[4.14.35-2047.511.5.2.el7uek] - cgroup-v1: Require capabilities to set release_agent [Orabug: 33876756] {CVE-2022-0492} - scsi: libiscsi: Hold back_lock when calling iscsi_complete_task [Orabug: 33876755] [4.14.35-2047.511.5.1.el7uek] - arm64, mm, efi: Account for GICv3 LPI tables in static memblock reserve table [Orabug: 33836770] [4.14.35-2047.511.5.el7uek] - irq/msi: add extra step when both old and new affinity are not current cpu [Orabug: 33789982] - Revert quot;rds/ib: Kernel change to extend rds-info functionalityquot; [Orabug: 33795472] - smp: always continue to process IRQ work [Orabug: 33775326] - scsi: libiscsi: Fix iscsi_task use after free [Orabug: 33674803] - scsi: libiscsi: Drop taskqueuelock [Orabug: 33674803] - netfilter: fix regression in looped cast"s MAC handling - PM: hibernate: use correct mode for swsusp_close - tracefs: Set all files to the same group ownership as the mount option - binder: fix test regression due to sender_euid change - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts [4.14.35-2047.511.4.el7uek] - net/rds: Refactor rds_ib_recv_refill_one [Orabug: 33811840] - net/rds: RDS connection shutdown stuck after CQ access violation error [Orabug: 33811824] - ocfs2: fix race between searching chunks and release journal_head from buffer_head [Orabug: 33811779] - rds: ib: Ack seq not always received in monotonic increasing order [Orabug: 33810922] - arm64: pcie: Intercept Pensando specific SError [Orabug: 33811771] - arm64: pcie: Change bad_mode hook to cap_pciep_access_in_progress [Orabug: 33811771] - arm64: pcie: Remove Pensando SError trapping patch [Orabug: 33811771] - take care multiple extents in CoW extent converting [Orabug: 33811755] [4.14.35-2047.511.3.el7uek] - scsi: vmw_pvscsi: Set residual data length conditionally [Orabug: 33761308] - xfs: force the log offline when log intent item recovery fails [Orabug: 33757273] - xfs: cancel intents immediately if process_intents fails [Orabug: 33757273] - arm64/efi: remove spurious WARN_ON for !4K kernels [Orabug: 33749641] - irqchip/gic-v3-its: Allow use of LPI tables in reserved memory [Orabug: 33749641] - irqchip/gic-v3-its: Register LPI tables with EFI config table [Orabug: 33749641] - efi: add API to reserve memory persistently across kexec reboot [Orabug: 33749641] - efi/arm: libstub: add a root memreserve config table [Orabug: 33749641] - efi: honour memory reservations passed via a linux specific config table [Orabug: 33749641] - irqchip/gic-v3-its: Check that all RDs have the same property table [Orabug: 33749641] - irqchip/gic-v3-its: Use pre-programmed redistributor tables with kdump kernels [Orabug: 33749641] - irqchip/gic-v3-its: Allow use of pre-programmed LPI tables [Orabug: 33749641] - irqchip/gic-v3-its: Keep track of property table"s PA and VA [Orabug: 33749641] - irqchip/gic-v3-its: Move pending table allocation to init time [Orabug: 33749641] - irqchip/gic-v3-its: Split property table clearing from allocation [Orabug: 33749641] - irqchip/gic-v3-its: Simplify LPI_PENDBASE_SZ usage [Orabug: 33749641] - irqchip/gic-v3-its: Change initialization ordering for LPIs [Orabug: 33749641] - irqchip/gic-v3-its: Cap lpi_id_bits to reduce memory footprint [Orabug: 33749641] - irqchip/gic-v3-its: Make its_lock a raw_spin_lock_t [Orabug: 33749641] - irqchip/gic-v3-its: Honor hypervisor enforced LPI range [Orabug: 33749641] - irqchip/gic-v3: Expose GICD_TYPER in the rdist structure [Orabug: 33749641] - irqchip/gic-v3-its: Drop chunk allocation compatibility [Orabug: 33749641] - irqchip/gic-v3-its: Move minimum LPI requirements to individual busses [Orabug: 33749641] - irqchip/gic-v3-its: Use full range of LPIs [Orabug: 33749641] - irqchip/gic-v3-its: Refactor LPI allocator [Orabug: 33749641] - irqchip/gic-v3-its: Fix reprogramming of redistributors on CPU hotplug [Orabug: 33749641] - irqchip/gic-v3-its: Only emit VSYNC if targetting a valid collection [Orabug: 33749641] - irqchip/gic-v3-its: Only emit SYNC if targetting a valid collection [Orabug: 33749641] - irqchip/gic-v3: Ensure GICR_CTLR.EnableLPI=0 is observed before enabling [Orabug: 33749641] - irqchip/gic-v3-its: Pass its_node pointer to each command builder [Orabug: 33749641] - tee: handle lookup of shm with reference count 0 [Orabug: 33739583] {CVE-2021-44733} - rds/ib: Kernel change to extend rds-info functionality [Orabug: 33660978] - net/mlx5: Fix eeprom