# changelog

author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.2.el7uek]
changelog:
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29797118]  
  - vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra)  [Orabug: 29710939]  
  - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet)  [Orabug: 29710939]  
  - nvme: allow timed-out ios to retry (James Smart)  [Orabug: 29301607]  
  - rds: Introduce a pool of worker threads for connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Use rds_conn_path cp_wq when applicable (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Implement proper cm_id compare (Håkon Bugge)  [Orabug: 29391909]  
  - Revert "net/rds: prevent RDS connections using stale ARP entries" (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Flush ARP cache when needed (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Add simple heuristics to determine connect delay (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Fix one-sided connect (Håkon Bugge)  [Orabug: 29391909]  
  - rds: Consolidate and align ftrace related to connection management (Håkon Bugge)  [Orabug: 29391909]  
  - rds: ib: Fix gratuitous ARP storm (Håkon Bugge)  [Orabug: 29391909]  
  - IB/mlx4: Increase the timeout for CM cache (Håkon Bugge)  [Orabug: 29391909]  
  - kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez)  [Orabug: 29423804]  
  - x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez)  [Orabug: 29423804]  
  - mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli)  [Orabug: 29510356]  
  - bnxt_en: Reset device on RX buffer errors. (Michael Chan)  [Orabug: 29651238]  
  - x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky)  [Orabug: 29774291]  
  - x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju)  [Orabug: 29791036]  {CVE-2018-12127} {CVE-2018-12130}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.3.el7uek]
changelog:
  - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (Shuning Zhang)  [Orabug: 29233739]  
  - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - HID: debug: fix the ring buffer implementation (Vladis Dronov)  [Orabug: 29629481]  {CVE-2019-3819} {CVE-2019-3819} 
  - scsi: target: iscsi: Use hex2bin instead of a re-implementation (Vincent Pelletier)  [Orabug: 29778875]  {CVE-2018-14633} {CVE-2018-14633} 
  - scsi: libsas: fix a race condition when smp task timeout (Jason Yan)  [Orabug: 29783225]  {CVE-2018-20836} 
  - scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan)  [Orabug: 29783254]  {CVE-2019-11810} 
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786786]  {CVE-2011-1079} {CVE-2019-11884} 
  - x86/speculation/mds: Add 'mitigations=' support for MDS (Kanth Ghatraju)  [Orabug: 29791046]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29802785]  {CVE-2019-11815}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.1.el7uek]
changelog:
  - hugetlbfs: don't retry when pool page allocations start to fail (Mike Kravetz)  [Orabug: 29324267]  
  - x86/speculation: RSB stuffing with retpoline on Skylake+ cpus (William Roche)  [Orabug: 29660924]  
  - x86/speculation: reformatting RSB overwrite macro (William Roche)  [Orabug: 29660924]  
  - x86/speculation: Dynamic enable and disable of RSB stuffing with IBRS&!SMEP (William Roche)  [Orabug: 29660924]  
  - x86/speculation: STUFF_RSB dynamic enable (William Roche)  [Orabug: 29660924]  
  - int3 handler better address space detection on interrupts (William Roche)  [Orabug: 29660924]  
  - repairing out-of-tree build functionality (Mark Nicholson)  [Orabug: 29755100]  
  - ext4: fix false negatives *and* false positives in ext4_check_descriptors() (Shuning Zhang)  [Orabug: 29797007]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.28.2.el7uek]
changelog:
  - tcp: add tcp_min_snd_mss sysctl (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: tcp_fragment() should apply sane memory limits (Eric Dumazet)  [Orabug: 29884306]  
  - tcp: limit payload size of sacked skbs (Eric Dumazet)  [Orabug: 29884306]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-124.28.3.el7uek]
changelog:
  - Add CVE numbers for CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 (Chuck Anderson)  [Orabug: 29890820]  {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} {CVE-2019-11477} {CVE-2019-11478} {CVE-2019-11479} 
  - tcp: fix fack_count accounting on tcp_shift_skb_data() (Joao Martins)  [Orabug: 29890820]  
  - tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Eric Dumazet)  [Orabug: 29886598]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.4.el7uek]
changelog:
  - x86/microcode: add SPEC_CTRL_SSBD to x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29642139]  
  - block: do not use interruptible wait anywhere (Alan Jenkins)  [Orabug: 29674055]  
  - vxlan: fix use-after-free on deletion (Mark Bloch)  [Orabug: 29755932]  
  - vxlan: reduce usage of synchronize_net in ndo_stop (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: synchronously and race-free destruction of vxlan sockets (Hannes Frederic Sowa)  [Orabug: 29755932]  
  - vxlan: support both IPv4 and IPv6 sockets in a single vxlan device (Jiri Benc)  [Orabug: 29755932]  
  - vxlan: make vxlan_sock_add and vxlan_sock_release complementary (Jiri Benc)  [Orabug: 29755932]  
  - openvswitch: Re-add CONFIG_OPENVSWITCH_VXLAN (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Use regular VXLAN net_device device (Venkat Venkatsubra)  [Orabug: 29755932]  
  - openvswitch: Abstract vport name through ovs_vport_name() (Thomas Graf)  [Orabug: 29755932]  
  - openvswitch: Move dev pointer into vport itself (Thomas Graf)  [Orabug: 29755932]  
  - ip_tunnel: Make ovs_tunnel_info and ovs_key_ipv4_tunnel generic (Thomas Graf)  [Orabug: 29755932]  
  - vxlan: Factor out device configuration (Thomas Graf)  [Orabug: 29755932]  
  - kexec: generate VMCOREINFO for module symbols (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for tasks and pid (Isaac Chen)  [Orabug: 29770217]  
  - kexec: generate VMCOREINFO for trace dump (Isaac Chen)  [Orabug: 29770217]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.5.el7uek]
changelog:
  - vxlan: fix use-after-free on deletion (part 2) (Venkat Venkatsubra)  [Orabug: 29927196]  
  - vxlan: use a more suitable function when assigning NULL (Mark Bloch)  [Orabug: 29927196]  
  - vxlan: avoid using stale vxlan socket. (pravin shelar)  [Orabug: 29927196]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.28.6.el7uek]
changelog:
  - scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke)  [Orabug: 29511036]  
  - scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke)  [Orabug: 29511036]  
  - sysctl: Fix kabi breakage (Shuning Zhang)  [Orabug: 29689925]  
  - proc: Fix proc_sys_prune_dcache to hold a sb reference (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: Don't grab i_lock under sysctl_lock. (Eric W. Biederman)  [Orabug: 29689925]  
  - proc/sysctl: prune stale dentries during unregistering (Konstantin Khlebnikov)  [Orabug: 29689925]  
  - scsi: smartpqi: correct lun reset issues (Kevin Barnett)  [Orabug: 29848621]  
  - fork: record start_time late (David Herrmann)  [Orabug: 29850581]  {CVE-2019-6133} 
  - mm: avoid taking zone lock in pagetypeinfo_showmixed() (Vinayak Menon)  [Orabug: 29905302]  
  - x86/retpoline/ia32entry: Convert to non-speculative calls (Ankur Arora)  [Orabug: 29909295]  {CVE-2017-5715} 
  - tun: call dev_get_valid_name() before register_netdevice() (Cong Wang)  [Orabug: 29925555]  {CVE-2018-7191} 
  - mm/madvise.c: fix madvise() infinite loop under special circumstances (chenjie)  [Orabug: 29925610]  {CVE-2017-18208}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.1.el7uek]
changelog:
  - USB: check usb_get_extra_descriptor for proper size (Mathias Payer)  [Orabug: 29755247]  {CVE-2018-20169} 
  - rds: ib: Fix dereference of conn when NULL and cleanup thereof (Håkon Bugge)  [Orabug: 29924849]  
  - ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan)  [Orabug: 29925523]  {CVE-2019-11833} {CVE-2019-11833} 
  - ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang)  [Orabug: 29926005]  {CVE-2019-12381} 
  - ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang)  [Orabug: 29926057]  {CVE-2019-12378} 
  - x86/microcode: fix x86_spec_ctrl_mask on late loading. (Mihai Carabas)  [Orabug: 29941248]  
  - net: rds: fix rds recv memory leak (Zhu Yanjun)  [Orabug: 30034815]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.2.el7uek]
changelog:
  - scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery)  [Orabug: 30052805]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.3.1.el7uek]
changelog:
  - x86/speculation: Exclude ATOMs from speculation through SWAPGS (Thomas Gleixner)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Enable Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125} 
  - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Josh Poimboeuf)  [Orabug: 29967571]  {CVE-2019-1125}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.el7uek]
changelog:
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30028200]  
  - scsi: megaraid_sas: fix panic on loading firmware crashdump (Junxiao Bi)  [Orabug: 29993112]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.29.4.1.el7uek]
changelog:
  - Revert "xen-netback: stop netif TX queue on guest queuing failure" (Brian Maly)  [Orabug: 30128203]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.1.el7uek]
changelog:
  - xen: let alloc_xenballooned_pages() fail if not enough memory free (Juergen Gross)  [Orabug: 30073695]  
  - mm/page_alloc.c: calculate 'available' memory in a separate function (Igor Redko)  [Orabug: 30073695]  
  - Input: gtco - bounds check collection indent level (Grant Hernandez)  [Orabug: 30074413]  {CVE-2019-13631} 
  - Documentation/Docbook/Makefile: process xml files in parallel, based on nproc --all value (Alexander Burmashev)  [Orabug: 30079814]  
  - net: rds: fix compile warning (Zhu Yanjun)  [Orabug: 30118035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.30.2.el7uek]
changelog:
  - SUNRPC fix regression in umount of a secure mount (Olga Kornievskaia)  [Orabug: 29926734]  
  - block: fix RO partition with RW disk (Junxiao Bi)  [Orabug: 30159928]  
  - retpoline: Show correct spectrev2 mitigation after loading non-retpoline module (Alejandro Jimenez)  [Orabug: 30185537]  
  - tun: allow positive return values on dev_get_valid_name() call (Julien Gomes)  [Orabug: 30085611]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.1.el7uek]
changelog:
  - dm bufio: fix deadlock with loop device (Junxiao Bi)  [Orabug: 29964645]  
  - dm bufio: don't take the lock in dm_bufio_shrink_count (Mikulas Patocka)  [Orabug: 29964645]  
  - rds: rds-info shows IPv4 address as '0.0.0.0' (aru kolappan)  [Orabug: 30022915]  
  - restore cond_resched() in shrink_dcache_parent() (Al Viro)  [Orabug: 30101895]  
  - retpoline: Move retpoline_mode_selected() out of .init.text section (Alejandro Jimenez)  [Orabug: 30250332]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.1.1.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.2.el7uek]
changelog:
  - blk-mq: don't complete un-started request in timeout handler (Ming Lei)  [Orabug: 29903684]  
  - tcp: fix a stale ooo_last_skb after a replace (Eric Dumazet)  [Orabug: 29997352]  
  - mm: keep kabi compatibility of may_expand_vm() etc (Tong Chen)  [Orabug: 30145754]  
  - mm: always print RLIMIT_DATA warning (David Woodhouse)  [Orabug: 30145754]  
  - mm: enable RLIMIT_DATA by default with workaround for valgrind (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: warn about VmData over RLIMIT_DATA (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: rework virtual memory accounting (Konstantin Khlebnikov)  [Orabug: 30145754]  
  - mm: add the "struct mm_struct *mm" local into (Oleg Nesterov)  [Orabug: 30145754]  
  - mm: fix the racy mm->locked_vm change in (Oleg Nesterov)  [Orabug: 30145754]  
  - mm/mmap.c: remove redundant local variables for may_expand_vm() (Chen Gang)  [Orabug: 30145754]  
  - block: loop: fix another reread part failure (Ming Lei)  [Orabug: 30264603]  
  - block: loop: don't hold lo_ctl_mutex in lo_open (Ming Lei)  [Orabug: 30264603]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.3.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} 
  - qla2xxx: Fix List corruption due to Get Name List (Himanshu Madhani)  [Orabug: 29894072]  
  - qla2xxx: Update driver version 9.00.00.00.42.0-k1 (Himanshu Madhani)  [Orabug: 29894072]  
  - xen/swiotlb: remember having called xen_create_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: simplify range_straddles_page_boundary() (Juergen Gross)  [Orabug: 30141778]  
  - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() (Juergen Gross)  [Orabug: 30141778]  
  - tcp: purge write queue in tcp_connect_init() (Eric Dumazet)  [Orabug: 30240133]  {CVE-2019-15239}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.31.4.el7uek]
changelog:
  - KVM: coalesced_mmio: add bounds checking (Matt Delco)  [Orabug: 30318042]  {CVE-2019-14821} {CVE-2019-14821} 
  - Revert "KVM: coalesced_mmio: add bounds checking" (Jack Vogel)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.31.5.el7uek]
changelog:
  - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink (YueHaibing)  [Orabug: 30322230]  {CVE-2019-15666} 
  - x86/tsc: Make calibration refinement more robust (Daniel Vacek)  [Orabug: 30217489]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.1.el7uek]
changelog:
  - NFSv4: Don't try to reclaim unused state owners (Trond Myklebust)  [Orabug: 30124013]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30302412]  
  - floppy: fix out-of-bounds read in copy_buffer (Denis Efremov)  [Orabug: 30318219]  {CVE-2019-14283} 
  - xen-netback: stop netif TX queue on guest queuing failure (Ankur Arora)  [Orabug: 30351050]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.el7uek]
changelog:
  - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 26941755]  {CVE-2017-14991} 
  - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu)  [Orabug: 29707258]  
  - Revert "net_failover: delay taking over primary device to accommodate udevd renaming" (Si-Wei Liu)  [Orabug: 29707258]  
  - build: Revert "repairing out-of-tree build functionality" (Todd Vierling)  [Orabug: 30257829]  
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)   
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.1.el7uek]
changelog:
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 29967631]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 29967631]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 29967631]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.2.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30419233]  {CVE-2019-11135}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.4.el7uek]
changelog:
  - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 27124665]  {CVE-2017-15102} 
  - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Andrea Arcangeli)  [Orabug: 27422557]  {CVE-2017-15128} 
  - tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue (Tim Froidcoeur)  [Orabug: 30317608]  {CVE-2019-11478} 
  - tcp: be more careful in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478} {CVE-2019-11478} 
  - tcp: refine memory limit test in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.5.el7uek]
changelog:
  - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447843]  {CVE-2019-14284} 
  - x86/cpufeatures: Make CPU bugs sticky (Thomas Gleixner)  [Orabug: 30473385]  
  - x86/cpu: Factor out application of forced CPU caps (Andy Lutomirski)  [Orabug: 30473385]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.1.el7uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to probe failure (himanshu.madhani@cavium.com)  [Orabug: 30161119]  
  - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Jeremy Compostella)  [Orabug: 30210503]  {CVE-2017-18551} 
  - scsi: qla2xxx: Ability to process multiple SGEs in Command SGL for CT passthrough commands. (Giridhar Malavali)  [Orabug: 30256423]  
  - net-sysfs: Fix mem leak in netdev_register_kobject (YueHaibing)  [Orabug: 30350263]  {CVE-2019-15916} 
  - Drivers: hv: vmbus: add special crash handler (Vitaly Kuznetsov)  [Orabug: 30374399]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.2.el7uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.3.el7uek]
changelog:
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316058]  
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30327671]  
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29994551]  
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29994550]  
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29994553]  
  - RDMA/cma: Make # CM retries configurable (Håkon Bugge)  [Orabug: 29994555]  
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29994558]  
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29994560]  
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29994561]  
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29994566]  
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29994564]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.4.el7uek]
changelog:
  - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (Shuning Zhang)  [Orabug: 30036349]  
  - ocfs2: direct-IO: protect get_blocks (Junxiao Bi)  [Orabug: 30036349]  
  - SUNRPC: Remove xprt_connect_status() (Trond Myklebust)  [Orabug: 30165838]  
  - SUNRPC: Handle ENETDOWN errors (Trond Myklebust)  [Orabug: 30165838]  
  - vhost: make sure log_num < in_num (yongduan)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: block speculation of translated descriptors (Michael S. Tsirkin)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: Fix Spectre V1 vulnerability (Jason Wang)  [Orabug: 30312787]  
  - array_index_nospec: Sanitize speculative array de-references (Dan Williams)  [Orabug: 30312787]  
  - net: hsr: fix memory leak in hsr_dev_finalize() (Mao Wenan)  [Orabug: 30444853]  {CVE-2019-16995} 
  - ieee802154: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30444946]  {CVE-2019-17053} 
  - mISDN: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30445158]  {CVE-2019-17055} 
  - net: sit: fix memory leak in sit_init_net() (Mao Wenan)  [Orabug: 30445305]  {CVE-2019-16994} 
  - media: dvb: usb: fix use after free in dvb_usb_device_exit (Oliver Neukum)  [Orabug: 30490491]  {CVE-2019-15213} 
  - media: cpia2_usb: first wake up, then free in disconnect (Oliver Neukum)  [Orabug: 30511741]  {CVE-2019-15215} 
  - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Vandana BN)  [Orabug: 30532774]  {CVE-2019-15217} 
  - target: Propagate backend read-only to core_tpg_add_lun (Nicholas Bellinger)  [Orabug: 30538419]  
  - kvm: mmu: ITLB_MULTIHIT mitigation selection (Kanth Ghatraju)  [Orabug: 30539766]  
  - cpu/speculation: Uninline and export CPU mitigations helpers (Kanth Ghatraju)  [Orabug: 30539766]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.5.el7uek]
changelog:
  - net/mlx5: bump driver rev (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5: Add 25G and 50G types (John Donnelly)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 VF device ID (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix pci error recovery flow (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Add timeout handle to commands with callback (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix potential deadlock in command mode change (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix wait_vital for VFs and remove fixed sleep (Daniel Jurgens)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Add missing 50G baseSR2 link mode (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5_core: Add ConnectX-5 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Fix MLX5E_100BASE_T define (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5e: Fix soft lockup when HW Timestamping is enabled (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5: Make command timeout way shorter (Or Gerlitz)  [Orabug: 30479538]  
  - net/mlx5: Fix teardown errors that happen in pci error handler (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - IB/mlx5: Support setting Ethernet priority for Raw Packet QPs (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add Raw Packet QP query functionality (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Warn on unsupported events of QP/RQ/SQ (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Add RQ and SQ event handling (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Export transport objects (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add CQE version 1 support to user QPs and SRQs (Haggai Abramovsky)  [Orabug: 30479538]  
  - net/mlx5_core: Fix trimming down IRQ number (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5_core: Export flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Make ipv4/ipv6 location more clear (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Enable flow steering support for the IB driver (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Initialize namespaces only when supported by device (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Set priority attributes (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Connect flow tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce modify flow table command (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Managing root flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add utilities to find next and prev flow-tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering autogrouped flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Add PTP Hardware Clock (PHC) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Add HW timestamping (TS) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to read internal timer (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Do not modify the TX SKB (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add setting ATOMIC endian mode (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access functions to enable/disable RoCE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Break down the vport mac address query function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename en_flow_table.c to en_fs.c (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5: Use flow steering infrastructure for mlx5_en (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Flow steering tree initialization (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering lookup algorithms (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering base data structures (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering firmware commands (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Assign random MAC address if needed (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix query E-Switch capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add support for SR-IOV ndos (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce get vf statistics (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce set vport vlan (VST mode) (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce HCA cap and E-Switch vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce Vport administration functions (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Add SR-IOV (FDB) support (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce FDB hardware capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introducing E-Switch and l2 table (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write vlan list into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write UC/MC list and promisc mode into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport vlans (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport promisc mode (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport state (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport mac lists (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Update access functions to Query/Modify vport MAC address (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Add base sriov support (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Modify enable/disable hca functions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: support napi_complete_done() (Eric Dumazet)  [Orabug: 30479538]  
  - mlx5: add busy polling support (Eric Dumazet)  [Orabug: 30479538]  
  - net/mlx5e: Use the right DMA free function on TX path (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Max mtu comparison fix (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5e: Added self loopback prevention (Tariq Toukan)  [Orabug: 30479538]  
  - net/mlx5e: Fix inline header size calculation (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix LSO vlan insertion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Re-eanble client vlan TX acceleration (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Return error in case mlx5e_set_features() fails (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Don't allow more than max supported channels (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Use the the real irqn in eq->irqn (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Wait for RX buffers initialization in a more proper manner (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid NULL pointer access in case of configuration failure (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Wait for FW readiness on startup (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Add pci error handlers to mlx5_core driver (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix internal error detection conditions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: stop including <asm-generic/kmap_types.h> (Christoph Hellwig)  [Orabug: 30479538]  
  - net/mlx5e: Disable VLAN filter in promiscuous mode (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5: Fix typo in mlx5_query_port_pvlc (Jiri Pirko)  [Orabug: 30479538]  
  - net/mlx5_core: Use private health thread for each device (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Use accessor functions to read from device memory (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Prepare cmd interface to system errors handling (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Improve mlx5 messages (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Update health syndromes (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix wrong name in struct (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: New init and exit flow for mlx5_core (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix notification of page supplement error (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix async commands return code (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Remove redundant "err" variable usage (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Priv state flag not rolled-back upon netdev open error (Achiad Shochat)  [Orabug: 30479538]  
  - IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose max_sge_rd correctly (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose correct page_size_cap in device attributes (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix missing device local_dma_lkey (Sagi Grimberg)  [Orabug: 30479538]  
  - net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Rana Shahout)  [Orabug: 30479538]  
  - mlx5e: Fix sparse warnings in mlx5e_handle_csum(). (David S. Miller)  [Orabug: 30479538]  
  - net/mlx5e: Support RX CHECKSUM_COMPLETE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support ethtool get/set_pauseparam (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Ethtool link speed setting fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: HW LRO changes/fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support smaller RX/TX ring sizes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Add ethtool RSS configuration options (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Make RSS indirection table size a constant (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Have a single RSS Toeplitz hash key (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Carol L Soto)  [Orabug: 30479538]  
  - net/mlx5_core: Support physical port counters (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Take advantage of the light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Disable async events before unregister_netdev() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename/move functions following the ndo_stop flow change (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to modify RSS/LRO params (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce the "Drop RQ" (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Unify the RX flow (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove the mlx5e_update_priv_params() function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce create/destroy RSS indir table access functions (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Do not use netdev_err() before the netdev is registered (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant de-reference (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant assignment of sq->user_index (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return value of mlx5_command_exec() (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Cosmetics: use BIT() instead of "1 <<", and others (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: TX latency optimization to save DMA reads (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support TX packet copy into WQE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Support ETH_RSS_HASH_XOR (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Prefetch skb data on RX (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Pop cq outside mlx5e_get_cqe (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove extra spaces (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add transport domain alloc/dealloc support (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support NETIF_F_SG (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Enforce max flow-tables level >= 3 (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Disable client vlan TX acceleration (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add HW cacheline start padding (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix HW MTU settings (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: fix an error code (Dan Carpenter)  [Orabug: 30479538]  
  - net/mlx5_core: Fix static checker warnings around system guid query flow (Majd Dibbiny)  [Orabug: 30479538]  
  - mlx5: Enable mutual support for IB and Ethernet (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Add more query port helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number when querying port ptys (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number in the query port mtu helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Get vendor-id using the query adapter command (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Add new query HCA vport commands (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Make the vport helpers available for the IB driver too (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return bitmask when querying ISSI (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Apply proper name convention to helpers (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_en: Add missing check for memory allocation failure (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet resource handling files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet Datapath files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5_core: Set/Query port MTU commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Modify CQ moderation parameters (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement get/set port status (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement access functions of ptys register fields (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: New device capabilities handling (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: HW data structs/types definitions cleanup (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Set irq affinity hints (Saeed Mahameed)  [Orabug: 30479538]  
  - mlx5: add kcompat.h (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5_core,mlx5_ib: Do not use vmap() on coherent memory (Amir Vadai)  [Orabug: 30479538]  
  - mlx5: enable module in kernel configs (Brian Maly)  [Orabug: 30479538]  
  - config: disable mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - nano: remove mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - fix retpoline build breakage when CONFIG_RETPOLINE is not set (Brian Maly)  [Orabug: 30479538]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.1.el7uek]
changelog:
  - block/loop: set hw_sectors (Shaohua Li)  [Orabug: 30244514]  
  - block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 30273956]  
  - oled: export symbols (Wengang Wang)  [Orabug: 30512063]  
  - oled: give panic handler chance to run before kexec (Wengang Wang)  [Orabug: 30512063]  
  - USB: sisusbvga: fix oops in error path of sisusb_probe (Oliver Neukum)  [Orabug: 30548565]  {CVE-2019-15219}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.2.el7uek]
changelog:
  - scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Make PBDE optimizations configurable (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Update driver version to 11.4.0.8 and Copyright updates (Ketan Mukadam)  [Orabug: 30569875]  
  - scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Correct race with abort on completion path (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Code cleanup for 128byte wqe data type (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: use __raw_writeX on DPP copies (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add embedded data pointers for enhanced performance (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enable fw download on if_type=6 devices (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add if_type=6 support for cycling valid bits (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add 64G link speed support (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add PCI Ids for if_type=6 hardware (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add push-to-adapter support to sli4 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add SLI-4 if_type=6 support to the code base (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework sli4 doorbell infrastructure (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers (James Smart)  [Orabug: 30569875]  
  - x86/bugs: use check_bugs instead of microcode_late_select_mitigation (Mihai Carabas)  [Orabug: 30332499]  
  - x86/bugs: spec_ctrl_mutex taken in stop_machine context (Mihai Carabas)  [Orabug: 30332499]  
  - x86/microcode: moved cpu feature late eval to stop_machine (Mihai Carabas)  [Orabug: 30332499]  
  - x86/cpu: Re-apply forced caps every time CPU caps are re-read (Andy Lutomirski)  [Orabug: 30332499]  
  - x86/microcode/intel: Check microcode revision before updating sibling threads (Ashok Raj)  [Orabug: 30332499]  
  - tracing: Fix possible double free on failure of allocating trace buffer (Steven Rostedt (VMware))  [Orabug: 30633873]  {CVE-2017-18595}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.1.el7uek]
