa: ca0106: Disable IZD on SB0570 DAC to fix audio pops . - alsa: control: Fix race between adding and removing a user element . - alsa: cs46xx: Potential NULL dereference in probe . - alsa: emu10k1: Fix potential Spectre v1 vulnerabilities . - alsa: emux: Fix potential Spectre v1 vulnerabilities . - alsa: fireface: fix for state to fetch PCM frames . - alsa: fireface: fix reference to wrong register for clock configuration . - alsa: firewire-lib: fix wrong assignment for "out_packet_without_header" tracepoint . - alsa: firewire-lib: fix wrong handling payload_length as payload_quadlet . - alsa: firewire-lib: use the same print format for "without_header" tracepoints . - alsa: hda: Add 2 more models to the power_save blacklist . - alsa: hda: Add ASRock N68C-S UCC the power_save blacklist . - alsa: hda - Add mic quirk for the Lenovo G50-30 . - alsa: hda: add mute LED support for HP EliteBook 840 G4 . - alsa: hda - Add quirk for ASUS G751 laptop . - alsa: hda: Add support for AMD Stoney Ridge . - alsa: hda/ca0132 - Call pci_iounmap instead of iounmap . - alsa: hda/ca0132 - make pci_iounmap call conditional . - alsa: hda: fix front speakers on Huawei MBXP . - alsa: hda - Fix headphone pin config for ASUS G751 . - alsa: hda: fix unused variable warning . - alsa: hda/realtek - Add auto-mute quirk for HP Spectre x360 laptop . - alsa: hda/realtek - Add GPIO data update helper . - alsa: hda/realtek - Add support for Acer Aspire C24-860 headset mic . - alsa: hda/realtek - Add unplug function into unplug state of Headset Mode for ALC225 . - alsa: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880 . - alsa: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN . - alsa: hda/realtek - Allow skipping spec-greater than init_amp detection . - alsa: hda/realtek - Disable headset Mic VREF for headset mode of ALC225 . - alsa: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294 . - alsa: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294 . - alsa: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294 . - alsa: hda/realtek: Enable the headset mic auto detection for ASUS laptops . - alsa: hda/realtek - Fixed headphone issue for ALC700 . - alsa: hda/realtek - fix headset mic detection for MSI MS-B171 . - alsa: hda/realtek - Fix HP Headset Mic can"t record . - alsa: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G . - alsa: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G . - alsa: hda/realtek - Fix speaker output regression on Thinkpad T570 . - alsa: hda/realtek - Fix the mute LED regresion on Lenovo X1 Carbon . - alsa: hda/realtek - fix the pop noise on headphone for lenovo laptops . - alsa: hda/realtek - Fix the problem of the front MIC on the Lenovo M715 . - alsa: hda/realtek - Manage GPIO bits commonly . - alsa: hda/realtek - Simplify Dell XPS13 GPIO handling . - alsa: hda/realtek - Support ALC300 . - alsa: hda/realtek - Support Dell headset mode for New AIO platform . - alsa: hda/tegra: clear pending irq handlers . - alsa: oss: Use kvzalloc for local buffer allocations . - alsa: pcm: Call snd_pcm_unlink conditionally at closing . - alsa: pcm: Fix interval evaluation with openmin/max . - alsa: pcm: Fix potential Spectre v1 vulnerability . - alsa: pcm: Fix starvation on down_write_nonblock . - alsa: rme9652: Fix potential Spectre v1 vulnerability . - alsa: sparc: Fix invalid snd_free_pages at error path . - alsa: trident: Suppress gcc string warning . - alsa: usb-audio: Add SMSL D1 to quirks for native DSD support . - alsa: usb-audio: Add support for Encore mDSD USB DAC . - alsa: usb-audio: Add vendor and product name for Dell WD19 Dock . - alsa: usb-audio: Avoid access before bLength check in build_audio_procunit . - alsa: usb-audio: Fix an out-of-bound read in create_composite_quirks . - alsa: usb-audio: update quirk for BW PX to remove microphone . - alsa: wss: Fix invalid snd_free_pages at error path . - alsa: x86: Fix runtime PM for hdmi-lpe-audio . - amd/iommu: Fix Guest Virtual APIC Log Tail Address Register . - apparmor: do not try to replace stale label in ptrace access check . - apparmor: do not try to replace stale label in ptraceme check . - apparmor: Fix uninitialized value in aa_split_fqname . - arm64: Add work around for Arm Cortex-A55 Erratum 1024718 . - arm64: atomics: Remove "" from "+" asm constraint in lse atomics . - arm64: cpu_errata: include required headers . - arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing . - arm64: Enabled ENA for arm64. - arm64: Fix /proc/iomem for reserved but not memory regions . - arm64: kvm: Move CPU ID reg trap setup off the world switch path . - arm64: kvm: Sanitize PSTATE.M when being set from userspace . - arm64: kvm: Tighten guest core register access from userspace . - arm64: lse: Add early clobbers to some input/output asm operands . - arm64: lse: remove -fcall-used-x0 flag . - arm64: mm: always enable CONFIG_HOLES_IN_ZONE . - arm64/numa: Report correct memblock range for the dummy node . - arm64/numa: Unify common error path in numa_init . - arm64: remove no-op -p linker flag . - arm: dts: at91: add new compatibility string for macb on sama5d3 . - ASoC: dapm: Recalculate audio map forcely when card instantiated . - ASoC: dwc: Added a quirk DW_I2S_QUIRK_16BIT_IDX_OVERRIDE to dwc - ASoC: Intel: cht_bsw_max98090: add support for Baytrail . - ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Clapper . - ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook Gnawty . - ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0 . - ASoC: Intel: mrfld: fix uninitialized variable access . - ASoC: intel: skylake: Add missing break in skl_tplg_get_token . - ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing . - ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE . - ASoC: omap-mcbsp: Fix latency value calculation for pm_qos . - ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE . - ASoC: rsnd: fixup clock start checker . - ASoC: sun8i-codec: fix crash on module removal . - ASoC: wm_adsp: Fix dma-unsafe read of scratch registers . - ata: Fix racy link clearance . - ataflop: fix error handling during setup . - ath10k: do not assume this is a PCI dev in generic code . - ath10k: schedule hardware restart if WMI command times out . - ath6kl: Only use match sets when firmware supports it . - autofs: fix autofs_sbi does not check super block type . - autofs: fix slab out of bounds read in getname_kernel . - autofs: mount point create should honour passed in mode . - b43: Fix error in cordic routine . - badblocks: fix wrong return value in badblocks_set if badblocks are disabled . - batman-adv: Expand merged fragment buffer for full packet . - batman-adv: Use explicit tvlv padding for ELP packets . - bcache: fix miss key refill-greater than end in writeback . - bcache: trace missed reading by cache_missed . - bitops: protect variables in bit_clear_unless macro . - bitops: protect variables in set_mask_bits macro . - blk-mq: remove synchronize_rcu from blk_mq_del_queue_tag_set . - block: allow max_discard_segments to be stacked . - block: blk_init_allocated_queue set q-greater than fq as NULL in the fail case . - block: copy ioprio in __bio_clone_fast . - block: really disable runtime-pm for blk-mq . - block: reset bi_iter.bi_done after splitting bio . - block: respect virtual boundary mask in bvecs . - block/swim: Fix array bounds check . - bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth . - bluetooth: SMP: fix crash in unpairing . - bnxt_en: do not try to offload VLAN "modify" action . - bnxt_en: Fix enables field in HWRM_QUEUE_COS2BW_CFG request . - bnxt_en: Fix TX timeout during netpoll . - bnxt_en: Fix VNIC reservations on the PF . - bnxt_en: free hwrm resources, if driver probe fails . - bnxt_en: get the reduced max_irqs by the ones used by RDMA . - bonding: avoid possible dead-lock . - bonding: fix length of actor system . - bonding: fix warning message . - bonding: pass link-local packets to bonding master also . - bpf: fix check of allowed specifiers in bpf_trace_printk . - bpf: fix partial copy of map_ptr when dst is scalar . - bpf, net: add skb_mac_header_len helper . - bpf: use per htab salt for bucket hash . - bpf: wait for running BPF programs when updating map-in-map . - brcmfmac: fix for proper support of 160MHz bandwidth . - brcmfmac: fix reporting support for 160 MHz channels . - brcmutil: really fix decoding channel info for 160 MHz bandwidth . - bridge: do not add port to router list when receives query with source 0.0.0.0 . - btrfs: Always try all copies when reading extent buffers . - btrfs: delete dead code in btrfs_orphan_add . - btrfs: delete dead code in btrfs_orphan_commit_root . - btrfs: do not BUG_ON in btrfs_truncate_inode_items . - btrfs: do not check inode"s runtime flags under root-greater than orphan_lock . - btrfs: do not return ino to ino cache if inode item removal fails . - btrfs: Enhance btrfs_trim_fs function to handle error better . - btrfs: Ensure btrfs_trim_fs can trim the whole filesystem . - btrfs: fix assertion failure during fsync in no-holes mode . - btrfs: fix assertion on fsync of regular file when using no-holes feature . - btrfs: fix cur_offset in the error case for nocow . - btrfs: fix data corruption due to cloning of eof block . - btrfs: fix deadlock on tree root leaf when finding free extent . - btrfs: fix deadlock when writing out free space caches . - btrfs: fix ENOSPC caused by orphan items reservations . - btrfs: Fix error handling in btrfs_cleanup_ordered_extents . - btrfs: fix error handling in btrfs_truncate . - btrfs: fix error handling in btrfs_truncate_inode_items . - btrfs: fix fsync of files with multiple hard links in new directories . - btrfs: fix infinite loop on inode eviction after deduplication of eof block . - btrfs: Fix memory barriers usage with device stats counters . - btrfs: fix null pointer dereference on compressed write path error . - btrfs: fix use-after-free during inode eviction . - btrfs: fix use-after-free on root-greater than orphan_block_rsv . - btrfs: fix use-after-free when dumping free space . - btrfs: fix warning when replaying log after fsync of a tmpfile . - btrfs: fix wrong dentries after fsync of file that got its parent replaced . - btrfs: get rid of BTRFS_INODE_HAS_ORPHAN_ITEM . - btrfs: get rid of unused orphan infrastructure . - btrfs: make sure we create all new block groups . - btrfs: move btrfs_truncate_block out of trans handle . - btrfs: protect space cache inode alloc with GFP_NOFS . - btrfs: qgroup: Dirty all qgroups before rescan . - btrfs: refactor btrfs_evict_inode reserve refill dance . - btrfs: renumber BTRFS_INODE_ runtime flags and switch to enums . - btrfs: reserve space for O_TMPFILE orphan item deletion . - btrfs: run delayed items before dropping the snapshot . - btrfs: send, fix infinite loop due to directory rename dependencies . - btrfs: stop creating orphan items for truncate . - btrfs: tree-checker: Do not check max block group size as current max chunk size limit is unreliable . - btrfs: update stale comments referencing vmtruncate . - cachefiles: fix the race between cachefiles_bury_object and rmdir . - can: dev: __can_get_echo_skb: Do not crash the kernel if can_priv::echo_skb is accessed out of bounds . - can: dev: can_get_echo_skb: factor out non sending code to __can_get_echo_skb . - can: dev: __can_get_echo_skb: print error message, if trying to echo non existing skb . - can: dev: __can_get_echo_skb: replace struct can_frame by canfd_frame to access frame length . - can: flexcan: flexcan_irq: fix indention . - can: hi311x: Use level-triggered interrupt . - can: raw: check for CAN FD capable netdev in raw_sendmsg . - can: rcar_can: Fix erroneous registration . - can: rx-offload: introduce can_rx_offload_get_echo_skb and can_rx_offload_queue_sorted functions . - cdc-acm: correct counting of UART states in serial state notification . - cdc-acm: do not reset notification buffer index upon urb unlinking . - cdrom: do not attempt to fiddle with cdo-greater than capability . - ceph: do not update importing cap"s mseq when handing cap export . - ceph: fix dentry leak in ceph_readdir_prepopulate . - ceph: quota: fix null pointer dereference in quota check . - cfg80211: Address some corner cases in scan result channel updating . - cfg80211: fix use-after-free in reg_process_hint . - char_dev: extend dynamic allocation of majors into a higher range . - char_dev: Fix off-by-one bugs in find_dynamic_major . - clk: at91: Fix division by zero in PLL recalc_rate . - clk: fixed-factor: fix of_node_get-put imbalance . - clk: fixed-rate: fix of_node_get-put imbalance . - clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk . - clk: mmp: Off by one in mmp_clk_add . - clk: mvebu: Off by one bugs in cp110_of_clk_get . - clk: rockchip: Fix static checker warning in rockchip_ddrclk_get_parent call . - clk: s2mps11: Add used attribute to s2mps11_dt_match . - clk: s2mps11: Fix matching when built as module and DT node contains compatible . - clk: samsung: exynos5420: Enable PERIS clocks for suspend . - clockevents/drivers/i8253: Add support for PIT shutdown quirk . - compiler-gcc.h: Add __attribute__ to all inline declarations . - config: arm64: enable erratum 1024718 - configfs: replace strncpy with memcpy . - cpufeature: avoid warning when compiling with clang . - cpufreq / CPPC: Add cpuinfo_cur_freq support for CPPC . - cpufreq: CPPC: fix build in absence of v3 support . - cpupower: remove stringop-truncation waring . - crypto: bcm - fix normal/non key hash algorithm failure . - crypto: caam - fix implicit casts in endianness helpers . - crypto: ccp - Add DOWNLOAD_FIRMWARE SEV command . - crypto: ccp - Add GET_ID SEV command . - crypto: ccp - Add psp enabled message when initialization succeeds . - crypto: ccp - Add support for new CCP/PSP device ID . - crypto: ccp - Allow SEV firmware to be chosen based on Family and Model . - crypto: ccp - Fix static checker warning . - crypto: ccp - Remove unused #defines . - crypto: ccp - Support register differences between PSP devices . - crypto: lrw - Fix out-of bounds access on counter overflow . - crypto: simd - correctly take reqsize of wrapped skcipher into account . - crypto: tcrypt - fix ghash-generic speed test . - dasd: fix deadlock in dasd_times_out . - dax: Check page-greater than mapping isn"t NULL . - dax: Do not access a freed inode . - device property: Define type of PROPERTY_ENRTY_* macros . - device property: fix fwnode_graph_get_next_endpoint documentation . - disable stringop truncation warnings for now . - dm: allocate struct mapped_device with kvzalloc . - dm cache: destroy migration_cache if cache target registration failed . - dm cache: fix resize crash if user does not reload cache table . - dm cache metadata: ignore hints array being too small during resize . - dm cache metadata: save in-core policy_hint_size to on-disk superblock . - dm cache metadata: set dirty on all cache blocks after a crash . - dm cache: only allow a single io_mode cache feature to be requested . - dm crypt: do not decrease device limits . - dm: fix report zone remapping to account for partition offset . - dm integrity: change "suspending" variable from bool to int . - dm ioctl: harden copy_params"s copy_from_user from malicious users . - dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled . - dm linear: fix linear_end_io conditional definition . - dm thin: handle running out of data space vs concurrent discard . - dm thin metadata: remove needless work from __commit_transaction . - dm thin: stop no_space_timeout worker when switching to write-mode . - dm writecache: fix a crash due to reading past end of dirty_bitmap . - dm writecache: report start_sector in status line . - dm zoned: fix metadata block ref counting . - dm zoned: fix various dmz_get_mblock issues . - doc/README.SUSE: correct GIT url No more gitorious, github we use. - Documentation/l1tf: Fix small spelling typo . - Documentation/l1tf: Fix typos . - Documentation/l1tf: Remove Yonah processors from not vulnerable list . - do d_instantiate/unlock_new_inode combinations safely . - driver/dma/ioat: Call del_timer_sync without holding prep_lock . - drivers/net/usb: add device id for TP-LINK UE300 USB 3.0 Ethernet . - drivers/net/usb/r8152: remove the unneeded variable "ret" in rtl8152_system_suspend . - drivers/tty: add missing of_node_put . - drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type . - drm/amdgpu/gmc8: update MC firmware for polaris - drm/amdgpu/powerplay: fix missing break in switch statements - drm/amdgpu: update mc firmware image for polaris12 variants - drm/amdgpu: update SMC firmware image for polaris10 variants - drm/ast: change resolution may cause screen blurred . - drm/ast: fixed cursor may disappear sometimes . - drm/ast: Fix incorrect free on ioregs . - drm/ast: Remove existing framebuffers before loading driver - drm/dp_mst: Check if primary mstb is null . - drm/dp_mst: Skip validating ports during destruction, just ref . - drm/edid: Add 6 bpc quirk for BOE panel . - drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl - drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock - drm: fb-helper: Reject all pixel format changing requests - drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer - drm/hisilicon: hibmc: Do not overwrite fb helper surface depth - drm/i915/audio: Hook up component bindings even if displays are - drm/i915: Do not oops during modeset shutdown after lpe audio deinit . - drm/i915: Do not unset intel_connector-greater than mst_port . - drm/i915/dp: Link train Fallback on eDP only if fallback link BW can fit panel"s native mode . - drm/i915/execlists: Apply a full mb before execution for Braswell - drm/i915/execlists: Force write serialisation into context image vs execution . - drm/i915: Fix ilk+ watermarks when disabling pipes . - drm/i915/gen9+: Fix initial readout for Y tiled framebuffers - drm/i915/glk: Remove 99% limitation . - drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values . - drm/i915: Large page offsets for pread/pwrite . - drm/i915: Mark pin flags as u64 . - drm/i915: Restore vblank interrupts earlier . - drm/i915: Skip vcpi allocation for MSTB ports that are gone . - drm/i915: Write GPU relocs harder with gen3 . - drm/ioctl: Fix Spectre v1 vulnerabilities - drm/mediatek: fix OF sibling-node lookup - drm/meson: add support for 1080p25 mode . - drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config . - drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut . - drm/msm: fix OF child-node lookup - drm/nouveau: Check backlight IDs are greater than = 0, not greater than 0 . - drm/nouveau: Do not disable polling in fallback mode . - drm/nouveau/kms: Fix memory leak in nv50_mstm_del - drm/omap: fix memory barrier bug in DMM driver . - drm: rcar-du: Fix external clock error checks - drm: rcar-du: Fix vblank initialization - drm/rockchip: Allow driver to be shutdown on reboot/kexec . - drm/rockchip: psr: do not dereference encoder before it is null - drm: set is_master to 0 upon drm_new_set_master failure - drm/sti: do not remove the drm_bridge that was never added - drm/vc4: Set -greater than is_yuv to false when num_planes == 1 - drm/vc4: -greater than x_scaling[1] should never be set to VC4_SCALING_NONE - drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset - dt-bindings: add compatible string for Allwinner V3s SoC . - dt-bindings: arm: Document SoC compatible value for Armadillo-800 EVA . - dt-bindings: clock: add rk3399 DDR3 standard speed bins . - dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 . - dt-bindings: iio: update STM32 timers clock names . - dt-bindings: mfd: axp20x: Add AXP806 to supported list of chips . - dt-bindings: net: Remove duplicate NSP Ethernet MAC binding document . - dt-bindings: panel: lvds: Fix path to display timing bindings . - dt-bindings: phy: sun4i-usb-phy: Add property descriptions for H3 . - dt-bindings: pwm: renesas: tpu: Fix "compatible" prop description . - dt-bindings: rcar-dmac: Document missing error interrupt . - EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting . - EDAC: Raise the maximum number of memory controllers . - EDAC, skx_edac: Fix logical channel intermediate decoding . - EDAC, thunderx: Fix memory leak in thunderx_l2c_threaded_isr . - efi: Move some sysfs files to be read-only by root . - ethernet: fman: fix wrong of_node_put in probe function . - exportfs: fix "passing zero to ERR_PTR" warning . - ext2: fix potential use after free . - ext4: add missing brelse add_new_gdb_meta_bg"s error path . - ext4: add missing brelse in set_flexbg_block_bitmap"s error path . - ext4: add missing brelse update_backups"s error path . - ext4: avoid buffer leak in ext4_orphan_add after prior errors . - ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty . - ext4: avoid possible double brelse in add_new_gdb on error path . - ext4: avoid potential extra brelse in setup_new_flex_group_blocks . - ext4: fix buffer leak in __ext4_read_dirblock on error path . - ext4: fix buffer leak in ext4_xattr_move_to_block on error path . - ext4: fix EXT4_IOC_GROUP_ADD ioctl . - ext4: fix missing cleanup if ext4_alloc_flex_bg_array fails while resizing . - ext4: fix possible inode leak in the retry loop of ext4_resize_fs . - ext4: fix possible leak of sbi-greater than s_group_desc_leak in error path . - ext4: fix possible leak of s_journal_flag_rwsem in error path . - ext4: fix possible use after free in ext4_quota_enable . - ext4: fix setattr project check in fssetxattr ioctl . - ext4: fix use-after-free race in ext4_remount"s error path . - ext4: initialize retries variable in ext4_da_write_inline_data_begin . - ext4: missing unlock/put_page in ext4_try_to_write_inline_data . - ext4: propagate error from dquot_initialize in EXT4_IOC_FSSETXATTR . - ext4: release bs.bh before re-using in ext4_xattr_block_find . - extable: Consolidate *kernel_text_address functions . - extable: Enable RCU if it is not watching in kernel_text_address . - fbdev: fbcon: Fix unregister crash when more than one framebuffer - fbdev: fbmem: behave better with small rotated displays and many CPUs - fbdev: fix broken menu dependencies - firmware: add firmware_request_nowarn - load firmware without warnings . - firmware: dcdbas: Add support for WSMT ACPI table . - firmware: dcdbas: include linux/io.h . - Fix the breakage of KMP build on x86_64 . - Fix tracing sample code warning . - floppy: fix race condition in __floppy_read_block_0 . - flow_dissector: do not dissect l4 ports for fragments . - fscache: fix race between enablement and dropping of object . - fscache: Fix race in fscache_op_complete due to split atomic_sub read . - fscache: Pass the correct cancelled indications to fscache_op_complete . - fs: dcache: Avoid livelock between d_alloc_parallel and __d_add . - fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot . - fs: dcache: Use READ_ONCE when accessing i_dir_seq . - fs: Do not leak MNT_INTERNAL away from internal mounts . - fs: fix lost error code in dio_complete . - fs: Make extension of struct super_block transparent . - fsnotify: Fix busy inodes during unmount . - fsnotify: fix ignore mask logic in fsnotify . - fs/xfs: Use %pS printk format for direct addresses . - ftrace: Fix debug preempt config name in stack_tracer_{en,dis}able . - ftrace: Fix kmemleak in unregister_ftrace_graph . - ftrace: Fix memleak when unregistering dynamic ops when tracing disabled . - ftrace: Remove incorrect setting of glob search field . - fuse: fix blocked_waitq wakeup . - fuse: fix leaked notify reply . - fuse: fix possibly missed wake-up after abort . - fuse: Fix use-after-free in fuse_dev_do_read . - fuse: Fix use-after-free in fuse_dev_do_write . - fuse: fix use-after-free in fuse_direct_IO . - fuse: set FR_SENT while locked . - gcc-plugins: Add include required by GCC release 8 . - gcc-plugins: Use dynamic initializers . - genirq: Fix race on spurious interrupt detection . - getname_kernel needs to make sure that -greater than name != -greater than iname in long case . - gfs2: Do not leave s_fs_info pointing to freed memory in init_sbd . - gfs2: Fix loop in gfs2_rbm_find . - gfs2: Get rid of potential double-freeing in gfs2_create_inode . - gfs2_meta: -greater than mount can get NULL dev_name . - gfs2: Put bitmap buffers in put_super . - git_sort.py: Remove non-existent remote tj/libata - gpio: davinci: Remove unused member of davinci_gpio_controller . - gpio: do not free unallocated ida on gpiochip_add_data_with_key error path . - gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers . - gpiolib: Fix return value of gpio_to_desc stub if !GPIOLIB . - gpio: max7301: fix driver for use with CONFIG_VMAP_STACK . - gpio: mvebu: only fail on missing clk if pwm is actually to be used . - grace: replace BUG_ON by WARN_ONCE in exit_net hook . - gso_segment: Reset skb-greater than mac_len after modifying network header . - hid: Add quirk for Primax PIXART OEM mice . - hid: hiddev: fix potential Spectre v1 . - hid: input: Ignore battery reported by Symbol DS4308 . - hid: multitouch: Add pointstick support for Cirque Touchpad . - hid: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges . - hv_netvsc: ignore devices that are not PCI . - hwmon: Fix double-free in __hwmon_device_register . - hwmon: Remove bogus __init annotations . - hwmon: Fix current value calculation . - hwmon Fix NULL id pointer in probe . - hwmon: Fix potential Spectre v1 . - hwmon: Fix page count auto-detection . - hwmon: Set fan speed to 0 on suspend . - hwmon: Fix initial notify . - hwmon: temp4_type has writable permission . - hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined . - hwrng: core - document the quality field . - i2c: axxia: properly handle master timeout . - i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI device node . - IB/hfi1: Add mtu check for operational data VLs . - ibmvnic: Convert reset work item mutex to spin lock . - ibmvnic: fix accelerated VLAN handling . - ibmvnic: fix index in release_rx_pools . - ibmvnic: Fix non-atomic memory allocation in IRQ context . - ibmvnic: remove ndo_poll_controller . - ibmvnic: Update driver queues after change in ring size support . - IB/rxe: support for 802.1q VLAN on the listener . - ieee802154: 6lowpan: set IFLA_LINK . - ieee802154: at86rf230: switch from BUG_ON to WARN_ON on problem . - ieee802154: at86rf230: use __func__ macro for debug messages . - ieee802154: fakelb: switch from BUG_ON to WARN_ON on problem . - iio: accel: adxl345: convert address field usage in iio_chan_spec . - iio: ad5064: Fix regulator handling . - iio: adc: at91: fix acking DRDY irq on simple conversions . - iio: adc: at91: fix wrong channel number in triggered buffer mode . - iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs . - iio:st_magn: Fix enable device after trigger . - ima: fix showing large "violations" or "runtime_measurements_count" . - include/linux/pfn_t.h: force "~" to be parsed as an unary operator . - Include modules.fips in kernel-binary as well as kernel-binary-base . - inet: make sure to grab rcu_read_lock before using ireq-greater than ireq_opt . - initramfs: fix initramfs rebuilds w/ compression after disabling . - Input: add official Raspberry Pi"s touchscreen driver . - Input: cros_ec_keyb - fix button/switch capability reports . - Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR . - Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM . - Input: elan_i2c - add ELAN0620 to the ACPI table . - Input: elan_i2c - add support for ELAN0621 touchpad . - Input: hyper-v - fix wakeup from suspend-to-idle . - Input: matrix_keypad - check for errors from of_get_named_gpio . - Input: nomadik-ske-keypad - fix a loop timeout test . - Input: omap-keypad - fix keyboard debounce configuration . - Input: synaptics - add PNP ID for ThinkPad P50 to SMBus . - Input: synaptics - avoid using uninitialized variable when probing . - Input: synaptics - enable SMBus for HP 15-ay000 . - Input: xpad - add PDP device id 0x02a4 . - Input: xpad - add support for Xbox1 PDP Camo series gamepad . - Input: xpad - avoid using __set_bit for capabilities . - Input: xpad - fix some coding style issues . - Input: xpad - quirk all PDP Xbox One gamepads . - integrity/security: fix digsig.c build error with header file . - intel_th: msu: Fix an off-by-one in attribute store . - iommu/amd: Fix amd_iommu=force_isolation . - iommu/arm-smmu: Ensure that page-table updates are visible before TLBI . - iommu/ipmmu-vmsa: Fix crash on early domain free . - iommu/vt-d: Fix NULL pointer dereference in prq_event_thread . - iommu/vt-d: Handle domain agaw being less than iommu agaw . - iommu/vt-d: Use memunmap to free memremap . - ip6_tunnel: be careful when accessing the inner header . - ip6_tunnel: Fix encapsulation layout . - ip6_vti: fix a null pointer deference when destroy vti6 tunnel . - ipmi: Fix timer race with module unload . - ip_tunnel: be careful when accessing the inner header . - ip_tunnel: do not force DF when MTU is locked . - ipv4: lock mtu in fnhe when received PMTU less than net.ipv4.route.min_pmtu . - ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state . - ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF . - ipv6: fix possible use-after-free in ip6_xmit . - ipv6: mcast: fix a use-after-free in inet6_mc_check . - ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called . - ipv6: take rcu lock in rawv6_send_hdrinc . - iwlwifi: add new cards for 9560, 9462, 9461 and killer series . - iwlwifi: dbg: allow wrt collection before ALIVE . - iwlwifi: do not WARN on trying to dump dead firmware . - iwlwifi: fix LED command capability bit . - iwlwifi: fix non_shared_ant for 22000 devices . - iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE . - iwlwifi: mvm: check for short GI only for OFDM . - iwlwifi: mvm: check return value of rs_rate_from_ucode_rate . - iwlwifi: mvm: do not send GEO_TX_POWER_LIMIT to old firmwares . - iwlwifi: mvm: do not use SAR Geo if basic SAR is not used . - iwlwifi: mvm: fix BAR seq ctrl reporting . - iwlwifi: mvm: fix regulatory domain update when the firmware starts . - iwlwifi: mvm: support sta_statistics even on older firmware . - iwlwifi: nvm: get num of hw addresses from firmware . - iwlwifi: pcie: avoid empty free RB queue . - iwlwifi: pcie: do not reset TXQ write pointer . - jffs2: free jffs2_sb_info through jffs2_kill_sb . - jump_label: Split out code under the hotplug lock . - kabi: hide new member in struct iommu_table from genksyms . - kabi: hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined . - kabi: mask raw in struct bpf_reg_state . - kabi: powerpc: export __find_linux_pte as __find_linux_pte_or_hugepte . - kabi: powerpc: Revert npu callback signature change . - kabi protect hnae_ae_ops . - kabi/severities: ignore __xive_vm_h_* KVM internal symbols. - kbuild: allow to use GCC toolchain not in Clang search path . - kbuild: fix # escaping in .cmd files for future Make . - kbuild: fix kernel/bounds.c "W=1" warning . - kbuild: fix linker feature test macros when cross compiling with Clang . - kbuild: make missing $DEPMOD a Warning instead of an Error . - kbuild: move "_all" target out of $ conditional . - kbuild: rpm-pkg: keep spec file until make mrproper . - kbuild: suppress packed-not-aligned warning for default setting only . - kbuild: verify that $DEPMOD is installed . - kdb: use memmove instead of overlapping memcpy . - kernfs: Replace strncpy with memcpy . - kernfs: update comment about kernfs_path return value . - keys: Fix the use of the C++ keyword "private" in uapi/linux/keyctl.h . - kgdboc: Passing ekgdboc to command line causes panic . - kobject: Replace strncpy with memcpy . - kprobes: Make list and blacklist root user read only . - kvm: arm/arm64: Introduce vcpu_el1_is_32bit . - kvm: nVMX: Always reflect #NM VM-exits to L1 . - kvm: nVMX: move check_vmentry_postreqs call to nested_vmx_enter_non_root_mode . - kvm: PPC: Add pt_regs into kvm_vcpu_arch and move vcpu-greater than arch.gpr[] into it . - kvm: PPC: Avoid marking DMA-mapped pages dirty in real mode . - kvm: PPC: Book3S: Add MMIO emulation for VMX instructions . - kvm: PPC: Book3S: Allow backing bigger guest IOMMU pages with smaller physical pages . - kvm: PPC: Book3S: Check KVM_CREATE_SPAPR_TCE_64 parameters . - kvm: PPC: Book3S: Eliminate some unnecessary checks . - kvm: PPC: Book3S: Fix compile error that occurs with some gcc versions . - kvm: PPC: Book3S: Fix matching of hardware and emulated TCE tables . - kvm: PPC: Book3S HV: Add of_node_put in success path . - kvm: PPC: Book3S HV: Add "online" register to ONE_REG interface . - kvm: PPC: Book3S HV: Allow creating max number of VCPUs on POWER9 . - kvm: PPC: Book3S HV: Allow HPT and radix on the same core for POWER9 v2.2 . - kvm: PPC: Book3S HV: Avoid crash from THP collapse during radix page fault . - kvm: PPC: Book3S HV: Avoid shifts by negative amounts . - kvm: PPC: Book3S HV: Check DR not IR to chose real vs virt mode MMIOs . - kvm: PPC: Book3S HV: Do not truncate HPTE index in xlate function . - kvm: PPC: Book3S HV: Do not use compound_order to determine host mapping size . - kvm: PPC: Book3S HV: Do not use existing "prodded" flag for XIVE escalations . - kvm: PPC: Book 3S HV: Do ptesync in radix guest exit path . - kvm: PPC: Book3S HV: Do SLB load/unload with guest LPCR value loaded . - kvm: PPC: Book3S HV: Enable migration of decrementer register . - kvm: PPC: Book3S HV: Factor fake-suspend handling out of kvmppc_save/restore_tm . - kvm: PPC: Book3S HV: Fix conditions for starting vcpu . - kvm: PPC: Book3S HV: Fix constant size warning . - kvm: PPC: Book3S HV: Fix duplication of host SLB entries . - kvm: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM workarounds . - kvm: PPC: Book3S HV: Fix handling of large pages in radix page fault handler . - kvm: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code . - kvm: PPC: Book3S HV: Fix inaccurate comment . - kvm: PPC: Book3S HV: Fix kvmppc_bad_host_intr for real mode interrupts . - kvm: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry . - kvm: PPC: Book3S HV: Fix typo in kvmppc_hv_get_dirty_log_radix . - kvm: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing . - kvm: PPC: Book3S HV: Handle 1GB pages in radix page fault handler . - kvm: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 . - kvm: PPC: Book3S HV: Keep XIVE escalation interrupt masked unless ceded . - kvm: PPC: Book3S HV: Lockless tlbie for HPT hcalls . - kvm: PPC: Book3S HV: Make HPT resizing work on POWER9 . - kvm: PPC: Book3S HV: Make radix clear pte when unmapping . - kvm: PPC: Book3S HV: Make radix use correct tlbie sequence in kvmppc_radix_tlbie_page . - kvm: PPC: Book3S HV: Make xive_pushed a byte, not a word . - kvm: PPC: Book3S HV: Pack VCORE IDs to access full VCPU ID space . - kvm: PPC: Book3S HV: radix: Do not clear partition PTE when RC or write bits do not match . - kvm: PPC: Book3S HV: Radix page fault handler optimizations . - kvm: PPC: Book3S HV: radix: Refine IO region partition scope attributes . - kvm: PPC: Book3S HV: Read kvm-greater than arch.emul_smt_mode under kvm-greater than lock . - kvm: PPC: Book3S HV: Recursively unmap all page table entries when unmapping . - kvm: PPC: Book3S HV: Remove useless statement . - kvm: PPC: Book3S HV: Remove vcpu-greater than arch.dec usage . - kvm: PPC: Book3S HV: Send kvmppc_bad_interrupt NMIs to Linux handlers . - kvm: PPC: Book3S HV: Set RWMR on POWER8 so PURR/SPURR count correctly . - kvm: PPC: Book3S HV: Snapshot timebase offset on guest entry . - kvm: PPC: Book3S HV: Streamline setting of reference and change bits . - kvm: PPC: Book3S HV: Use a helper to unmap ptes in the radix fault path . - kvm: PPC: Book3S HV: Use __gfn_to_pfn_memslot in page fault handler . - kvm: PPC: Book3S HV: XIVE: Resend re-routed interrupts on CPU priority change . - kvm: PPC: Book3S PR: Add guest MSR parameter for kvmppc_save_tm/kvmppc_restore_tm . - kvm: PPC: Book3S PR: Enable use on POWER9 inside HPT-mode guests . - kvm: PPC: Book3S PR: Move kvmppc_save_tm/kvmppc_restore_tm to separate file . - kvm: PPC: Book3S: Use correct page shift in H_STUFF_TCE . - kvm: PPC: Fix a mmio_host_swabbed uninitialized usage issue . - kvm: PPC: Make iommu_table::it_userspace big endian . - kvm: PPC: Move nip/ctr/lr/xer registers to pt_regs in kvm_vcpu_arch . - kvm: PPC: Use seq_puts in kvmppc_exit_timing_show . - kvm: s390: vsie: copy wrapping keys to right place . - kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb . - kvm: VMX: re-add ple_gap module parameter . - kvm: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall . - libata: whitelist all SAMSUNG MZ7KM* solid-state disks . - libceph: bump CEPH_MSG_MAX_DATA_LEN . - libceph: fall back to sendmsg for slab pages . - libertas: do not set URB_ZERO_PACKET on IN USB transfer . - libertas_tf: prevent underflow in process_cmdrequest . - libnvdimm, dimm: Maximize label transfer size . - libnvdimm: Hold reference on parent while scheduling async init . - libnvdimm, label: change nvdimm_num_label_slots per UEFI 2.7 . - libnvdimm, label: Fix sparse warning . - libnvdimm, pfn: Pad pfn namespaces relative to other regions . - libnvdimm, region: Fail badblocks listing for inactive regions . - lib/raid6: Fix arm64 test build . - lib/ubsan.c: do not mark __ubsan_handle_builtin_unreachable as noreturn . - Limit max FW API version for QCA9377 . - linux/bitmap.h: fix type of nbits in bitmap_shift_right . - livepatch: create and include UAPI headers . - llc: set SOCK_RCU_FREE in llc_sap_add_socket . - lockd: fix "list_add double add" caused by legacy signal interface . - locking/barriers: Convert users of lockless_dereference to READ_ONCE . - locking/static_keys: Improve uninitialized key warning . - mac80211: Always report TX status . - mac80211: Clear beacon_int in ieee80211_do_stop . - mac80211: fix reordering of buffered broadcast packets . - mac80211: fix TX status reporting for ieee80211s . - mac80211_hwsim: do not omit multicast announce of first added radio . - mac80211_hwsim: fix module init error paths for netlink . - mac80211_hwsim: Timer should be initialized before device registered . - mac80211: ignore NullFunc frames in the duplicate detection . - mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext . - mac80211: TDLS: fix skb queue/priority assignment . - mach64: fix display corruption on big endian machines - mach64: fix image corruption due to reading accelerator registers - mailbox: PCC: handle parse error . - make sure that __dentry_kill always invalidates d_seq, unhashed or not . - Mark HI and TASKLET softirq synchronous . - md: allow metadata updates while suspending an array - fix . - MD: fix invalid stored role for a disk - try2 . - md: fix NULL dereference of mddev-greater than pers in remove_and_add_spares . - md: fix raid10 hang issue caused by barrier . - md/raid10: fix that replacement cannot complete recovery after reassemble . - md/raid1: add error handling of read error from FailFast device . - md/raid5-cache: disable reshape completely . - md/raid5: fix data corruption of replacements after originals dropped . - media: cx231xx: fix potential sign-extension overflow on large shift . - media: dvb: fix compat ioctl translation . - media: em28xx: fix input name for Terratec AV 350 . - media: em28xx: Fix use-after-free when disconnecting . - media: em28xx: make v4l2-compliance happier by starting sequence on zero . - media: em28xx: use a default format if TRY_FMT fails . - media: omap3isp: Unregister media device as first . - media: pci: cx23885: handle adding to list failure . - media: tvp5150: avoid going past array on v4l2_querymenu . - media: tvp5150: fix switch exit in set control handler . - media: tvp5150: fix width alignment during set_selection . - media: uvcvideo: Fix uvc_alloc_entity allocation alignment . - media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD . - media: vsp1: Fix YCbCr planar formats pitch calculation . - memory_hotplug: cond_resched in __remove_pages . - mfd: arizona: Correct calling of runtime_put_sync . - mfd: menelaus: Fix possible race condition and leak . - mfd: omap-usb-host: Fix dts probe of children . - mlxsw: spectrum: Fix IP2ME CPU policer configuration . - mmc: bcm2835: reset host on timeout . - mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support . - mmc: core: Reset HPI enabled state during re-init and in case of errors . - mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl . - mmc: dw_mmc-bluefield: Add driver extension . - mmc: dw_mmc-k3: add sd support for hi3660 . - mmc: dw_mmc-rockchip: correct property names in debug . - mmc: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310 . - mmc: omap_hsmmc: fix DMA API warning . - mmc: sdhci: fix the timeout check window for clock and reset . - mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01 . - mm: do not miss the last page because of round-off error . - mm: do not warn about large allocations for slab . - mm: handle no memcg case in memcg_kmem_charge properly . - mm/huge_memory.c: reorder operations in __split_huge_page_tail . - mm/huge_memory: fix lockdep complaint on 32-bit i_size_read . - mm/huge_memory: rename freeze_page to unmap_page . - mm/huge_memory: splitting set mapping+index before unfreeze . - mm: hugetlb: yield when prepping struct pages . - mm/khugepaged: collapse_shmem do not crash on Compound . - mm/khugepaged: collapse_shmem remember to clear holes . - mm/khugepaged: collapse_shmem stop if punched or truncated . - mm/khugepaged: collapse_shmem without freezing new_page . - mm/khugepaged: fix crashes due to misaccounted holes . - mm/khugepaged: minor reorderings in collapse_shmem . - mm: lower the printk loglevel for __dump_page messages . - mm, memory_hotplug: be more verbose for memory offline failures . - mm, memory_hotplug: drop pointless block alignment checks from __offline_pages . - mm, memory_hotplug: print reason for the offlining failure . - mm: migration: fix migration of huge PMD shared pages . - mm: only report isolation failures when offlining memory . - mm: print more information about mapping in __dump_page . - mm: put_and_wait_on_page_locked while page is migrated . - mm: rework memcg kernel stack accounting . - mm: sections are not offlined during memory hotremove . - mm: shmem.c: Correctly annotate new inodes for lockdep . - mm/vmstat.c: fix NUMA statistics updates . - modpost: ignore livepatch unresolved relocations . - mount: Do not allow copying MNT_UNBINDABLE|MNT_LOCKED mounts . - mount: Prevent MNT_DETACH from disconnecting locked mounts . - mount: Retest MNT_LOCKED in do_umount . - Move dell_rbu fix to sorted section . - mtd: cfi: convert inline functions to macros . - mtd: Fix comparison in map_word_andequal . - namei: allow restricted O_CREAT of FIFOs and regular files . - nbd: do not allow invalid blocksize settings . - neighbour: confirm neigh entries when ARP packet is received . - net/af_iucv: drop inbound packets with invalid flags . - net/af_iucv: fix skb handling on HiperTransport xmit error . - net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT . - net: aquantia: memory corruption on jumbo frames . - net: bcmgenet: Poll internal PHY for GENETv5 . - net: bcmgenet: protect stop from timeout . - net: bcmgenet: use MAC link status for fixed phy . - net: bgmac: Fix endian access in bgmac_dma_tx_ring_free . - net: bridge: remove ipv6 zero address check in mcast queries . - net: dsa: bcm_sf2: Call setup during switch resume . - net: dsa: bcm_sf2: Fix unbind ordering . - net: dsa: mv88e6xxx: Fix binding documentation for MDIO busses . - net: dsa: qca8k: Add QCA8334 binding documentation . - net: ena: add functions for handling Low Latency Queues in ena_com . - net: ena: add functions for handling Low Latency Queues in ena_netdev . - net: ena: change rx copybreak default to reduce kernel memory pressure . - net: ena: complete host info to match latest ENA spec . - net: ena: enable Low Latency Queues . - net: ena: explicit casting and initialization, and clearer error handling . - net: ena: fix auto casting to boolean . - net: ena: fix compilation error in xtensa architecture . - net: ena: fix crash during ena_remove . - net: ena: fix crash during failed resume from hibernation . - net: ena: fix indentations in ena_defs for better readability . - net: ena: Fix Kconfig dependency on X86 . - net: ena: fix NULL dereference due to untimely napi initialization . - net: ena: fix rare bug when failed restart/resume is followed by driver removal . - net: ena: fix warning in rmmod caused by double iounmap . - net: ena: introduce Low Latency Queues data structures according to ENA spec . - net: ena: limit refill Rx threshold to 256 to avoid latency issues . - net: ena: minor performance improvement . - net: ena: remove ndo_poll_controller . - net: ena: remove redundant parameter in ena_com_admin_init . - net: ena: update driver version from 2.0.1 to 2.0.2 . - net: ena: update driver version to 2.0.1 . - net: ena: use CSUM_CHECKED device indication to report skb"s checksum status . - net: fec: do not dump RX FIFO register when not available . - net-gro: reset skb-greater than pkt_type in napi_reuse_skb . - net: hns3: Add nic state check before calling netif_tx_wake_queue . - net: hns3: Add support for hns3_nic_netdev_ops.ndo_do_ioctl . - net: hns3: bugfix for buffer not free problem during resetting . - net: hns3: bugfix for handling mailbox while the command queue reinitialized . - net: hns3: bugfix for hclge_mdio_write and hclge_mdio_read . - net: hns3: bugfix for is_valid_csq_clean_head . - net: hns3: bugfix for reporting unknown vector0 interrupt repeatly problem . - net: hns3: bugfix for rtnl_lock"s range in the hclgevf_reset . - net: hns3: bugfix for the initialization of command queue"s spin lock . - net: hns3: Check hdev state when getting link status . - net: hns3: Clear client pointer when initialize client failed or unintialize finished . - net: hns3: Fix cmdq registers initialization issue for vf . - net: hns3: Fix error of checking used vlan id . - net: hns3: Fix ets validate issue . - net: hns3: Fix for netdev not up problem when setting mtu . - net: hns3: Fix for out-of-bounds access when setting pfc back pressure . - net: hns3: Fix for packet buffer setting bug . - net: hns3: Fix for rx vlan id handle to support Rev 0x21 hardware . - net: hns3: Fix for setting speed for phy failed problem . - net: hns3: Fix for vf vlan delete failed problem . - net: hns3: Fix loss of coal configuration while doing reset . - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg . - net: hns3: Fix ping exited problem when doing lp selftest . - net: hns3: Preserve vlan 0 in hardware table . - net: hns3: remove unnecessary queue reset in the hns3_uninit_all_ring . - net: hns3: Set STATE_DOWN bit of hdev state when stopping net . - net: hns: fix for unmapping problem when SMMU is on . - net: hp100: fix always-true check for link up state . - net: ibm: fix return type of ndo_start_xmit function . - net/ibmnvic: Fix deadlock problem in reset . - net/ibmvnic: Fix RTNL deadlock during device reset . - net: ipmr: fix unresolved entry dumps . - net: ipv4: do not let PMTU updates increase route MTU . - net/ipv6: Display all addresses in output of /proc/net/if_inet6 . - net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs . - netlabel: check for IPV4MASK in addrinfo_get . - net: macb: do not disable MDIO bus at open/close time . - net/mlx4_core: Correctly set PFC param if global pause is turned off . - net/mlx5: Check for error in mlx5_attach_interface . - net/mlx5e: Fix selftest for small MTUs . - net/mlx5e: Set vlan masks for all offloaded TC rules . - net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables . - net/mlx5: E-Switch, Fix out of bound access when setting vport rate . - net/mlx5: Fix debugfs cleanup in the device init/remove flow . - net/mlx5: Fix use-after-free in self-healing flow . - net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type . - net: mvpp2: Extract the correct ethtype from the skb for tx csum offload . - net: mvpp2: fix a txq_done race condition . - net/packet: fix packet drop as of virtio gso . - net: phy: mdio-gpio: Fix working over slow can_sleep GPIOs . - net: qca_spi: Fix race condition in spi transfers . - net: qmi_wwan: add Wistron Neweb D19Q1 . - net: sched: action_ife: take reference to meta module . - net/sched: act_pedit: fix dump of extended layered op . - net/sched: act_sample: fix NULL dereference in the data path . - net: sched: Fix for duplicate class dump . - net: sched: Fix memory exposure from short TCA_U32_SEL . - net: sched: gred: pass the right attribute to gred_change_table_def . - net: smsc95xx: Fix MTU range . - net: socket: fix a missing-check bug . - net: stmmac: Fix stmmac_mdio_reset when building stmmac as modules . - net: stmmac: Fixup the tail addr setting in xmit path . - net: systemport: Fix wake-up interrupt race during resume . - net: systemport: Protect stop from timeout . - net: udp: fix handling of CHECKSUM_COMPLETE packets . - net/usb: cancel pending work when unbinding smsc75xx . - net: usb: r8152: constify usb_device_id . - net: usb: r8152: use irqsave in USB"s complete callback . - nfc: nfcmrvl_uart: fix OF child-node lookup . - nfp: wait for posted reconfigs when disabling the device . - nfs: Avoid RCU usage in tracepoints . - nfs: commit direct writes even if they fail partially . - nfsd4: permit layoutget of executable-only files . - nfsd: check for use of the closed special stateid . - nfsd: CLOSE SHOULD return the invalid special stateid for NFSv4.x . - nfsd: deal with revoked delegations appropriately . - nfsd: Ensure we check stateid validity in the seqid operation checks . - nfsd: Fix another OPEN stateid race . - nfsd: fix corrupted reply to badly ordered compound . - nfsd: fix potential use-after-free in nfsd4_decode_getdeviceinfo . - nfsd: Fix stateid races between OPEN and CLOSE . - nfs: do not wait on commit in nfs_commit_inode if there were no commit requests . - nfsd: restrict rd_maxcount to svc_max_payload in nfsd_encode_readdir . - nfs: Ensure we commit after writeback is complete . - nfs: Fix an incorrect type in struct nfs_direct_req . - nfs: Fix a typo in nfs_rename . - nfs: Fix typo in nomigration mount option . - nfs: Fix unstable write completion . - nfsv4.0 fix client reference leak in callback . - nfsv4.1: Fix a potential layoutget/layoutrecall deadlock . - nfsv4.1 fix infinite loop on I/O . - nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY . - nfsv4.1: Fix up replays of interrupted requests . - nfsv4: Fix a typo in nfs41_sequence_process . - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds . - nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT . - nospec: Allow index argument to have const-qualified type - nospec: Include less thanasm/barrier.hgreater than dependency . - nospec: Kill array_index_nospec_mask_check . - nvdimm: Clarify comment in sizeof_namespace_index . - nvdimm: Remove empty if