support for SFP module [Orabug: 33541468] - x86/vector: search CPU vector starts from last successfully assigned [Orabug: 33290504] [4.14.35-2047.511.2.el7uek] - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate [Orabug: 33756155] {CVE-2021-4155} - net/mlx5e: ethtool, Add support for EEPROM high pages query [Orabug: 33755527] - ethtool: Add SFF-8436 and SFF-8636 max EEPROM length definitions [Orabug: 33755527] - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select [Orabug: 33731361] - uek-rpm: configs: disable CONFIG_USB_GADGET [Orabug: 33730434] - rds: ib: Incorporate the stat counter quot;ib_rdma_flush_mr_pool_avoidedquot; in the structure quot;rds_ib_stat_namesquot; [Orabug: 33720886] - panic: reinitialize logbuf locks before notifiers [Orabug: 33703438] - panic: disable optimistic spin after halting CPUs [Orabug: 33703438] - atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait [Orabug: 33594985] {CVE-2021-43975} - x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap [Orabug: 33427596] - EDAC/mce_amd: Add new error descriptions for existing types [Orabug: 33427596] - x86/mce, EDAC/mce_amd: Print PPIN in machine check records [Orabug: 33427596] - x86/mce/amd, edac: Remove report_gart_errors [Orabug: 33427596] - x86/mce/amd: Add PPIN support for AMD MCE [Orabug: 33427596] - x86/mce: Take action on UCNA/Deferred errors again [Orabug: 33427596] - xen/mcelog: add PPIN to record when available [Orabug: 33427596] - xen/mcelog: drop __MC_MSR_MCGCAP [Orabug: 33427596] - x86/MCE/AMD: Don"t report L1 BTB MCA errors on some family 17h models [Orabug: 33427596] - x86/MCE: Add an MCE-record filtering function [Orabug: 33427596] - EDAC, mce_amd: Print ExtErrorCode and description on a single line [Orabug: 33427596] - mstflint_access: Update driver code to v4.18.0-1 from Github [Orabug: 33186485] - mstflint_access: Update driver code to v4.17.0-1 from Github [Orabug: 33186485] - mstflint_access: Add README.txt [Orabug: 33186485] - Revert quot;Revert quot;net/mlx4_core: Add masking for a few queries on HCA capsquot;quot; [Orabug: 32603654] [4.14.35-2047.511.1.el7uek] - uek-rpm: Update ol7 locklist with fnic symbols [Orabug: 33590914] - mm, oom: dump stack of victim when reaping failed [Orabug: 33647102] - memcg: prohibit unconditional exceeding the limit of dying tasks [Orabug: 33647102] - memcg: enable memcg oom-kill for __GFP_NOFAIL [Orabug: 33647102] - memcg, oom: no oom-kill for __GFP_RETRY_MAYFAIL [Orabug: 33647102] - memcg: killed threads should not invoke memcg OOM killer [Orabug: 33647102] - memcg, oom: notify on oom killer invocation from the charge path [Orabug: 33647102] - mm: memcontrol: print proper OOM header when no eligible victim left [Orabug: 33647102] - memcg, oom: move out_of_memory back to the charge path [Orabug: 33647102] - rds/ib: Use both iova and key in free_mr socket call [Orabug: 33671340] - arm64: kexec: Suppress kexec on embedded systems [Orabug: 33699776] - fget: check that the fd still exists after getting a ref to it [Orabug: 33679805] {CVE-2021-0920} - fs: add fget_many and fput_many [Orabug: 33679805] - xfs: remove all COW fork extents when remounting readonly [Orabug: 33676191] - RDS/IB: Fix error when trying to unallocate ring buffers [Orabug: 33620350] - net: macsec: Severe performance regression in quot;...preserve orderingquot; [Orabug: 33557957] - Linux 4.14.256 - soc/tegra: pmc: Fix imbalanced clock disabling in error code path - usb: max-3421: Use driver data instead of maintaining a list of bound devices - RDMA/netlink: Add __maybe_unused to static inline in C file - batman-adv: Don"t always reallocate the fragmentation skb head - batman-adv: Reserve needed_*room for fragments - batman-adv: Consider fragmentation for needed_headroom - batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN - perf/core: Avoid put_page when GUP fails - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors - drm/udl: fix control-message timeout - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type - parisc/sticon: fix reverse colors - btrfs: fix memory ordering between normal and ordered work functions - mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag - hexagon: export raw I/O routines for modules - tun: fix bonding active backup with arp monitoring - perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server - perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server - NFC: reorder the logic in nfc_{un,}register_device - NFC: reorganize the functions in nci_request - i40e: Fix NULL ptr dereference on VSI filter sync - net: virtio_net_hdr_to_skb: count transport header in UFO - platform/x86: hp_accel: Fix an error handling path in "lis3lv02d_probe" - mips: lantiq: add support for clk_get_parent - mips: bcm63xx: add support for clk_get_parent - MIPS: generic/yamon-dt: fix uninitialized variable error - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset - net: bnx2x: fix variable dereferenced before check - sched/core: Mitigate race cpus_share_cache/update_top_cache_domain - mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set - sh: define __BIG_ENDIAN for math-emu - sh: fix kconfig unmet dependency warning for FRAME_POINTER - maple: fix wrong return value of maple_bus_init. - sh: check return code of request_irq - powerpc/dcr: Use cmplwi instead of 3-argument cmpli - ALSA: gus: fix null pointer dereference on pointer block - powerpc/5200: dts: fix memory node unit name - scsi: target: Fix alua_tg_pt_gps_count tracking - scsi: target: Fix ordered tag handling - MIPS: sni: Fix the build - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc - usb: host: ohci-tmio: check return value after calling platform_get_resource - ARM: dts: omap: fix gpmc,mux-add-data type - scsi: advansys: Fix kernel pointer leak - usb: musb: tusb6010: check return value after calling platform_get_resource - scsi: lpfc: Fix list_add corruption in lpfc_drain_txq - arm64: zynqmp: Fix serial compatible string - PCI/MSI: Destroy sysfs before freeing entries - parisc/entry: fix trace test in syscall exit path - tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT - ext4: fix lazy initialization next schedule time computation in more granular unit - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros - s390/cio: check the subchannel validity for dev_busid - mm, oom: do not trigger out_of_memory from the #PF - mm, oom: pagefault_out_of_memory: don"t force global OOM for dying tasks - powerpc/bpf: Fix BPF_SUB when imm == 0x80000000 - powerpc/bpf: Validate branch ranges - powerpc/lib: Add helper to check if offset is within conditional branch range - ARM: 9156/1: drop cc-option fallbacks for architecture selection - ARM: 9155/1: fix early early_iounmap - USB: chipidea: fix interrupt deadlock - vsock: prevent unnecessary refcnt inc for nonblocking connect - nfc: pn533: Fix double free when pn533_fill_fragment_skbs fails - llc: fix out-of-bound array index in llc_sk_dev_hash - mm/zsmalloc.c: close race window between zs_pool_dec_isolated and zs_unregister_migration - bonding: Fix a use-after-free problem when bond_sysfs_slave_add failed - ACPI: PMIC: Fix intel_pmic_regs_handler read accesses - net: davinci_emac: Fix interrupt pacing disable - xen-pciback: Fix return in pm_ctrl_init - i2c: xlr: Fix a resource leak in the error handling path of "xlr_i2c_probe" - scsi: qla2xxx: Turn off target reset during issue_lip - ar7: fix kernel builds for compiler test - watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT - m68k: set a default value for MEMORY_RESERVE - dmaengine: dmaengine_desc_callback_valid: Check for `callback_result` - netfilter: nfnetlink_queue: fix OOB when mac header was cleared - auxdisplay: ht16k33: Fix frame buffer device blanking - auxdisplay: ht16k33: Connect backlight to fbdev - auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string - dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID macro - mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare - fs: orangefs: fix error return code of orangefs_revalidate_lookup - NFS: Fix deadlocks in nfs_scan_commit_list - PCI: aardvark: Don"t spam about PIO Response Status - drm/plane-helper: fix uninitialized variable reference - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined - apparmor: fix error check - power: supply: bq27xxx: Fix kernel crash on IRQ handler register error - mips: cm: Convert to bitfield API to fix out-of-bounds access - serial: xilinx_uartps: Fix race condition causing stuck TX - ASoC: cs42l42: Defer probe if request_threaded_irq returns EPROBE_DEFER - ASoC: cs42l42: Correct some register default values - RDMA/mlx4: Return missed an error if device doesn"t support steering - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn - power: supply: rt5033_battery: Change voltage