changelog:
  - ixgbe: protect TX timestamping from API misuse (Manjunath Patil)  [Orabug: 30275491]  
  - block: init flush rq ref count to 1 (Josef Bacik)  [Orabug: 30360559]  
  - block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu)  [Orabug: 30360559]  
  - blk-mq: Remove generation seqeunce (Keith Busch)  [Orabug: 30360559]  
  - scsi: libsas: delete sas port if expander discover failed (Jason Yan)  [Orabug: 30580687]  {CVE-2019-15807} 
  - scsi: qla2xxx: fix a potential NULL pointer dereference (Allen Pais)  [Orabug: 30618784]  {CVE-2019-16233} 
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657070]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.3.el7uek]
changelog:
  - mm/slub: don't wait for high-order page allocation (Mridula Shastry)  [Orabug: 30651572]  
  - scsi: lpfc: Handle new link fault code returned by adapter firmware. (James Smart)  [Orabug: 30708960]  
  - IB/mlx4: Fix leak in id_map_find_del (Haakon Bugge)  [Orabug: 30778457]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.4.el7uek]
changelog:
  - IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil)   
  - IB/mlx4: Fix leak in id_map_find_del (Håkon Bugge)  [Orabug: 30800573]  
  - Revert "IB/mlx4: Fix leak in id_map_find_del" (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.5.el7uek]
changelog:
  - x86: microcode: propagate return value to siblings (Mihai Carabas)  [Orabug: 30557086]  
  - x86/bugs: TSX not disabled at late loading (Mihai Carabas)  [Orabug: 30557086]  
  - mlx5: lock mlx5_core to prevent module unload (Brian Maly)  [Orabug: 30566775]  
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30576433]  
  - x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas)  [Orabug: 30649400]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.el7uek]
changelog:
  - iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider)  [Orabug: 30459537]  
  - x86/microcode: Issue update message only once (Borislav Petkov)  [Orabug: 30528904]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30528904]  
  - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini)  [Orabug: 30658695]  {CVE-2019-19332} 
  - rtlwifi: Fix potential overflow on P2P code (Laura Abbott)  [Orabug: 30807748]  {CVE-2019-17666}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.1.el7uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30847137]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30847137]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30847137]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.2.el7uek]
changelog:
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868399]  
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 29797476]  
  - CIFS: fix POSIX lock leak and invalid ptr deref (Aurelien Aptel)  [Orabug: 30399972]  
  - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (qize wang)  [Orabug: 30819439]  {CVE-2019-14901} 
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)  [Orabug: 30864533]  {CVE-2019-15291} 
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30865080]  
  - KVM: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini)  [Orabug: 30867886]  
  - slub: do not sanity check if SLAB_DEBUG_FREE is not set (Dongli Zhang)  [Orabug: 30903145]  
  - slub: extend slub debug to handle multiple slabs (Aaron Tomlin)  [Orabug: 30903145]  
  - Fix kmalloc slab creation sequence (Christoph Lameter)  [Orabug: 30903145]  
  - slab: correct size_index table before replacing the bootstrap kmem_cache_node (Daniel Sanders)  [Orabug: 30903145]  
  - mm/slab_common: support the slub_debug boot option on specific object size (Gavin Guo)  [Orabug: 30903145]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.3.el7uek]
changelog:
  - Fix KABI error by keeping the struct field being removed by the below patch (Ritika Srivastava)  [Orabug: 30902926]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Ritika Srivastava)  [Orabug: 30902926]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.4.el7uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30944739]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.1.el7uek]
changelog:
  - Revert "printk: Default console logging level should be set to 4" (Cesar Roque)  [Orabug: 30931820]  
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30870743]  
  - xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (kaixuxia)  [Orabug: 30902190]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.2.el7uek]
changelog:
  - xenbus: req->err should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]  
  - xenbus: req->body should be updated before req->state (Dongli Zhang)  [Orabug: 30705030]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.3.el7uek]
changelog:
  - kernel: cpu.c: fix return in void function cpu_smt_disable (Mihai Carabas)  [Orabug: 31047871]  
  - net: qlogic: Fix memory leak in ql_alloc_large_buffers (Navid Emamdoost)  [Orabug: 31055327]  {CVE-2019-18806} 
  - swiotlb: clean up reporting (Kees Cook)  [Orabug: 31085017]  {CVE-2018-5953} 
  - KVM: x86: Expose more Intel AVX512 feature to guest (Luwei Kang)  [Orabug: 31085086]  
  - x86/cpufeature: Enable new AVX-512 features (Fenghua Yu)  [Orabug: 31085086]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.1.el7uek]
changelog:
  - rds: transport module should be auto loaded when transport is set (Rao Shoaib)  [Orabug: 31031928]  
  - KVM: X86: Fix NULL deref in vcpu_scan_ioapic (Wanpeng Li)  [Orabug: 31078882]  
  - vhost: Check docket sk_family instead of call getname (Eugenio Pérez)  [Orabug: 31085993]  {CVE-2020-10942} 
  - Revert "oled: give panic handler chance to run before kexec" (Wengang Wang)  [Orabug: 31098797]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.2.el7uek]
changelog:
  - rds: fix an infoleak in rds_inc_info_copy (Kangjie Lu)  [Orabug: 30770962]  {CVE-2016-5244} 
  - xfs: do async inactivation only when fs freezed (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: fix deadlock between shrinker and fs freeze (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: increase the default parallelism levels of pwork clients (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: decide if inode needs inactivation (Junxiao Bi)  [Orabug: 30944736]  
  - xfs: refactor the predicate part of xfs_free_eofblocks (Junxiao Bi)  [Orabug: 30944736]  
  - floppy: check FDC index for errors before assigning it (Linus Torvalds)  [Orabug: 31067516]  {CVE-2020-9383} 
  - KVM: x86: clear stale x86_emulate_ctxt->intercept value (Vitaly Kuznetsov)  [Orabug: 31118691]  
  - slcan: Don't transmit uninitialized stack data in padding (Richard Palethorpe)  [Orabug: 31136753]  {CVE-2020-11494}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.3.el7uek]
changelog:
  - ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address (Paolo Abeni)  [Orabug: 30292825]  
  - vt: selection, push sel_lock up (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, push console lock down (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} 
  - vt: selection, close sel_buffer race (Jiri Slaby)  [Orabug: 30923298]  {CVE-2020-8648} {CVE-2020-8648} 
  - xfs: stop searching for free slots in an inode chunk when there are none (Carlos Maiolino)  [Orabug: 31030659]  
  - xfs: fix up xfs_swap_extent_forks inline extent handling (Eric Sandeen)  [Orabug: 31032831]  
  - xfs: validate sb_logsunit is a multiple of the fs blocksize (Darrick J. Wong)  [Orabug: 31034071]  
  - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Wen Huang)  [Orabug: 31104481]  {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816} {CVE-2019-14814} {CVE-2019-14815} {CVE-2019-14816}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.4.el7uek]
changelog:
  - HID: Fix assumption that devices have inputs (Alan Stern)  [Orabug: 31208622]  {CVE-2019-19532} 
  - qla2xxx: DBG: disable 3D mailbox. (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Fix mtcp dump collection failure (Quinn Tran)  [Orabug: 30890687]  
  - scsi: qla2xxx: Add Serdes support for ISP27XX (Joe Carnuccio)  [Orabug: 30890687]  
  - vgacon: Fix a UAF in vgacon_invert_region (Zhang Xiaoxu)  [Orabug: 31143947]  {CVE-2020-8649} {CVE-2020-8647} {CVE-2020-8647} {CVE-2020-8649} {CVE-2020-8649} {CVE-2020-8647} 
  - HID: hiddev: do cleanup in failure of opening a device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - HID: hiddev: avoid opening a disconnected device (Hillf Danton)  [Orabug: 31206360]  {CVE-2019-19527} 
  - USB: adutux: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31233769]  {CVE-2019-19523}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.38.5.el7uek]
changelog:
  - i40e: Increment the driver version for FW API update (Jack Vogel)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Update FW API version to 1.9 (Piotr Azarewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Changed maximum supported FW API version to 1.8 (Adam Ludkiewicz)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Stop dropping 802.1ad tags - eth proto 0x88a8 (Scott Peterson)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix reading LLDP configuration (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Add capability flag for stopping FW LLDP (Krzysztof Galazka)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: refactor FW version checking (Mitch Williams)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: shutdown all IRQs and disable MSI-X when suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: prevent service task from running while we're suspended (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: don't clear suspended state until we finish resuming (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use newer generic PM support instead of legacy PM callbacks (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: use separate state bit for miscellaneous IRQ setup (Jacob Keller)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: fix for flow director counters not wrapping as expected (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: relax warning message in case of version mismatch (Mariusz Stachura)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: simplify member variable accesses (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix link down message when interface is brought up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144} 
  - i40e: Fix unqualified module message while bringing link up (Sudheer Mogilappagari)  [Orabug: 31051191]  {CVE-2019-0140} {CVE-2019-0139} {CVE-2019-0144}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.1.el7uek]
changelog:
  - qla2xxx: Update driver version to 9.00.00.00.42.0-k1-v2 (Arun Easi)  [Orabug: 30372266]  
  - qla2xxx: Fix device discovery when FCP2 device is lost. (Arun Easi)  [Orabug: 30372266]  
  - brcmfmac: add subtype check for event handling in data path (John Donnelly)  [Orabug: 30776354]  {CVE-2019-9503} 
  - percpu-refcount: fix reference leak during percpu-atomic transition (Douglas Miller)  [Orabug: 30867060]  
  - blk-mq: Allow timeouts to run while queue is freezing (Gabriel Krisman Bertazi)  [Orabug: 30867060]  
  - fs/dcache.c: fix spin lockup issue on nlru->lock (Junxiao Bi)  [Orabug: 30953290]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31234664]  
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (Navid Emamdoost)  [Orabug: 31246302]  {CVE-2019-19056} 
  - drm/vmwgfx: limit the number of mip levels in vmw_gb_surface_define_ioctl() (Vladis Dronov)  [Orabug: 31262557]  {CVE-2017-7346}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.2.el7uek]
changelog:
  - genirq: Use rcu in kstat_irqs_usr() (Eric Dumazet)   
  - genirq: Make sparse_irq_lock protect what it should protect (Thomas Gleixner)  [Orabug: 30953676]  
  - genirq: Free irq_desc with rcu (Thomas Gleixner)  [Orabug: 30953676]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.3.el7uek]
changelog:
  - Input: add safety guards to input_set_keycode() (Dmitry Torokhov)  [Orabug: 31200558]  {CVE-2019-20636} 
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31200579]  {CVE-2020-11609} 
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)  [Orabug: 31213758]  {CVE-2020-11608} 
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31213767]  {CVE-2020-11668} 
  - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (Navid Emamdoost)  [Orabug: 31263147]  {CVE-2019-19057} 
  - USB: core: Fix races in character device registration and deregistraion (Alan Stern)  [Orabug: 31317667]  {CVE-2019-19537}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.4.el7uek]
changelog:
  - acpi: disable erst (Wengang Wang)  [Orabug: 31194253]  
  - mdio_bus: Fix use-after-free on device_register fails (YueHaibing)  [Orabug: 31222292]  {CVE-2019-12819} 
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302708]  
  - vxlan: dont migrate permanent fdb entries during learn (Roopa Prabhu)  [Orabug: 31325318]  
  - USB: iowarrior: fix use-after-free on disconnect (Johan Hovold)  [Orabug: 31351061]  {CVE-2019-19528} 
  - usb: iowarrior: fix deadlock on disconnect (Oliver Neukum)  [Orabug: 31351061]  {CVE-2019-19528} 
  - mremap: properly flush TLB before releasing the page (Linus Torvalds)  [Orabug: 31352011]  {CVE-2018-18281}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.el7uek]
changelog:
  - Input: ff-memless - kill timer in destroy() (Oliver Neukum)  [Orabug: 31213691]  {CVE-2019-19524} 
  - libertas: Fix two buffer overflows at parsing bss descriptor (Wen Huang)  [Orabug: 31351307]  {CVE-2019-14896} {CVE-2019-14897} {CVE-2019-14897} 
  - binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Kees Cook)  [Orabug: 31352068]  {CVE-2017-1000370} {CVE-2017-1000371} {CVE-2017-1000370} 
  - NFSv4.0: Remove transport protocol name from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - NFSv4.0: Remove cl_ipaddr from non-UCS client ID (Chuck Lever)  [Orabug: 31357212]  
  - xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387466]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.39.5.1.el7uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352782]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31352782]  {CVE-2020-0543}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.2.el7uek]
changelog:
  - MCE: Restrict MCE banks to 6 on AMD platform (Zhenzhong Duan)  [Orabug: 30000521]  
  - can: peak_usb: fix slab info leak (Johan Hovold)  [Orabug: 31351141]  {CVE-2019-19534} 
  - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351250]  {CVE-2019-19536} 
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430876]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.3.el7uek]
changelog:
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31475612]  {CVE-2020-0543} 
  - x86/cpu: Rename cpu_data.x86_mask to cpu_data.x86_stepping (Jia Zhang)  [Orabug: 31475612]  {CVE-2020-0543}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.4.el7uek]
changelog:
  - media: ttusb-dec: Fix info-leak in ttusb_dec_send_command() (Tomas Bortoli)  [Orabug: 31351119]  {CVE-2019-19533} 
  - NFS: Fix a performance regression in readdir (Trond Myklebust)  [Orabug: 31409061]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.5.el7uek]
changelog:
  - Revert "bnxt_en: Remove busy poll logic in the driver." (Brian Maly)  [Orabug: 28151475]  
  - md: batch flush requests. (NeilBrown)  [Orabug: 31332821]  
  - ALSA: core: Fix card races between register and disconnect (Takashi Iwai)  [Orabug: 31351891]  {CVE-2019-15214} 
  - media: dvb-usb-v2: lmedm04: move ts2020 attach to dm04_lme2510_tuner (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - media: dvb-usb-v2: lmedm04: Improve logic checking of warm start (Malcolm Priestley)  [Orabug: 31352061]  {CVE-2017-16538} 
  - atomic_open(): fix the handling of create_error (Al Viro)  [Orabug: 31493395]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.6.el7uek]
changelog:
  - ipv4: ipv4_default_advmss() should use route mtu (Eric Dumazet)  [Orabug: 31563095]  
  - net: ipv4: Refine the ipv4_default_advmss (Gao Feng)  [Orabug: 31563095]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.40.6.2.el7uek]
changelog:
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31555658]  
  - Revert "x86/efi: Request desired alignment via the PE/COFF headers" (Matt Fleming)  [Orabug: 31668549]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.1.el7uek]
changelog:
  - can, slip: Protect tty->disc_data in write_wakeup and close with RCU (Richard Palethorpe)  [Orabug: 31516085]  {CVE-2020-14416} 
  - scsi: qla2xxx: Fix warning in qla2x00_async_iocb_timeout() (himanshu.madhani@cavium.com)  [Orabug: 31530589]  
  - scsi: qla2xxx: Fix NULL pointer access for fcport structure (Quinn Tran)  [Orabug: 31530589]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.2.el7uek]
changelog:
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351672]  {CVE-2019-19054} 
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/pci: Mask buggy SR-IOV VF INTx support (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio/pci: Pull BAR mapping setup from read-write path (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio_pci: Enable memory accesses before calling pci_map_rom (Eric Auger)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - mm: bring in additional flag for fixup_user_fault to signal unlock (Dominik Dingel)  [Orabug: 31439671]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439671]  {CVE-2020-12888} 
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31514993]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31514993]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31514993]  
  - Revert "x86/efi: Request desired alignment via the PE/COFF headers" (Matt Fleming)  [Orabug: 31602576]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.3.el7uek]
changelog:
  - scsi: qla2xxx: Fix stuck session in GNL (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: Serialize session free in qlt_free_session_done (Quinn Tran)  [Orabug: 31561461]  
  - scsi: qla2xxx: v2: Change abort wait_loop from msleep to wait_event_timeout (Giridhar Malavali)  [Orabug: 26932683]  
  - scsi: qla2xxx: v2: Move ABTS code behind qpair (Quinn Tran)  [Orabug: 31517449]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31027042]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31027042]  
  - block_dev: don't test bdev->bd_contains when it is not stable (NeilBrown)  [Orabug: 31554143]  
  - KVM: x86: Remove spurious semicolon (Joao Martins)  [Orabug: 31584727]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.41.4.el7uek]
changelog:
  - uek-rpm: Add OL6 shim conflict for new signing key (Eric Snowberg)  [Orabug: 31688239]  
  - Revert "certs: Add Oracle's new X509 cert into the kernel keyring" (Eric Snowberg)  [Orabug: 31688223]  
  - blk-mq: don't overwrite rq->mq_ctx (Jens Axboe)  [Orabug: 31457304]  
  - blk-mq: mark ctx as pending at batch in flush plug path (Ming Lei)  [Orabug: 31457304]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.1.el7uek]
changelog:
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350639]  {CVE-2020-10732} 
  - crypto: user - fix memory leak in crypto_report (Navid Emamdoost)  [Orabug: 31351640]  {CVE-2019-19062} 
  - of: unittest: fix memory leak in unittest_data_add (Navid Emamdoost)  [Orabug: 31351702]  {CVE-2019-19049} 
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31656992]  
  - net-sysfs: call dev_hold if kobject_init_and_add success (YueHaibing)  [Orabug: 31687545]  {CVE-2019-20811}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.2.el7uek]
changelog:
  - mm: create alloc_last_chance debugfs entries (Mike Kravetz)  [Orabug: 31295499]  
  - mm: perform 'last chance' reclaim efforts before allocation failure (Mike Kravetz)  [Orabug: 31295499]  
  - mm: let page allocation slowpath retry 'order' times (Mike Kravetz)  [Orabug: 31295499]  
  - fix kABI breakage from "netns: provide pure entropy for net_hash_mix()" (Dan Duval)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - netns: provide pure entropy for net_hash_mix() (Eric Dumazet)  [Orabug: 31351904]  {CVE-2019-10638} {CVE-2019-10639} 
  - hrtimer: Annotate lockless access to timer->base (Eric Dumazet)  [Orabug: 31380495]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648141]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648141]  
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666975]  
  - genirq/proc: Return proper error code when irq_set_affinity() fails (Wen Yaxng)  [Orabug: 31723450]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.3.el7uek]
changelog:
  - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices (Tomas Bortoli)  [Orabug: 31351221]  {CVE-2019-19535} 
  - media: hdpvr: Fix an error handling path in hdpvr_probe() (Arvind Yadav)  [Orabug: 31352053]  {CVE-2017-16644} 
  - fs/binfmt_misc.c: do not allow offset overflow (Thadeu Lima de Souza Cascardo)  [Orabug: 31588258]  
  - clear inode and truncate pages before enqueuing for async inactivation (Gautham Ananthakrishna)  [Orabug: 31744270]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.42.4.el7uek]
changelog:
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 30634865]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31683116]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31683116]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.1.el7uek]
changelog:
  - blktrace: Protect q->blk_trace with RCU (Jan Kara)  [Orabug: 31123576]  {CVE-2019-19768} 
  - media: technisat-usb2: break out of loop at end of buffer (Sean Young)  [Orabug: 31224554]  {CVE-2019-15505} 
  - btrfs: merge btrfs_find_device and find_device (Anand Jain)  [Orabug: 31351746]  {CVE-2019-18885} 
  - RDMA/cxgb4: Do not dma memory off of the stack (Greg KH)  [Orabug: 31351783]  {CVE-2019-17075} 
  - mwifiex: Abort at too short BSS descriptor element (Takashi Iwai)  [Orabug: 31351916]  {CVE-2019-3846} 
  - mwifiex: Fix possible buffer overflows at parsing bss descriptor (Takashi Iwai)  [Orabug: 31351916]  {CVE-2019-3846} {CVE-2019-3846} 
  - repair kABI breakage from "fs: prevent page refcount overflow in pipe_buf_get" (Dan Duval)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: prevent get_user_pages() from overflowing page refcount (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: add 'try_get_page()' helper function (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - fs: prevent page refcount overflow in pipe_buf_get (Matthew Wilcox)  [Orabug: 31351941]  {CVE-2019-11487} 
  - mm: make page ref count overflow check tighter and more explicit (Linus Torvalds)  [Orabug: 31351941]  {CVE-2019-11487} 
  - sctp: implement memory accounting on tx path (Xin Long)  [Orabug: 31351960]  {CVE-2019-3874} 
  - sunrpc: use SVC_NET() in svcauth_gss_* functions (Vasily Averin)  [Orabug: 31351995]  {CVE-2018-16884} 
  - sunrpc: use-after-free in svc_process_common() (Vasily Averin)  [Orabug: 31351995]  {CVE-2018-16884} 
  - af_packet: set defaule value for tmo (Mao Wenan)  [Orabug: 31439107]  {CVE-2019-20812} 
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439369]  {CVE-2020-10751} 
  - selinux: Print 'sclass' as string when unrecognized netlink message occurs (Marek Milkovic)  [Orabug: 31439369]  {CVE-2020-10751} 
  - mac80211: Do not send Layer 2 Update frame before authorization (Jouni Malinen)  [Orabug: 31473652]  {CVE-2019-5108} 
  - cfg80211/mac80211: make ieee80211_send_layer2_update a public function (Dedy Lansky)  [Orabug: 31473652]  {CVE-2019-5108} 
  - crypto: authenc - fix parsing key with misaligned rta_len (Eric Biggers)  [Orabug: 31535529]  {CVE-2020-10769} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705121]  {CVE-2020-14331} {CVE-2020-14331} 
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783151]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.2.el7uek]
changelog:
  - ALSA: seq: Cancel pending autoload work at unbinding device (Takashi Iwai)  [Orabug: 31352045]  {CVE-2017-16528} 
  - USB: serial: io_ti: fix information leak in completion handler (Johan Hovold)  [Orabug: 31352084]  {CVE-2017-8924} 
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543032]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543032]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543032]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31543032]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543032]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543032]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543032]  
  - tracing: Kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543032]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.3.el7uek]
changelog:
  - ARM: amba: Fix race condition with driver_override (Geert Uytterhoeven)  [Orabug: 29671212]  {CVE-2018-9415} 
  - block: blk_init_allocated_queue() set q->fq as NULL in the fail case (xiao jin)  [Orabug: 30120513]  {CVE-2018-20856} 
  - USB: serial: omninet: fix reference leaks at open (Johan Hovold)  [Orabug: 30484761]  {CVE-2017-8925} 
  - nl80211: validate beacon head (Johannes Berg)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: Use const more consistently in for_each_element macros (Jouni Malinen)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: add and use strongly typed element iteration macros (Johannes Berg)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: add helper to find an IE that matches a byte-array (Luca Coelho)  [Orabug: 30556264]  {CVE-2019-16746} 
  - cfg80211: allow finding vendor with OUI without specifying the OUI type (Emmanuel Grumbach)  [Orabug: 30556264]  {CVE-2019-16746} 
  - dccp: Fix memleak in __feat_register_sp (YueHaibing)  [Orabug: 30732821]  {CVE-2019-20096} 
  - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference (YueHaibing)  [Orabug: 30732938]  {CVE-2019-20054} 
  - fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links (YueHaibing)  [Orabug: 30732938]  {CVE-2019-20054} 
  - scsi: libsas: stop discovering if oob mode is disconnected (Jason Yan)  [Orabug: 30770913]  {CVE-2019-19965} 
  - kernel/sysctl.c: fix out-of-bounds access when setting file-max (Will Deacon)  [Orabug: 31350720]  {CVE-2019-14898} 
  - sysctl: handle overflow for file-max (Christian Brauner)  [Orabug: 31350720]  {CVE-2019-14898} 
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351572]  {CVE-2019-19073} 
  - can: gs_usb: gs_can_open(): prevent memory leak (Navid Emamdoost)  [Orabug: 31351682]  {CVE-2019-19052} 
  - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() (Takashi Iwai)  [Orabug: 31351837]  {CVE-2019-15927} 
  - media: usb: siano: Fix general protection fault in smsusb (Alan Stern)  [Orabug: 31351875]  {CVE-2019-15218} 
  - crypto: vmac - separate tfm and request context (Eric Biggers)  [Orabug: 31584410]  
  - SUNRPC: Fix a race with XPRT_CONNECTING (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Fix disconnection races (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Add a helper to wake up a sleeping rpc_task and set its status (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Reduce latency when send queue is congested (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: RPC transport queue must be low latency (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Fix a potential race in xprt_connect() (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: ensure correct error is reported by xs_tcp_setup_socket() (NeilBrown)  [Orabug: 31796770]  
  - SUNRPC: Fix races between socket connection and destroy code (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Prevent SYN+SYNACK+RST storms (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Report TCP errors to the caller (Trond Myklebust)  [Orabug: 31796770]  
  - SUNRPC: Ensure we release the TCP socket once it has been closed (Trond Myklebust)  [Orabug: 31796770]  
  - net-gro: fix use-after-free read in napi_gro_frags() (Eric Dumazet)  [Orabug: 31856195]  {CVE-2020-10720} 
  - PCI: Probe bridge window attributes once at enumeration-time (Bjorn Helgaas)  [Orabug: 31867577]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.43.4.el7uek]
changelog:
  - kvm: fix kvm_ioctl_create_device() reference counting (CVE-2019-6974) (Jann Horn)  [Orabug: 29434845]  {CVE-2019-6974} 
  - KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) (Peter Shier)  [Orabug: 29434898]  {CVE-2019-7221} 
  - KVM: x86: work around leak of uninitialized stack contents (CVE-2019-7222) (Paolo Bonzini)  [Orabug: 29434924]  {CVE-2019-7222} 
  - net: arc_emac: fix koops caused by sk_buff free (Alexander Kochetkov)  [Orabug: 30254239]  {CVE-2016-10906} 
  - GFS2: don't set rgrp gl_object until it's inserted into rgrp tree (Bob Peterson)  [Orabug: 30254251]  {CVE-2016-10905} 
  - GFS2: Fix rgrp end rounding problem for bsize < page size (Bob Peterson)  [Orabug: 30254251]  {CVE-2016-10905} 
  - x86/apic/msi: update address_hi on set msi affinity (Joe Jin)  [Orabug: 31477035]  
  - x86/apic/msi: check and sync apic IRR on msi_set_affinity (Joe Jin)  [Orabug: 31477035]  
  - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup (Sabrina Dubroca)  [Orabug: 31872821]  {CVE-2020-1749} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872910]  {CVE-2020-25212} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884169]  {CVE-2020-25284} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884239]  {CVE-2020-25285} 
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895331]  {CVE-2020-14314}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.1.el7uek]
changelog:
  - oracleasm: Retrieve d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31832592]  
  - KVM: VMX: fixes for vmentry_l1d_flush module parameter (Paolo Bonzini)  [Orabug: 31962487]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.2.el7uek]
changelog:
  - usb: cdc-acm: make sure a refcount is taken early enough (Oliver Neukum)  [Orabug: 31351088]  {CVE-2019-19530} 
  - net/rds: migration of a delayed initialized port present in down state (Praveen Kumar Kannoju)  [Orabug: 31729995]  
  - net: add high_order_alloc_disable sysctl (Eric Dumazet)  [Orabug: 31835223]  
  - mm, page_alloc: double zone's batchsize (Aaron Lu)  [Orabug: 31835223]  
  - mm/free_pcppages_bulk: prefetch buddy while not holding lock (Aruna Ramakrishna)  [Orabug: 31835223]  
  - mm/free_pcppages_bulk: do not hold lock when picking pages to free (Aruna Ramakrishna)  [Orabug: 31835223]  
  - mm, page_alloc: remove unnecessary variable from free_pcppages_bulk (Mel Gorman)  [Orabug: 31835223]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872865]  {CVE-2020-25211} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880144]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31974559]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.3.el7uek]
changelog:
  - qed: Reduce verbosity of unimplemented MFW messages (Mintz, Yuval)  [Orabug: 31959299]  
  - kexec: validate pe files against the system_blacklist_keyring (Eric Snowberg)  [Orabug: 31961119]  {CVE-2020-26541}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.4.el7uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS (himanshu.madhani@cavium.com)  [Orabug: 32020790]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.44.4.1.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040806]  {CVE-2020-8694} {CVE-2020-8695}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.1.el7uek]
changelog:
  - Revert "x86/efi: Initialize and display UEFI secure boot state a bit later during init" (Eric Snowberg)  [Orabug: 31887248]  
  - xfs: fix xfs_inode use after free (Wengang Wang)  [Orabug: 31932452]  
  - SUNRPC: ECONNREFUSED should cause a rebind. (NeilBrown)  [Orabug: 32070175]  
  - netfilter: nfnetlink: correctly validate length of batch messages (Phil Turnbull)  [Orabug: 30658635]  {CVE-2016-7917} 
  - xc2028: Fix use-after-free bug properly (Takashi Iwai)  [Orabug: 30658659]  {CVE-2016-7913} 
  - [media] xc2028: avoid use after free (Mauro Carvalho Chehab)  [Orabug: 30658659]  {CVE-2016-7913} 
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 30821411]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989190]  {CVE-2020-25643} 
  - tracing: Reverse the order of trace_types_lock and event_mutex (Alan Maguire)  [Orabug: 32002706]  
  - ocfs2/dlm: move lock to the tail of grant queue while doing in-place convert (xuejiufei)  [Orabug: 32071234]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.2.el7uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32137965]  {CVE-2020-8694} {CVE-2020-8695}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.3.el7uek]
changelog:
  - drm/vmwgfx: Make sure backup_handle is always valid (Sinclair Yeh)  [Orabug: 31352076]  {CVE-2017-9605} 
  - random32: move the pseudo-random 32-bit definitions to prandom.h (Linus Torvalds)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random32: remove net_rand_state from the latent entropy gcc plugin (Linus Torvalds)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random: fix circular include dependency on arm64 after addition of percpu.h (Willy Tarreau)  [Orabug: 31698086]  {CVE-2020-16166} 
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698086]  {CVE-2020-16166} 
  - x86/kvm: move kvm_load/put_guest_xcr0 into atomic context (WANG Chao)  [Orabug: 32021856]  
  - kvm: x86: do not leak guest xcr0 into host interrupt handlers (David Matlack)  [Orabug: 32021856]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.4.el7uek]
changelog:
  - block: Move part of bdi_destory() to del_gendisk() as bdi_unregister(). (Jan Kara)  [Orabug: 32124131]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32138039]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.45.6.el7uek]
changelog:
  - qla2xxx: disable target reset during link reset and update version (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix early srb free on abort (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix comment in MODULE_PARM_DESC in qla2xxx (Masanari Iida)  [Orabug: 32095664]  
  - scsi: qla2xxx: Enable Async TMF processing (himanshu.madhani@cavium.com)  [Orabug: 32095664]  
  - qla2xxx: tweak debug message for task management path (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV (Arun Easi)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix fabric scan hang (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Do command completion on abort timeout (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix abort timeout race condition. (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Fix race between switch cmd completion and timeout (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx:v2: Fix double scsi_done for abort path (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2 Fix a race condition between aborting and completing a SCSI command (Bart Van Assche)  [Orabug: 32095664]  
  - scsi: qla2xxx: Really fix qla2xxx_eh_abort() (Bart Van Assche)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2 Reject EH_{abort|device_reset|target_request} (Quinn Tran)  [Orabug: 32095664]  
  - scsi: qla2xxx: v2: Fix race conditions in the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 32095664]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.1.el7uek]
changelog:
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722767]  
  - KVM: x86: Manually flush collapsible SPTEs only when toggling flags (Sean Christopherson)  [Orabug: 31722767]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722767]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722767]  
  - xfs: catch inode allocation state mismatch corruption (Gautham Ananthakrishna)  [Orabug: 32071488]  