statement . - nvdimm: Sanity check labeloff . - nvdimm: Split label init out from the logic for getting config data . - nvdimm: Use namespace index data to reduce number of label reads needed . - nvme-fc: resolve io failures during connect . - nvme: Free ctrl device name on init failure . - nvme-multipath: zero out ANA log buffer . - nvme: validate controller state before rescheduling keep alive . - objtool: Detect RIP-relative switch table references . - objtool: Detect RIP-relative switch table references, part 2 . - objtool: Fix another switch table detection issue . - objtool: Fix double-free in .cold detection error path . - objtool: Fix GCC 8 cold subfunction detection for aliased functions . - objtool: Fix "noreturn" detection for recursive sibling calls . - objtool: Fix segfault in .cold detection with -ffunction-sections . - objtool: Support GCC 8"s cold subfunctions . - objtool: Support GCC 8 switch tables . - ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry . - ocfs2: fix locking for res-greater than tracking and dlm-greater than tracking_list . - ocfs2: fix ocfs2 read block panic . - ocfs2: free up write context when direct IO failed . - ocfs2: subsystem.su_mutex is required while accessing the item-greater than ci_parent . - of: add helper to lookup compatible child node - openvswitch: Fix push/pop ethernet validation . - panic: avoid deadlocks in re-entrant console drivers . - pci: Add ACS quirk for Ampere root ports . - pci: Add ACS quirk for APM X-Gene devices . - pci: Add Device IDs for Intel GPU "spurious interrupt" quirk . - pci/ASPM: Do not initialize link state when aspm_disabled is set . - pci/ASPM: Fix link_state teardown on device removal . - pci: Convert device-specific ACS quirks from NULL termination to ARRAY_SIZE . - pci: Delay after FLR of Intel DC P3700 NVMe . - pci: Disable Samsung SM961/PM961 NVMe before FLR . - pci: dwc: remove duplicate fix - pci: Export pcie_has_flr . - pci: hv: Use effective affinity mask . - pci: imx6: Fix link training status detection in link up check . - pci: iproc: Activate PAXC bridge quirk for more devices . - pci: iproc: Remove PAXC slot check to allow VF support . - pci: Mark Ceton InfiniTV4 INTx masking as broken . - pci: Mark fall-through switch cases before enabling -Wimplicit-fallthrough . - pci: Mark Intel XXV710 NIC INTx masking as broken . - pci/MSI: Warn and return error if driver enables MSI/MSI-X twice . - pci: vmd: Assign vector zero to all bridges . - pci: vmd: Detach resources after stopping root bus . - pci: vmd: White list for fast interrupt handlers . - pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges . - percpu: make this_cpu_generic_read atomic w.r.t. interrupts . - perf: fix invalid bit in diagnostic entry . - perf tools: Fix tracing_path_mount proper path . - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map . - pinctrl: meson: fix pinconf bias disable . - pinctrl: qcom: spmi-mpp: Fix drive strength setting . - pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux . - pinctrl: spmi-mpp: Fix pmic_mpp_config_get to be compliant . - pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get to be compliant . - pipe: match pipe_max_size data type with procfs . - platform-msi: Free descriptors in platform_msi_domain_free . - platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307 . - platform/x86: intel_telemetry: report debugfs failure . - pnfs: Always free the session slot on error in nfs4_layoutget_handle_exception . - pnfs: Do not release the sequence slot until we"ve processed layoutget on open . - pnfs: Prevent the layout header refcount going to zero in pnfs_roc . - powerpc/64s: consolidate MCE counter increment . - powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9 . - powerpc/64s/radix: Fix process table entry cache invalidation . - powerpc/boot: Expose Kconfig symbols to wrapper . - powerpc/boot: Fix build failures with -j 1 . - powerpc/boot: Fix opal console in boot wrapper . - powerpc/kvm/booke: Fix altivec related build break . - powerpc/kvm: Switch kvm pmd allocator to custom allocator . - powerpc/mm: Fix typo in comments . - powerpc/mm/hugetlb: initialize the pagetable cache correctly for hugetlb . - powerpc/mm/keys: Move pte bits to correct headers . - powerpc/mm: Rename find_linux_pte_or_hugepte . - powerpc/npu-dma.c: Fix crash after __mmu_notifier_register failure . - powerpc/perf: Update raw-event code encoding comment for power8 . - powerpc/pkeys: Fix handling of pkey state across fork . - powerpc/powernv: Add indirect levels to it_userspace . - powerpc/powernv: Do not select the cpufreq governors . - powerpc/powernv: Fix concurrency issue with npu-greater than mmio_atsd_usage . - powerpc/powernv: Fix opal_event_shutdown called with interrupts disabled . - powerpc/powernv: Fix save/restore of SPRG3 on entry/exit from stop . - powerpc/powernv/ioda: Allocate indirect TCE levels on demand . - powerpc/powernv/ioda: Finish removing explicit max window size check . - powerpc/powernv/ioda: Remove explicit max window size check . - powerpc/powernv: Move TCE manupulation code to its own file . - powerpc/powernv/npu: Add lock to prevent race in concurrent context init/destroy . - powerpc/powernv/npu: Do not explicitly flush nmmu tlb . - powerpc/powernv/npu: Fix deadlock in mmio_invalidate . - powerpc/powernv/npu: Prevent overwriting of pnv_npu2_init_contex callback parameters . - powerpc/powernv/npu: Use flush_all_mm instead of flush_tlb_mm . - powerpc/powernv/pci: Work around races in PCI bridge enabling . - powerpc/powernv: Rework TCE level allocation . - powerpc/pseries: Fix DTL buffer registration . - powerpc/pseries: Fix how we iterate over the DTL entries . - powerpc/pseries: Fix "OF: ERROR: Bad of_node_put on /cpus" during DLPAR . - powerpc/pseries/mobility: Extend start/stop topology update scope . - powerpc: pseries: remove dlpar_attach_node dependency on full path . - powerpc/pseries: Track LMB nid instead of using device tree . - powerpc/traps: restore recoverability of machine_check interrupts . - powerpc/xive: Move definition of ESB bits . - powerpc/xmon: Add ISA v3.0 SPRs to SPR dump . - power: supply: max8998-charger: Fix platform data retrieval . - power: supply: olpc_battery: correct the temperature units . - pppoe: fix reception of frames with no mac header . - printk: Fix panic caused by passing log_buf_len to command line . - provide linux/set_memory.h . - ptp: fix Spectre v1 vulnerability . - ptrace: Remove unused ptrace_may_access_sched and MODE_IBRS . - pwm: lpss: Release runtime-pm reference from the driver"s remove callback . - pxa168fb: prepare the clock . - qed: Add driver support for 20G link speed . - qed: Add support for virtual link . - qede: Add driver support for 20G link speed . - qmi_wwan: apply SET_DTR quirk to the SIMCOM shared device ID . - qmi_wwan: Support dynamic config on Quectel EP06 . - r8152: add byte_enable for ocp_read_word function . - r8152: add Linksys USB3GIGV1 id . - r8152: add r8153_phy_status function . - r8152: adjust lpm settings for RTL8153 . - r8152: adjust rtl8153_runtime_enable function . - r8152: adjust the settings about MAC clock speed down for RTL8153 . - r8152: adjust U2P3 for RTL8153 . - r8152: avoid rx queue more than 1000 packets . - r8152: check if disabling ALDPS is finished . - r8152: correct the definition . - r8152: disable RX aggregation on Dell TB16 dock . - r8152: disable RX aggregation on new Dell TB16 dock . - r8152: fix wrong checksum status for received IPv4 packets . - r8152: move calling delay_autosuspend function . - r8152: move the default coalesce setting for RTL8153 . - r8152: move the initialization to reset_resume function . - r8152: move the setting of rx aggregation . - r8152: replace napi_complete with napi_complete_done . - r8152: set rx mode early when linking on . - r8152: split rtl8152_resume function . - r8152: support new chip 8050 . - r8152: support RTL8153B . - r8169: fix NAPI handling under high load . - race of lockd inetaddr notifiers vs nlmsvc_rqst change . - raid10 BUG_ON in raise_barrier when force is true and conf-greater than barrier is 0 . - random: rate limit unseeded randomness warnings . - rbd: whitelist RBD_FEATURE_OPERATIONS feature bit . - rcu: Allow for page faults in NMI handlers . - rdma/bnxt_re: Add missing spin lock initialization . - rdma/bnxt_re: Avoid accessing the device structure after it is freed . - rdma/bnxt_re: Avoid NULL check after accessing the pointer . - rdma/bnxt_re: Fix system hang when registration with L2 driver fails . - rdma/hns: Bugfix pbl configuration for rereg mr . - rdma_rxe: make rxe work over 802.1q VLAN devices . - rds: fix two RCU related problems . - remoteproc: qcom: Fix potential device node leaks . - reset: hisilicon: fix potential NULL pointer dereference . - reset: imx7: Fix always writing bits as 0 . - reset: remove remaining WARN_ON in less thanlinux/reset.hgreater than . - resource: Include resource end in walk_* interfaces . - Revert "blacklist.conf: blacklist inapplicable commits" This reverts commit 88bd1b2b53990d5518b819968445522fb1392bee. We only build with VIRT_CPU_ACCOUNTING_NATIVE on s390 - Revert "ceph: fix dentry leak in splice_dentry" . - Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c" . - Revert "iommu/io-pgtable-arm: Check for v7s-incapable systems" . - Revert "PCI/ASPM: Do not initialize link state when aspm_disabled is set" . - Revert "powerpc/64: Fix checksum folding in csum_add" . - Revert "scsi: lpfc: ls_rjt erroneus FLOGIs" . - Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid" . - Revert wlcore patch to follow stable tree develpment - ring-buffer: Allow for rescheduling when removing pages . - ring-buffer: Do no reuse reader page if still in use . - ring-buffer: Mask out the info bits when returning buffer page length . - rpmsg: Correct support for MODULE_DEVICE_TABLE . - rtc: hctosys: Add missing range error reporting . - rtc: m41t80: Correct alarm month range with RTC reads . - rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write . - rtc: snvs: Add timeouts to avoid kernel lockups . - rtl8xxxu: Fix missing break in switch . - rtnetlink: Disallow FDB configuration for non-Ethernet device . - rtnetlink: fix rtnl_fdb_dump for ndmsg header . - rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096 . - s390/cpum_sf: Add data entry sizes to sampling trailer entry . - s390/dasd: simplify locking in dasd_times_out . - s390/kdump: Fix elfcorehdr size calculation . - s390/kdump: Make elfcorehdr size calculation ABI compliant . - s390/kvm: fix deadlock when killed by oom . - s390/mm: Check for valid vma before zapping in gmap_discard . - s390/mm: correct allocate_pgste proc_handler callback . - s390: qeth_core_mpc: Use ARRAY_SIZE instead of reimplementing its function . - s390/qeth: fix HiperSockets sniffer . - s390/qeth: fix length check in SNMP processing . - s390: qeth: Fix potential array overrun in cmd/rc lookup . - s390/qeth: handle failure on workqueue creation . - s390/qeth: remove outdated portname debug msg . - s390/qeth: report 25Gbit link speed . - s390/qeth: sanitize strings in debug messages . - s390: revert ELF_ET_DYN_BASE base changes . - s390/sclp_tty: enable line mode tty even if there is an ascii console . - s390/sthyi: add cache to store hypervisor info . - s390/sthyi: add s390_sthyi system call . - s390/sthyi: reorganize sthyi implementation . - sbitmap: fix race in wait batch accounting . - sched/core: Fix cpu.max vs. cpuhotplug deadlock . - sched/smt: Expose sched_smt_present static key . - sched/smt: Make sched_smt_present track topology . - sched, tracing: Fix trace_sched_pi_setprio for deboosting . - scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock . - scsi: libsas: remove irq save in sas_ata_qc_issue . - scsi: lpfc: add support to retrieve firmware logs . - scsi: lpfc: add Trunking support . - scsi: lpfc: Cap NPIV vports to 256 . - scsi: lpfc: Correct code setting non existent bits in sli4 ABORT WQE . - scsi: lpfc: Correct errors accessing fw log . - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 . - scsi: lpfc: Correct irq handling via locks when taking adapter offline . - scsi: lpfc: Correct LCB RJT handling . - scsi: lpfc: Correct loss of fc4 type on remote port address change . - scsi: lpfc: Correct race with abort on completion path . - scsi: lpfc: Correct soft lockup when running mds diagnostics . - scsi: lpfc: Correct speeds on SFP swap . - scsi: lpfc: Correct topology type reporting on G7 adapters . - scsi: lpfc: Defer LS_ACC to FLOGI on point to point logins . - scsi: lpfc: Enable Management features for IF_TYPE=6 . - scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces . - scsi: lpfc: Fix a duplicate 0711 log message number . - scsi: lpfc: fix block guard enablement on SLI3 adapters . - scsi: lpfc: Fix dif and first burst use in write commands . - scsi: lpfc: Fix discovery failures during port failovers with lots of vports . - scsi: lpfc: Fix driver release of fw-logging buffers . - scsi: lpfc: Fix errors in log messages . - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN . - scsi: lpfc: Fix kernel Oops due to null pring pointers . - scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event . - scsi: lpfc: Fix lpfc_sli4_read_config return value check . - scsi: lpfc: Fix odd recovery in duplicate FLOGIs in point-to-point . - scsi: lpfc: Fix panic when FW-log buffsize is not initialized . - scsi: lpfc: Implement GID_PT on Nameserver query to support faster failover . - scsi: lpfc: ls_rjt erroneus FLOGIs . - scsi: lpfc: Raise nvme defaults to support a larger io and more connectivity . - scsi: lpfc: raise sg count for nvme to use available sg resources . - scsi: lpfc: reduce locking when updating statistics . - scsi: lpfc: refactor mailbox structure context fields . - scsi: lpfc: Remove set but not used variable "sgl_size" . - scsi: lpfc: Reset link or adapter instead of doing infinite nameserver PLOGI retry . - scsi: lpfc: rport port swap discovery issue . - scsi: lpfc: Synchronize access to remoteport via rport . - scsi: lpfc: update driver version to 12.0.0.7 . - scsi: lpfc: update driver version to 12.0.0.8 . - scsi: lpfc: update driver version to 12.0.0.9 . - scsi: lpfc: update manufacturer attribute to reflect Broadcom . - scsi: qlogicpti: Fix an error handling path in "qpti_sbus_probe" . - scsi: scsi_transport_srp: Fix shost to rport translation . - scsi: sg: fix minor memory leak in error path . - scsi: sysfs: Introduce sysfs_{un,}break_active_protection . - scsi: target: add emulate_pr backstore attr to toggle PR support . - scsi: target: drop unused pi_prot_format attribute storage . - scsi: target: Fix fortify_panic kernel exception . - scsi: target/tcm_loop: Avoid that static checkers warn about dead code . - scsi: target: tcmu: add read length support . - scsi: zfcp: fix posting too many status read buffers leading to adapter shutdown . - sctp: fix race on sctp_id2asoc . - sctp: fix strchange_flags name for Stream Change Event . - sctp: hold transport before accessing its asoc in sctp_transport_get_next . - sctp: not allow to set asoc prsctp_enable by sockopt . - sctp: not increase stream"s incnt before sending addstrm_in request . - sctp: update dst pmtu with the correct daddr . - serial: 8250: Fix clearing FIFOs in RS485 mode again . - shmem: introduce shmem_inode_acct_block . - shmem: shmem_charge: verify max_block is not exceeded before inode update . - skd: Avoid that module unloading triggers a use-after-free . - skd: Submit requests to firmware before triggering the doorbell . - skip LAYOUTRETURN if layout is invalid . - soc: bcm2835: sync firmware properties with downstream - soc: fsl: qbman: qman: avoid allocating from non existing gen_pool . - soc/tegra: pmc: Fix child-node lookup . - soc: ti: QMSS: Fix usage of irq_set_affinity_hint . - spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode . - spi: bcm2835: Fix book-keeping of DMA termination . - spi: bcm2835: Fix race on DMA termination . - spi: bcm2835: Unbreak the build of esoteric configs . - spi/bcm63xx-hsspi: keep pll clk enabled . - spi: bcm-qspi: switch back to reading flash using smaller chunks . - spi: sh-msiof: fix deferred probing . - splice: do not read more than available pipe space . - staging: bcm2835-camera: Abort probe if there is no camera . - staging: comedi: ni_mio_common: protect register write overflow . - staging:iio:ad7606: fix voltage scales . - staging: rtl8712: Fix possible buffer overrun . - staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station . - staging: rtl8723bs: Fix the return value in case of error in "rtw_wx_read32" . - staging: rts5208: fix gcc-8 logic error warning . - staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION . - staging: wilc1000: fix missing read_write setting when reading data . - sunrpc: Allow connect to return EHOSTUNREACH . - sunrpc: Do not use stack buffer with scatterlist . - sunrpc: Fix rpc_task_begin trace point . - sunrpc: Fix tracepoint storage issues with svc_recv and svc_rqst_status . - supported.conf: add raspberrypi-ts driver - supported.conf: whitelist bluefield eMMC driver - target: fix buffer offset in core_scsi3_pri_read_full_status . - target/iscsi: avoid NULL dereference in CHAP auth error path . - target: se_dev_attrib.emulate_pr ABI stability . - tcp: do not restart timewait timer on rst reception . - team: no need to do team_notify_peers or team_mcast_rejoin when disabling port . - termios, tty/tty_baudrate.c: fix buffer overrun . - test_firmware: fix error return getting clobbered . - test_hexdump: use memcpy instead of strncpy . - tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths . - thermal: bcm2835: enable hwmon explicitly . - thermal: da9062/61: Prevent hardware access during system suspend . - thermal: rcar_thermal: Prevent hardware access during system suspend . - tipc: do not assume linear buffer when reading ancillary data . - tipc: fix a missing rhashtable_walk_exit . - tipc: fix flow control accounting for implicit connect . - tmpfs: make lseek return ENXIO with a negative offset . - tools build: fix # escaping in .cmd files for future Make . - tools: hv: fcopy: set "error" in case an unknown operation was requested . - tools: hv: include string.h in hv_fcopy_daemon . - tools/lib/lockdep: Rename "trywlock" into "trywrlock" . - tools/power/cpupower: fix compilation with STATIC=true . - tools/power turbostat: fix possible sprintf buffer overflow . - tpm2-cmd: allow more attempts for selftest execution . - tpm: add retry logic . - tpm: consolidate the TPM startup code . - tpm: do not suspend/resume if power stays on . - tpm: fix intermittent failure with self tests . - tpm: fix response size validation in tpm_get_random . - tpm: move endianness conversion of ordinals to tpm_input_header . - tpm: move endianness conversion of TPM_TAG_RQU_COMMAND to tpm_input_header . - tpm: move the delay_msec increment after sleep in tpm_transmit . - tpm: React correctly to RC_TESTING from TPM 2.0 self tests . - tpm: replace msleep with usleep_range in TPM 1.2/2.0 generic drivers . - tpm: Restore functionality to xen vtpm driver . - tpm: self test failure should not cause suspend to fail . - tpm: tpm-interface: fix tpm_transmit/_cmd kdoc . - tpm: Trigger only missing TPM 2.0 self tests . - tpm: Use dynamic delay to wait for TPM 2.0 self test result . - tpm: use tpm2_pcr_read in tpm2_do_selftest . - tpm: use tpm_buf functions in tpm2_pcr_read . - tracing: Apply trace_clock changes to instance max buffer . - tracing/blktrace: Fix to allow setting same value . - tracing: Erase irqsoff trace with empty write . - tracing: Fix bad use of igrab in trace_uprobe.c . - tracing: Fix crash when freeing instances with event triggers . - tracing: Fix crash when it fails to alloc ring buffer . - tracing: Fix double free of event_trigger_data . - tracing: Fix missing return symbol in function_graph output . - tracing: Fix possible double free in event_enable_trigger_func . - tracing: Fix possible double free on failure of allocating trace buffer . - tracing: Fix regex_match_front to not over compare the test string . - tracing: Fix trace_pipe behavior for instance traces . - tracing: Remove RCU work arounds from stack tracer . - tracing/samples: Fix creation and deletion of simple_thread_fn creation . - tty: check name length in tty_find_polling_driver . - tty: Do not block on IO when