values to #181;V - usb: gadget: hid: fix error code in do_config - serial: 8250_dw: Drop wrong use of ACPI_PTR - video: fbdev: chipsfb: use memset_io instead of memset - memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe - soc/tegra: Fix an error handling path in tegra_powergate_power_up - arm: dts: omap3-gta04a4: accelerometer irq fix - ALSA: hda: Reduce udelay at SKL+ position reporting - JFS: fix memleak in jfs_mount - MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT - scsi: dc395: Fix error case unwinding - ARM: dts: at91: tse850: the emaclt;-gt;phy interface is rmii - ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc - RDMA/rxe: Fix wrong port_cap_flags - ibmvnic: Process crqs after enabling interrupts - crypto: pcrypt - Delay write to padata-gt;info - net: phylink: avoid mvneta warning when setting pause parameters - net: amd-xgbe: Toggle PLL settings during rate change - libertas: Fix possible memory leak in probe and disconnect - libertas_tf: Fix possible memory leak in probe and disconnect - samples/kretprobes: Fix return value if register_kretprobe failed - irq: mips: avoid nested irq_enter - s390/gmap: don"t unconditionally call pte_unmap_unlock in __gmap_zap - smackfs: use netlbl_cfg_cipsov4_del for deleting cipso_v4_doi - PM: hibernate: fix sparse warnings - phy: micrel: ksz8041nl: do not use power down mode - mwifiex: Send DELBA requests according to spec - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning - mmc: mxs-mmc: disable regulator on error and in the remove function - net: stream: don"t purge sk_error_queue in sk_stream_kill_queues - drm/msm: uninitialized variable in msm_gem_import - ath10k: fix max antenna gain unit - hwmon: Fix possible memleak in __hwmon_device_register - memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host - memstick: avoid out-of-range warning - b43: fix a lower bounds test - b43legacy: fix a lower bounds test - hwrng: mtk - Force runtime pm ops for sleep ops - crypto: qat - disregard spurious PFVF interrupts - crypto: qat - detect PFVF collision after ACK - ath9k: Fix potential interrupt storm on queue reset - cpuidle: Fix kobject memory leaks in error paths - media: cx23885: Fix snd_card_free call on null card pointer - media: si470x: Avoid card name truncation - media: mtk-vpu: Fix a resource leak in the error handling path of "mtk_vpu_probe" - media: dvb-usb: fix ununit-value in az6027_rc_query - cgroup: Make rebind_subsystems disable v2 controllers all at once - parisc/kgdb: add kgdb_roundup to make kgdb work with idle polling - task_stack: Fix end_of_stack for architectures with upwards-growing stack - parisc: fix warning in flush_tlb_all - spi: bcm-qspi: Fix missing clk_disable_unprepare on error in bcm_qspi_probe - ARM: 9136/1: ARMv7-M uses BE-8, not BE-32 - gre/sit: Don"t generate link-local addr if addr_gen_mode is IN6_ADDR_GEN_MODE_NONE - ARM: clang: Do not rely on lr register for stacktrace - smackfs: use __GFP_NOFAIL for smk_cipso_doi - iwlwifi: mvm: disable RX-diversity in powersave - PM: hibernate: Get block device exclusively in swsusp_check - mwl8k: Fix use-after-free in mwl8k_fw_state_machine - tracing/cfi: Fix cmp_entries_* functions signature mismatch - lib/xz: Validate the value before assigning it to an enum variable - lib/xz: Avoid overlapping memcpy with invalid input with in-place decompression - memstick: r592: Fix a UAF bug when removing the driver - leaking_addresses: Always print a trailing newline - ACPI: battery: Accept charges over the design capacity as full - ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create - tracefs: Have tracefs directories not set OTH permission bits by default - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte - ACPICA: Avoid evaluating methods too early during system resume - ia64: don"t do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK - media: mceusb: return without resubmitting URB in case of -EPROTO error. - media: s5p-mfc: Add checking to s5p_mfc_probe. - media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe - media: uvcvideo: Set capability in s_param - media: netup_unidvb: handle interrupt properly according to the firmware - media: mt9p031: Fix corrupted frame after restarting stream - mwifiex: Properly initialize private structure on interface type changes - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type - x86: Increase