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122731]  {CVE-2020-25668} 
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136900]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136900]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.2.el7uek]
changelog:
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 31780626]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176264]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176264]  {CVE-2020-28915} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177993]  
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187749]  {CVE-2020-28974} 
  - block: Fix use-after-free in blkdev_get() (Jason Yan)  [Orabug: 32194609]  {CVE-2020-15436} 
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227971]  {CVE-2020-25705}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.3.el7uek]
changelog:
  - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Ganapathi Bhat)  [Orabug: 30781859]  {CVE-2019-14895} {CVE-2019-14895} 
  - ext4: fix ext4_empty_dir() for directories with holes (Jan Kara)  [Orabug: 31265320]  {CVE-2019-19037} {CVE-2019-19037} 
  - netlabel: cope with NULL catmap (Paolo Abeni)  [Orabug: 31350493]  {CVE-2020-10711} 
  - scsi: mptfusion: Fix double fetch bug in ioctl (Dan Carpenter)  [Orabug: 31350941]  {CVE-2020-12652} 
  - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() (Dan Carpenter)  [Orabug: 31350941]  {CVE-2020-12652} 
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350967]  {CVE-2020-12464} 
  - drivers: usb: core: Minimize irq disabling in usb_sg_cancel() (David Mosberger)  [Orabug: 31350967]  {CVE-2020-12464} 
  - drivers: usb: core: Don't disable irqs in usb_sg_wait() during URB submit. (David Mosberger)  [Orabug: 31350967]  {CVE-2020-12464} 
  - ext4: work around deleting a file with i_nlink == 0 safely (Theodore Ts'o)  [Orabug: 31351014]  {CVE-2019-19447} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 31984319]  
  - xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage (Josh Abraham)  [Orabug: 31984319]  
  - ext4: fix fencepost in s_first_meta_bg validation (Theodore Ts'o)  [Orabug: 32197511]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32202000]  
  - sched/fair: Don't free p->numa_faults with concurrent readers (Jann Horn)  [Orabug: 32212524]  {CVE-2019-20934} 
  - netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Vasily Averin)  [Orabug: 32222844]  {CVE-2020-14305} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233360]  {CVE-2020-14351} 
  - ext4: fix calculation of meta_bg descriptor backups (Andy Leiserson)  [Orabug: 32245133]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.46.4.el7uek]
changelog:
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 31984335]  {CVE-2020-27673} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32223358]  {CVE-2020-29569}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.47.2.el7uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350932]  {CVE-2020-12653} 
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 31435700]  
  - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (Takashi Iwai)  [Orabug: 32240688]  {CVE-2020-27786} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32247942]  {CVE-2020-29568} 
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251907]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266682]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266682]  {CVE-2020-29660} 
  - tty: core: Use correct spinlock flavor in tiocspgrp() (Peter Hurley)  [Orabug: 32266682]  {CVE-2020-29660} 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349208]  {CVE-2020-36158}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.1.el7uek]
changelog:
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350996]  
  - rds: Add code to debug rds_tcp loopback hang (Rao Shoaib)  [Orabug: 32382656]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.48.3.1.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492113]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492105]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492098]  {CVE-2021-26932}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.4.el7uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32520758]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32520750]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32520717]  {CVE-2021-26932}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.5.el7uek]
changelog:
  - kernel/acct.c: fix the acct->needcheck check in check_free_space() (Oleg Nesterov)  [Orabug: 31587485]  
  - HID: hid-input: clear unmapped usages (Dmitry Torokhov)  [Orabug: 32464790]  {CVE-2020-0431} 
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498826]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.48.6.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603382]  
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603382]  
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603382]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.49.2.el7uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32640641]  
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32640641]  
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32640641]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.49.3.el7uek]
changelog:
  - xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross)  [Orabug: 32485156]  
  - audit: fix error handling in audit_data_to_entry() (Paul Moore)  [Orabug: 32608451]  {CVE-2020-0444}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.50.1.el7uek]
changelog:
  - floppy: fix lock_fdc() signal handling (Jiri Kosina)  [Orabug: 32624116]  {CVE-2021-20261} 
  - Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich)  [Orabug: 32651478]  {CVE-2021-28038} 
  - n_tty: Fix stall at n_tty_receive_char_special(). (Tetsuo Handa)  [Orabug: 32656942]  {CVE-2021-20219} 
  - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (Eddy Wu)  [Orabug: 32695783]  {CVE-2020-35508} 
  - Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen)  [Orabug: 32696741]  
  - SecureBoot Digicert 2021 certificates update (Brian Maly)  [Orabug: 32734505]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.50.2.el7uek]
changelog:
  - btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana)  [Orabug: 32669454]  {CVE-2021-28964} 
  - xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich)  [Orabug: 32697855]  {CVE-2021-28688} 
  - netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson)  [Orabug: 32709125]  {CVE-2021-29650} 
  - netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal)  [Orabug: 32709125]  {CVE-2021-29650} 
  - do_epoll_ctl(): clean the failure exits up a bit (Al Viro)  [Orabug: 32759496]  {CVE-2020-0466} 
  - epoll: Keep a reference on files added to the check list (Marc Zyngier)  [Orabug: 32759496]  {CVE-2020-0466} 
  - HID: core: Sanitize event code and type when mapping input (Marc Zyngier)  [Orabug: 32759553]  {CVE-2020-0465}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.51.2.el7uek]
changelog:
  - IB/ipoib: Improve latency in ipoib/cm connection formation (Manjunath Patil)  [Orabug: 32219842]  
  - mm: madv_doexec_flag sysctl (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: introduce MADV_DOEXEC (Anthony Yznaga)  [Orabug: 32387889]  
  - exec, elf: require opt-in for accepting preserved mem (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: introduce VM_EXEC_KEEP (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: fail exec if stack expansion will overlap another vma (Anthony Yznaga)  [Orabug: 32387889]  
  - mm: do not assume only the stack vma exists in setup_arg_pages() (Anthony Yznaga)  [Orabug: 32387889]  
  - ELF: when loading PIE binaries check for overlap with existing mappings (Anthony Yznaga)  [Orabug: 32387889]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.1.el7uek]
changelog:
  - dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka)  [Orabug: 32860494]  {CVE-2021-31916}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.2.el7uek]
changelog:
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021289]  {CVE-2020-12352} 
  - RDS tcp loopback connection can hang (Rao Shoaib)  [Orabug: 32926868]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.3.el7uek]
changelog:
  - iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built (Bartosz Golaszewski)  [Orabug: 32974492]  
  - iommu/vt-d: Gracefully handle DMAR units with no supported address widths (David Woodhouse)  [Orabug: 32974492]  
  - secureboot: make sure kernel-signing.cer is copied to kernel-keys dir (Brian Maly)  [Orabug: 32978042]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.4.el7uek]
changelog:
  - IB/core: Only update PKEY and GID caches on respective events (Håkon Bugge)  [Orabug: 32816368]  
  - Revert "Allow mce to reset instead of panic on UE" (William Roche)  [Orabug: 32820278]  
  - Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka)  [Orabug: 32912103]  {CVE-2021-33034} 
  - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (Peilin Ye)  [Orabug: 33013890]  {CVE-2020-36386} 
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v5 (Quinn Tran)  [Orabug: 33015884]  
  - scsi: qla2xxx: v2: Fix login retry count (Quinn Tran)  [Orabug: 29411891] [Orabug: 33015884]  
  - scsi: qla2xxx: Properly extract ADISC error codes (Quinn Tran)  [Orabug: 33015884]  
  - scsi: qla2xxx: Replace GPDB with async ADISC command (Quinn Tran)  [Orabug: 33015884]  
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v4 (Quinn Tran)  [Orabug: 33015884]  
  - qla2xxx: fix relogin stalled. (Quinn Tran)  [Orabug: 27700529] [Orabug: 33015884]  
  - net/mlx4: Treat VFs fair when handling comm_channel_events (Hans Westgaard Ry)  [Orabug: 33017263]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.5.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33135634]  {CVE-2021-33909}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.52.5.1.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33116628]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33116628]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.1.el7uek]
changelog:
  - xfs: fix lockup issue (Junxiao Bi)  [Orabug: 32836026]  
  - bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma)  [Orabug: 32912036]  {CVE-2021-32399} {CVE-2021-32399}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.3.el7uek]
changelog:
  - net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk)  [Orabug: 31895301]  {CVE-2020-14304} 
  - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (Erez Alfasi)  [Orabug: 31895301]  {CVE-2020-14304} 
  - netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal)  [Orabug: 33093028]  {CVE-2021-22555} 
  - xen/blkback: Make sure all vbd fields are initialized (Boris Ostrovsky)  [Orabug: 33131620]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.el7uek]
changelog:
  - seq_file: disallow extremely large seq buffer allocations (Eric Sandeen)  [Orabug: 33143006]  {CVE-2021-33909}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.1.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33195559]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33195559]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.53.5.2.el7uek]
changelog:
  - iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse)  [Orabug: 33215470]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.1.el7uek]
changelog:
  - can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek)  [Orabug: 33030701]  {CVE-2021-34693} 
  - CIFS: 511c54a2f691 adds a check for session expiry (Aruna Ramakrishna)  [Orabug: 33063858]  
  - CIFS: Reconnect expired SMB sessions (Pavel Shilovsky)  [Orabug: 33063858]  
  - media: v4l: event: Add subscription to list before calling "add" operation (Sakari Ailus)  [Orabug: 33113344]  {CVE-2019-9458} 
  - media: v4l: event: Prevent freeing event subscriptions while accessed (Sakari Ailus)  [Orabug: 33113344]  {CVE-2019-9458} 
  - chardev: Avoid potential use-after-free in 'chrdev_open()' (Will Deacon)  [Orabug: 33113412]  {CVE-2020-0305} 
  - kobject: Export kobject_get_unless_zero() (Jan Kara)  [Orabug: 33113412]  {CVE-2020-0305} 
  - cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE (Sergey Matyukevich)  [Orabug: 33114443]  {CVE-2020-27068}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.2.el7uek]
changelog:
  - qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran)  [Orabug: 33196002]  
  - qla2xxx: add heartbeat check (Quinn Tran)  [Orabug: 33196002]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.3.el7uek]
changelog:
  - uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan)  [Orabug: 32060376]  
  - config: remove CONFIG_VGACON_SOFT_SCROLLBACK from kernel configs (Brian Maly)  [Orabug: 33047770]  {CVE-2020-28097} {CVE-2020-28097} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 33047770]  {CVE-2020-28097} 
  - can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo)  [Orabug: 33114649]  {CVE-2021-3609} 
  - iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse)  [Orabug: 33199774]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.4.el7uek]
changelog:
  - USB: mon: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 33113260]  {CVE-2019-9456} 
  - usb: usbmon: Read text within supplied buffer size (Pete Zaitcev)  [Orabug: 33113260]  {CVE-2019-9456}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.5.el7uek]
changelog:
  - l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: ensure sessions are freed after their PPPOL2TP socket (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: Refactor the codes with existing macros instead of literal number (Gao Feng)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: fix duplicate session creation (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: ensure session can't get removed during pppol2tp_session_ioctl() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: fix race in l2tp_recv_common() (Guillaume Nault)  [Orabug: 33113975]  {CVE-2020-0429} 
  - net: l2tp: Make l2tp_ip6 namespace aware (Shmulik Ladkani)  [Orabug: 33113975]  {CVE-2020-0429} 
  - l2tp: Correctly return -EBADF from pppol2tp_getname. (phil.turnbull@oracle.com)  [Orabug: 33113975]  {CVE-2020-0429}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.54.6.1.el7uek]
changelog:
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 33369433]  {CVE-2020-12114} {CVE-2020-12114} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 33369414]  {CVE-2019-19448} {CVE-2019-19448} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 33369390]  {CVE-2019-17133} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 33369374]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 33369374]  {CVE-2019-3900} 
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: check defrag PN against current frame (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: add fragment cache to sta_info (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)  [Orabug: 33369361]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-26147} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33369303]  {CVE-2021-3655} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33369276]  {CVE-2021-38160} 
  - net_sched: cls_route: remove the right filter from hashtable (Cong Wang)  [Orabug: 33369231]  {CVE-2021-3715} 
  - HID: make arrays usage and value to be the same (Will McVicker)  [Orabug: 33369121]  {CVE-2021-0512} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33369043]  {CVE-2021-40490}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.1.el7uek]
changelog:
  - cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE (Srinivas Dasari)  [Orabug: 31351335]  {CVE-2017-11089} 
  - ocfs2: issue zeroout to EOF blocks (Junxiao Bi)  [Orabug: 32974989]  
  - ocfs2: fix zero out valid data (Junxiao Bi)  [Orabug: 32974989]  
  - ocfs2: fix data corruption by fallocate (Junxiao Bi)  [Orabug: 32974989]  
  - l2tp: fix l2tp_eth module loading (Guillaume Nault)  [Orabug: 33114384]  {CVE-2020-27067} 
  - af_key: pfkey_dump needs parameter validation (Mark Salyzyn)  [Orabug: 33114539]  {CVE-2021-0605} 
  - af_key: Add lock to key dump (Yuejie Shi)  [Orabug: 33114539]  {CVE-2021-0605} 
  - Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin)  [Orabug: 33114989]  {CVE-2021-3612} 
  - Input: joydev - prevent potential read overflow in ioctl (Dan Carpenter)  [Orabug: 33114989]  {CVE-2021-3612} 
  - tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33198437]  {CVE-2021-3679} 
  - dtrace: Corrects - warning: assignment makes pointer from integer without a cast (John Donnelly)  [Orabug: 33314947]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.2.el7uek]
changelog:
  - x86/mm: Fix compiler warning in pageattr.c (John Donnelly)  [Orabug: 33332673]  
  - security: Make inode argument of inode_getsecid non-const (Andreas Gruenbacher)  [Orabug: 33337179]  
  - security: Make inode argument of inode_getsecurity non-const (Andreas Gruenbacher)  [Orabug: 33337179]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.55.3.el7uek]
changelog:
  - fs/namespace.c: fix mountpoint reference counter race (Piotr Krysiuk)  [Orabug: 31350976]  {CVE-2020-12114} {CVE-2020-12114} 
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)  [Orabug: 31351025]  {CVE-2019-19448} {CVE-2019-19448} 
  - cfg80211: wext: avoid copying malformed SSIDs (Will Deacon)  [Orabug: 31351800]  {CVE-2019-17133} 
  - vhost_net: fix possible infinite loop (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} {CVE-2019-3900} 
  - vhost: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost_net: introduce vhost_exceeds_weight() (Jason Wang)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost_net: use packet weight for rx handler, too (Paolo Abeni)  [Orabug: 31351950]  {CVE-2019-3900} 
  - vhost-net: set packet weight of tx polling to 2 * vq size (haibinzhang(张海斌))  [Orabug: 31351950]  {CVE-2019-3900} 
  - mac80211: extend protection against mixed key and fragment cache attacks (Wen Gong)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24586} {CVE-2020-24587} 
  - mac80211: do not accept/forward invalid EAPOL frames (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent attacks on TKIP/WEP as well (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: check defrag PN against current frame (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: add fragment cache to sta_info (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: drop A-MSDUs on old ciphers (Johannes Berg)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - cfg80211: mitigate A-MSDU aggregation attacks (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24588} 
  - mac80211: properly handle A-MSDUs that start with an RFC 1042 header (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} 
  - mac80211: prevent mixed key and fragment cache attacks (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-24587} {CVE-2020-24586} 
  - mac80211: assure all fragments are encrypted (Mathy Vanhoef)  [Orabug: 33009788]  {CVE-2020-24586} {CVE-2020-26139} {CVE-2020-24587} {CVE-2020-24588} {CVE-2020-26139} {CVE-2020-26140} {CVE-2020-26141} {CVE-2020-26142} {CVE-2020-26143} {CVE-2020-26144} {CVE-2020-26145} {CVE-2020-26146} {CVE-2020-26147} {CVE-2020-26147} 
  - sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33198409]  {CVE-2021-3655} 
  - virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33209274]  {CVE-2021-38160} 
  - net_sched: cls_route: remove the right filter from hashtable (Cong Wang)  [Orabug: 33326887]  {CVE-2021-3715} 
  - HID: make arrays usage and value to be the same (Will McVicker)  [Orabug: 33326939]  {CVE-2021-0512} 
  - ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33327200]  {CVE-2021-40490}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.56.1.el7uek]
changelog:
  - ocfs2: subsystem.su_mutex is required while accessing the item->ci_parent (alex chen)  [Orabug: 29184589]  {CVE-2017-18216} 
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)   {CVE-2020-12771} 
  - filldir[64]: remove WARN_ON_ONCE() for bad directory entries (Linus Torvalds)  [Orabug: 31351271]  {CVE-2019-10220} 
  - Make filldir[64]() verify the directory entry filename is valid (Linus Torvalds)  [Orabug: 31351271]  {CVE-2019-10220} 
  - ath9k: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351559]  {CVE-2019-19074} 
  - scsi: bfa: release allocated memory in case of error (Navid Emamdoost)  [Orabug: 31351615]  {CVE-2019-19066} 
  - rtlwifi: prevent memory leak in rtl_usb_probe (Navid Emamdoost)  [Orabug: 31351626]  {CVE-2019-19063} 
  - perf/core: Fix perf_event_open() vs. execve() race (Peter Zijlstra)  [Orabug: 31351766]  {CVE-2019-3901} 
  - l2tp: pass tunnel pointer to ->session_create() (Guillaume Nault)  [Orabug: 31352004]  {CVE-2018-9517} 
  - net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33039295]  
  - Revert "uek-rpm: mark /etc/ld.so.conf.d/ files as %config" (aloktiw)  [Orabug: 33359684]  
  - ksplice: Fix build warning with ksplice_sysctls (John Donnelly)  [Orabug: 33365274]  
  - kvm:vmx Fix build error in kvm/vmx.c (John Donnelly)  [Orabug: 33375485]  
  - vmscan: Fix build error in mm/vmscan.c (John Donnelly)  [Orabug: 33375931]  
  - constify iov_iter_count() and iter_is_iovec() (Al Viro)  [Orabug: 33381741]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.56.2.el7uek]
changelog:
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864610]  {CVE-2019-19813} 
  - btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864610]  {CVE-2019-19813} 
  - net: create skb_gso_validate_mac_len() (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026} 
  - bnx2x: disable GSO where gso_size is too big for hardware (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026} 
  - Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33014035]  {CVE-2021-3564} {CVE-2021-3564} 
  - l2tp: Avoid schedule while atomic in exit_net (Ridge Kennedy)  [Orabug: 33360013]  
  - l2tp: remove skb_dst_set() from l2tp_xmit_skb() (Xin Long)  [Orabug: 33360013]  
  - dtrace: remove unused variables (John Donnelly)  [Orabug: 33387203]  
  - scsi: treat lun as 64-bit in scsi_report_lun_scan() error message (Henry Willard)  [Orabug: 33387203]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.57.1.el7uek]
changelog:
  - target; fix print statement warning (John Donnelly)  [Orabug: 33495661]  
  - enic;: fix warning on module_param disable_vlan0, (John Donnelly)  [Orabug: 33495661]  
  - bnx2fc: correct BNX2FC_TM_TIMEOUT to be 60 sec (John Donnelly)  [Orabug: 33495661]  
  - target: Fix linux-4.1.y specific compile warning (Nicholas Bellinger)  [Orabug: 33495661]  
  - net/mlx4: Fixing warning in mlx4_get_module_info() (John Donnelly)  [Orabug: 33495661]  
  - rds: Avoid compiler warning in ib_send.c: opcode (John Donnelly)  [Orabug: 33495661]  
  - RDMA/mad: correct build warning (John Donnelly)  [Orabug: 33495661]  
  - dtrace: Fix warning in dtrace_sync() (Tomas Jedlicka)  [Orabug: 33495661]  
  - virtio: Silence uninitialized variable warning (Dan Carpenter)  [Orabug: 33495661]  
  - scsi: correct uninitialized variable (John Donnelly)  [Orabug: 33495661]  
  - media: smsusb: better handle optional alignment (Mauro Carvalho Chehab)  [Orabug: 33495661]  
  - media: usb: siano: Fix false-positive "uninitialized variable" warning (Alan Stern)  [Orabug: 33495661]  
  - toshiba_acpi: correct build warning (John Donnelly)  [Orabug: 33495661]  
  - RDS/IB: corrects build warning (John Donnelly)  [Orabug: 33495661]  
  - x86/mce: correct return warning (John Donnelly)  [Orabug: 33495661]  
  - x86/asm/msr: Make wrmsrl_safe() a function (Andy Lutomirski)  [Orabug: 33495661]  
  - x86/mitigations: fix warnings in taa_select_mitigation() (John Donnelly)  [Orabug: 33495661]  
  - mm: correct build warning with pgprot (John Donnelly)  [Orabug: 33495661]  
  - Thermal: remove unused variable (John Donnelly)  [Orabug: 33495661]  
  - ixgbe: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - i40e: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - mlx4: remove unused variables and functions, (John Donnelly)  [Orabug: 33495661]  
  - nvme: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]  
  - ocfs2: remove unused function: ocfs2_prepare_inode_for_refcount() (John Donnelly)  [Orabug: 33495661]  
  - ipv6: remove unused variable: payload_len (John Donnelly)  [Orabug: 33495661]  
  - Revert "efi: Fix out-of-bounds read in variable_matches()" (John Donnelly)  [Orabug: 33495661]  
  - dtrace: remove unused variable "iph" (John Donnelly)  [Orabug: 33495661]  
  - ext4: remove unused function ext4_init_inode_bitmap() (John Donnelly)  [Orabug: 33495661]  
  - cpuidle: remove unused function: call_cpuidle() (John Donnelly)  [Orabug: 33495661]  
  - cifs: remove unused label (John Donnelly)  [Orabug: 33495661]  
  - block: remove unused out: label (John Donnelly)  [Orabug: 33495661]  
  - Bluetooth: hci_uart: check for missing tty operations (Vladis Dronov)  [Orabug: 30244627]  {CVE-2019-10207} {CVE-2019-10207} 
  - Bluetooth: hci_uart: Add basic support for Intel Lightning Peak devices (Loic Poulain)  [Orabug: 30244627]  {CVE-2019-10207} 
  - Bluetooth: hci_uart: Add new line discipline enhancements (Ilya Faenson)  [Orabug: 30244627]  {CVE-2019-10207} 
  - Bluetooth: hci_uart: Support operational speed during setup (Frederic Danis)  [Orabug: 30244627]  {CVE-2019-10207}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.58.1.el7uek]
changelog:
  - sunrpc: move NO_CRKEY_TIMEOUT to the auth->au_flags (Scott Mayhew)  [Orabug: 33443537]  
  - xen/netfront: stop tx queues during live migration (Dongli Zhang)  [Orabug: 33536410]


author: visuman <vijayendra.suman@oracle.com> [4.1.12-124.58.2.el7uek]
changelog:
  - ovl: prevent private clone if bind mount is not allowed (Miklos Szeredi)  [Orabug: 33560431]  {CVE-2021-3732}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.59.1.el7uek]
changelog:
  - ocfs2: fix race between searching chunks and release journal_head from buffer_head (Gautham Ananthakrishna)  [Orabug: 33369488]  
  - net: mac802154: Fix general protection fault (Pavel Skripkin)  [Orabug: 33556911]  {CVE-2021-3659} 
  - uek-rpm: Add __sw_hweight64 to KABI (John Donnelly)  [Orabug: 33557971]  
  - isdn: cpai: check ctr->cnr to avoid array index out of bound (Xiaolong Huang)  [Orabug: 33617286]  {CVE-2021-43389}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.59.1.1.el7uek]
changelog:
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33703630]  {CVE-2021-4155}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.59.1.2.el7uek]
changelog:
  - fix regression in "epoll: Keep a reference on files added to the check list" (Al Viro)  [Orabug: 33679854]  {CVE-2021-1048} 
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679806]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679806]  
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)  [Orabug: 33679806]  {CVE-2021-0920} 
  - net: split out functions related to registering inflight socket files (Jens Axboe)  [Orabug: 33679806]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.60.1.el7uek]
changelog:
  - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong)  [Orabug: 33699627] [Orabug: 33762471]  {CVE-2021-4155} 
  - fix regression in "epoll: Keep a reference on files added to the check list" (Al Viro)  [Orabug: 33679854] [Orabug: 33762505]  {CVE-2021-1048} {CVE-2021-1048} 
  - Bluetooth: fix use-after-free error in lock_sock_nested() (Wang ShaoBo)  [Orabug: 33406421]  {CVE-2021-3752} 
  - vt_kdsetmode: extend console locking (Linus Torvalds)  [Orabug: 33406445]  {CVE-2021-3753} 
  - Bluetooth: SMP: Fail if remote and local public keys are identical (Luiz Augusto von Dentz)  [Orabug: 33556779]  {CVE-2021-0129} 
  - Bluetooth: use constant time memory comparison for secret values (Jason A. Donenfeld)  [Orabug: 33556779]  {CVE-2021-0129} 
  - Bluetooth: Add bt_dev logging macros (Loic Poulain)  [Orabug: 33556779]  {CVE-2021-0129} 
  - ovl: fix missing negative dentry check in ovl_rename() (Zheng Liang)  [Orabug: 33694378]  {CVE-2021-20321}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.61.1.el7uek]
changelog:
  - drm/i915: Flush TLBs before releasing backing store (Tvrtko Ursulin)  [Orabug: 33835812]  {CVE-2022-0330} 
  - drm/i915: Reduce locking in execlist command submission (Chris Wilson)  [Orabug: 33835812]  {CVE-2022-0330} 
  - ipv4: make exception cache less predictible (Eric Dumazet)  [Orabug: 33894531]  {CVE-2021-20322} 
  - route: also update fnhe_genid when updating a route cache (Xin Long)  [Orabug: 33894531]  {CVE-2021-20322} 
  - ipv4: avoid using shared IP generator for connected sockets (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - sctp: add vtag check in sctp_sf_violation (Xin Long)  [Orabug: 33924717]  {CVE-2021-3772} 
  - sctp: use init_tag from inithdr for ABORT chunk (Xin Long)  [Orabug: 33924717]  {CVE-2021-3772} 
  - sr9700: sanity check for packet length (Oliver Neukum)  [Orabug: 33962995]  {CVE-2022-26966}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.1.el7uek]
changelog:
  - Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  [Orabug: 33014054]  {CVE-2021-3573} 
  - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (Nadav Amit)  [Orabug: 33617221]  {CVE-2021-4002} 
  - udf: Restore i_lenAlloc when inode expansion fails (Jan Kara)  [Orabug: 33870269]  {CVE-2022-0617} 
  - udf: Fix NULL ptr deref when converting from inline format (Jan Kara)  [Orabug: 33870269]  {CVE-2022-0617} 
  - phonet: refcount leak in pep_sock_accep (Hangyu Hua)  [Orabug: 33962762]  {CVE-2021-45095} 
  - btrfs: unlock newly allocated extent buffer after error (Qu Wenruo)  [Orabug: 33997139]  {CVE-2021-4149} 
  - quota: correct error number in free_dqentry() (Zhang Yi)  [Orabug: 33997256]  {CVE-2021-45868} 
  - quota: check block number when reading the block in quota file (Zhang Yi)  [Orabug: 33997256]  {CVE-2021-45868} 
  - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses (Eric Dumazet)  [Orabug: 34006847]  {CVE-2021-4203}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.2.el7uek]
changelog:
  - netfilter: nf_tables: initialize registers in nft_do_chain() (Pablo Neira Ayuso)  [Orabug: 34012926]  {CVE-2022-1016} 
  - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() (Nikola Livic)  [Orabug: 34020970]  {CVE-2021-4157}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.62.3.el7uek]
changelog:
  - fget: check that the fd still exists after getting a ref to it (Linus Torvalds)  [Orabug: 33679806]  {CVE-2021-0920} 
  - fs: add fget_many() and fput_many() (Jens Axboe)  [Orabug: 33679806]  
  - af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi)  [Orabug: 33679806]  {CVE-2021-0920} 
  - net: split out functions related to registering inflight socket files (Jens Axboe)  [Orabug: 33679806]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.1.el7uek]
changelog:
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Haimin Zhang)  [Orabug: 34135346]  {CVE-2022-1353} 
  - memstick: rtsx_usb_ms: fix UAF (Tong Zhang)  [Orabug: 34132126]  {CVE-2022-0487}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.2.el7uek]
changelog:
  - debug: Lock down kgdb (Stephen Brennan)  [Orabug: 34152701]  {CVE-2022-21499} 
  - xfs: prevent dropping ioend completions during buftarg wait (Brian Foster)  [Orabug: 34191201]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.63.3.el7uek]
changelog:
  - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 34202040]  
  - uek-rpm: Update OL7 Secureboot certificate and shim versions (Jack Vogel)  [Orabug: 34265467]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.64.1.el7uek]
changelog:
  - iscsi-target: Fix the issue with shutdown_session removal (Gulam Mohamed)  [Orabug: 29661566]  
  - scsi: target: fix hang when multiple threads try to destroy the same iscsi session (Gulam Mohamed)  [Orabug: 29661566]  
  - scsi: target: remove boilerplate code (Gulam Mohamed)  [Orabug: 29661566]  
  - iscsi-target: remove usage of ->shutdown_session (Gulam Mohamed)  [Orabug: 29661566]  
  - Drop the left-over iscsi-target hack (Gulam Mohamed)  [Orabug: 29661566]  
  - can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  [Orabug: 34048290]  {CVE-2022-28388} 
  - can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path (Hangyu Hua)  [Orabug: 34048329]  {CVE-2022-28390} 
  - floppy: use a statically allocated error counter (Willy Tarreau)  [Orabug: 34218641]  {CVE-2022-1652}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.65.1.el7uek]
changelog:
  - cgroup-v1: Require capabilities to set release_agent (Eric W. Biederman)  [Orabug: 33825689]  {CVE-2022-0492} 
  - ocfs2: kill EBUSY from dlmfs_evict_inode (Junxiao Bi)  [Orabug: 34091904]  
  - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock (Junxiao Bi via Ocfs2-devel)  [Orabug: 34091904]  
  - ocfs2: dlmfs: don't clear USER_LOCK_ATTACHED when destroying lock (Junxiao Bi)  [Orabug: 34091904]  
  - uek: kabi: new kABI symbols by USM and fix kABI files (Saeed Mirzamohammadi)  [Orabug: 34233929]  
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso)  [Orabug: 34247343]  {CVE-2022-32250} 
  - netfilter: nf_tables: fix memory leak if expr init fails (Liping Zhang)  [Orabug: 34247343]  
  - floppy: disable FDRAWCMD by default (Willy Tarreau)  [Orabug: 34308428]  {CVE-2022-33981}


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.65.1.1.el7uek]
changelog:
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460939]  {CVE-2022-2588}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.65.1.2.el7uek]
changelog:
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed)  [Orabug: 33349684]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.1.el7uek]
changelog:
  - net: fix uninit-value in __hw_addr_add_ex() (Eric Dumazet)  [Orabug: 34395887]  
  - mac80211: silence an uninitialized variable warning (Dan Carpenter)  [Orabug: 34396283]


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.2.el7uek]
changelog:
  - mm: enforce min addr even if capable() in expand_downwards() (Jann Horn)  [Orabug: 29501997]  {CVE-2019-9213} 
  - ACPICA: Reference Counts: increase max to 0x4000 for large servers (Erik Schmauss)   
  - ipv4: tcp: send zero IPID in SYNACK messages (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ipv4: Cache net in ip_build_and_send_pkt and ip_queue_xmit (Eric W. Biederman)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ipv4: igmp: guard against silly MTU values (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - inet: constify ip_dont_fragment() arguments (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - ip: constify ip_build_and_send_pkt() socket argument (Eric Dumazet)  [Orabug: 33917058]  {CVE-2020-36516} 
  - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Eric Biggers)  [Orabug: 34433461]  {CVE-2020-36557} 
  - vt: vt_ioctl: fix race in VT_RESIZEX (Eric Dumazet)  [Orabug: 34433476]  {CVE-2020-36558} 
  - VT_RESIZEX: get rid of field-by-field copyin (Al Viro)  [Orabug: 34433476]  
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34460939] [Orabug: 34484730]  {CVE-2022-2588}


author: aloktiw <alok.a.tiwari@oracle.com> [4.1.12-124.66.3.el7uek]
changelog:
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi)  [Orabug: 33981149]  {CVE-2022-1011} 
  - vt: drop old FONT ioctls (Jiri Slaby)  [Orabug: 34408794]  {CVE-2021-33656} 
  - video: of_display_timing.h: include errno.h (Hsin-Yi Wang)  [Orabug: 34408910]  {CVE-2021-33655} 
  - fbcon: Disallow setting font bigger than screen size (Helge Deller)  [Orabug: 34408910]  {CVE-2021-33655} 