ldisc change is pending . - tty: Do not hold ldisc lock in tty_reopen if ldisc present . - tty: Do not return -EAGAIN in blocking read . - tty: do not set TTY_IO_ERROR flag if console port . - tty: fix data race between tty_init_dev and flush of buf . - tty: Hold tty_ldisc_lock during tty_reopen . - tty/ldsem: Add lockdep asserts for ldisc_sem . - tty/ldsem: Convert to regular lockdep annotations . - tty/ldsem: Decrement wait_readers on timeouted down_read . - tty/ldsem: Wake up readers after timed out down_write . - tty: serial: 8250_mtk: always resume the device in probe . - tty: Simplify tty-greater than count math in tty_reopen . - tty: wipe buffer . - tty: wipe buffer if not echoing data . - tun: Consistently configure generic netdev params via rtnetlink . - tuntap: fix multiqueue rx . - ubifs: Handle re-linking of inodes correctly while recovery . - ubifs-Handle-re-linking-of-inodes-correctly-while-re.patch: Fixup compilation failure due to different ubifs_assert prototype. - udf: Allow mounting volumes with incorrect identification strings . - udp4: fix IP_CMSG_CHECKSUM for connected sockets . - udp6: add missing checks on edumux packet processing . - udp6: fix encap return code for resubmitting . - uio: ensure class is registered before devices . - uio: Fix an Oops on load . - uio: make symbol "uio_class_registered" static . - unifdef: use memcpy instead of strncpy . - usb: appledisplay: Add 27" Apple Cinema Display . - usb: cdc-acm: add entry for Hiro modem . - usb: chipidea: Prevent unbalanced IRQ disable . - usb: core: Fix hub port connection events lost . - usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series . - usb: dwc2: host: do not delay retries for CONTROL IN transfers . - usb: dwc2: host: Do not retry NAKed transactions right away . - usb: dwc2: host: use hrtimer for NAK retries . - usb: dwc3: core: Clean up ULPI device . - usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers . - usb: dwc3: gadget: Properly check last unaligned/zero chain TRB . - usb: gadget: fsl_udc_core: check allocation return value and cleanup on failure . - usb: gadget: fsl_udc_core: fixup struct_udc_setup documentation . - usb: gadget: storage: Fix Spectre v1 vulnerability . - usb: gadget: udc: atmel: handle at91sam9rl PMC . - usb: gadget: u_ether: fix unsafe list iteration . - usb: host: ohci-at91: fix request of irq for optional gpio . - usb: hso: Fix OOB memory access in hso_probe/hso_get_config_data . - usbip: tools: fix atoi on non-null terminated string . - usbip: vhci_hcd: check rhport before using in vhci_hub_control . - usbip:vudc: BUG kmalloc-2048 : Poison overwritten . - usb: misc: appledisplay: add 20" Apple Cinema Display . - usbnet: smsc95xx: disable carrier check while suspending . - usb: omap_udc: fix crashes on probe error and module removal . - usb: omap_udc: fix omap_udc_start on 15xx machines . - usb: omap_udc: fix rejection of out transfers when DMA is used . - usb: omap_udc: fix USB gadget functionality on Palm Tungsten E . - usb: omap_udc: use devm_request_irq . - usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device . - usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB . - usb: quirks: Add no-lpm quirk for Raydium touchscreens . - usb: serial: cypress_m8: fix interrupt-out transfer length . - usb: serial: option: add Fibocom NL668 series . - usb: serial: option: add GosunCn ZTE WeLink ME3630 . - usb: serial: option: add HP lt4132 . - usb: serial: option: add Simcom SIM7500/SIM7600 . - usb: serial: option: add Telit LN940 series . - usb: serial: option: add two-endpoints device-id flag . - usb: serial: option: drop redundant interface-class test . - usb: serial: option: improve Quectel EP06 detection . - usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control . - usb: usb-storage: Add new IDs to ums-realtek . - usb: xhci: fix timeout for transition from RExit to U0 . - usb: xhci: fix uninitialized completion when USB3 port got wrong status . - usb: xhci: Prevent bus suspend if a port connect change or polling state is detected . - userfaultfd: clear the vma-greater than vm_userfaultfd_ctx if UFFD_EVENT_FORK fails . - userfaultfd: remove uffd flags from vma-greater than vm_flags if UFFD_EVENT_FORK fails . - v9fs_dir_readdir: fix double-free on p9stat_read error . - vfs: Avoid softlockups in drop_pagecache_sb . - vfs: close race between getcwd and d_move . - vfs: fix freeze protection in mnt_want_write_file for overlayfs . - vhost: Fix Spectre V1 vulnerability . - vhost/scsi: truncate T10 PI iov_iter to prot_bytes . - virtio_net: avoid using netif_tx_disable for serializing tx routine . - VMCI: Resource wildcard match fixed . - w1: omap-hdq: fix missing bus unregister at removal . - watchdog/core: Add missing prototypes for weak functions . - wireless: airo: potential buffer overflow in sprintf . - wlcore: Fix the return value in case of error in "wlcore_vendor_cmd_smart_config_start" . - Workaround for mysterious NVMe breakage with i915 CFL . - x86/boot/KASLR: Work around firmware bugs by excluding EFI_BOOT_SERVICES_* and EFI_LOADER_* from KASLR"s choice . - x86/bugs: Add AMD"s SPEC_CTRL MSR usage . - x86/bugs: Fix the AMD SSBD usage of the SPEC_CTRL MSR . - x86/bugs: Switch the selection of mitigation from CPU vendor to CPU features . - x86/corruption-check: Fix panic in memory_corruption_check when boot option without value is provided . - x86/cpu/vmware: Do not trace vmware_sched_clock . - x86/decoder: Fix and update the opcodes map . - x86, hibernate: Fix nosave_regions setup for hibernation . - x86/irq: implement irq_data_get_effective_affinity_mask for v4.12 . - x86/kabi: Fix cpu_tlbstate issue . - x86/kexec: Correct KEXEC_BACKUP_SRC_END off-by-one error . - x86/l1tf: Show actual SMT state . - x86/ldt: Remove unused variable in map_ldt_struct . - x86/ldt: Split out sanity check in map_ldt_struct . - x86/ldt: Unmap PTEs for the slot before freeing LDT pages . - x86/MCE/AMD: Fix the thresholding machinery initialization order . - x86/MCE: Make correctable error detection look at the Deferred bit . - x86/mm: Fix decoy address handling vs 32-bit builds . - x86/mm/pat: Disable preemption around __flush_tlb_all . - x86/PCI: Add additional VMD device root ports to VMD AER quirk . - x86/PCI: Add "pci=big_root_window" option for AMD 64-bit windows . - x86/PCI: Apply VMD"s AERSID fixup generically . - x86/PCI: Avoid AMD SB7xx EHCI USB wakeup defect . - x86/PCI: Enable a 64bit BAR on AMD Family 15h . - x86/PCI: Enable AMD 64-bit window on resume . - x86/PCI: Fix infinite loop in search for 64bit BAR placement . - x86/PCI: Move and shrink AMD 64-bit window to avoid conflict . - x86/PCI: Move VMD quirk to x86 fixups . - x86/PCI: Only enable a 64bit BAR on single-socket AMD Family 15h . - x86/PCI: Use is_vmd rather than relying on the domain number . - x86/process: Consolidate and simplify switch_to_xtra code . - x86/pti: Document fix wrong index . - x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support . - x86/retpoline: Remove minimal retpoline support . - x86/speculataion: Mark command line parser data __initdata . - x86/speculation: Add command line control for indirect branch speculation . - x86/speculation: Add prctl control for indirect branch speculation . - x86/speculation: Add seccomp Spectre v2 user space protection mode . - x86/speculation: Apply IBPB more strictly to avoid cross-process data leak . - x86/speculation: Avoid __switch_to_xtra calls . - x86/speculation: Clean up spectre_v2_parse_cmdline . - x86/speculation: Disable STIBP when enhanced IBRS is in use . - x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation . - x86/speculation: Enable prctl mode for spectre_v2_user . - x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off . - x86/speculation: Mark string arrays const correctly . - x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common . - x86/speculation: Prepare arch_smt_update for PRCTL mode . - x86/speculation: Prepare for conditional IBPB in switch_mm . - x86/speculation: Prepare for per task indirect branch speculation control . - x86/speculation: Prevent stale SPEC_CTRL msr content . - x86/speculation: Propagate information about RSB filling mitigation to sysfs . - x86/speculation: Provide IBPB always command line options . - x86/speculation: Remove unnecessary ret variable in cpu_show_common . - x86/speculation: Rename SSBD update functions . - x86/speculation: Reorder the spec_v2 code . - x86/speculation: Reorganize speculation control MSRs update . - x86/speculation: Rework SMT state change . - x86/speculation: Split out TIF update . - x86/speculation: Support Enhanced IBRS on future CPUs . - x86/speculation: Unify conditional spectre v2 print functions . - x86/speculation: Update the TIF_SSBD comment . - x86/xen: Fix boot loader version reported for PVH guests . - xen/balloon: Support xend-based toolstack . - xen/blkfront: avoid NULL blkfront_info dereference on device removal . - xen: fix race in xen_qlock_wait . - xen: fix xen_qlock_wait . - xen: make xen_qlock_wait nestable . - xen/netfront: do not bug in case of too many frags . - xen/netfront: tolerate frags with no data . - xen/pvh: do not try to unplug emulated devices . - xen/pvh: increase early stack size . - xen-swiotlb: use actually allocated size on check physical continuous . - xen/x86: add diagnostic printout to xen_mc_flush in case of error . - xfs: Align compat attrlist_by_handle with native implementation . - xfs: Fix error code in "xfs_ioc_getbmap" . - xfs: fix quotacheck dquot id overflow infinite loop . - xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat . - xfs: Properly detect when DAX won"t be used on any device . - xfs: xfs_buf: drop useless LIST_HEAD . - xhci: Add check for invalid byte size error when UAS devices are connected . - xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc . - xhci: Do not prevent USB2 bus suspend in state check intended for USB3 only . - xhci: Fix leaking USB3 shared_hcd at xhci removal . - xhci: Prevent U1/U2 link pm states if exit latency is too long . - xprtrdma: Do not defer fencing an async RPC"s chunks . Special Instructions and Notes: Please reboot the system after installing this update.