exception stack sizes - smackfs: Fix use-after-free in netlbl_catmap_walk - locking/lockdep: Avoid RCU-induced noinstr fail - MIPS: lantiq: dma: reset correct number of channel - MIPS: lantiq: dma: add small delay after reset - platform/x86: wmi: do not fail if disabling fails - Bluetooth: fix use-after-free error in lock_sock_nested - Bluetooth: sco: Fix lock_sock blockage by memcpy_from_msg {CVE-2021-3640} - USB: iowarrior: fix control-message timeouts - USB: serial: keyspan: fix memleak on probe errors - iio: dac: ad5446: Fix ad5622_write return value - pinctrl: core: fix possible memory leak in pinctrl_enable - quota: correct error number in free_dqentry - quota: check block number when reading the block in quota file - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG - PCI: aardvark: Fix return value of MSI domain .alloc method - PCI: aardvark: Do not unmask unused interrupts - PCI: aardvark: Do not clear status bits of masked interrupts - xen/balloon: add late_initcall_sync for initial ballooning done - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume - ALSA: mixer: oss: Fix racy access to slots - serial: core: Fix initializing and restoring termios speed - powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found - power: supply: max17042_battery: use VFSOC for capacity when no rsns - power: supply: max17042_battery: Prevent int underflow in set_soc_threshold - signal/mips: Update _fp_context to fail with -EFAULT - signal: Remove the bogus sigkill_pending in ptrace_stop - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP - wcn36xx: handle connection loss indication - libata: fix checking of DMA state - mwifiex: Read a PCI register after writing the TX ring write pointer - wcn36xx: Fix HT40 capability for 2Ghz band - evm: mark evm_fixmode as __ro_after_init - rtl8187: fix control-message timeouts - PCI: Mark Atheros QCA6174 to avoid bus reset - ath10k: fix division by zero in send path - ath10k: fix control-message timeout - ath6kl: fix control-message timeout - ath6kl: fix division by zero in send path - mwifiex: fix division by zero in fw download path - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell - regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property - regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled - hwmon: Add offset coefficients - btrfs: fix lost error handling when replaying directory deletes - vmxnet3: do not stop tx queues after netif_device_detach - watchdog: Fix OMAP watchdog early handling - spi: spl022: fix Microwire full duplex mode - bpf: Prevent increasing bpf_jit_limit above max - mmc: winbond: don"t build on M68K - hyperv/vmbus: include linux/bitops.h - sfc: Don"t use netif_info before net_device setup - cavium: Fix return values of the probe function - scsi: qla2xxx: Fix unmap of already freed sgl - cavium: Return negative value when pci_alloc_irq_vectors fails - x86/irq: Ensure PI wakeup handler is unregistered before module unload - ALSA: timer: Unconditionally unlink slave instances, too - ALSA: timer: Fix use-after-free problem - ALSA: synth: missing check for possible NULL after the call to kstrdup - ALSA: line6: fix control and interrupt message timeouts - ALSA: 6fire: fix control and bulk message timeouts - ALSA: ua101: fix division by zero at probe - media: ite-cir: IR receiver stop working after receive overflow - tpm: Check for integer overflow in tpm2_map_response_body - parisc: Fix ptrace check on syscall return - mmc: dw_mmc: Dont wait for DRTO on Write RSP error - ocfs2: fix data corruption on truncate - libata: fix read log timeout value - Input: i8042 - Add quirk for Fujitsu Lifebook T725 - Input: elantench - fix misreporting trackpoint coordinates - binder: use cred instead of task for selinux checks - binder: use euid from cred instead of using task - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay - Linux 4.14.255 - rsi: fix control-message timeout - staging: rtl8192u: fix control-message timeouts - staging: r8712u: fix control-message timeout - comedi: vmk80xx: fix bulk and interrupt message timeouts - comedi: vmk80xx: fix bulk-buffer overflow - comedi: vmk80xx: fix transfer-buffer overflows - comedi: ni_usb6501: fix NULL-deref in command paths - comedi: dt9812: fix DMA buffers on stack - isofs: Fix out of bound access for corrupted isofs image - printk/console: Allow to disable console output by using