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419974]  {CVE-2022-21546} 
  - scsi/eh: fix hang adding ehandler wakeups after decrementing host_busy (Gulam Mohamed)  [Orabug: 33349684] [Orabug: 34492498]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.67.1.el7uek]
changelog:
  - KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers)  [Orabug: 27902747]  {CVE-2017-7472} 
  - KEYS: prevent creating a different user's keyrings (Eric Biggers)  [Orabug: 29013653]  {CVE-2017-18270} 
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)  [Orabug: 31350699]  {CVE-2020-12770} 
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)  [Orabug: 34503626]  {CVE-2022-36879} 
  - ext4: verify dir block before splitting it (Jan Kara)  [Orabug: 34555416]  {CVE-2022-1184} 
  - dm verity: set DM_TARGET_IMMUTABLE feature flag (Sarthak Kukreti)  [Orabug: 34555434]  {CVE-2022-2503}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.67.2.el7uek]
changelog:
  - media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus)  [Orabug: 32759975]  {CVE-2021-30002} 
  - usbnet: silence an unnecessary warning (Oliver Neukum)  [Orabug: 23589045]  
  - futex: Remove requirement for lock_page() in get_futex_key() (Mel Gorman)  [Orabug: 29048998]  {CVE-2018-9422} 
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (Zekun Shen)  [Orabug: 33784271]  {CVE-2021-43976} 
  - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566754]  {CVE-2022-3028} 
  - ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam)  [Orabug: 34579226]  {CVE-2022-0850} 
  - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn)  [Orabug: 34594265]  {CVE-2022-2964} 
  - net: usb: ax88179_178a: initialize local variables before use (Phillip Potter)  [Orabug: 34594265]  
  - net: usb: ax88179_178a: fix packet alignment padding (Jeremy Kerr)  [Orabug: 34594265]  
  - ax88179_178a: Check for supported Wake-on-LAN modes (Florian Fainelli)  [Orabug: 34594265]  
  - Net Driver: Add Cypress GX3 VID=04b4 PID=3610. (Allan Chou)  [Orabug: 34594265]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.67.3.el7uek]
changelog:
  - media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav)  [Orabug: 31225377]  {CVE-2017-16537} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914703]  {CVE-2020-14390} 
  - inet: use bigger hash table for IP ID generation (Eric Dumazet)  [Orabug: 33778986]  {CVE-2021-45486} 
  - ipv4: speedup ip_idents_reserve() (Eric Dumazet)  [Orabug: 33778986]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.68.1.el7uek]
changelog:
  - fs: Avoid premature clearing of capabilities (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - fs: Give dentry to inode_change_ok() instead of inode (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - nfsd: Disable NFSv2 timestamp workaround for NFSv3+ (Andreas Gruenbacher)  [Orabug: 20429825]  {CVE-2015-1350} 
  - fuse: Propagate dentry down to inode_change_ok() (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - xfs: Propagate dentry down to inode_change_ok() (Jan Kara)  [Orabug: 20429825]  {CVE-2015-1350} 
  - media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Daniel Mentz)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: Copy v4l2_window->global_alpha (Daniel Mentz)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: avoid sizeof(type) (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: fix the indentation (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Hans Verkuil)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: Fix timespec conversion (Daniel Mentz)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: fix missing reserved field copy in put_v4l2_create32 (Tiffany Lin)  [Orabug: 28036613]  {CVE-2017-13166} 
  - media: v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32 (Tiffany Lin)  [Orabug: 28036613]  {CVE-2017-13166} 
  - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350517]  {CVE-2020-12654} 
  - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter)  [Orabug: 33488041]  {CVE-2021-42739}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.68.2.el7uek]
changelog:
  - ptp: fix the race between the release of ptp_clock and cdev (Vladis Dronov)  [Orabug: 31350707]  {CVE-2020-10690} 
  - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register (YueHaibing)  [Orabug: 31350707]  
  - chardev: add helper function to register char devs with a struct device (Logan Gunthorpe)  [Orabug: 31350707]  
  - ptp: create "pins" together with the rest of attributes (Dmitry Torokhov)  [Orabug: 31350707]  
  - ptp: use is_visible method to hide unused attributes (Dmitry Torokhov)  [Orabug: 31350707]  
  - ptp: do not explicitly set drvdata in ptp_clock_register() (Dmitry Torokhov)  [Orabug: 31350707]  
  - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin)  [Orabug: 31350923]  {CVE-2020-12655} 
  - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal)  [Orabug: 34475433]  {CVE-2022-36946} 
  - media: em28xx: initialize refcount before kref_get (Dongliang Mu)  [Orabug: 34619522]  {CVE-2022-3239}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.68.3.1.el7uek]
changelog:
  - fs/attr.c: handling case when inode does not attach with dentry structure (Alok Tiwari)  [Orabug: 34733462] [Orabug: 34798221]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.69.1.el7uek]
changelog:
  - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie)  [Orabug: 33014078]  {CVE-2021-20292} 
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)  [Orabug: 34555474]  {CVE-2022-2663} 
  - openvswitch: fix OOB access in reserve_sfa_size() (Paolo Valerio)  [Orabug: 34607642]  {CVE-2022-2639} 
  - openvswitch: fix flow actions reallocation (Andrea Righi)  [Orabug: 34607642]  
  - openvswitch: fix the incorrect flow action alloc size (zhangliping)  [Orabug: 34607642]  
  - cgroup: Prevent kill_css() from being called more than once (Waiman Long)  [Orabug: 34679307]  
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)  [Orabug: 34719783]  {CVE-2022-3565} 
  - vsock: Fix memory leak in vsock_connect() (Peilin Ye)  [Orabug: 34731194]  {CVE-2022-3629} 
  - vsock: split dwork to avoid reinitializations (Cong Wang)  [Orabug: 34731194]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.69.2.el7uek]
changelog:
  - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265340]  {CVE-2019-19377} 
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)  [Orabug: 34670757]  {CVE-2022-40768} 
  - net/packet: fix slab-out-of-bounds access in packet_recvmsg() (Eric Dumazet)  [Orabug: 34791643]  {CVE-2022-20368} 
  - packet: in recvmsg msg_name return at least sizeof sockaddr_ll (Willem de Bruijn)  [Orabug: 34791643]  
  - fs/attr.c: handling case when inode does not attach with dentry structure (Alok Tiwari)  [Orabug: 34733462] [Orabug: 34798221] [Orabug: 34816013]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [4.1.12-124.69.5.el7uek]
changelog:
  - x86/smpboot: check cpu_initialized_mask first after returning from schedule() (Dongli Zhang)  [Orabug: 34798594]


author: Jack Vogel <jack.vogel@oracle.com> [4.1.12-124.69.5.1.el7uek]
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34883048]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34883048]  {CVE-2022-4378}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.70.1.el7uek]
changelog:
  - usb: mon: make mmapped memory read only (Tadeusz Struk)  [Orabug: 34820828]  {CVE-2022-43750} 
  - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)  [Orabug: 34731314]  {CVE-2022-3586} 
  - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)  [Orabug: 34731314]  {CVE-2022-3586} 
  - sch_sfb: keep backlog updated with qlen (WANG Cong)  [Orabug: 34731314]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.70.2.el7uek]
changelog:
  - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds)  [Orabug: 34882781]  {CVE-2022-4378} 
  - proc: avoid integer type confusion in get_proc_long (Linus Torvalds)  [Orabug: 34882781]  {CVE-2022-4378} 
  - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)  [Orabug: 34872056]  {CVE-2022-2663} 
  - r8152: Rate limit overflow messages (Andrew Gaul)  [Orabug: 34719940]  {CVE-2022-3594} 
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)  [Orabug: 34670789]  {CVE-2022-41850}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.1.el7uek]
changelog:
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz)  [Orabug: 34951662]  {CVE-2022-42895} {CVE-2022-42895} 
  - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song)  [Orabug: 34951546]  {CVE-2022-3628} 
  - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima)  [Orabug: 34719347]  {CVE-2022-3524}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.2.el7uek]
changelog:
  - scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran)  [Orabug: 34970763]  
  - check-kabi provides exception on broken symbols (Alok Tiwari)  [Orabug: 34742865]  
  - KABI validation broken on UEK4 for symbols change (Alok Tiwari)  [Orabug: 34742865]  
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy)  [Orabug: 34719829]  {CVE-2022-3564} 
  - Bluetooth: remove unneeded variable in l2cap_stream_rx (Prasanna Karthik)  [Orabug: 34719829]  {CVE-2022-3564}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.3.el7uek]
changelog:
  - USB: core: Prevent nested device-reset calls (Alan Stern)  [Orabug: 34951641]  {CVE-2022-4662} 
  - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz)  [Orabug: 34833307]  {CVE-2022-42896} {CVE-2022-42896} 
  - Bluetooth: L2CAP: Introduce proper defines for PSM ranges (Johan Hedberg)  [Orabug: 34833307]  
  - ext4: fix data corruption caused by overlapping unaligned and aligned IO (Lukas Czerner)  [Orabug: 34190035]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.71.3.1.el7uek]
changelog:
  - target: Invoke transport_lun_remove_cmd() to remove  tmr form the list (Gulam Mohamed)  [Orabug: 34812128]  
  - scsi: target: core: Remove from tmr_list during LUN  unlink (Gulam Mohamed)  [Orabug: 34812128]  
  - target: Inline transport_cmd_check_stop() (Gulam Mohamed)  [Orabug: 34812128]  
  - target: Stop execution if CMD_T_STOP has been set (Gulam Mohamed)  [Orabug: 34812128]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.72.1.el7uek]
changelog:
  - target: Invoke transport_lun_remove_cmd() to remove tmr form the list (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - scsi: target: core: Remove from tmr_list during LUN unlink (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - target: Inline transport_cmd_check_stop() (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - target: Stop execution if CMD_T_STOP has been set (Gulam Mohamed)  [Orabug: 34812128] [Orabug: 35062711]  
  - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou)  [Orabug: 35005738]  {CVE-2022-41858} 
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma)  [Orabug: 34555529]  {CVE-2022-2873}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.72.2.el7uek]
changelog:
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim)  [Orabug: 34983616]  {CVE-2023-23455} 
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim)  [Orabug: 34880763]  {CVE-2022-45934}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.73.1.el7uek]
changelog:
  - mm/mincore.c: make mincore() more conservative (Jiri Kosina)  [Orabug: 35133279]  {CVE-2019-5489} 
  - mm: introduce vma_is_anonymous(vma) helper (Oleg Nesterov)  [Orabug: 35133279]  
  - Revert "Change mincore() to count "mapped" pages rather than "cached" pages" (Linus Torvalds)  [Orabug: 35124616]  
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu)  [Orabug: 35005831]  {CVE-2023-0394}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.73.2.el7uek]
changelog:
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)  [Orabug: 35181628]  {CVE-2023-1095} 
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)  [Orabug: 35181461]  {CVE-2023-1074} 
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello)  [Orabug: 35181168]  {CVE-2023-1073} 
  - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (Will Deacon)  [Orabug: 35180270]  {CVE-2020-0404}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.74.1.el7uek]
changelog:
  - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou)  [Orabug: 35217595]  {CVE-2023-28772} 
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)  [Orabug: 35181964]  {CVE-2023-26545}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.74.2.el7uek]
changelog:
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)  [Orabug: 35250098]  {CVE-2023-1513} 
  - staging: rtl8712: fix use after free bugs (Dan Carpenter)  [Orabug: 35212876]  {CVE-2022-4095} 
  - staging: rtl8712: rtl8712_cmd.c: fixed comparison to null (Juliana Rodrigues)  [Orabug: 35212876]  {CVE-2022-4095} 
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich)  [Orabug: 35037715]  {CVE-2023-23559}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.1.el7uek]
changelog:
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)  [Orabug: 35312830]  {CVE-2023-28328} 
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)  [Orabug: 35312683]  {CVE-2023-2162} 
  - nvme: restrict management ioctls to admin (Keith Busch)  [Orabug: 34619368]  {CVE-2022-3169}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.2.el7uek]
changelog:
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)  [Orabug: 35354303]  {CVE-2023-0458} 
  - kernel/sys.c: fix potential Spectre v1 issue (Gustavo A. R. Silva)  [Orabug: 35354303]  
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)  [Orabug: 35250898]  {CVE-2023-1670} 
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim)  [Orabug: 34983586]  {CVE-2023-23454}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.75.3.el7uek]
changelog:
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)  [Orabug: 35354791]  {CVE-2023-2248}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.76.1.el7uek]
changelog:
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)  [Orabug: 35457204]  {CVE-2023-34256} 
  - igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian)  [Orabug: 35448048]  {CVE-2022-20141}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.76.2.el7uek]
changelog:
  - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye)  [Orabug: 35493606]  {CVE-2023-3159} 
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)  [Orabug: 35448003]  {CVE-2022-1679} 
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)  [Orabug: 35354880]  {CVE-2023-2269} 
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou)  [Orabug: 35181652]  {CVE-2023-1118} 
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)  [Orabug: 35180779]  {CVE-2022-3424}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.77.1.el7uek]
changelog:
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)  [Orabug: 35550146]  {CVE-2023-3090} 
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)  [Orabug: 35514146]  {CVE-2023-3141} 
  - fbcon: Check font dimension limits (Samuel Thibault)  [Orabug: 35493679]  {CVE-2023-3161} 
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)  [Orabug: 35250538]  {CVE-2023-1380}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.77.2.el7uek]
changelog:
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)  [Orabug: 35514108]  {CVE-2023-35824} 
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)  [Orabug: 35477742]  {CVE-2023-31084} 
  - media: dvb_frontend: fix locking issues at dvb_frontend_get_event() (Mauro Carvalho Chehab)  [Orabug: 35477742]  {CVE-2023-31084} 
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai)  [Orabug: 34820632]  {CVE-2022-41218} 
  - media: dvb: dmx: fixed coding style issues of spacing (devendra sharma)  [Orabug: 34820632]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.1.el7uek]
changelog:
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy)  [Orabug: 35649493]  {CVE-2023-3567}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.2.el7uek]
changelog:
  - xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum)  [Orabug: 35598955]  {CVE-2023-3106} 
  - netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha)  [Orabug: 34012909]  {CVE-2022-1015}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.78.4.el7uek]
changelog:
  - netfilter: nf_tables: verify registers coming from userspace (Harshvardhan Jha)  [Orabug: 35776867]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.1.12-124.78.4.1.el7uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35741584]  {CVE-2023-22024}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.79.1.el7uek]
changelog:
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)  [Orabug: 35754509]  {CVE-2023-3772} 
  - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu)  [Orabug: 35732892]  {CVE-2023-4459} 
  - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu)  [Orabug: 35732764]  {CVE-2023-4387} 
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)  [Orabug: 35636313]  {CVE-2023-3776} 
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)  [Orabug: 35609787]  {CVE-2023-35001} 
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)  [Orabug: 35382025]  {CVE-2023-2513} 
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)  [Orabug: 35382025]  {CVE-2023-2513} 
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso)  [Orabug: 34362008]  {CVE-2022-34918}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.79.2.el7uek]
changelog:
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35814273]  {CVE-2023-4206} 
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)  [Orabug: 35636291]  {CVE-2023-3611} 
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35741584] [Orabug: 35818110]  {CVE-2023-22024}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.80.1.el7uek]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)  [Orabug: 35814478]  {CVE-2023-40283} 
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35814297]  {CVE-2023-4208} 
  - RDMA/core: net: fix kernel NULL error (Zhu Yanjun)  [Orabug: 35723252]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.81.1.el7uek]
changelog:
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35923500]  {CVE-2023-39193} 
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)  [Orabug: 35924058]  {CVE-2023-45862} 
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35923470]  {CVE-2023-39192} 
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)  [Orabug: 35707466]  {CVE-2023-4207}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.82.1.el7uek]
changelog:
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)  [Orabug: 35924002]  {CVE-2023-42752} 
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis)  [Orabug: 35814457]  {CVE-2023-4921} 
  - ixgbe: fix large MTU request from VF (Samasth Norway Ananda)  [Orabug: 33752821]  {CVE-2021-33098}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.82.2.el7uek]
changelog:
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)  [Orabug: 35959598]  {CVE-2020-26555} 
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello)  [Orabug: 35181560]  {CVE-2023-1077} 
  - sched/debug: Fix SCHED_WARN_ON() to return a value on !CONFIG_SCHED_DEBUG as well (Ingo Molnar)  [Orabug: 35181560]  
  - sched/debug: Add SCHED_WARN_ON() (Peter Zijlstra)  [Orabug: 35181560]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.83.1.el7uek]
changelog:
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)  [Orabug: 36229451]  {CVE-2024-0775} 
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)  [Orabug: 36229396]  {CVE-2023-51780} 
  - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails (Thadeu Lima de Souza Cascardo)  [Orabug: 36229182]  {CVE-2021-34981}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.83.2.el7uek]
changelog:
  - Input: add bounds checking to input_set_capability() (Jeff LaBundy)  [Orabug: 36192120]  {CVE-2022-48619} 
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)  [Orabug: 36155598]  {CVE-2023-7192}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.84.1.el7uek]
changelog:
  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334311]  
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)  [Orabug: 35924076]  {CVE-2023-45863} 
  - kobject: Replace strncpy with memcpy (Guenter Roeck)  [Orabug: 35924076]  
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)  [Orabug: 35923517]  {CVE-2023-39194} 
  - net/xfrm: use kmemdup rather than duplicating its implementation (Andrzej Hajda)  [Orabug: 35923517]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.84.2.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251327]  {CVE-2024-1086}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.85.1.el7uek]
changelog:
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)  [Orabug: 35282809]  {CVE-2023-1989}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.86.1.el7uek]
changelog:
  - ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36574734]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524980]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.87.1.el7uek]
changelog:
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)  [Orabug: 36654101]  {CVE-2023-6932} 
  - net: convert ip_mc_list.refcnt from atomic_t to refcount_t (Reshetova, Elena)  [Orabug: 36654101]  
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic)  [Orabug: 35810544]  {CVE-2023-4623} 
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)  [Orabug: 35754477]  {CVE-2023-1206}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.87.2.el7uek]
changelog:
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)  [Orabug: 35250827]  {CVE-2023-0590}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.88.1.el7uek]
changelog:
  - NFS: LOOKUP_DIRECTORY is also ok with symlinks (Trond Myklebust)  [Orabug: 33958156]  {CVE-2022-24448} 
  - NFSv4: Handle case where the lookup of a directory fails (Trond Myklebust)  [Orabug: 33958156]  {CVE-2022-24448}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.88.2.el7uek]
changelog:
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)  [Orabug: 36802310]  {CVE-2023-52528} 
  - usbnet/smsc75xx: silence uninitialized variable warning (Dan Carpenter)   {CVE-2023-52528} 
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo)  [Orabug: 36685663]  {CVE-2023-52880} 
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)  [Orabug: 36530112]  {CVE-2024-26642} 
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger)  [Orabug: 36356637]  {CVE-2024-25739}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.88.3.el7uek]
changelog:
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)  [Orabug: 36806710]  {CVE-2023-52813} 
  - usbnet: sanity check for maxpacket (Oliver Neukum)  [Orabug: 36806658]  {CVE-2021-47495} 
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)  [Orabug: 36683487]  {CVE-2024-36946} 
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)  [Orabug: 36683466]  {CVE-2024-36941} 
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh)  [Orabug: 36683433]  {CVE-2024-36934} 
  - bna: use memdup_user to copy userspace buffers (Ivan Vecera)  [Orabug: 36683433]  {CVE-2024-36934} 
  - new helper: memdup_user_nul() (Al Viro)  [Orabug: 36683433]  {CVE-2024-36934} 
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)  [Orabug: 36598047]  {CVE-2024-27020} 
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso)  [Orabug: 36598047]  {CVE-2024-27020} 
  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879159]  {CVE-2024-41090} {CVE-2024-41091}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.1.el7uek]
changelog:
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)  [Orabug: 36806731]  {CVE-2023-52881} 
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson)  [Orabug: 36806698]  {CVE-2023-52703} 
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)  [Orabug: 36806668]  {CVE-2023-52615} 
  - mISDN: fix possible use-after-free in HFC_cleanup() (Zou Wei)  [Orabug: 36806645]  {CVE-2021-47356} 
  - net: ti: fix UAF in tlan_remove_one (Pavel Skripkin)  [Orabug: 36806628]  {CVE-2021-47310} 
  - net: cdc_eem: fix tx fixup skb leak (Linyu Yuan)  [Orabug: 36806622]  {CVE-2021-47236} 
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)  [Orabug: 36802300]  {CVE-2023-52477} 
  - USB: add quirk for devices with broken LPM (Alan Stern)  [Orabug: 36802300]  {CVE-2023-52477} 
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)  [Orabug: 36544991]  {CVE-2024-26903} 
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)  [Orabug: 36531042]  {CVE-2024-26801} 
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)  [Orabug: 36530881]  {CVE-2024-26772} 
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)  [Orabug: 36530348]  {CVE-2024-26679} 
  - ppp_async: limit MRU to 64K (Eric Dumazet)  [Orabug: 36530335]  {CVE-2024-26675}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.2.el7uek]
changelog:
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)  [Orabug: 36901390]  {CVE-2023-52809} 
  - net: usb: fix memory leak in smsc75xx_bind (Pavel Skripkin)  [Orabug: 36802200]  {CVE-2021-47171} 
  - i2c: i801: Don't generate an interrupt on bus reset (Jean Delvare)  [Orabug: 36792714]  {CVE-2021-47153} 
  - pid: take a reference when initializing `cad_pid` (Mark Rutland)  [Orabug: 36792687]  {CVE-2021-47118} 
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)  [Orabug: 36691531]  {CVE-2024-36960} 
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)  [Orabug: 36683507]  {CVE-2024-36950} 
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)  [Orabug: 36683370]  {CVE-2024-36919} 
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)  [Orabug: 36683115]  {CVE-2024-36883} 
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)  [Orabug: 36654625]  {CVE-2023-52620} 
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)  [Orabug: 36654606]  {CVE-2023-52574}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.3.el7uek]
changelog:
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)  [Orabug: 36802321]  {CVE-2023-52594} 
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)  [Orabug: 36643464]  {CVE-2024-35982} 
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)  [Orabug: 36643456]  {CVE-2024-35978} 
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)  [Orabug: 36643323]  {CVE-2024-35944} 
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)  [Orabug: 36643194]  {CVE-2024-35922}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.89.4.el7uek]
changelog:
  - isdn: mISDN: netjet: Fix crash in nj_probe: (Zheyu Ma)  [Orabug: 36940405]  {CVE-2021-47284} 
  - tracing: Restructure trace_clock_global() to never block (Steven Rostedt (VMware))  [Orabug: 36940388]  {CVE-2021-46939} 
  - udf: Fix NULL pointer dereference in udf_symlink function (Arturo Giusti)  [Orabug: 36806640]  {CVE-2021-47353} 
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)  [Orabug: 36802294]  {CVE-2023-52445} 
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)  [Orabug: 36802212]  {CVE-2022-48627} 
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke)  [Orabug: 36678070]  {CVE-2024-36016} 
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal)  [Orabug: 36654631]  {CVE-2023-52628} 
  - dm: call the resume method on internal suspend (Mikulas Patocka)  [Orabug: 36544879]  {CVE-2024-26880} 
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)  [Orabug: 36544783]  {CVE-2024-26859} 
  - x86, relocs: Ignore relocations in .notes section (Kees Cook)  [Orabug: 36531115]  {CVE-2024-26816} 
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)  [Orabug: 36531057]  {CVE-2024-26805} 
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang)  [Orabug: 36530913]  {CVE-2024-26778} 
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)  [Orabug: 36530519]  {CVE-2024-26704} 
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni)  [Orabug: 36530183]  {CVE-2024-26651} 
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)  [Orabug: 36530047]  {CVE-2024-26635} 
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter)  [Orabug: 36192155]  {CVE-2023-6040}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.90.1.el7uek]
changelog:
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)  [Orabug: 36643519]  {CVE-2024-36004} 
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie)  [Orabug: 36643340]  {CVE-2024-35947} 
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba)  [Orabug: 36643269]  {CVE-2024-35935} 
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima)  [Orabug: 36643095]  {CVE-2024-35886} 
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand)  [Orabug: 36643059]  {CVE-2024-35877}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.90.2.el7uek]
changelog:
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee)  [Orabug: 36643241]  {CVE-2024-35930} 
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran)  [Orabug: 36596617]  {CVE-2024-26931} 
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 33917166]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.90.3.el7uek]
changelog:
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)  [Orabug: 37055439]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.91.1.el7uek]
changelog:
  - vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel)  [Orabug: 37101899]  {CVE-2022-48804} 
  - tty: vt_ioctl: fix potential Spectre v1 (Gustavo A. R. Silva)  [Orabug: 37101899]  {CVE-2022-48804} 
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern)  [Orabug: 37101883]  {CVE-2022-48760} 
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)  [Orabug: 36165420]  {CVE-2023-6606}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.91.3.el7uek]
changelog:
  - nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro)  [Orabug: 37006239]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.92.1.el7uek]
changelog:
  - Input: MT - limit max slots (Tetsuo Handa)  [Orabug: 37029139]  {CVE-2024-45008} 
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke)  [Orabug: 36897642]  {CVE-2024-42101} 
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel)  [Orabug: 36835737]  {CVE-2024-40912} 
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern)  [Orabug: 36835711]  {CVE-2024-40904} 
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun)  [Orabug: 36825250]  {CVE-2024-39487} 
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev)  [Orabug: 36753653]  {CVE-2024-38599} 
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh)  [Orabug: 36753475]  {CVE-2024-38560} 
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)  [Orabug: 36642150]  {CVE-2024-27436} 
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)  [Orabug: 36598221]  {CVE-2024-27059} 
  - fat: fix uninitialized field in nostale filehandles (Jan Kara)  [Orabug: 36597870]  {CVE-2024-26973} 
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)  [Orabug: 36544941]  {CVE-2024-26894}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.92.2.el7uek]
changelog:
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)  [Orabug: 36984058]  {CVE-2024-39475} 
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme)  [Orabug: 36897888]  {CVE-2024-42148} 
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan)  [Orabug: 36835584]  {CVE-2024-39499} 
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)  [Orabug: 36544953]  {CVE-2024-26898}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [4.1.12-124.92.3.el7uek]
changelog:
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro)  [Orabug: 37070674]  {CVE-2024-45021} 
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue)  [Orabug: 36835819]  {CVE-2024-40943}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-25.el7uek]
changelog:
  - NFSoRDMA: for local permissions, pull lkey value from the correct ib_mr (Todd Vierling)  [Orabug: 22202841]  
  - Revert "nfs: take extra reference to fl->fl_file when running a LOCKU operation" (Dan Duval)  [Orabug: 22186705]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-26.el7uek]
changelog:
  - dtrace: ensure return value of access_process_vm() is > 0 (Todd Vierling)  [Orabug: 22295336]  
  - ocfs2: fix umask ignored issue (Junxiao Bi)   
  - ksplice: correctly clear garbage on signal handling. (Jamie Iles)  [Orabug: 22194459]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-28.el7uek]
changelog:
  - ixgbe: make a workaround to tx hang issue under dom (Ethan Zhao)  [Orabug: 22171500]  
  - mm-hugetlb-resv-map-memory-leak-for-placeholder-entries-v2 (Mike Kravetz)  [Orabug: 22302415]  
  - mm/hugetlb.c: fix resv map memory leak for placeholder entries (Mike Kravetz)  [Orabug: 22302415]  
  - Prevent syncing frozen file system (Tariq Saeed)  [Orabug: 22332381]  
  - ocfs2: fix SGID not inherited issue (Junxiao Bi)   
  - kbuild: Set objects.builtin dependency to bzImage for CONFIG_CTF (Jerry Snitselaar)  [Orabug: 17510915] [Orabug: 22329011]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-29.el7uek]
changelog:
  - uek-rpm: module signing key verification on sparc (Allen Pais)  [Orabug: 21900415]  
  - scsi: Fix a bdi reregistration race (Bart Van Assche)  [Orabug: 22250360]  
  - i40e: Fix for recursive RTNL lock during PROMISC change (Anjali Singhai)  [Orabug: 22328907]  
  - KABI: padding optimization (Manjunath Govindashetty)   
  - uek-rpm: rebuild module kabi list (Guru Anbalagane)   
  - ib_core: Add udata argument to alloc_shpd() (Mukesh Kacker)  [Orabug: 21884873]  
  - Revert "netlink: Fix autobind race condition that leads to zero port ID" (Dan Duval)  [Orabug: 22284865]  
  - Revert "netlink: Replace rhash_portid with bound" (Dan Duval)  [Orabug: 22284865]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-30.el7uek]
changelog:
  - conditionalize Secure Boot initialization on x86 platform (Dan Duval)  [Orabug: 22353360]  
  - x86/efi: Set securelevel when loaded without efi stub (Dan Duval)  [Orabug: 22353360]  
  - KVM: svm: unconditionally intercept #DB (Paolo Bonzini)  [Orabug: 22333633]  {CVE-2015-8104} 
  - KVM: x86: work around infinite loop in microcode when #AC is delivered (Eric Northup)  [Orabug: 22333632]  {CVE-2015-5307} {CVE-2015-5307}


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-32.el7uek]
changelog:
  - KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells)  [Orabug: 22373388]  {CVE-2015-7872} 
  - KEYS: Fix race between key destruction and finding a keyring by name (David Howells)  [Orabug: 22373388]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-32.1.1.el7uek]
changelog:
  - ocfs2: return non-zero st_blocks for inline data (John Haxby)  [Orabug: 22218243]  
  - xen/events/fifo: Consume unprocessed events when a CPU dies (Ross Lagerwall)  [Orabug: 22498877]  
  - Revert "xen/fb: allow xenfb initialization for hvm guests" (Konrad Rzeszutek Wilk)   
  - xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is not set. (Konrad Rzeszutek Wilk)   
  - xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable if device has MSI(X) enabled. (Konrad Rzeszutek Wilk)   
  - xen/pciback: Do not install an IRQ handler for MSI interrupts. (Konrad Rzeszutek Wilk)   
  - xen/pciback: Return error on XEN_PCI_OP_enable_msix when device has MSI or MSI-X enabled (Konrad Rzeszutek Wilk)   
  - xen/pciback: Return error on XEN_PCI_OP_enable_msi when device has MSI or MSI-X enabled (Konrad Rzeszutek Wilk)   
  - xen/pciback: Save xen_pci_op commands before processing it (Konrad Rzeszutek Wilk)   
  - xen-scsiback: safely copy requests (David Vrabel)   
  - xen-blkback: read from indirect descriptors only once (Roger Pau Monné)   
  - xen-blkback: only read request operation from shared ring once (Roger Pau Monné)   
  - xen-netback: use RING_COPY_REQUEST() throughout (David Vrabel)   
  - xen-netback: don't use last request to determine minimum Tx credit (David Vrabel)   
  - xen: Add RING_COPY_REQUEST() (David Vrabel)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-32.1.3.el7uek]
changelog:
  - IPoIB: Protect tx_outstanding from parallel access (Wengang Wang)  [Orabug: 22217400]  
  - xprtrdma: xprt_rdma_free() must not release backchannel reqs (Chuck Lever)  [Orabug: 22365704]  
  - Revert "i40e: Set defport behavior for the Main VSI when in promiscuous mode" (Brian Maly)  [Orabug: 22519254]  
  - block: bump BLK_DEF_MAX_SECTORS to 2560 (Jeff Moyer)  [Orabug: 22611290]  
  - Revert "block: remove artifical max_hw_sectors cap" (Jeff Moyer)  [Orabug: 22611290]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-32.2.2.el7uek]
changelog:
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 22997978]  {CVE-2016-3157}
  - fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (Mike Kravetz)  [Orabug: 22667863]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-23.el7uek]
changelog:
  - mm: do not ignore mapping_gfp_mask in page cache allocation paths (Michal Hocko)  [Orabug: 22066703]  
  - PCI: Set SR-IOV NumVFs to zero after enumeration (Bjorn Helgaas)  [Orabug: 21547430]  
  - virtio-net: drop NETIF_F_FRAGLIST (Jason Wang)  [Orabug: 22154074]  {CVE-2015-5156} 
  - blk-mq: avoid excessive boot delays with large lun counts (Jeff Moyer)  [Orabug: 21879600]  
  - RDS: establish connection for legitimate remote RDMA message (Santosh Shilimkar)  [Orabug: 22139696]  
  - rds: remove the _reuse_ rds ib pool statistics (Wengang Wang)  [Orabug: 22124214]  
  - RDS: Add support for per socket SO_TIMESTAMP for incoming messages (Santosh Shilimkar)  [Orabug: 22190837]  
  - KABI PADDING FOR ORACLE SPECIFIC FUTURE EXTENSIONS (Manjunath Govindashetty)   
  - uek-rpm: configs: Sparc64: enable RDS modules (Allen Pais)  [Orabug: 22194248]  
  -     SPARC64: UEK4 LDOMS DOMAIN SERVICES UPDATE 1 (Aaron Young)  [Orabug: 22185080]  
  - i40e: Look up MAC address in Open Firmware or IDPROM (Sowmini Varadhan)   
  - RDS: Fix out-of-order RDS_CMSG_RDMA_SEND_STATUS (Wei Lin Guay)  [Orabug: 22126982]  
  - uek-rpm: ol7: update linux-firmware dependency to 20140911-0.1.git365e80c.0.4 (Dan Duval)  [Orabug: 22146380]  
  - uek-rpm: configs: disable PS2_VMMOUSE to avoid vmware platform breakage (Santosh Shilimkar)  [Orabug: 22166599]  
  - uek-rpm: configs: ol7: don't set EFI_VARS_PSTORE_DEFAULT_DISABLE (Santosh Shilimkar)  [Orabug: 21806900]  
  - Disable VLAN 0 tagging for none VLAN traffic (Brian Maly)  [Orabug: 22074114]  
  - Integrate Uvnic functionality into uek-4.1 Revision 8008 (Pradeep Gopanapalli)   
  - 1) S_IRWXU causing kernel soft crash changing to 0644 WARNING: CPU: 0 PID: 20907 at fs/sysfs/group.c:61 create_files+0x171/0x180() Oct 12 21:43:14 ovn87-180 kernel: [252606.588541] Attribute vhba_default_scsi_timeout: Invalid permissions 0700 [Rev 8008] (Pradeep Gopanapalli)   
  - 1) Support vnic for EDR based platform(uVnic) 2) Supported Types now Type 0 - XSMP_XCM_OVN - Xsigo VP780/OSDN standalone Chassis, (add pvi) Type 1 - XSMP_XCM_NOUPLINK - EDR Without uplink (add public-network) Type 2 - XSMP_XCM_UPLINK -EDR with uplink (add public-network <with -if> 3) Intelligence in driver to support all the modes 4) Added Code for printing Multicast LID [Revision 8008] 5) removed style errors (Pradeep Gopanapalli)   
  - sparc64, vdso: update the CLOCK_MONOTONIC_COARSE clock (Nick Alcock)  [Orabug: 22137842]  
  - net/rds: start rdma listening after ib/iw initialization is done (Qing Huang)  [Orabug: 21684447]


author: Santosh Shilimkar <santosh.shilimkar@oracle.com> [4.1.12-24.el7uek]
changelog:
  - uek-rpm: builds: Enable kabi check (Manjunath Govindashetty)  [Orabug: 21882206]  
  - uek-rpm: builds: generate module kabi files (Guru Anbalagane)  [Orabug: 17437969]  
  - uek-rpm: builds: add kabi whitelist debug version (Santosh Shilimkar)   
  - uek-rpm: builds: add kabi name tags (Guru Anbalagane)  [Orabug: 17437969]  
  - uek-rpm: builds: Add kabi whitelist (Guru Anbalagane)  [Orabug: 17437969]  
  - mm-hugetlbfs-fix-bugs-in-fallocate-hole-punch-of-areas-with-holes-v3 (Mike Kravetz)  [Orabug: 22220400]  
  - mm/hugetlbfs: fix bugs in fallocate hole punch of areas with holes (Mike Kravetz)  [Orabug: 22220400]  
  - btrfs: Print Warning only if ENOSPC_DEBUG is enabled (Ashish Samant)  [Orabug: 21626666]  
  - rtnetlink: RTEXT_FILTER_SKIP_STATS support to avoid dumping inet/inet6 stats (Sowmini Varadhan)  [Orabug: 21857538]  
  - pci: Limit VPD length for megaraid_sas adapter (Babu Moger)  [Orabug: 22104511]  
  - uek-rpm: configs: change the x86_64 default governor to ondemand (Todd Vierling)  [Orabug: 21910845]  
  - uek-rpm: configs: sync up the EFIVAR_FS between ol6 and ol7 (Santosh Shilimkar)  [Orabug: 21806900]  
  - KABI Padding to allow future extensions (Manjunath Govindashetty)  [Orabug: 22227652]  
  - uek-rpm: use the latest 0.5 version of linux-firmware (Santosh Shilimkar)  [Orabug: 22227047]  
  - dtrace: fire proc:::signal-send for queued signals too (Nick Alcock)  [Orabug: 22027302]  
  - dtrace: correct signal-handle probe semantics (Kris Van Hees)  [Orabug: 21974641]  
  - dtrace: remove trailing space in psargs (Kris Van Hees)  [Orabug: 21974606]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-33.el7uek]
changelog:
  - xen-netback: correctly check failed allocation (Insu Yun)   
  - xen/blkback: free requests on disconnection (Roger Pau Monne)   
  - x86/xen/p2m: hint at the last populated P2M entry (David Vrabel)   
  - x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map (Malcolm Crossley)   
  - x86/xen: Support kexec/kdump in HVM guests by doing a soft reset (Vitaly Kuznetsov)   
  - xen/x86: Don't try to write syscall-related MSRs for PV guests (Boris Ostrovsky)   
  - xen: use correct type for HYPERVISOR_memory_op() (Juergen Gross)   
  - xen/xenbus: Rename the variable xen_store_mfn to xen_store_gfn (Julien Grall)   
  - xen/privcmd: Further s/MFN/GFN/ clean-up (Julien Grall)   
  - hvc/xen: Further s/MFN/GFN clean-up (Julien Grall)   
  - video/xen-fbfront: Further s/MFN/GFN clean-up (Julien Grall)   
  - xen/tmem: Use xen_page_to_gfn rather than pfn_to_gfn (Julien Grall)   
  - xen: Use correctly the Xen memory terminologies (Julien Grall)   
  - arm/xen: implement correctly pfn_to_mfn (Julien Grall)   
  - xen: Make clear that swiotlb and biomerge are dealing with DMA address (Julien Grall)   
  - xen: switch extra memory accounting to use pfns (Juergen Gross)   
  - xen: limit memory to architectural maximum (Juergen Gross)   
  - xen: avoid another early crash of memory limited dom0 (Juergen Gross)   
  - xen: avoid early crash of memory limited dom0 (Juergen Gross)   
  - arm/xen: Remove helpers which are PV specific (Julien Grall)   
  - xen/x86: Don't try to set PCE bit in CR4 (Boris Ostrovsky)   
  - xen/PMU: PMU emulation code (Boris Ostrovsky)   
  - xen/PMU: Intercept PMU-related MSR and APIC accesses (Boris Ostrovsky)   
  - xen/PMU: Describe vendor-specific PMU registers (Boris Ostrovsky)   
  - xen/PMU: Initialization code for Xen PMU (Boris Ostrovsky)   
  - xen/PMU: Sysfs interface for setting Xen PMU mode (Boris Ostrovsky)   
  - xen: xensyms support (Boris Ostrovsky)   
  - xen: remove no longer needed p2m.h (Juergen Gross)   
  - xen: allow more than 512 GB of RAM for 64 bit pv-domains (Juergen Gross)   
  - xen: move p2m list if conflicting with e820 map (Juergen Gross)   
  - xen: add explicit memblock_reserve() calls for special pages (Juergen Gross)   
  - mm: provide early_memremap_ro to establish read-only mapping (Juergen Gross)   
  - xen: check for initrd conflicting with e820 map (Juergen Gross)   
  - xen: check pre-allocated page tables for conflict with memory map (Juergen Gross)   
  - xen: check for kernel memory conflicting with memory layout (Juergen Gross)   
  - xen: find unused contiguous memory area (Juergen Gross)   
  - xen: check memory area against e820 map (Juergen Gross)   
  - xen: split counting of extra memory pages from remapping (Juergen Gross)   
  - xen: move static e820 map to global scope (Juergen Gross)   
  - xen: eliminate scalability issues from initial mapping setup (Juergen Gross)   
  - xen: don't build mfn tree if tools don't need it (Juergen Gross)   
  - xen: save linear p2m list address in shared info structure (Juergen Gross)   
  - xen: sync with xen headers (Juergen Gross)   
  - arm/xen: Drop the definition of xen_pci_platform_unplug (Julien Grall)   
  - xen/events: Support event channel rebind on ARM (Julien Grall)   
  - xen-blkfront: convert to blk-mq APIs (Bob Liu)   
  - xen/preempt: use need_resched() instead of should_resched() (Konstantin Khlebnikov)   
  - x86/xen: fix non-ANSI declaration of xen_has_pv_devices() (Colin Ian King)   
  - KEYS: Fix race between read and revoke (David Howells)  [Orabug: 22623890]  {CVE-2015-7550} 
  - rhashtable: Fix walker list corruption (Herbert Xu)  [Orabug: 22623889]  
  - tcp: restore fastopen with no data in SYN packet (Eric Dumazet)  [Orabug: 22623888]  
  - fou: clean up socket with kfree_rcu (Hannes Frederic Sowa)  [Orabug: 22623887]  
  - rhashtable: Enforce minimum size on initial hash table (Herbert Xu)  [Orabug: 22623886]  
  - net: fix uninitialized variable issue (tadeusz.struk@intel.com)  [Orabug: 22623885]  
  - bluetooth: Validate socket address length in sco_sock_bind(). (David S. Miller)  [Orabug: 22641775]  
  - net: check both type and procotol for tcp sockets (WANG Cong)  [Orabug: 22623884]  
  - skbuff: Fix offset error in skb_reorder_vlan_header (Vlad Yasevich)  [Orabug: 22623883]  
  - pptp: verify sockaddr_len in pptp_bind() and pptp_connect() (WANG Cong)  [Orabug: 22641753]  
  - net: fix IP early demux races (Eric Dumazet)  [Orabug: 22623882]  
  - sh_eth: fix kernel oops in skb_put() (Sergei Shtylyov)  [Orabug: 22623881]  
  - net: add validation for the socket syscall protocol argument (Hannes Frederic Sowa)  [Orabug: 22623880]  {CVE-2015-8543} 
  - ipv6: sctp: clone options to avoid use after free (Eric Dumazet)  [Orabug: 22623879]  
  - vxlan: fix incorrect RCO bit in VXLAN header (Jiri Benc)  [Orabug: 22623878]  
  - ipv6: keep existing flags when setting IFA_F_OPTIMISTIC (Bjørn Mork)  [Orabug: 22623877]  
  - pppoe: fix memory corruption in padt work structure (Guillaume Nault)  [Orabug: 22623876]  
  - usb: core : hub: Fix BOS 'NULL pointer' kernel panic (Hans Yang)  [Orabug: 22623875]  
  - nfs4: start callback_ident at idr 1 (Benjamin Coddington)  [Orabug: 22623874]  
  - nfsd: eliminate sending duplicate and repeated delegations (Andrew Elble)  [Orabug: 22623873]  
  - nfsd: serialize state seqid morphing operations (Jeff Layton)  [Orabug: 22623872]  
  - ext4, jbd2: ensure entering into panic after recording an error in superblock (Daeho Jeong)  [Orabug: 22623871]  
  - ext4: fix potential use after free in __ext4_journal_stop (Lukas Czerner)  [Orabug: 22623870]  
  - ext4 crypto: fix memory leak in ext4_bio_write_page() (Theodore Ts'o)  [Orabug: 22623868]  
  - rbd: don't put snap_context twice in rbd_queue_workfn() (Ilya Dryomov)  [Orabug: 22623867]  
  - Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow (Filipe Manana)  [Orabug: 22623866]  
  - Btrfs: fix race leading to incorrect item deletion when dropping extents (Filipe Manana)  [Orabug: 22623865]  
  - Btrfs: fix truncation of compressed and inlined extents (Filipe Manana)  [Orabug: 22623864]  
  - Btrfs: fix file corruption and data loss after cloning inline extents (Filipe Manana)  [Orabug: 22623863]  
  - net_sched: fix qdisc_tree_decrease_qlen() races (Eric Dumazet)  [Orabug: 22623862]  
  - ipv6: sctp: implement sctp_v6_destroy_sock() (Eric Dumazet)  [Orabug: 22623861]  
  - net/neighbour: fix crash at dumping device-agnostic proxy entries (Konstantin Khlebnikov)  [Orabug: 22623860]  
  - ipv6: add complete rcu protection around np->opt (Eric Dumazet)  [Orabug: 22623859]  
  - bpf, array: fix heap out-of-bounds access when updating elements (Daniel Borkmann)  [Orabug: 22641739]  
  - net: ip6mr: fix static mfc/dev leaks on table destruction (Nikolay Aleksandrov)  [Orabug: 22641732]  
  - net: ipmr: fix static mfc/dev leaks on table destruction (Nikolay Aleksandrov)  [Orabug: 22641722]  
  - net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds (Daniel Borkmann)  [Orabug: 22641707]  
  - tcp: fix potential huge kmalloc() calls in TCP_REPAIR (Eric Dumazet)  [Orabug: 22623857]  
  - ip_tunnel: disable preemption when updating per-cpu tstats (Jason A. Donenfeld)  [Orabug: 22623856]  
  - unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat)  [Orabug: 22623855]  
  - netlink: Add missing goto statement to netlink_insert (Herbert Xu)  [Orabug: 22623854]  
  - tty: Fix tty_send_xchar() lock order inversion (Peter Hurley)  [Orabug: 22623853]  
  - tty: audit: Fix audit source (Peter Hurley)  [Orabug: 22641700]  
  - KVM: Provide function for VCPU lookup by id (David Hildenbrand)  [Orabug: 22623852]  
  - can: Use correct type in sizeof() in nla_put() (Marek Vasut)  [Orabug: 22623851]  
  - mwifiex: fix mwifiex_rdeeprom_read() (Dan Carpenter)  [Orabug: 22641689]  
  - fs/proc, core/debug: Don't expose absolute kernel addresses via wchan (Ingo Molnar)  [Orabug: 22641681]  
  - nl80211: Fix potential memory leak from parse_acl_data (Ola Olsson)  [Orabug: 22623850]  
  - mac80211: fix divide by zero when NOA update (Janusz.Dziedzic@tieto.com)  [Orabug: 22623849]  
  - mac80211: allow null chandef in tracing (Arik Nemtsov)  [Orabug: 22641673]  
  - x86/cpu: Fix SMAP check in PVOPS environments (Andrew Cooper)  [Orabug: 22623848]  
  - x86/setup: Fix low identity map for >= 2GB kernel range (Krzysztof Mazur)  [Orabug: 22623847]  
  - x86/setup: Extend low identity map to cover whole kernel range (Paolo Bonzini)  [Orabug: 22623846]  
  - kvm: x86: set KVM_REQ_EVENT when updating IRR (Radim Krčmář)  [Orabug: 22623845]  
  - net: fix a race in dst_release() (Eric Dumazet)  [Orabug: 22623844]  
  - packet: race condition in packet_bind (Francesco Ruggeri)  [Orabug: 22623843]  
  - sfc: push partner queue for skb->xmit_more (Martin Habets)  [Orabug: 22623841]  
  - sit: fix sit0 percpu double allocations (Eric Dumazet)  [Orabug: 22623840]  
  - ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH() in preemptible context. (Ani Sinha)  [Orabug: 22623839]  
  - net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes (Carol L Soto)  [Orabug: 22623838]  
  - RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in rds_tcp_data_recv (Sowmini Varadhan)  [Orabug: 22623837]  
  - fib_trie: leaf_walk_rcu should not compute key if key is less than pn->key (Alexander Duyck)  [Orabug: 22623836]  
  - ipv6: gre: support SIT encapsulation (Eric Dumazet)  [Orabug: 22623835]  
  - ppp: fix pppoe_dev deletion condition in pppoe_release() (Guillaume Nault)  [Orabug: 22623834]  
  - xen: fix backport of previous kexec patch (Greg Kroah-Hartman)  [Orabug: 22623832]  
  - thp: use is_zero_pfn() only after pte_present() check (Minchan Kim)  [Orabug: 22623830]  
  - drm/vmwgfx: Fix up user_dmabuf refcounting (Thomas Hellstrom)  [Orabug: 22623829]  
  - NVMe: Fix memory leak on retried commands (Keith Busch)  [Orabug: 22623828]  
  - cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL) (Srinivas Pandruvada)  [Orabug: 22623827]  
  - IB/cm: Fix rb-tree duplicate free and use-after-free (Doron Tsur)  [Orabug: 22623826]  
  - btrfs: fix possible leak in btrfs_ioctl_balance() (Christian Engelmayer)  [Orabug: 22623825]  
  - mvsas: Fix NULL pointer dereference in mvs_slot_task_free (Dāvis Mosāns)  [Orabug: 22623824]  
  - md/raid5: fix locking in handle_stripe_clean_event() (Roman Gushchin)  [Orabug: 22623823]  
  - md/raid10: submit_bio_wait() returns 0 on success (Jes Sorensen)  [Orabug: 22623822]  
  - md/raid1: submit_bio_wait() returns 0 on success (Jes Sorensen)  [Orabug: 22623821]  
  - crypto: api - Only abort operations on fatal signal (Herbert Xu)  [Orabug: 22623820]  
  - ovl: fix dentry reference leak (David Howells)  [Orabug: 22641610]  
  - ovl: free lower_mnt array in ovl_put_super (Konstantin Khlebnikov)  [Orabug: 22641588]  
  - ovl: free stack of paths in ovl_fill_super (Konstantin Khlebnikov)  [Orabug: 22641563]  
  - PCI: Prevent out of bounds access in numa_node override (Sasha Levin)  [Orabug: 22623819]  
  - module: Fix locking in symbol_put_addr() (Peter Zijlstra)  [Orabug: 22623818]  
  - dm btree: fix leak of bufio-backed block in btree_split_beneath error path (Mike Snitzer)  [Orabug: 22623817]  
  - dm btree remove: fix a bug when rebalancing nodes after removal (Joe Thornber)  [Orabug: 22623816]  
  - rbd: prevent kernel stack blow up on rbd map (Ilya Dryomov)  [Orabug: 22623815]  
  - rbd: don't leak parent_spec in rbd_dev_probe_parent() (Ilya Dryomov)  [Orabug: 22623813]  
  - rbd: require stable pages if message data CRCs are enabled (Ronny Hegewald)  [Orabug: 22623812]  
  - mm: make sendfile(2) killable (Jan Kara)  [Orabug: 22623811]  
  - ALSA: hda - Fix deadlock at error in building PCM (Takashi Iwai)  [Orabug: 22623810]  
  - si2168: Bounds check firmware (Laura Abbott)  [Orabug: 22623809]  
  - si2157: Bounds check firmware (Laura Abbott)  [Orabug: 22623808]  
  - iommu/amd: Don't clear DTE flags when modifying it (Joerg Roedel)  [Orabug: 22623807]  
  - iommu/amd: Fix BUG when faulting a PROT_NONE VMA (Jay Cornwall)  [Orabug: 22623806]  
  - iommu/vt-d: fix range computation when making room for large pages (Christian Zander)  [Orabug: 22623805]  
  - iwlwifi: mvm: flush fw_dump_wk when mvm fails to start (Andrei Otcheretianski)  [Orabug: 22623804]  
  - rtlwifi: rtl8821ae: Fix system lockups on boot (Larry Finger)  [Orabug: 22623802]  
  - ath9k: declare required extra tx headroom (Felix Fietkau)  [Orabug: 22623801]  
  - fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list() (Mike Kravetz)  [Orabug: 22514912]  
  - Btrfs: incremental send, fix clone operations for compressed extents (Filipe Manana)  [Orabug: 22466327]  
  - IB/mlx4: Replace kfree with kvfree in mlx4_ib_destroy_srq (Wengang Wang)  [Orabug: 22487409]  
  - net/mlx4_core: Fix FMR unmapping to allow remapping afterward (Maor Gottlieb)  [Orabug: 21473880]  
  - sparc64: Fix perf performance counter overflow calculation (Dave Aldridge)  [Orabug: 22607658]  
  - sparc64: Fix for perf event counts sometimes reported as negative numbers (Dave Aldridge)  [Orabug: 22607658]  
  - sparc64: Fix numa node distance initialization (Nitin Gupta)  [Orabug: 22495713]  
  - sparc64: fix incorrect sign extension in sys_sparc64_personality (Dmitry V. Levin)   
  - sparc64: Add ADI capability to cpu capabilities (Khalid Aziz)   
  - sunvnet: Initialize network_header and transport_header in vnet_rx_one() (Sowmini Varadhan)   
  - dtrace: support multiple instances of the same probe in a function (Kris Van Hees)  [Orabug: 22514493]  
  - dtrace: ensure signal-handled is fired with correct signal (Kris Van Hees)  [Orabug: 22573604]  
  - dtrace: ensure that PID 0 has a psinfo struct (Kris Van Hees)  [Orabug: 22561297]  
  - Add support for polling to the sunhv serial driver. (Allen Pais)   
  - Add sun4v_wdt watchdog driver (Wim Coekaerts)   
  - sparc64: Make memory allocations ATOMIC to fix lockdep warnings (Babu Moger)  [Orabug: 22392548]  
  - sunvnet: hack to work around Solaris VIO bug (Sowmini Varadhan)   
  - sparc64: fix FP corruption in user copy functions (Rob Gardner)  [Orabug: 22506897]  
  - sparc64: Don't set %pil in rtrap_nmi too early (Rob Gardner)  [Orabug: 22322473]  
  - sparc: increase NR_syscalls properly (Nick Alcock)  [Orabug: 22390316]  
  - sparc64: 'NULL' char after break when sysrq enabled (Vijay Kumar)  [Orabug: 22456721]  
  - sparc64: Fix numa distance values (Nitin Gupta)  [Orabug: 21896119]  
  - sparc64: Fix segfaults and incorrect data collection by perf (Dave Aldridge)  [Orabug: 22350940]  
  - ldoms: VDS panics with regular file backend. ldoms: VIO FLUSH not implemented correctly. (Bijan Mottahedeh)   
  - i40e: Temporary workaround for DMA map issue (Tushar Dave)   
  -     SPARC64: UEK4 LDOMS DOMAIN SERVICES UPDATE 2 (Aaron Young)  [Orabug: 22347667]  
  - VCC panics after guest is deleted. VCC sends HUP instead of BREAK. (Bijan Mottahedeh)  [Orabug: 21086161]  
  - Do not execute i40e_macaddr_init if the macaddr is default (Sowmini Varadhan)   
  - drivers/pci: Update the quirks for megaraid_sas adapter (Babu Moger)  [Orabug: 22104511]  
  - perf bench numa: Fix to show proper convergence stats (Srikar Dronamraju)   
  - ALSA: pci: depend on ZONE_DMA (Dan Williams)  [Orabug: 22107914]  
  - pci: Limit VPD length for megaraid_sas adapter (Babu Moger)  [Orabug: 22104511]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-34.el7uek]
changelog:
  - config: Enable CONFIG_XEN_PCIDEV_BACKEND by to be built-in. (Konrad Rzeszutek Wilk)   
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 22377612]  
  - svcrdma: Fix NFS server crash triggered by 1MB NFS WRITE (Chuck Lever)  [Orabug: 22204799]  
  - RDS: Add interface for receive MSG latency trace (Santosh Shilimkar)  [Orabug: 22630180]  
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)   
  - ocfs2: o2hb: increase unsteady iterations (Junxiao Bi)   
  - vmxnet3: Bump up driver version number (Shreyas Bhatewara)  [Orabug: 22380674]  
  - vmxnet3: Changes for vmxnet3 adapter version 2 (fwd) (Shreyas Bhatewara)  [Orabug: 22380674]  
  - vmxnet3: Fix memory leaks in rx path (fwd) (Shreyas Bhatewara)  [Orabug: 22380674]  
  - vmxnet3: Register shutdown handler for device (fwd) (Shreyas Bhatewara)  [Orabug: 22380674]  
  - lpfc driver updates for UEK4 R1 11.0.0.13 (rkennedy)  [Orabug: 22493326]  
  - lpfc: Use kzalloc instead of kmalloc (Punit Vara)  [Orabug: 22493326]  
  - lpfc: Add logging for misconfigured optics. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix external loopback failure. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix mbox reuse in PLOGI completion (James Smart)  [Orabug: 22493326]  
  - lpfc: Use new FDMI speed definitions for 10G, 25G and 40G FCoE. (James Smart)  [Orabug: 22493326]  
  - lpfc: Make write check error processing more resilient (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix RDP ACC being too long. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix RDP Speed reporting. (James Smart)  [Orabug: 22493326]  
  - lpfc: Modularize and cleanup FDMI code in driver (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix crash in fcp command completion path. (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix driver crash when module parameter lpfc_fcp_io_channel set to 16 (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix RegLogin failed error seen on Lancer FC during port bounce (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix the FLOGI discovery logic to comply with T11 standards (James Smart)  [Orabug: 22493326]  
  - lpfc: Fix FCF Infinite loop in lpfc_sli4_fcf_rr_next_index_get. (James Smart)  [Orabug: 22493326]  
  - lpfc: fix memory leak and NULL dereference (Sudip Mukherjee)  [Orabug: 22493326]  
  - lpfc: Fix rport leak. (James Smart)  [Orabug: 22493326]  
  - Drivers: hv: vmbus: Fix a Host signaling bug (K. Y. Srinivasan)  [Orabug: 22725962]  
  - cpu-hotplug: export cpu_hotplug_enable/cpu_hotplug_disable (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - clockevents: Add helpers to check the state of a clockevent device (Viresh Kumar)  [Orabug: 21886720]  
  - clockevents: Introduce CLOCK_EVT_STATE_ONESHOT_STOPPED state (Viresh Kumar)  [Orabug: 21886720]  
  - Drivers: hv: util: introduce hv_utils_transport abstraction (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: util: introduce state machine for util drivers (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: use cpu_hotplug_enable/disable (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: add a sysfs attr to show the binding of channel/VP (Dexuan Cui)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Implement a clocksource based on the TSC page (K. Y. Srinivasan)  [Orabug: 21886720]  
  - drivers/hv: Migrate to new 'set-state' interface (Viresh Kumar)  [Orabug: 21886720]  
  - Drivers: hv_vmbus: Fix signal to host condition (Christopher Oo)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Improve the CPU affiliation for channels (K. Y. Srinivasan)  [Orabug: 21886720]  
  - drivers:hv: Move MMIO range picking from hyper_fb to hv_vmbus (Jake Oshins)  [Orabug: 21886720]  
  - drivers:hv: Modify hv_vmbus to search for all MMIO ranges available. (Jake Oshins)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Consider ND NIC in binding channels to CPUs (K. Y. Srinivasan)  [Orabug: 21886720]  
  - mshyperv: fix recognition of Hyper-V guest crash MSR's (Denis V. Lunev)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: prefer 'die' notification chain to 'panic' (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: unregister panic notifier on module unload (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: fix typo in hv_port_info struct (Nik Nyby)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Permit sending of packets without payload (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: balloon: Enable dynamic memory protocol negotiation with Windows 10 hosts (Alex Ng)  [Orabug: 21886720]  
  - Drivers: hv: don't do hypercalls when hypercall_page is NULL (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: add special kexec handler (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: remove hv_synic_free_cpu() call from hv_synic_cleanup() (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: kill tasklets on module unload (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - hv_netvsc: Add structs and handlers for VF messages (Haiyang Zhang)  [Orabug: 21886720]  
  - hv_netvsc: Wait for sub-channels to be processed during probe (KY Srinivasan)  [Orabug: 21886720]  
  - hv_netvsc: Add close of RNDIS filter into change mtu call (Haiyang Zhang)  [Orabug: 21886720]  
  - x86: hyperv: add CPUID bit for crash handlers (Paolo Bonzini)  [Orabug: 21886720]  
  - hv_netvsc: Add support to set MTU reservation from guest side (Haiyang Zhang)  [Orabug: 21886720]  
  - kvm: add hyper-v crash msrs values (Andrey Smetanin)  [Orabug: 21886720]  
  - storvsc: use shost_for_each_device() instead of open coding (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - storvsc: be more picky about scmnd->sc_data_direction (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Allocate ring buffer memory in NUMA aware fashion (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Implement NUMA aware CPU affinity for channels (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Use the vp_index map even for channels bound to CPU 0 (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: distribute subchannels among all vcpus (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: balloon: check if ha_region_mutex was acquired in MEM_CANCEL_ONLINE case (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - hv_netvsc: Allocate the sendbuf in a NUMA aware way (K. Y. Srinivasan)  [Orabug: 21886720]  
  - hv_netvsc: Allocate the receive buffer from the correct NUMA node (K. Y. Srinivasan)  [Orabug: 21886720]  
  - hv_netvsc: Properly size the vrss queues (KY Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus:Update preferred vmbus protocol version to windows 10. (Keith Mange)  [Orabug: 21886720]  
  - hv_netvsc: use per_cpu stats to calculate TX/RX data (sixiao@microsoft.com)  [Orabug: 21886720]  
  - hv_netvsc: Use the xmit_more skb flag to optimize signaling the host (KY Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: move init_vp_index() call to vmbus_process_offer() (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: briefly comment num_sc and next_oc (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: unify calls to percpu_channel_enq() (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: do cleanup on all vmbus_open() failure paths (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: vmbus: Implement the protocol for tearing down vmbus state (K. Y. Srinivasan)  [Orabug: 21886720]  
  - drivers: hv: vmbus: Get rid of some unused definitions (K. Y. Srinivasan)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: full handshake support (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Tools: hv: vss: use misc char device to communicate with kernel (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Tools: hv: kvp: use misc char device to communicate with kernel (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: set .owner reference for file operations (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: rename fcopy_work -> fcopy_timeout_work (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: fcopy: process deferred messages when we complete the transaction (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: rename kvp_work -> kvp_timeout_work (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: move poll_channel() to hyperv_vmbus.h (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: util: move kvp/vss function declarations to hyperv_vmbus.h (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - Drivers: hv: kvp: reset kvp_context (Vitaly Kuznetsov)  [Orabug: 21886720]  
  - veth: don’t modify ip_summed; doing so treats packets with bad checksums as good. (Vijay Pandurangan)  [Orabug: 22720928]  
  - btrfs: Avoid truncate tailing page if fallocate range doesn't exceed inode size (Qu Wenruo)  [Orabug: 22573877]  
  - Btrfs: send, fix file corruption due to incorrect cloning operations (Filipe Manana)  [Orabug: 22579887]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-35.el7uek]
changelog:
  - bpf: fix branch offset adjustment on backjumps after patching ctx expansion (Daniel Borkmann)  [Orabug: 22740787]  {CVE-2016-2383} 
  - ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov)  [Orabug: 22740866]  {CVE-2016-2384} 
  - bio: Fix kabi error (Jason Luo)  [Orabug: 22820562]  
  - RDS/IB: VRPC DELAY / OSS RECONNECT CAUSES 5 MINUTE STALL ON PORT FAILURE (Venkat Venkatsubra)  [Orabug: 22847528]  
  - rds: add infrastructure to find more details for reconnect failure (Ajaykumar Hotchandani)  [Orabug: 22631108]  
  - rds: find connection drop reason (Ajaykumar Hotchandani)  [Orabug: 22631108]  
  - xhci: Workaround to get Intel xHCI reset working more reliably (Rajmohan Mani)  [Orabug: 22805913]  
  - hpsa: fix rmmod issues (Don Brace)  [Orabug: 22075051]  
  - hpsa: fix issues with multilun devices (shane.seymour)  [Orabug: 22075051]  
  - hpsa: add in new offline mode (Scott Benesh)  [Orabug: 22075051]  
  - hpsa: add in new controllers (Don Brace)  [Orabug: 22075051]  
  - hpsa: cleanup update scsi devices (Don Brace)  [Orabug: 22075051]  
  - hpsa: add sysfs entry path_info to show box and bay information (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: add PMC-Sierra to copyright (Don Brace)  [Orabug: 22075051]  
  - hpsa: correct static checker warnings on driver init cleanup (Don Brace)  [Orabug: 22075051]  
  - hpsa: correct decode sense data (Don Brace)  [Orabug: 22075051]  
  - hpsa: Correct double unlock of mutex (Don Brace)  [Orabug: 22075051]  
  - hpsa: change driver version (Don Brace)  [Orabug: 22075051]  
  - hpsa: add in new controller id (Don Brace)  [Orabug: 22075051]  
  - hpsa: dont meddle with hw which isn't ours (Don Brace)  [Orabug: 22075051]  
  - hpsa: cleanup reset (Webb Scales)  [Orabug: 22075051]  
  - hpsa: propagate the error code in hpsa_kdump_soft_reset (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: use scsi host_no as hpsa controller number (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: use block layer tag for command allocation (Webb Scales)  [Orabug: 22075051]  
  - hpsa: add interrupt number to /proc/interrupts interrupt name (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: create workqueue after the driver is ready for use (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: fix try_soft_reset error handling (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: cleanup for init_one step 2 in kdump (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: skip free_irq calls if irqs are not allocated (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: call pci_release_regions after pci_disable_device (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: performance tweak for hpsa_scatter_gather() (Webb Scales)  [Orabug: 22075051]  
  - hpsa: refactor and rework support for sending TEST_UNIT_READY (Webb Scales)  [Orabug: 22075051]  
  - hpsa: don't return abort request until target is complete (Webb Scales)  [Orabug: 22075051]  
  - hpsa: use helper routines for finishing commands (Webb Scales)  [Orabug: 22075051]  
  - hpsa: add support sending aborts to physical devices via the ioaccel2 path (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: do not print ioaccel2 warning messages about unusual completions. (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: clean up some error reporting output in abort handler (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: clean up driver init (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: correct return values from driver functions. (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: do not check cmd_alloc return value - it cannnot return NULL (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: add more ioaccel2 error handling, including underrun statuses. (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: add ioaccel sg chaining for the ioaccel2 path (Webb Scales)  [Orabug: 22075051]  
  - hpsa: refactor freeing of resources into more logical functions (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: clean up error handling (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: break hpsa_free_irqs_and_disable_msix into two functions (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: Get queue depth from identify physical bmic for physical disks. (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: use ioaccel2 path to submit IOs to physical drives in HBA mode. (Joe Handzik)  [Orabug: 22075051]  
  - hpsa: print accurate SSD Smart Path Enabled status (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: factor out hpsa_ioaccel_submit function (Webb Scales)  [Orabug: 22075051]  
  - hpsa: try resubmitting down raid path on task set full (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: do not ignore return value of hpsa_register_scsi (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: factor out hpsa_init_cmd function (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: make function names consistent (Robert Elliott)  [Orabug: 22075051]  
  - hpsa: allow lockup detected to be viewed via sysfs (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: hpsa decode sense data for io and tmf (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: decrement h->commands_outstanding in fail_all_outstanding_cmds (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: clean up aborts (Stephen Cameron)  [Orabug: 22075051]  
  - hpsa: rework controller command submission (Webb Scales)  [Orabug: 22075051]  
  - hpsa: clean up host, channel, target, lun prints (Webb Scales)  [Orabug: 22075051]  
  - hpsa: add masked physical devices into h->dev[] array (Stephen Cameron)  [Orabug: 22075051]  