console=quot;quot; or console=null - usb-storage: Add compatibility quirk flags for iODD 2531/2541 - usb: musb: Balance list entry in musb_gadget_queue - usb: gadget: Mark USB_FSL_QE broken on 64-bit - Revert quot;x86/kvm: fix vcpu-id indexed array sizesquot; - block: introduce multi-page bvec helpers - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - IB/qib: Use struct_size helper - ARM: 9120/1: Revert quot;amba: make use of -1 IRQs warnquot; - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed - mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt - scsi: core: Put LLD module refcnt after SCSI device is released - Linux 4.14.254 - sctp: add vtag check in sctp_sf_ootb - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa - sctp: add vtag check in sctp_sf_violation - sctp: fix the processing for COOKIE_ECHO chunk - sctp: use init_tag from inithdr for ABORT chunk - net: nxp: lpc_eth.c: avoid hang when bringing interface down - nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST - net: batman-adv: fix error handling - regmap: Fix possible double-free in regcache_rbtree_exit - net: lan78xx: fix division by zero in send path - mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 - mmc: dw_mmc: exynos: fix the finding clock sample value - mmc: vub300: fix control-message timeouts - ipv4: use siphash instead of Jenkins in fnhe_hashfun - Revert quot;net: mdiobus: Fix memory leak in __mdiobus_registerquot; - nfc: port100: fix using -ERRNO as command type mask - ata: sata_mv: Fix the error handling of mv_chip_id - usbnet: fix error return code in usbnet_probe - usbnet: sanity check for maxpacket - ARM: 8819/1: Remove "-p" from LDFLAGS - powerpc/bpf: Fix BPF_MOD when imm == 1 - ARM: 9139/1: kprobes: fix arch_init_kprobes prototype - ARM: 9134/1: remove duplicate memcpy definition - ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned [4.14.35-2047.511.0.el7uek] - Linux 4.14.253 - ASoC: DAPM: Cover regression by kctl change notification fix - ARM: 9122/1: select HAVE_FUTEX_CMPXCHG - tracing: Have all levels of checks prevent recursion - net: mdiobus: Fix memory leak in __mdiobus_register - ALSA: hda: avoid write to STATESTS if controller is in reset - platform/x86: intel_scu_ipc: Update timeout value in comment - isdn: mISDN: Fix sleeping function called from invalid context - ARM: dts: spear3xx: Fix gmac node - net: stmmac: add support for dwmac 3.40a - btrfs: deal with errors when checking if a dir entry exists during log replay - netfilter: Kconfig: use "default y" instead of "m" for bool config option - isdn: cpai: check ctr-gt;cnr to avoid array index out of bound - nfc: nci: fix the UAF of rf_conn_info object - ASoC: DAPM: Fix missing kctl change notifications - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset - vfs: check fd has read access in kernel_read_file_from_fd - elfcore: correct reference to CONFIG_UML - ocfs2: mount fails with buffer overflow in strlen - ocfs2: fix data corruption after conversion from inline format - can: peak_pci: peak_pci_remove: fix UAF - can: peak_usb: pcan_usb_fd_decode_status: fix back to ERROR_ACTIVE state notification - can: rcar_can: fix suspend/resume - NIOS2: irqflags: rename a redefined register name - netfilter: ipvs: make global sysctl readonly in non-init netns - NFSD: Keep existing listeners on portlist error - xtensa: xtfpga: Try software restart before simulating CPU reset - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default - uek-rpm: Add _raw_spin_trylock to KABI [Orabug: 33557961] - cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode [Orabug: 33581183] - RDMA/rxe: Bump up default maximum values used via uverbs [Orabug: 33615343] - net: ipv6: Discard next-hop MTU less than minimum link MTU [Orabug: 33615357] - rds: ib: Reduce the contention caused by the asynchronous workers to flush the mr pool [Orabug: 33611440] - net/mlx5: Remove unnecessary prints from mlx5_enter_error_state. [Orabug: 33175315] - net/rds: Don"t pummel the subnet-manager [Orabug: 33589568] - x86/clear_page: add alternative for clear_page_clzero [Orabug: 33580825] - x86/asm: add clzero based page clearing [Orabug: 33580825] - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models [Orabug: 33580825] - x86/cpu/amd: Call init_amd_zn om Family 19h processors too [Orabug: 33580825] - uek-rpm: Add smartpqi driver module in ueknano kernel [Orabug: 33590163]