  - i40e/i40evf: Bump i40e to 1.4.25 and i40evf to 1.4.15 (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: let go of the past (Mitch Williams)  [Orabug: 22342532]  
  - i40e: suspend scheduling during driver unload (Pandi Kumar Maharajan)  [Orabug: 22342532]  
  - i40e: Use the new rx ctl register helpers. Don't use AQ calls from clear_hw. (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: implement and use Rx CTL helper functions (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add adminq commands for Rx CTL registers (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add check for null VSI (John Underwood)  [Orabug: 22342532]  
  - i40e: Expose some registers to program parser, FD and RSS logic (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Fix for unexpected messaging (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: Do not wait for Rx queue disable in DCB reconfig (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: Increase timeout when checking GLGEN_RSTAT_DEVSTATE bit (Kevin Scott)  [Orabug: 22342532]  
  - i40e: Fix led blink capability for 10GBaseT PHY (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: Add functions to blink led on 10GBaseT PHY (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: Move Tx checksum closer to TSO (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Rewrite logic for 8 descriptor per packet check (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Break up xmit_descriptor_count from maybe_stop_tx (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Add support for ATR w/ IPv6 extension headers (Alexander Duyck)  [Orabug: 22342532]  
  - i40evf: Update feature flags to reflect newly enabled features (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Update feature flags to reflect newly enabled features (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Do not drop support for IPv6 VXLAN or GENEVE tunnels (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Fix ATR in relation to tunnels (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Enable support for SKB_GSO_UDP_TUNNEL_CSUM (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Clean-up Rx packet checksum handling (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Add exception handling for Tx checksum (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Do not write to descriptor unless we complete (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Handle IPv6 extension headers in checksum offload (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Add support for IPv4 encapsulated in IPv6 (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Replace header pointers with unions of pointers in Tx checksum path (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Consolidate all header changes into TSO function (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Factor out L4 header and checksum from L3 bits in TSO path (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Use u64 values instead of casting them in TSO function (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Drop outer checksum offload that was not requested (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.4.15 and i40evf to 1.4.11. (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: When in promisc mode apply promisc mode to Tx Traffic as well (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: clean event descriptor before use (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: set adapter state on reset failure (Mitch Williams)  [Orabug: 22342532]  
  - i40e: better error reporting for nvmupdate (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: expand comment (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Do not disable queues in the Legacy/MSI Interrupt handler (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: avoid atomics (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Removal of code which relies on BASE VEB SEID (Kiran Patil)  [Orabug: 22342532]  
  - i40e: Add a SW workaround for lost interrupts (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: trivial: cleanup use of pf->hw (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: support packet split receive (Mitch Williams)  [Orabug: 22342532]  
  - i40e: drop unused debugfs file "dump" (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: get rid of magic number (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: Bump version (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: properly show packet split status in debugfs (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use logical operators, not bitwise (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use pages correctly in Rx (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use __GFP_NOWARN (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: dump descriptor indexes in hex (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: try again after failure (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: don't lose interrupts (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: Change vf driver string to reflect all products i40evf supports (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Refactor force_wb and WB_ON_ITR functionality code (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: use new add_veb calling with VEB stats control (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add VEB stat control and remove L2 cloud filter (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: set shared bit for multicast filters (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Make the DCB firmware checks for X710/XL710 only (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: move sync_vsi_filters up in service_task (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add priv flag for automatic rule eviction (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Enable Geneve offload for FW API ver > 1.4 for XL710/X710 devices (Anjali Singhai)  [Orabug: 22342532]  
  - i40e/i40evf: bump version to 1.4.12/1.4.8 (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: avoid large memcpy by assigning struct (Jacob Keller)  [Orabug: 22342532]  
  - i40e: count allocation errors (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: drop unused function (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: negate PHY int mask bits (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: APIs to Add/remove port mirroring rules (Kiran Patil)  [Orabug: 22342532]  
  - i40e: fix: do not sleep in netdev_ops (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: allocate memory safer (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: do TSO only if CHECKSUM_PARTIAL is set (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: fix bug in dma sync (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: trivial: fix missing space (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.4.11 and i40evf to 1.4.7 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: trivial: remove unnecessary local var (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: remove VF device IDs from PF (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add netdev info to VSI dump (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: enable bus master after reset (Mitch Williams)  [Orabug: 22342532]  
  - i40e: add a little more to an NVM update debug message (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: refactor DCB function (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add 20G speed for Tx bandwidth calculations (Mitch Williams)  [Orabug: 22342532]  
  - i40e: add counter for arq overflows (Mitch Williams)  [Orabug: 22342532]  
  - i40e: fix write-back-on-itr to work with legacy itr (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Store lan_vsi_idx and lan_vsi_id in the right size (Pandi Maharajan)  [Orabug: 22342532]  
  - i40e: Bump AQ minor version to 1.5 for new FW features (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ thermal sensor control struct (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Add VXLAN-GPE tunnel type (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Add set_switch_config (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Shared resource flags (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: add 100Mb ethtool reporting (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: AQ Add external power class to get link status (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Geneve cloud tunnel type (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: AQ Add Run PHY Activity struct (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Limit DCB FW version checks to X710/XL710 devices (Greg Bowers)  [Orabug: 22342532]  
  - i40e: add new proxy-wol bit for X722 (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: Use private workqueue (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: add new write-back mode (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: Fix for UDP/TCP RSS for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Extend ethtool RSS hooks for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: add new device IDs for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: bump version to 1.4.10 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: update features with right offload (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Cleanup the code with respect to restarting autoneg (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40evf: null out ring pointers on free (Mitch Williams)  [Orabug: 22342532]  
  - i40e: define function capabilities in only one place (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: allow channel bonding of VFs (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Replace X722 mac check in ethtool get_settings (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Fix RSS rx-flow-hash configuration through ethtool (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Add mac_filter_element at the end of the list instead of HEAD (Kiran Patil)  [Orabug: 22342532]  
  - i40e: fix build warnings (Eric Dumazet)  [Orabug: 22342532]  
  - i40e: remove forever unused ID (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Fix Rx hash reported to the stack by our driver (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: allow zero MAC address for VFs (Mitch Williams)  [Orabug: 22342532]  
  - i40e: change log messages and error returns (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: avoid mutex re-init (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Call geneve_get_rx_port to get the existing Geneve ports (Singhai, Anjali)  [Orabug: 22342532]  
  - i40e: geneve tunnel offload support (Singhai, Anjali)  [Orabug: 22342532]  
  - i40e: bring firmware API version inline with sourceforge (Brian Maly)  [Orabug: 22342532]  
  - i40e: only report NVM image is newer than expected (Brian Maly)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.4.8 and i40evf to 1.4.4 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: change version string generation (Mitch Williams)  [Orabug: 22342532]  
  - i40e: clean whole mac filter list (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: Add a new offload for RSS PCTYPE V2 for X722 (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: hush little warnings (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Opcode and structures required by OEM Post Update AQ command and add new NVM arq message (Michal Kosiarz)  [Orabug: 22342532]  
  - i40e: use explicit cast from u16 to u8 (Kamil Krawczyk)  [Orabug: 22342532]  
  - i40evf: check rings before freeing resources (Mitch Williams)  [Orabug: 22342532]  
  - i40e: don't add zero MAC filter (Mitch Williams)  [Orabug: 22342532]  
  - i40e: properly delete VF MAC filters (Mitch Williams)  [Orabug: 22342532]  
  - i40e: chomp the BIT(_ULL) (Jesse Brandeburg)  [Orabug: 22342532]  
  - Revert "i40e: remove CONFIG_I40E_VXLAN" (Singhai, Anjali)  [Orabug: 22342532]  
  - i40e: trivial fixes (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump version to 1.4.7 for i40e and 1.4.3 for i40evf (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: use logical operator (Mitch Williams)  [Orabug: 22342532]  
  - i40e: fix whitespace (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Remove separate functions gathering XOFF Rx stats (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: remove CONFIG_I40E_VXLAN (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: use priv flags to control packet split (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: use correct types (Mitch Williams)  [Orabug: 22342532]  
  - i40e: propagate properly (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: don't use atomic allocation (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Fix memory leaks, sideband filter programming (Kiran Patil)  [Orabug: 22342532]  
  - i40e: Detection and recovery of TX queue hung logic moved to service_task from tx_timeout (Kiran Patil)  [Orabug: 22342532]  
  - i40evf: remove duplicate string (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: set real num queues (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: increase max number of queues (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Fix i40e_print_features() VEB mode output (Joe Perches)  [Orabug: 22342532]  
  - i40e: remove unused argument (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix: do not sleep in netdev_ops (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e version to 1.4.4 and i40evf to 1.4.1 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: allocate ring structs dynamically (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: allocate queue vectors dynamically (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: quoth the VF driver, Nevermore (Mitch Williams)  [Orabug: 22342532]  
  - i40e: make error message more useful (Mitch Williams)  [Orabug: 22342532]  
  - i40e: fix confusing message (Helin Zhang)  [Orabug: 22342532]  
  - i40e: Update error messaging (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40evf: add new fields to store user configuration of RSS (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: create a generic get RSS function (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: create a generic config RSS function (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: rename VF adapter specific RSS function (Helin Zhang)  [Orabug: 22342532]  
  - i40e/i40evf: prefetch skb data on transmit (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Fix RS bit update in Tx path and disable force WB workaround (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: rename rss_size to alloc_rss_size in i40e_pf (Helin Zhang)  [Orabug: 22342532]  
  - i40e: add new fields to store user configuration (Helin Zhang)  [Orabug: 22342532]  
  - i40e: Bump version to 1.4.2 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: create a generic configure rss function (Helin Zhang)  [Orabug: 22342532]  
  - i40e: rework the functions to configure RSS with similar parameters (Helin Zhang)  [Orabug: 22342532]  
  - i40e: return the number of enabled queues for ETHTOOL_GRXRINGS (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: handle many MAC filters correctly (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: clean up error messages (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: Add comment to #endif (Helin Zhang)  [Orabug: 22342532]  
  - i40e: Move the saving of old link info from handle_link_event to link_event (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Add a stat to track how many times we have to do a force WB (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: remove BUG_ON from FCoE setup (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: remove BUG_ON from feature string building (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Change BUG_ON to WARN_ON in service event complete (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: remove unused tunnel parameter (Shannon Nelson)  [Orabug: 22342532]  
  - intel: i40e: fix confused code (Rasmus Villemoes)  [Orabug: 22342532]  
  - i40evf: fix compiler warning of unused variable (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix unconditional execution of cpu_to_le16() (Jean Sacren)  [Orabug: 22342532]  
  - i40e: clean up local variable initialization (Jean Sacren)  [Orabug: 22342532]  
  - i40evf: clean up local variable initialization (Jean Sacren)  [Orabug: 22342532]  
  - i40e: add missing kernel-doc argument (Jean Sacren)  [Orabug: 22342532]  
  - i40evf: add missing kernel-doc argument (Jean Sacren)  [Orabug: 22342532]  
  - i40e: re-use %*ph specifier to hexdump a data (Andy Shevchenko)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.3.46 and i40evf to 1.3.33 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Disable VEB bridge mode with SR-IOV failure (Akeem G Abodunrin)  [Orabug: 22342532]  
  - i40e: Fix an incorrect OEM version string (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: fix inconsistent statuses after a PF reset (Helin Zhang)  [Orabug: 22342532]  
  - i40evf: use correct struct for list manipulation (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Fix VEB/VEPA bridge mode mismatch issue (Akeem G Abodunrin)  [Orabug: 22342532]  
  - i40e: fix a bug in debugfs with add/del macaddr (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: Add a workaround to drop all flow control frames (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.3.38 and i40evf to 1.3.25 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: declare rather than initialize int object (Jean Sacren)  [Orabug: 22342532]  
  - i40e: fix kernel-doc argument name (Jean Sacren)  [Orabug: 22342532]  
  - i40e: Move error message to debug level (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Fix order of checks when enabling/disabling autoneg in ethtool (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Fix an accidental error with BIT_ULL replacement (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: fix for PHY NVM interaction problem (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: Fix for Tools loopback test failing after driver load (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: adjust interrupt throttle less frequently (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: change dynamic interrupt thresholds (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: fix bug in throttle rate math (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: refactor IRQ enable function (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: don't give up (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: use napi_schedule_irqoff() (Alexander Duyck)  [Orabug: 22342532]  
  - i40e: Fix basic support for X722 devices (Anjali Singhai)  [Orabug: 22342532]  
  - i40evf: fix overlong BIT defines (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Lock for VSI's MAC filter list (Kiran Patil)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e to 1.3.34 and i40evf to 1.3.21 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: increase AQ work limit (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: relax and stagger init timing a bit (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Recognize 1000Base_T_Optical phy type when link is up (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: correctly populate vlan_features (Mitch Williams)  [Orabug: 22342532]  
  - i40e: reset the invalid msg counter in vf when a valid msg is received (Jingjing Wu)  [Orabug: 22342532]  
  - i40e/i40evf: moderate interrupts differently (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Add support for non-willing Apps (Greg Bowers)  [Orabug: 22342532]  
  - i40e: priv flag for controlling VEB stats (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Removed unused defines (Greg Rose)  [Orabug: 22342532]  
  - i40e: remove read/write failed messages from nvmupdate (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: Fix compile issue related to const string (Jingjing Wu)  [Orabug: 22342532]  
  - i40e: generate fewer startup messages (Shannon Nelson)  [Orabug: 22342532]  
  - i40evf: Add support for netpoll (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Drop useless "IN_NETPOLL" flag (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Fix handling of napi budget (Alexander Duyck)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e version to 1.3.28 and i40evf to 1.3.19 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40evf: speed up init (Mitch Williams)  [Orabug: 22342532]  
  - i40e: remove unnecessary string copy operations (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: X722 is on the IOSF bus and does not report the PCI bus info (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Store off PHY capabilities (Kevin Scott)  [Orabug: 22342532]  
  - i40e/i40evf: remove redundant declarations of a variable and a function (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: remove FD atr control from debugfs (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: allow FD SB if MFP mode only has 1 partition (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: remove obsolete version check (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: Add WB_ON_ITR offload support (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e: Remove 100M SGMII unless hw is X722 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Change some messages from info to debug only (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: use priv flags to control flow director (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Add missing parameter comment to ndo_bridge_setlink (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: Bump i40e version to 1.3.25 and i40evf to 1.3.17 (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Refactor PHY structure and add phy_capabilities enum (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: Add module_types and update_link_info (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e/i40evf: split device ids into a separate file (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: update fw version text string per previous product formats (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e: don't panic on VSI allocation failure (Mitch Williams)  [Orabug: 22342532]  
  - i40e: remove redundant call (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Convert CEE App TLV selector to IEEE selector (Greg Bowers)  [Orabug: 22342532]  
  - i40e/i40evf: Add info to nvm info struct for OEM version data (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40evf: properly handle ndo_set_mac_address calls (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Use BIT() macro for priority map parsing (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: Make it clear a parameter is never used (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: Add new link status defines (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: print neato new features (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: pass QOS handle to VF (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: use capabilities flags properly (Mitch Williams)  [Orabug: 22342532]  
  - i40e: refactor code to remove indent (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: clean up some code (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: detect reset more reliably (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Support FW CEE DCB UP to TC map nibble swap (Greg Bowers)  [Orabug: 22342532]  
  - i40e/i40evf: Explicitly assign enum index for VSI type (Serey Kong)  [Orabug: 22342532]  
  - i40e: add switch for link polling (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Fix multiple link up messages (Matt Jared)  [Orabug: 22342532]  
  - i40e: Fix for extra Flow Director filter in table after error (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: Store CEE DCBX DesiredCfg and RemoteCfg (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: Add parsing for CEE DCBX TLVs (Neerav Parikh)  [Orabug: 22342532]  
  - i40e: add more verbose error messages (Mitch Williams)  [Orabug: 22342532]  
  - i40e: inline interrupt enable (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix erroneous WARN_ON (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: remove unused opcode (Mitch Williams)  [Orabug: 22342532]  
  - i40evf: propagate interrupt allocation failure (Mitch Williams)  [Orabug: 22342532]  
  - i40e: Additional checks for CEE APP priority validity (Neerav Parikh)  [Orabug: 22342532]  
  - i40e/i40evf: Add a stat to keep track of linearization count (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: fix unicast mac address add (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: fix bug in return from get_link_status and avoid spurious link messages (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: add little endian conversion for checksum (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: give up the __func__ (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Never let speed get set to 0 in get_settings (Catherine Sullivan)  [Orabug: 22342532]  
  - i40e: Fix for truncated interrupt name (Carolyn Wyborny)  [Orabug: 22342532]  
  - i40e/i40evf: assure clean asq status report (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: make i40e_init_pf_fcoe to void (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: fix bad CEE status shift value (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: fix a potential type compare issue (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: add driver support for new device ids (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: stop VF rings (Mitch Williams)  [Orabug: 22342532]  
  - i40e: enable WoL operation if config bit show WoL capable (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Increase the amount of time we wait for reset to be done (Paul M Stillwell Jr)  [Orabug: 22342532]  
  - i40evf: don't blow away MAC address (Mitch Williams)  [Orabug: 22342532]  
  - i40e/i40evf: grab the AQ spinlocks before clearing registers (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Fix a memory leak in X722 rss config path (Anjali Singhai)  [Orabug: 22342532]  
  - i40evf: Use numa_mem_id() to better support memoryless node (Jiang Liu)  [Orabug: 22342532]  
  - i40e: Use numa_mem_id() to better support memoryless node (Jiang Liu)  [Orabug: 22342532]  
  - i40e: fix 32 bit build warnings (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fix kbuild warnings (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40evf: tweak init timing (Mitch Williams)  [Orabug: 22342532]  
  - i40e: warn on double free (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: refactor interrupt enable (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: Strip VEB stats if they are disabled in HW (Anjali Singhai Jain)  [Orabug: 22342532]  
  - i40e/i40evf: add new device id 1588 (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Remove useless message (Greg Rose)  [Orabug: 22342532]  
  - i40e: limit debugfs io ops (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: use QOS field consistently (Mitch Williams)  [Orabug: 22342532]  
  - i40e: count drops in netstat interface (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e/i40evf: fix Tx hang workaround code (Jesse Brandeburg)  [Orabug: 22342532]  
  - i40e: fixup padding issue in get_cee_dcb_cfg_v1_resp (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: Fix a port VLAN configuration bug (Greg Rose)  [Orabug: 22342532]  
  - i40e/i40evf: fix up type clash in i40e_aq_rc_to_posix conversion (Shannon Nelson)  [Orabug: 22342532]  
  - i40e: rtnl_lock called twice in i40e_pci_error_resume() (Vasily Averin)  [Orabug: 22342532]  
  - i40evf: missing rtnl_unlock in i40evf_resume() (Vasily Averin)  [Orabug: 22342532]  
  - i40e: Fix RS bit update in Tx path and disable force WB workaround (Anjali Singhai)  [Orabug: 22342532]  
  - i40e: add GRE tunnel type to csum encoding (Shannon Nelson)  [Orabug: 22342532]  
  - i40e/i40evf: refactor tx timeout logic (Kiran Patil)  [Orabug: 22342532]  
  - i40e: Move i40e_get_head into header file (Kiran Patil)  [Orabug: 22342532]  
  - logging errors that get masked to EIO inside drivers/block/loop.c (Manjunath Patil)  [Orabug: 22505557]  
  - be2iscsi: Update the driver version (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix memory leak in beiscsi_alloc_mem() (Maurizio Lombardi)  [Orabug: 22725588]  
  - be2iscsi: Add lock to protect WRB alloc and free (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: _bh for io_sgl_lock and mgmt_sgl_lock (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix ExpStatSn in management tasks (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Couple MCC tag and WRB alloc and free (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix MCC WRB leak in open_connection (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Cleanup processing of BMBX completion (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix be_mcc_compl_poll to use tag_state (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Remove be_mbox_notify_wait function (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Rename MCC and BMBX processing functions (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Remove redundant MCC processing code (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Use macros for MCC WRB and CQE fields (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Remove unused mcc_cq_lock (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: add checks for dma mapping errors (Alexey Khoroshilov)  [Orabug: 22725588]  
  - be2iscsi: Fix WRB leak in login/logout path (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix async link event processing (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to process 25G link speed info from FW (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix IOPOLL implementation (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix return value for MCC completion (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Add FW config validation (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to handle misconfigured optics events (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix VLAN support for IPv6 network (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to remove shutdown entry point (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Added return value check for mgmt_get_all_if_id (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Set mbox timeout to 30s (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to synchronize tag allocation using spin_lock (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix to use atomic bit operations for tag_state (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix mbox synchronization replacing spinlock with mutex (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix soft lockup in mgmt_get_all_if_id path using bmbx (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi: Fix bogus WARN_ON length check (Tim Gardner)  [Orabug: 22725588]  
  - scsi_transport_iscsi: Add 25G and 40G speed definition (Jitendra Bhivare)  [Orabug: 22725588]  
  - be2iscsi : Fix the retry count for boot targets (John Soni Jose)  [Orabug: 22725588]  
  - be2net: don't report EVB for older chipsets when SR-IOV is disabled (Ivan Vecera)   
  - be2net: Interpret and log new data that's added to the port misconfigure async event (Ajit Khaparde)  [Orabug: 22725582]  
  - be2net: Request RSS capability of Rx interface depending on number of Rx rings (Ajit Khaparde)  [Orabug: 22725582]  
  - be2net: Fix interval calculation in interrupt moderation (Padmanabh Ratnakar)  [Orabug: 22725582]  
  - be2net: Add retry in case of error recovery failure (Padmanabh Ratnakar)  [Orabug: 22725582]  
  - be2net: Fix Lancer error recovery (Padmanabh Ratnakar)  [Orabug: 22725582]  
  - be2net: Don't run ethtool self-tests for VFs (Somnath Kotur)  [Orabug: 22725582]  
  - be2net: SRIOV Queue distribution should factor in EQ-count of VFs (Sriharsha Basavapatna)  [Orabug: 22725582]  
  - be2net: Fix be_vlan_rem_vid() to check vlan id being removed (Sriharsha Basavapatna)  [Orabug: 22725582]  
  - be2net: check for INSUFFICIENT_PRIVILEGES error (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: return error status from be_set_phys_id() (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: Avoid accessing eq object in be_msix_register routine, when i < 0. (Venkat Duvvuru)  [Orabug: 22725582]  
  - be2net: bump up the driver version to 11.0.0.0 (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: support ethtool get-dump option (Venkat Duvvuru)  [Orabug: 22725582]  
  - be2net: fix port-res desc query of GET_PROFILE_CONFIG FW cmd (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: remove unused error variables (Venkat Duvvuru)  [Orabug: 22725582]  
  - be2net: remove a line of code that has no effect (Sathya Perla)  [Orabug: 22725582]  
  - be2net: log digital signature errors while flashing FW image (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: move FW flash cmd code to be_cmds.c (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: cleanup FW flash image related macro defines (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: avoid configuring VEPA mode on BE3 (Suresh Reddy)  [Orabug: 22725582]  
  - be2net: fix VF link state transition from disabled to auto (Suresh Reddy)  [Orabug: 22725582]  
  - net: provide generic busy polling to all NAPI drivers (Eric Dumazet)  [Orabug: 22725582]  
  - net: move skb_mark_napi_id() into core networking stack (Eric Dumazet)  [Orabug: 22725582]  
  - be2net: remove local variable 'status' (Ivan Vecera)  [Orabug: 22725582]  
  - be2net: replace hardcoded values with existing define (Ivan Vecera)  [Orabug: 22725582]  
  - be2net: remove unused local rsstable array (Ivan Vecera)  [Orabug: 22725582]  
  - drivers/net: get rid of unnecessary initializations in .get_drvinfo() (Ivan Vecera)  [Orabug: 22725582]  
  - Revert "scsi: Fix a bdi reregistration race" (Dan Duval)  [Orabug: 22679087]  
  - block: remove management of bi_remaining when restoring original bi_end_io (Mike Snitzer)  [Orabug: 22820562]  
  - bio: skip atomic inc/dec of ->bi_cnt for most use cases (Jens Axboe)  [Orabug: 22820562]  
  - bio: skip atomic inc/dec of ->bi_remaining for non-chains (Jens Axboe)  [Orabug: 22820562]  
  - VSOCK: Fix lockdep issue. (Jorgen Hansen)  [Orabug: 22820522]  
  - VSOCK: sock_put wasn't safe to call in interrupt context (Jorgen Hansen)  [Orabug: 22820522]  
  - xfs: checksum log record ext headers based on record size (Brian Foster)  [Orabug: 22682565]  
  - xfs: always drain dio before extending aio write submission (Brian Foster)   
  - iw_cxgb3: Fix incorrectly returning error on success (Hariprasad S)  [Orabug: 22713209]  
  - Btrfs: use received_uuid of parent during send (Josef Bacik)  [Orabug: 22580612]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-36.el7uek]
changelog:
  - net:Add sysctl_max_skb_frags (Hans Westgaard Ry)   
  - xfs: return errors from partial I/O failures to files (David Jeffery)   
  - Revert "xfs: return errors from partial I/O failures to files" (Chuck Anderson)   
  - xfs: return errors from partial I/O failures to files (David Jeffery)   
  - conditionalize Secure Boot initialization on x86 platform (Dan Duval)  [Orabug: 22364965]  
  - x86/efi: Set securelevel when loaded without efi stub (Dan Duval)  [Orabug: 22364965]  
  - Fixed vnic issue after saturn reset (Pradeep Gopanapalli)  [Orabug: 22862488]  
  - uvnic issues (Pradeep Gopanapalli)  [Orabug: 22862488]  
  - Fixed wrongly checked return type Added Debug print (Pradeep Gopanapalli)  [Orabug: 22862488]  
  - hpsa: move lockup_detected attribute to host attr (Tomas Henzl)  [Orabug: 22930824]  
  - megaraid_sas: Add an i/o barrier (Tomas Henzl)  [Orabug: 22620626]  
  - megaraid_sas: Fix SMAP issue (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Fix for IO failing post OCR in SRIOV environment (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid: fix null pointer check in megasas_detach_one(). (Maurizio Lombardi)  [Orabug: 22620626]  
  - megaraid_sas: driver version upgrade (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: SPERC OCR changes (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Introduce module parameter for SCSI command timeout (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: MFI adapter OCR changes (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Make adprecovery variable atomic (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: IO throttling support (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Dual queue depth support (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Code optimization build_and_issue_cmd return-type (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Reply Descriptor Post Queue (RDPQ) support (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Fastpath region lock bypass (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Update device queue depth based on interface type (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Task management support (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Syncing request flags macro names with firmware (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: MFI IO timeout handling (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Do not allow PCI access during OCR (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid: Fix possible NULL pointer deference in mraid_mm_ioctl (Nicholas Krause)  [Orabug: 22620626]  
  - megaraid_sas: Fix sparse warning (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas: Make tape drives visible on PERC5 controllers (Sumit Saxena)  [Orabug: 22620626]  
  - megaraid_sas : Remove debug print from function megasas_update_span_set (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas : Driver version upgrade (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas : SMAP restriction--do not access user memory from IOCTL code (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Make PI enabled VD 8 byte DMA aligned (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Initialize tasklet before setting up IRQs (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Indicate online firmware upgrade support for Secure JBOD feature (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Update OCR capability on controller properties change (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Do not use PAGE_SIZE for max_sectors (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Support for Cutlass (12 Gbps) controller (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Support for Intruder (12 Gbps) controller (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Remove PCI id checks (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Expose TAPE drives unconditionally (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Version update (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Code refactor for use of requestorId (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Fix validHandles check in I/O path (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Print critical firmware event messages (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Chip reset if driver fails to get IOC ready (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Support for max_io_size 1MB (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Code cleanup-use local variable drv_ops inside megasas_ioc_init_fusion (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: JBOD sequence number support (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Increase timeout to 60 secs for abort frames during shutdown (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: Synchronize driver headers with firmware APIs (sumit.saxena@avagotech.com)  [Orabug: 22620626]  
  - megaraid_sas: fix whitespace errors (Bjorn Helgaas)  [Orabug: 22620626]  
  - megaraid_sas: use dev_printk when possible (Bjorn Helgaas)  [Orabug: 22620626]  
  - megaraid_sas: fix TRUE and FALSE re-define build error (Suthikulpanit, Suravee)  [Orabug: 22620626]  
  - megaraid: fix irq setup process regression (Tomas Henzl)  [Orabug: 22620626]  
  - qla2xxx: Update driver version to 8.07.00.33.40.0-k. (Sawan Chandak)  [Orabug: 22863553]  
  - qla2xxx: Set relogin flag when we fail to queue login requests. (Chad Dupuis)  [Orabug: 22863553]  
  - qla2xxx: Enable T10-DIF for ISP27XX (Himanshu Madhani)  [Orabug: 22863553]  
  - qla2xxx: Provide mbx info in BBCR data after mbx failure (Harish Zunjarrao)  [Orabug: 22863553]  
  - qla2xxx: Avoid side effects when using endianizer macros. (Joe Carnuccio)  [Orabug: 22863553]  
  - qla2xxx: Add support for Private link statistics counters. (Harish Zunjarrao)  [Orabug: 22863553]  
  - qla2xxx: Add support for buffer to buffer credit value for ISP27XX. (Sawan Chandak)  [Orabug: 22863553]  
  - qla2xxx: Add support for online flash update for ISP27XX. (Sawan Chandak)  [Orabug: 22863553]  
  - qla2xxx: Allow fw to hold status before sending ABTS response. (Himanshu Madhani)  [Orabug: 22863553]  
  - qla2xxx: Seed init-cb login timeout from nvram exclusively. (Joe Carnuccio)  [Orabug: 22863553]  
  - qla2xxx: Remove unneeded link offline message. (Chad Dupuis)  [Orabug: 22863553]  
  - firmware: dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 (Andrea Arcangeli)  [Orabug: 22694972]  
  - X.509: Don't strip leading 00's from key ID when constructing key description (David Howells)  [Orabug: 22364965]  
  - Btrfs: teach backref walking about backrefs with underflowed offset values (Filipe Manana)  [Orabug: 22473759]  
  - Btrfs: fix file read corruption after extent cloning and fsync (Filipe Manana)  [Orabug: 22477781]  
  - uek-rpm: configs: do not enable CONFIG_SCSI_MQ_DEFAULT and CONFIG_DM_MQ_DEFAULT by default (Chuck Anderson)  [Orabug: 22742028]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.el7uek]
changelog:
  - fuse: Do not mask return value from fuse_direct_io for partially valid data (Ashish Samant)  [Orabug: 22732213]  
  - fnic: Leftshift returned scsi_cmnd error code 16 bits (Jason Luo)  [Orabug: 22918200]  
  - fnic: Setting scsi host template to indicate that fnic does not support multiqueue (Jason Luo)  [Orabug: 22918200]  
  - fnic: Using rport-_dd_data to check rport online instead of rport_lookup (Jason Luo)  [Orabug: 22918200]  
  - fnic: Cleanup the I_O that has timed out and is used to issue LUN reset (Jason Luo)  [Orabug: 22918200]  
  - fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Jason Luo)  [Orabug: 22918200]  
  - btrfs: fix resending received snapshot with parent (Robin Ruede)  [Orabug: 22926351]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.1.1.el7uek]
changelog:
  - sparc64/uek-rpm: enable sunhv console driver polling support (Chuck Anderson)  [Orabug: 23026831]  
  - sparc64: correctly recognize Sonoma chips (Allen Pais)  [Orabug: 22088766]  
  - Add sun4v_wdt watchdog driver (wim.coekaerts@oracle.com)  [Orabug: 22329522]  
  - Revert "Add sun4v_wdt watchdog driver" (Allen Pais)  [Orabug: 22329522]  
  - sparc64:piggback program generates a.out header with incorrect section sizes (Allen Pais)   
  - fuse: Fix return value from fuse_get_user_pages() (Ashish Samant)   
  - Btrfs: fix shrinking truncate when the no_holes feature is enabled (Filipe Manana)  [Orabug: 23017131]  
  - Btrfs: incremental send, don't delay directory renames unnecessarily (Filipe Manana)  [Orabug: 22370277]  
  - Btrfs: fix stale directory entries after fsync log replay (Filipe Manana)  [Orabug: 22628079]  
  - x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski)  [Orabug: 22997967]  {CVE-2016-3157}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.2.1.el7uek]
changelog:
  - arch/sparc: Sonoma epsc group patch (Joe Moriarty)  [Orabug: 23055865]  
  - arch/sparc: Sonoma piggyback patch (Joe Moriarty)  [Orabug: 23055807]  
  - sparc64: bypass iommu to use 64bit address space (Tushar Dave)  [Orabug: 21149316]  
  - sparc64: correctly recognize Sonoma chips - add missing break (Chuck Anderson)  [Orabug: 22088766]  
  - sparc64/uek-rpm: enable sun4v_wdt watchdog driver (Chuck Anderson)  [Orabug: 22329522]  
  - bnx2x: Fix VLANs null-pointer for 57710, 57711 (Yuval Mintz)  [Orabug: 23093255]  
  - proc: fix PAGE_SIZE limit of /proc/$PID/cmdline (Alexey Dobriyan)  [Orabug: 23081539]  
  - secureboot: enable secureboot if boot param is set (Brian Maly)  [Orabug: 23038345]  
  - RHEL: uefi: copy secure_boot flag in boot params across kexec (Brian Maly)  [Orabug: 23038345]  {CVE-2015-7837}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.2.2.el7uek]
changelog:
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222731]  {CVE-2015-8767}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.3.1.el7uek]
changelog:
  - KEYS: Fix ASN.1 indefinite length object parsing This fixes CVE-2016-0758. (David Howells)  [Orabug: 23279022]  {CVE-2016-0758} 
  - uek-rpm: ol6: revert DRM for experimental or OL6-incompatible drivers (Todd Vierling)  [Orabug: 23270829]  
  - unix: properly account for FDs passed over unix sockets (willy tarreau)  [Orabug: 23262277]  {CVE-2013-4312} {CVE-2013-4312} 
  - sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Karl Heiss)  [Orabug: 23222731]  {CVE-2015-8767}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.4.1.el7uek]
changelog:
  - move part of fix for "unix: properly account for FDs passed over unix sockets" (Chuck Anderson)  [Orabug: 23294626]  {CVE-2013-4312} {CVE-2013-4312}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.5.1.el7uek]
changelog:
  - sched/core: Clear the root_domain cpumasks in init_rootdomain() (Xunlei Pang)  [Orabug: 23520741]  
  - ocfs2: bump up o2cb network protocol version (Junxiao Bi)  [Orabug: 23515810]  
  - IB/security: Restrict use of the write() interface (Jason Gunthorpe)  [Orabug: 23283954]  {CVE-2016-4565}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-37.6.1.el7uek]
changelog:
  - vfs: rename: check backing inode being equal (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - vfs: add vfs_select_inode() helper (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - ovl: verify upper dentry before unlink and rename (Miklos Szeredi)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - ovl: fix getcwd() failure after unsuccessful rmdir (Rui Wang)  [Orabug: 24010060]  {CVE-2016-6198} {CVE-2016-6197} 
  - xen: use same main loop for counting and remapping pages (Juergen Gross)  [Orabug: 24012238]  
  - Revert "ocfs2: bump up o2cb network protocol version" (Junxiao Bi)  [Orabug: 23710417]  
  - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23704078]  {CVE-2016-2117} 
  - Revert "perf tools: Bump default sample freq to 4 kHz" (ashok.vairavan)  [Orabug: 23634802]  
  - block: Initialize max_dev_sectors to 0 (Keith Busch)  [Orabug: 23333444]  
  - sd: Fix rw_max for devices that report an optimal xfer size (Martin K. Petersen)  [Orabug: 23333444]  
  - sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes (Martin K. Petersen)  [Orabug: 23333444]  
  - sd: Optimal I/O size is in bytes, not sectors (Martin K. Petersen)  [Orabug: 23333444]  
  - sd: Reject optimal transfer length smaller than page size (Martin K. Petersen)  [Orabug: 23333444]  
  - Fix kabi issue for upstream commit ca369d51 (Joe Jin)  [Orabug: 23333444]  
  - block/sd: Fix device-imposed transfer length limits (Joe Jin)  [Orabug: 23333444]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-37.6.2.el7uek]
changelog:
  - KEYS: potential uninitialized variable (Dan Carpenter)  [Orabug: 24393865]  {CVE-2016-4470} 
  - ovl: fix permission checking for setattr (Miklos Szeredi)  [Orabug: 24393742]  {CVE-2015-8660}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-37.6.3.el7uek]
changelog:
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010103] [Orabug: 2401010]  {CVE-2016-5696}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-60.el7uek]
changelog:
  - xen-blkfront: dynamic configuration of per-vbd resources (Bob Liu)  [Orabug: 23720696]  
  - xen-blkfront: introduce blkif_set_queue_limits() (Bob Liu)  [Orabug: 23720696]  
  - xen-blkfront: fix places not updated after introducing 64KB page granularity (Bob Liu)  [Orabug: 23720696]  
  - IB: Add RNR timer workaround for PSIF (Santosh Shilimkar)  [Orabug: 23633926]  
  - IB/core: Add encode/decode FDR/EDR rates (Hans Westgaard Ry)  [Orabug: 23084916]  
  - bfa: Fix for crash when bfa_itnim is NULL (Sudarsana Reddy Kalluru)  [Orabug: 23950878]  
  - bfa:Update driver version to 3.2.25.0 (Anil Gurumurthy)  [Orabug: 23950878]  
  - bfa:File header and user visible string changes (Anil Gurumurthy)  [Orabug: 23950878]  
  - bfa:Updating copyright messages (Anil Gurumurthy)  [Orabug: 23950878]  
  - bfa: Fix incorrect de-reference of pointer (Anil Gurumurthy)  [Orabug: 23950878]  
  - bfa: Fix indentation (Anil Gurumurthy)  [Orabug: 23950878]  
  - lpfc updates to 11.1.0.4 for uek4-r2 (rkennedy)  [Orabug: 23762058]  
  - lpfc: Update modified file copyrights (James Smart)  [Orabug: 23762058]  
  - lpfc: Fix interaction between fdmi_on and enable_SmartSAN (James Smart)  [Orabug: 23762058]  
  - lpfc: Add support for SmartSAN 2.0 (James Smart)  [Orabug: 23762058]  
  - lpfc: Fix Device discovery failures during switch reboot test. (James Smart)  [Orabug: 23762058]  
  - lpfc: Utilize embedded CDB logic to minimize IO latency (James Smart)  [Orabug: 23762058]  
  - lpfc: Fix crash when unregistering default rpi. (James Smart)  [Orabug: 23762058]  
  - lpfc: Fix DMA faults observed upon plugging loopback connector (James Smart)  [Orabug: 23762058]  
  - lpfc: Correct LOGO handling during login (James Smart)  [Orabug: 23762058]  
  - lpfc: fix misleading indentation (Arnd Bergmann)  [Orabug: 23762058]  
  - lpfc: fix missing zero termination in debugfs (Alan)  [Orabug: 23762058]  
  - lpfc: Remove redundant code block in lpfc_scsi_cmd_iocb_cmpl (Johannes Thumshirn)  [Orabug: 23762058]  
  - qla2xxx: Update driver version to 8.07.00.38.40.0-k. (Sawan Chandak)  [Orabug: 23755773]  
  - qla2xxx: Fix BBCR offset (Sawan Chandak)  [Orabug: 23755773]  
  - qla2xxx: Disable the adapter and skip error recovery in case of register disconnect. (Sawan Chandak)  [Orabug: 23755773]  
  - qla2xxx: Separate ISP type bits out from device type. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Correction to function qla26xx_dport_diagnostics(). (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Add support to handle Loop Init error Asynchronus event. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Let DPORT be enabled purely by nvram. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Add bsg interface to support statistics counter reset. (Sawan Chandak)  [Orabug: 23755773]  
  - qla2xxx: Add bsg interface to support D_Port Diagnostics. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Check for device state before unloading the driver. (Sawan Chandak)  [Orabug: 23755773]  
  - qla2xxx: Properly reset firmware statistics. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Properly initialize IO statistics. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Make debug buffer log easier to view. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Add module parameter alternate/short names. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Set FLOGI retry in additional firmware options for P2P (N2N) mode. (Giridhar Malavali)  [Orabug: 23755773]  
  - qla2xxx: Shutdown board on thermal shutdown aen. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Add ram area DDR for fwdump template entry T262. (Joe Carnuccio)  [Orabug: 23755773]  
  - qla2xxx: Remove sysfs node fw_dump_template. (Joe Carnuccio)  [Orabug: 23755773]  
  - mpt3sas: Used "synchronize_irq()"API to synchronize timed-out IO & TMs (Chaitra P B)  [Orabug: 22529571]  
  - mpt3sas: Set maximum transfer length per IO to 4MB for VDs (Chaitra P B)  [Orabug: 22529571]  
  - mpt3sas: Updating mpt3sas driver version to 13.100.00.00 (Chaitra P B)  [Orabug: 22529571]  
  - mpt3sas: Fix initial Reference tag field for 4K PI drives. (Chaitra P B)  [Orabug: 22529571]  
  - mpt3sas: Handle active cable exception event (Chaitra P B)  [Orabug: 22529571]  
  - mpt3sas: Update MPI header to 2.00.42 (Chaitra P B)  [Orabug: 22529571]  
  - mpt3sas - remove unused fw_event_work elements (Joe Lawrence)  [Orabug: 22529571]  
  - mpt3sas: Remove usage of 'struct timeval' (Tina Ruchandani)  [Orabug: 22529571]  
  - mpt3sas: Don't overreach ioc->reply_post[] during initialization (Calvin Owens)  [Orabug: 22529571]  
  - mpt3sas: Remove unnecessary synchronize_irq() before free_irq() (Lars-Peter Clausen)  [Orabug: 22529571]  
  - mpt3sas: Free memory pools before retrying to allocate with different value. (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Remove cpumask_clear for zalloc_cpumask_var and don't free free_cpu_mask_var before reply_q (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Updating mpt3sas driver version to 12.100.00.00 (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Fix for Asynchronous completion of timedout IO and task abort of timedout IO. (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Updated MPI Header to 2.00.42 (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Add support for configurable Chain Frame Size (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Added smp_affinity_enable module parameter. (Suganath Prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Make use of additional HighPriority credit message frames for sending SCSI IO's (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Never block the Enclosure device (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Fix static analyzer(coverity) tool identified defects (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Used IEEE SGL instead of MPI SGL while framing a SMP Passthrough request message. (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: Added support for high port count HBA variants. (Suganath prabu Subramani)  [Orabug: 22529571]  
  - mpt3sas: A correction in unmap_resources (Tomas Henzl)  [Orabug: 22529571]  
  - mpt3sas: fix Kconfig dependency problem for mpt2sas back compatibility (James Bottomley)  [Orabug: 22529571]  
  - mpt3sas: Add dummy Kconfig option for backwards compatibility (Martin K. Petersen)  [Orabug: 22529571]  
  - mpt3sas: Fix use sas_is_tlr_enabled API before enabling MPI2_SCSIIO_CONTROL_TLR_ON flag (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: fix inline markers on non inline function declarations (Stephen Rothwell)  [Orabug: 22529571]  
  - mpt3sas: Bump mpt3sas driver version to 09.102.00.00 (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Single driver module which supports both SAS 2.0 & SAS 3.0 HBAs (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt2sas, mpt3sas: Update the driver versions (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: setpci reset kernel oops fix (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Added OEM Gen2 PnP ID branding names (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Refcount fw_events and fix unsafe list usage (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Refcount sas_device objects and fix unsafe list usage (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: sysfs attribute to report Backup Rail Monitor Status (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Ported WarpDrive product SSS6200 support (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: fix for driver fails EEH, recovery from injected pci bus error (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Manage MSI-X vectors according to HBA device type (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Don't send PHYDISK_HIDDEN RAID action request on SAS2 HBAs (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Build MPI SGL LIST on GEN2 HBAs and IEEE SGL LIST on GEN3 HBAs (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt2sas, mpt3sas: Remove SCSI_MPTXSAS_LOGGING entry from Kconfig (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Define 'hba_mpi_version_belonged' IOC variable (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt2sas: Remove .c and .h files from mpt2sas driver (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt2sas: Move Gen2 HBA's device registration to a separate file (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Move Gen3 HBA's device registration to a separate file (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt3sas: Added mpt2sas driver definitions (Sreekanth Reddy)  [Orabug: 22529571]  
  - mpt2sas: Use mpi headers from mpt3sas (Christoph Hellwig)  [Orabug: 22529571]  
  - ext4: only call ext4_truncate when size <= isize (Josef Bacik)  [Orabug: 23598757]  
  - fix kABI breakage from "blk-mq: fix race between timeout and freeing request" (Dan Duval)  [Orabug: 23521058]  
  - blk-mq: fix race between timeout and freeing request (Ming Lei)  [Orabug: 23521058]  
  - fix kABI breakage from "blk-mq: Shared tag enhancements" (Dan Duval)  [Orabug: 23521058]  
  - blk-mq: Shared tag enhancements (Keith Busch)  [Orabug: 23521058]  
  - propogate_mnt: Handle the first propogated copy being a slave (Eric W. Biederman)  [Orabug: 23276659]  {CVE-2016-4581} 
  - fs/pnode.c: treat zero mnt_group_id-s as unequal (Maxim Patlasov)  [Orabug: 23276659]  {CVE-2016-4581} 
  - xsigo: SKB Frag cleanup (Pradeep Gopanapalli)  [Orabug: 23514725]  
  - xsigo: Tx_tail goes outof bound (Pradeep Gopanapalli)  [Orabug: 23514725]  
  - xsigo: Fixed Path locking issues (Pradeep Gopanapalli)  [Orabug: 23514725]  
  - net/rds: Skip packet filtering if interface does not support ACL (Yuval Shaia)  [Orabug: 23541567]  
  - RDS: Fix the rds_conn_destroy panic due to pending messages (Bang Nguyen)  [Orabug: 23222944]  
  - RDS: add handshaking for ACL violation detection at passive (Ajaykumar Hotchandani)  [Orabug: 23222944]  
  - RDS: IB: enforce IP anti-spoofing based on ACLs (Santosh Shilimkar)  [Orabug: 23222944]  
  - RDS: Add acl fields to the rds_connection (Santosh Shilimkar)  [Orabug: 23222944]  
  - RDS: IB: invoke connection destruction in worker (Ajaykumar Hotchandani)  [Orabug: 23222944]  
  - RDS: Add reset all conns for a source address to CONN_RESET (Santosh Shilimkar)  [Orabug: 23222944]  
  - IB/mlx4: Generate alias GUID for slaves (Yuval Shaia)  [Orabug: 23222944]  
  - IB/ipoib: ioctl interface to manage ACL tables (Yuval Shaia)  [Orabug: 23222944]  
  - IB/ipoib: sysfs interface to manage ACL tables (Yuval Shaia)  [Orabug: 23222944]  
  - IB/{cm,ipoib}: Filter traffic using ACL (Yuval Shaia)  [Orabug: 23222944]  
  - IB/{cm,ipoib}: Manage ACL tables (Yuval Shaia)  [Orabug: 23222944]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.el7uek]
changelog:
  - block: Initialize max_dev_sectors to 0 (Keith Busch)  [Orabug: 23615929]  
  - sd: Fix rw_max for devices that report an optimal xfer size (Martin K. Petersen)  [Orabug: 23615929]  
  - sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes (Martin K. Petersen)  [Orabug: 23615929]  
  - sd: Optimal I/O size is in bytes, not sectors (Martin K. Petersen)  [Orabug: 23615929]  
  - sd: Reject optimal transfer length smaller than page size (Martin K. Petersen)  [Orabug: 23615929]  
  - block/sd: Fix device-imposed transfer length limits (Joe Jin)  [Orabug: 23615929]  
  - Fix kabi issue for upstream commit ca369d51 (Joe Jin)  [Orabug: 23615929]  
  - Revert "ocfs2: bump up o2cb network protocol version" (Junxiao Bi)  [Orabug: 24292852]  
  - Btrfs: fix leaking of ordered extents after direct IO write error (Filipe Manana)  [Orabug: 23717870]  
  - Btrfs: fix error path when failing to submit bio for direct IO write (Filipe Manana)  [Orabug: 23717870]  
  - Btrfs: fix memory corruption on failure to submit bio for direct IO (Filipe Manana)  [Orabug: 23717870]  
  - Btrfs: fix extent accounting for partial direct IO writes (Filipe Manana)  [Orabug: 23717870]  
  - Btrfs: Direct I/O: Fix space accounting (chandan)  [Orabug: 23717870]  
  - Btrfs: fix warning of bytes_may_use (Liu Bo)  [Orabug: 23717870]  
  - xen: use same main loop for counting and remapping pages (Juergen Gross)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.1.el7uek]
changelog:
  - ol6-spec: update linux-firmware dependency to 20160616-44.git43e96a1e.0.10 (Chuck Anderson)  [Orabug: 24311968]  
  - ol7-spec: update dracut version dependency to 033-360.0.3 (Chuck Anderson)  [Orabug: 24308248]  
  - [2d8747c2] fixup! blk-mq: prevent double-unlock of mutex (Dan Duval)  [Orabug: 24376521]  
  - tcp: make challenge acks less predictable (Eric Dumazet)  [Orabug: 24010102]  
  - IBCM: dereference timewait_info only when needed (Santosh Shilimkar)  [Orabug: 24326732]  
  - ext4: update c/mtime on truncate up (Eryu Guan)  [Orabug: 24325361]  
  - vfs: add vfs_select_inode() helper (Miklos Szeredi)  [Orabug: 24009788]  {CVE-2016-6198} {CVE-2016-6197} 
  - vfs: rename: check backing inode being equal (Miklos Szeredi)  [Orabug: 24009788]  {CVE-2016-6198} {CVE-2016-6197} 
  - ovl: verify upper dentry before unlink and rename (Miklos Szeredi)  [Orabug: 24009788]  {CVE-2016-6198} {CVE-2016-6197} 
  - xen-pciback: mark device to be hidden on AER error trigger (Elena Ufimtseva)


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.3.el7uek]
changelog:
  - ocfs2: improve recovery performance (Junxiao Bi)  [Orabug: 24395729]  
  - qed: Utilize FW 8.10.3.0 (Yuval Mintz)  [Orabug: 24442553]  
  - blk-mq: mark request queue as mq asap (Ming Lei)  [Orabug: 24318720]  
  - lpfc: fix oops in lpfc_sli4_scmd_to_wqidx_distr() from lpfc_send_taskmgmt() (Mauricio Faria de Oliveira)  [Orabug: 24312616]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.7.el7uek]
changelog:
  - x86/xen: Add x86_platform.is_untracked_pat_range quirk to ignore ISA regions. (Konrad Rzeszutek Wilk)  [Orabug: 24566046]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.9.el7uek]
changelog:
  - xen-blkback: don't get ref for each queue (Bob Liu)  [Orabug: 24616917]  
  - NVMe: Fix obtaining command result (Keith Busch)  [Orabug: 24655742]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.10.el7uek]
changelog:
  - netfilter: x_tables: make sure e->next_offset covers remaining blob size (Florian Westphal)  [Orabug: 24682076]  {CVE-2016-4997} {CVE-2016-4998} 
  - netfilter: x_tables: validate e->target_offset early (Florian Westphal)  [Orabug: 24682076]  {CVE-2016-4997} {CVE-2016-4998}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.11.el7uek]
changelog:
  - ocfs2: Fix double put of recount tree in ocfs2_lock_refcount_tree() (Ashish Samant)  [Orabug: 24691860]  
  - megaraid_sas: Don't issue kill adapter for MFI controllers in case of PD list DCMD failure (Sumit Saxena)  [Orabug: 24506797]  
  - netfilter: x_tables: speed up jump target validation (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES (Pablo Neira Ayuso)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: remove unused comefrom hookmask argument (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: introduce and use xt_copy_counters_from_user (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: do compat validation via translate_table (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: xt_compat_match_from_user doesn't need a retval (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: ip6_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: ip_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: arp_tables: simplify translate_compat_table args (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: don't reject valid target size on some architectures (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: validate all offsets and sizes in a rule (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: check for bogus target offset (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: check standard target size too (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: add compat version of xt_check_entry_offsets (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: assert minimum target size (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: kill check_entry helper (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: add and use xt_check_entry_offsets (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: validate targets of jumps (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: don't move to non-existent next rule (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: fix unconditional helper (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134} 
  - netfilter: x_tables: check for size overflow (Florian Westphal)  [Orabug: 24691226]  {CVE-2016-3134}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.13.el7uek]
changelog:
  - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Scott Bauer)  [Orabug: 24803597]  {CVE-2016-5829}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.15.el7uek]
changelog:
  - drivers/nvme: provide a module parameter for setting number of I/O queues (Shan Hai)  [Orabug: 24914956]  
  - blk-mq: improve warning for running a queue on the wrong CPU (Jens Axboe)  [Orabug: 24914956]  
  - blk-mq: fix freeze queue race (Shan Hai)  [Orabug: 24914956]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.16.el7uek]
changelog:
  - mm: remove gup_flags FOLL_WRITE games from __get_user_pages() (Linus Torvalds)  [Orabug: 24927306]  {CVE-2016-5195}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.17.el7uek]
changelog:
  - sched: panic on corrupted stack end (Jann Horn)  [Orabug: 24971921]  {CVE-2016-1583} 
  - ecryptfs: forbid opening files without mmap handler (Jann Horn)  [Orabug: 24971921]  {CVE-2016-1583} 
  - proc: prevent stacking filesystems on top (Jann Horn)  [Orabug: 24971921]  {CVE-2016-1583}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.18.el7uek]
changelog:
  - uek-rpm ol7: change uek-rpm/ol7/update-el release value from 7.1 to 7.3 (Chuck Anderson)  [Orabug: 25050614]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.19.el7uek]
changelog:
  - acpi: Disable ACPI table override if securelevel is set (Linn Crosetto)  [Orabug: 25058966]  {CVE-2016-3699} 
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060060]  {CVE-2016-6480} {CVE-2016-6480} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059969]  {CVE-2016-6136} 
  - ecryptfs: don't allow mmap when the lower fs doesn't support it (Jeff Mahoney)  [Orabug: 25023269]  {CVE-2016-1583} {CVE-2016-1583} 
  - Revert "ecryptfs: forbid opening files without mmap handler" (Chuck Anderson)  [Orabug: 24971921]  {CVE-2016-1583} 
  - percpu: fix synchronization between synchronous map extension and chunk destruction (Tejun Heo)  [Orabug: 25060084]  {CVE-2016-4794} 
  - percpu: fix synchronization between chunk->map_extend_work and chunk destruction (Tejun Heo)  [Orabug: 25060084]  {CVE-2016-4794} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059898]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059898]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059752]  {CVE-2016-4569} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058894]  {CVE-2015-8956} 
  - ASN.1: Fix non-match detection failure on data overrun (David Howells)  [Orabug: 25059037]  {CVE-2016-2053} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059188]  {CVE-2016-3070}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.21.el7uek]
changelog:
  - NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25144380]  
  - sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner)  [Orabug: 25142868]  {CVE-2016-9555}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.22.el7uek]
changelog:
  - ocfs2: fix trans extend while free cached blocks (Junxiao Bi)  [Orabug: 25136991]  
  - ocfs2: fix trans extend while flush truncate log (Junxiao Bi)  [Orabug: 25136991]  
  - ocfs2: extend enough credits for freeing one truncate record while replaying truncate records (Xue jiufei)  [Orabug: 25136991]  
  - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (Andrey Ryabinin)  [Orabug: 25154096]  {CVE-2016-8650} {CVE-2016-8650} 
  - mlx4: avoid multiple free on id_map_ent (Wengang Wang)  [Orabug: 25159035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.23.el7uek]
changelog:
  - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo)  [Orabug: 25298601]  {CVE-2016-7117}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.25.el7uek]
changelog:
  - KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells)  [Orabug: 25306361]  {CVE-2016-7042} 
  - nvme: Limit command retries (Keith Busch)  [Orabug: 25374751]  
  - fs/proc/task_mmu.c: fix mm_access() mode parameter in pagemap_read() (Kenny Keslar)  [Orabug: 25374977]  
  - tcp: fix use after free in tcp_xmit_retransmit_queue() (Eric Dumazet)  [Orabug: 25374364]  {CVE-2016-6828} 
  - tunnels: Don't apply GRO to multiple layers of encapsulation. (Jesse Gross)  [Orabug: 25036352]  {CVE-2016-8666} 
  - i40e: Don't notify client(s) for DCB changes on all VSIs (Neerav Parikh)  [Orabug: 25046290]  
  - packet: fix race condition in packet_set_ring (Philip Pettersson)  [Orabug: 25231617]  {CVE-2016-8655} 
  - netlink: Fix dump skb leak/double free (Herbert Xu)  [Orabug: 25231692]  {CVE-2016-9806} 
  - ALSA: pcm : Call kill_fasync() in stream lock (Takashi Iwai)  [Orabug: 25231720]  {CVE-2016-9794} 
  - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet)  [Orabug: 25231751]  {CVE-2016-9793}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.26.el7uek]
changelog:
  - xen-netback: fix extra_info handling in xenvif_tx_err() (Paul Durrant)  [Orabug: 25445336]  
  - net: Documentation: Fix default value tcp_limit_output_bytes (Niklas Cassel)  [Orabug: 25458076]  
  - tcp: double default TSQ output bytes limit (Wei Liu)  [Orabug: 25458076]  
  - xenbus: fix deadlock on writes to /proc/xen/xenbus (David Vrabel)  [Orabug: 25430143]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.27.el7uek]
changelog:
  - vfio/pci: Fix integer overflows, bitmask check (Vlad Tsyrklevich)  [Orabug: 25164094]  {CVE-2016-9083} {CVE-2016-9084} 
  - Don't feed anything but regular iovec's to blk_rq_map_user_iov (Linus Torvalds)  [Orabug: 25231931]  {CVE-2016-9576} 
  - kvm: x86: Check memopp before dereference (CVE-2016-8630) (Owen Hofmann)  [Orabug: 25417387]  {CVE-2016-8630} 
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417799]  {CVE-2016-8646} 
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462755]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462799]  {CVE-2016-4485}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.28.el7uek]
changelog:
  - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov)  [Orabug: 25598257]  {CVE-2017-6074}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.29.el7uek]
changelog:
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25696677]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25696677]  {CVE-2017-2636} 
  - If Slot Status indicates changes in both Data Link Layer Status and Presence Detect, prioritize the Link status change. (Jack Vogel)  [Orabug: 25353783]  
  - PCI: pciehp: Leave power indicator on when enabling already-enabled slot (Ashok Raj)  [Orabug: 25353783]  
  - firewire: net: guard against rx buffer overflows (Stefan Richter)  [Orabug: 25451520]  {CVE-2016-8633} 
  - usbnet: cleanup after bind() in probe() (Oliver Neukum)  [Orabug: 25463898]  {CVE-2016-3951} 
  - cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind (Bjørn Mork)  [Orabug: 25463898]  {CVE-2016-3951} 
  - cdc_ncm: Add support for moving NDP to end of NCM frame (Enrico Mioso)  [Orabug: 25463898]  {CVE-2016-3951} 
  - x86/mm/32: Enable full randomization on i386 and X86_32 (Hector Marco-Gisbert)  [Orabug: 25463918]  {CVE-2016-3672} 
  - kvm: fix page struct leak in handle_vmon (Paolo Bonzini)  [Orabug: 25507133]  {CVE-2017-2596} 
  - crypto: mcryptd - Check mcryptd algorithm compatibility (tim)  [Orabug: 25507153]  {CVE-2016-10147} 
  - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (Jim Mattson)  [Orabug: 25507188]  {CVE-2016-9588} 
  - KVM: x86: drop error recovery in em_jmp_far and em_ret_far (Radim Krčmář)  [Orabug: 25507213]  {CVE-2016-9756} 
  - tcp: take care of truncations done by sk_filter() (Eric Dumazet)  [Orabug: 25507226]  {CVE-2016-8645} 
  - rose: limit sk_filter trim to payload (Willem de Bruijn)  [Orabug: 25507226]  {CVE-2016-8645} 
  - tipc: check minimum bearer MTU (Michal Kubeček)  [Orabug: 25507239]  {CVE-2016-8632} {CVE-2016-8632} 
  - fix minor infoleak in get_user_ex() (Al Viro)  [Orabug: 25507269]  {CVE-2016-9178} 
  - scsi: arcmsr: Simplify user_len checking (Borislav Petkov)  [Orabug: 25507319]  {CVE-2016-7425} 
  - scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (Dan Carpenter)  [Orabug: 25507319]  {CVE-2016-7425} 
  - tmpfs: clear S_ISGID when setting posix ACLs (Gu Zheng)  [Orabug: 25507341]  {CVE-2016-7097} {CVE-2016-7097} 
  - posix_acl: Clear SGID bit when setting file permissions (Jan Kara)  [Orabug: 25507341]  {CVE-2016-7097} {CVE-2016-7097} 
  - ext2: convert to mbcache2 (Jan Kara)  [Orabug: 25512366]  {CVE-2015-8952} 
  - ext4: convert to mbcache2 (Jan Kara)  [Orabug: 25512366]  {CVE-2015-8952} 
  - mbcache2: reimplement mbcache (Jan Kara)  [Orabug: 25512366]  {CVE-2015-8952} 
  - USB: digi_acceleport: do sanity checking for the number of ports (Oliver Neukum)  [Orabug: 25512466]  {CVE-2016-3140} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25682419]  {CVE-2017-6345} 
  - net/mlx4_core: Disallow creation of RAW QPs on a VF (Eli Cohen)  [Orabug: 25697847]  
  - ipv4: keep skb->dst around in presence of IP options (Eric Dumazet)  [Orabug: 25698300]  {CVE-2017-5970} 
  - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race (Peter Zijlstra)  [Orabug: 25698751]  {CVE-2017-6001} 
  - ip6_gre: fix ip6gre_err() invalid reads (Eric Dumazet)  [Orabug: 25699015]  {CVE-2017-5897} 
  - mpt3sas: Don't spam logs if logging level is 0 (Johannes Thumshirn)  [Orabug: 25699035]  
  - xen-netfront: cast grant table reference first to type int (Dongli Zhang)   
  - xen-netfront: do not cast grant table reference to signed short (Dongli Zhang)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.30.el7uek]
changelog:
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766898]  {CVE-2016-8399} {CVE-2016-8399} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765436]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751984]  {CVE-2017-7187}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.32.el7uek]
changelog:
  - x86/mm: Expand the exception table logic to allow new handling options (Tony Luck)  [Orabug: 25790387]  {CVE-2016-9644}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.33.el7uek]
changelog:
  - Revert "x86/mm: Expand the exception table logic to allow new handling options" (Brian Maly)  [Orabug: 25790387]  {CVE-2016-9644} 
  - Revert "fix minor infoleak in get_user_ex()" (Brian Maly)  [Orabug: 25790387]  {CVE-2016-9644}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.34.el7uek]
changelog:
  - uek-rpm: enable CONFIG_KSPLICE. (Jamie Iles)  [Orabug: 25698171]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 25698171]  
  - signal: protect SIGNAL_UNKILLABLE from unintentional clearing. (Jamie Iles)  [Orabug: 25698171]  
  - KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini)  [Orabug: 25719659]  {CVE-2017-2583} {CVE-2017-2583} 
  - ext4: store checksum seed in superblock (Darrick J. Wong)  [Orabug: 25719728]  {CVE-2016-10208} 
  - ext4: reserve code points for the project quota feature (Theodore Ts'o)  [Orabug: 25719728]  {CVE-2016-10208} 
  - ext4: validate s_first_meta_bg at mount time (Eryu Guan)  [Orabug: 25719728]  {CVE-2016-10208} 
  - ext4: clean up feature test macros with predicate functions (Darrick J. Wong)  [Orabug: 25719728]  {CVE-2016-10208} 
  - sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)  [Orabug: 25719793]  {CVE-2017-5986} 
  - tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)  [Orabug: 25720805]  {CVE-2017-6214} 
  - ip: fix IP_CHECKSUM handling (Paolo Abeni)  [Orabug: 25720839]  {CVE-2017-6347} 
  - udp: fix IP_CHECKSUM handling (Eric Dumazet)  [Orabug: 25720839]  {CVE-2017-6347} 
  - udp: do not expect udp headers in recv cmsg IP_CMSG_CHECKSUM (Willem de Bruijn)  [Orabug: 25720839]  {CVE-2017-6347} 
  - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft)  [Orabug: 25814641]  {CVE-2017-7184} 
  - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)  [Orabug: 25814641]  {CVE-2017-7184} 
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25877509]  {CVE-2016-7910}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-56.el7uek]
changelog:
  - bnxt: enable driver in x86_64 config files (Brian Maly)  [Orabug: 23221795]  
  - Revert "perf tools: Bump default sample freq to 4 kHz" (ashok.vairavan)  [Orabug: 23262978]  
  - SPARC64: UEK4 LDOMS DOMAIN SERVICES UPDATE 4 (Aaron Young)  [Orabug: 23292083]  
  - IB/ipoib v2: Add readout of statistics using ethtool (Hans Westgaard Ry)  [Orabug: 23105464]  
  - IB/core: Add encode/decode IB_RATE_25_GBPS (Hans Westgaard Ry)  [Orabug: 23084916]  
  - Revert "IPoIB: Protect tx_outstanding from parallel access" (Wengang Wang)  [Orabug: 23480903]  
  - Driver: Vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets (Shrikrishna Khare)  [Orabug: 23472394]  
  - ppp: take reference on channels netns (Guillaume Nault)  [Orabug: 23276689]  {CVE-2016-4805} 
  - bnxt_en: Support new ETHTOOL_{G|S}LINKSETTINGS API. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Don't allow autoneg on cards that don't support it. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add BCM5731X and BCM5741X device IDs. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add GRO logic for BCM5731X chips. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Refactor bnxt_gro_skb(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Define the supported chip numbers. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add PCI device ID for 57404 NPAR devices. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Enable NPAR (NIC Partitioning) Support. (Satish Baddipadige)  [Orabug: 23221795]  
  - bnxt_en: Handle VF_CFG_CHANGE event from firmware. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add new function bnxt_reset(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add function for VF driver to query default VLAN. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Simplify VLAN receive logic. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Enable and disable RX CTAG and RX STAG VLAN acceleration together. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix tx push race condition. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Use dma_rmb() instead of rmb(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add BCM57314 device ID. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Simplify and improve unsupported SFP+ module reporting. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix length value in dmesg log firmware error message. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Improve the delay logic for firmware response. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Reduce maximum ring pages if page size is 64K. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Report PCIe link speed and width during driver load (Ajit Khaparde)  [Orabug: 23221795]  
  - bnxt_en: Add Support for ETHTOOL_GMODULEINFO and ETHTOOL_GMODULEEEPRO (Ajit Khaparde)  [Orabug: 23221795]  
  - bnxt_en: Fix invalid max channel parameter in ethtool -l. (Satish Baddipadige)  [Orabug: 23221795]  
  - bnxt_en: Add async event handling for speed config changes. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Call firmware to approve VF MAC address change. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Shutdown link when device is closed. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Disallow forced speed for 10GBaseT devices. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Improve ethtool .get_settings(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Check for valid forced speed during ethtool -s. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add unsupported SFP+ module warnings. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Set async event bits when registering with the firmware. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add get_eee() and set_eee() ethtool support. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add EEE setup code. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add basic EEE support. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Improve flow control autoneg with Firmware 1.2.1 interface. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Update to Firmware 1.2.2 spec. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add workaround to detect bad opaque in rx completion (part 2) (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add workaround to detect bad opaque in rx completion (part 1) (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Setup multicast properly after resetting device. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Need memory barrier when processing the completion ring. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Divide a page into 32K buffers for the aggregation ring if necessary. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Limit RX BD pages to be no bigger than 32K. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Don't fallback to INTA on VF. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix ethtool -a reporting. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix typo in bnxt_hwrm_set_pause_common(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Implement proper firmware message padding. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Initialize CP doorbell value before ring allocation (Prashant Sreedharan)  [Orabug: 23221795]  
  - bnxt_en: Enable AER support. (Satish Baddipadige)  [Orabug: 23221795]  
  - bnxt_en: Include hardware port statistics in ethtool -S. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Include some hardware port statistics in ndo_get_stats64(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add port statistics support. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Extend autoneg to all speeds. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Use common function to get ethtool supported flags. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add reporting of link partner advertisement. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Refactor bnxt_fw_to_ethtool_advertised_spds(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add hwrm_send_message_silent(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Refactor _hwrm_send_message(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add installed-package firmware version reporting via Ethtool GDRVINFO (Rob Swindell)  [Orabug: 23221795]  
  - bnxt_en: Fix dmesg log firmware error messages. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Use firmware provided message timeout value. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add coalescing support for tx rings. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Refactor bnxt_hwrm_set_coal(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Store irq coalescing timer values in micro seconds. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Send PF driver unload notification to all VFs. (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: Improve bnxt_vf_update_mac(). (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: Fix zero padding of tx push data. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Failure to update PHY is not fatal condition. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Remove unnecessary call to update PHY settings. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Poll link at the end of __bnxt_open_nic(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Reduce default ring sizes. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix implementation of tx push operation. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Remove 20G support and advertise only 40GbaseCR4. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Cleanup and Fix flow control setup logic (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix ethtool autoneg logic. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix crash in bnxt_free_tx_skbs() during tx timeout. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Exclude rx_drop_pkts hw counter from the stack's rx_dropped counter. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Ring free response from close path should use completion ring (Prashant Sreedharan)  [Orabug: 23221795]  
  - net: bnxt: always return values from _bnxt_get_max_rings (Arnd Bergmann)  [Orabug: 23221795]  
  - bnxt_en: Reset embedded processor after applying firmware upgrade (Rob Swindell)  [Orabug: 23221795]  
  - bnxt_en: Zero pad firmware messages to 128 bytes. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Modify ethtool -l|-L to support combined or rx/tx rings. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Modify init sequence to support shared or non shared rings. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Modify bnxt_get_max_rings() to support shared or non shared rings. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Re-structure ring indexing and mapping. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Check for NULL rx or tx ring. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Separate bnxt_{rx|tx}_ring_info structs from bnxt_napi struct. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Refactor bnxt_dbg_dump_states(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Add BCM57301 & BCM57402 devices. (David Christensen)  [Orabug: 23221795]  
  - bnxt_en: Update to Firmware interface spec 1.0.0. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Keep track of the ring group resource. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Improve VF resource accounting. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Cleanup bnxt_hwrm_func_cfg(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Check hardware resources before enabling NTUPLE. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Don't treat single segment rx frames as GRO frames. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Allocate rx_cpu_rmap only if Accelerated RFS is enabled. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Increment checksum error counter only if NETIF_F_RXCSUM is set. (Satish Baddipadige)  [Orabug: 23221795]  
  - bnxt_en: Add support for upgrading APE/NC-SI firmware via Ethtool FLASHDEV (Rob Swindell)  [Orabug: 23221795]  
  - bnxt_en: Optimize ring alloc and ring free functions. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: support hwrm_func_drv_unrgtr command (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: Implement missing tx timeout reset logic. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Don't cancel sp_task from bnxt_close_nic(). (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Change bp->state to bitmap. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix bitmap declaration to work on 32-bit arches. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Setup uc_list mac filters after resetting the chip. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: enforce proper storing of MAC address (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: Fixed incorrect implementation of ndo_set_mac_address (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: More robust SRIOV cleanup sequence. (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: Fix comparison of u16 sw_id against negative value. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: map CAG_REG_LEGACY_INT_STATUS_MASK to GRC window #4 (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: Determine tcp/ipv6 RSS hash type correctly. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Change sp events definitions to represent bit position. (Jeffrey Huang)  [Orabug: 23221795]  
  - bnxt_en: add VXLAN dependency (Arnd Bergmann)  [Orabug: 23221795]  
  - bnxt_en: Fix compile warnings when CONFIG_INET is not set. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: Fix compile errors when CONFIG_BNXT_SRIOV is not set. (Michael Chan)  [Orabug: 23221795]  
  - bnxt_en: New Broadcom ethernet driver. (Michael Chan)  [Orabug: 23221795]  
  - fnic/fnic_scsi.c: set missing new_sc flag (Satish Kharat)  [Orabug: 23071668]  
  - ixgbe: Bump version number (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add KR backplane support for x550em_a (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add support for SGMII backplane interface (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add support for SFPs with retimer (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Introduce function to control MDIO speed (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Read and parse NW_MNG_IF_SEL register (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Read and set instance id (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Use new methods for PHY access (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add support for x550em_a 10G MAC type (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Use method pointer to access IOSF devices (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add definitions for x550em_a 10G MAC (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add support for single-port X550 device (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Take manageability semaphore for firmware commands (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Clean up interface for firmware commands (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Correct length check for round up (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Change the lan_id and func fields to a u8 to avoid casts (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Delete some unused register definitions (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add support for toggling VLAN filtering flag via ethtool (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Place SWFW semaphore in known valid state at probe (Don Skidmore)  [Orabug: 23177316]  
  - ixgbe: add a callback to set the maximum transmit bitrate (Rostislav Pehlivanov)  [Orabug: 23177316]  
  - ixgbe: Fix flow control for Xeon D KR backplane (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Make all unchanging ops structures const (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Avoid adding VLAN 0 twice to VLVF and VFTA (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Do not allow PF to add VLVF entry unless it actually needs it (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Extend trust to allow guest to set unicast address (chas williams)  [Orabug: 23177316]  
  - ixgbevf: use bit operations for setting and checking resets (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbe: on recv increment rx.ring->stats.yields (Pavel Tikhomirov)  [Orabug: 23177316]  
  - ixgbevf: fix error code path when setting MAC address (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbevf: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann)  [Orabug: 23177316]  
  - ixgbe: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann)  [Orabug: 23177316]  
  - ixgbe: Use udelay to avoid sleeping while atomic (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Fix ATR so that it correctly handles IPv6 extension headers (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Store VXLAN port number in network order (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Fix for RAR0 not being set to default MAC addr (Tushar Dave)  [Orabug: 23177316]  
  - ixgbe: fix dates on header of ixgbe_model.h (John Fastabend)  [Orabug: 23177316]  
  - ixgbe: use u32 instead of __u32 in model header (John Fastabend)  [Orabug: 23177316]  
  - net: ixgbe: add minimal parser details for ixgbe (John Fastabend)  [Orabug: 23177316]  
  - ixgbe: Make ATR recognize IPv6 extended headers (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Fix MDD events generated when FCoE+SRIOV are enabled (Neerav Parikh)  [Orabug: 23177316]  
  - ixgbe: Fix to get FDMI HBA attributes information with X550 (Usha Ketineni)  [Orabug: 23177316]  
  - ixgbe: Correct handling of any outer UDP checksum setting (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: do not call check_link for ethtool in ixgbe_get_settings() (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbe: fix broken PFC with X550 (Vasu Dev)  [Orabug: 23177316]  
  - ixgbe: use correct FCoE DDP max check (Vasu Dev)  [Orabug: 23177316]  
  - ixgbe: Fill at least min credits to a TC credit refills (Vasu Dev)  [Orabug: 23177316]  
  - ixgbe: Fix bugs in ixgbe_clear_vf_vlans() (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Correct X550EM_x revision check (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: fix RSS limit for X550 (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbe: Clean up redundancy in hw_enc_features (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: report correct media type for KR, KX and KX4 interfaces (Veola Nazareth)  [Orabug: 23177316]  
  - ixgbe: add support for QSFP PHY types in ixgbe_get_settings() (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbevf: minor cleanups for ixgbevf_set_itr() (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbevf: Fix handling of NAPI budget when multiple queues are enabled per vector (William Dauchy)  [Orabug: 23177316]  
  - ixgbe: do not report 2.5 Gbps as supported (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbe: Clean stale VLANs when changing port VLAN or resetting (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Clear stale pool mappings (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Fix VLAN promisc in relation to SR-IOV (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Add support for VLAN promiscuous with SR-IOV (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Reorder search to work from the top down instead of bottom up (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Add support for adding/removing VLAN on PF bypassing the VLVF (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Simplify configuration of setting VLVF and VLVFB (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Reduce VT code indent in set_vfta by introducing jump label (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Simplify definitions for regidx and bit in set_vfta (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Fix SR-IOV VLAN pool configuration (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Return error on failure to allocate mac_table (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbevf: Handle extended IPv6 headers in Tx path (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Always turn PHY power on when requested (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Handle extended IPv6 headers in Tx path (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Save VF info and take references (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Wait for master disable to be set (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Correct spec violations by waiting after reset (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Update PTP to support X550EM_x devices (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Allow FDB entries access to more RAR filters (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Use __dev_uc_sync and __dev_uc_unsync for unicast addresses (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Refactor MAC address configuration code (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbevf: Minor cleanups (Mark Rustad)  [Orabug: 23177316]  
  - ixgbevf: Use a private workqueue to avoid certain possible hangs (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Use private workqueue to avoid certain possible hangs (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Add support for newer thermal alarm (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Prevent KR PHY reset in ixgbe_init_phy_ops_x550em (Mark Rustad)  [Orabug: 23177316]  
  - ixgbevf: fix spoofed packets with random MAC (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbevf: use ether_addr_copy instead of memcpy (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbe: Remove CS4227 diagnostic code (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe/ixgbevf: use napi_schedule_irqoff() (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbevf: Limit lowest interrupt rate for adaptive interrupt moderation to 12K (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: Add KR mode support for CS4227 chip (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Fix handling of NAPI budget when multiple queues are enabled per vector (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe: fix multiple kernel-doc errors (Jean Sacren)  [Orabug: 23177316]  
  - ixgbe: Delete redundant include file (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: drop null test before destroy functions (Julia Lawall)  [Orabug: 23177316]  
  - ixgbe: Reset interface after enabling SR-IOV (Alexander Duyck)  [Orabug: 23177316]  
  - ixgbe, ixgbevf: Add new mbox API xcast mode (Hiroshi Shimamoto)  [Orabug: 23177316]  
  - ixgbe: Check for setup_internal_link method (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: Fix CS4227-related semaphore error on reset failure (Mark Rustad)  [Orabug: 23177316]  
  - ixgbe: disable LRO by default (Emil Tantilov)  [Orabug: 23177316]  
  - ixgbe: add flow control ethertype to the anti-spoofing filter (Emil Tantilov)  [Orabug: 23177316]  
  - i40e: queue-specific settings for interrupt moderation (Kan Liang)  [Orabug: 23176970]  
  - NVMe: IO ending fixes on surprise removal (Keith Busch)  [Orabug: 22620486]  
  - nvme: temporary fix for Apple controller reset (Stephan Günther)  [Orabug: 22620486]  
  - nvme: add missing unmaps in nvme_queue_rq (Christoph Hellwig)  [Orabug: 22620486]  
  - NVMe: default to 4k device page size (Nishanth Aravamudan)  [Orabug: 22620486]  
  - NVMe: reap completion entries when deleting queue (Keith Busch)  [Orabug: 22620486]  
  - NVMe: Fix possible arithmetic overflow for max segments (Keith Busch)  [Orabug: 22620486]  
  - NVMe: add support for Apple NVMe controller (Stephan Günther)  [Orabug: 22620486]  
  - NVMe: use split lo_hi_{read,write}q (Stephan Günther)  [Orabug: 22620486]  
  - NVMe: Increase the max transfer size when mdts is 0 (Sathyavathi M)  [Orabug: 22620486]  
  - nvme: fix 32-bit build warning (Arnd Bergmann)  [Orabug: 22620486]  
  - NVMe: Add explicit block config dependency (Keith Busch)  [Orabug: 22620486]  
  - nvme: move to a new drivers/nvme/host directory (Jay Sternberg)  [Orabug: 22620486]  
  - block: export blkdev_reread_part() and __blkdev_reread_part() (Jarod Wilson)  [Orabug: 22620486]  
  - Nvme: fix build error (Jason Luo)  [Orabug: 22620486]  
  - Nvme: fix several build errors (Jason Luo)  [Orabug: 22620486]  
  - nvme: properly handle partially initialized queues in nvme_create_io_queues (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: merge nvme_dev_start, nvme_dev_resume and nvme_async_probe (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: factor reset code into a common helper (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: delete dev from dev_list in nvme_reset (Christoph Hellwig)  [Orabug: 22620486]  
  - NVMe: Namespace removal simplifications (Keith Busch)  [Orabug: 22620486]  
  - nvme: merge nvme_dev_reset into nvme_reset_failed_dev (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme.h: add missing nvme_id_ctrl endianess annotations (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: move hardware structures out of the uapi version of nvme.h (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: add a local nvme.h header (Christoph Hellwig)  [Orabug: 22620486]  
  - NVMe: Simplify device resume on io queue failure (Keith Busch)  [Orabug: 22620486]  
  - NVMe: Reference count open namespaces (Keith Busch)  [Orabug: 22620486]  
  - NVMe: Using PRACT bit to generate and verify PI by controller (Alok Pandey)  [Orabug: 22620486]  
  - NVMe: removed unused nn var from nvme_dev_add (Matias Bjørling)  [Orabug: 22620486]  
  - NVMe: Set queue max segments (Keith Busch)  [Orabug: 22620486]  
  - NVMe: Add nvme subsystem reset IOCTL (Jon Derrick)  [Orabug: 22620486]  
  - NVMe: Add nvme subsystem reset support (Keith Busch)  [Orabug: 22620486]  
  - NVMe:Remove unreachable code in nvme_abort_req (Sunad Bhandary)  [Orabug: 22620486]  
  - nvme: Fixes u64 division which breaks i386 builds (Jon Derrick)  [Orabug: 22620486]  
  - NVMe: Use CMB for the IO SQes if available (Jon Derrick)  [Orabug: 22620486]  
  - NVMe: Unify SQ entry writing and doorbell ringing (Jon Derrick)  [Orabug: 22620486]  
  - NVMe: Reread partitions on metadata formats (Keith Busch)  [Orabug: 22620486]  
  - NVMe: Fix irq freeing when queue_request_irq fails (Jon Derrick)  [Orabug: 22620486]  
  - NVMe: Memory barrier before queue_count is incremented (Jon Derrick)  [Orabug: 22620486]  
  - drivers/block/nvme-core.c: fix build with gcc-4.4.4 (Andrew Morton)  [Orabug: 22620486]  
  - block: nvme-scsi: Catch kcalloc failure (Axel Lin)  [Orabug: 22620486]  
  - nvme: submit internal commands through the block layer (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: fail SCSI read/write command with unsupported protection bit (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: report the DPOFUA in MODE_SENSE (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: simplify and cleanup the READ/WRITE SCSI CDB parsing code (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: first round at deobsfucating the SCSI translation code (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: fix scsi translation error handling (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: split nvme_trans_send_fw_cmd (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: store a struct device pointer in struct nvme_dev (Christoph Hellwig)  [Orabug: 22620486]  
  - nvme: consolidate synchronous command submission helpers (Christoph Hellwig)  [Orabug: 22620486]  
  - tipc: check nl sock before parsing nested attributes (Richard Alpe)  [Orabug: 23347071]  {CVE-2016-4951} 
  - get_rock_ridge_filename(): handle malformed NM entries (Al Viro)  [Orabug: 23346943]  {CVE-2016-4913} 
  - Btrfs: incremental send, check if orphanized dir inode needs delayed rename (Filipe Manana)  [Orabug: 22984202]  
  - sunrpc: Update RPCBIND_MAXNETIDLEN (Chuck Lever)  [Orabug: 22695683]  
  - svcrdma: Support IPv6 with NFS/RDMA (Shirley Ma)  [Orabug: 22695683]  
  - xprtrdma: Add rdma6 option to support NFS/RDMA IPv6 (Shirley Ma)  [Orabug: 22695683]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-57.el7uek]
changelog:
  - PCI: Mark Intel i40e NIC INTx masking as broken (Alex Williamson)  [Orabug: 23176970]  
  - i40e: fix an uninitialized variable bug (Dan Carpenter)  [Orabug: 23176970]  
  - i40e: Bump version from 1.5.10 to 1.5.16 (Bimmy Pujari)  [Orabug: 23176970]  
  - i40e: don't add broadcast filter for VFs (Mitch Williams)  [Orabug: 23176970]  
  - i40e/i40evf: properly report Rx packet hash (Mitch Williams)  [Orabug: 23176970]  
  - i40e: set context to use VSI RSS LUT for SR-IOV (Ashish Shah)  [Orabug: 23176970]  
  - i40e: Correct UDP packet header for non_tunnel-ipv6 (Akeem G Abodunrin)  [Orabug: 23176970]  
  - i40e: change Rx hang message into a WARN_ONCE (Jacob Keller)  [Orabug: 23176970]  
  - i40e: Refactor ethtool get_settings (Catherine Sullivan)  [Orabug: 23176970]  
  - i40e: lie to the VF (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Add vf-true-promisc-support priv flag (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40e: Implement the API function for aq_set_switch_config (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Add allmulti support for the VF (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40e: Add support for disabling all link and change bits needed for PHY interactions (Kevin Scott)  [Orabug: 23176970]  
  - i40e: constify i40e_client_ops structure (Julia Lawall)  [Orabug: 23176970]  
  - i40e: fix misleading indentation (Arnd Bergmann)  [Orabug: 23176970]  
  - i40e: Test memory before ethtool alloc succeeds (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40evf: Allocate Rx buffers properly (Mitch Williams)  [Orabug: 23176970]  
  - i40e/i40evf: Remove unused hardware receive descriptor code (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40evf: refactor receive routine (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40evf: Drop packet split receive routine (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Refactor receive routine (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e/i40evf: Remove reference to ring->dtype (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Drop packet split receive routine (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e/i40evf: Refactor tunnel interpretation (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40evf: make use of BIT() macro to avoid signed left shift (Jacob Keller)  [Orabug: 23176970]  
  - i40e: make use of BIT() macro to prevent left shift of signed values (Jacob Keller)  [Orabug: 23176970]  
  - i40e/i40evf: fix I40E_MASK signed shift overflow warnings (Jacob Keller)  [Orabug: 23176970]  
  - i40e/i40evf : Bump driver version from 1.5.5 to 1.5.10 (Harshitha Ramamurthy)  [Orabug: 23176970]  
  - i40e: Update device ids for X722 (Catherine Sullivan)  [Orabug: 23176970]  
  - i40e: Drop extra copy of function (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Use consistent type for vf_id (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: PTP - avoid aggregate return warnings (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Fix uninitialized variable (Catherine Sullivan)  [Orabug: 23176970]  
  - i40evf: RSS Hash Option parameters (Carolyn Wyborny)  [Orabug: 23176970]  
  - i40e: Remove HMC AQ API implementation (Neerav Parikh)  [Orabug: 23176970]  
  - i40e: Limit the number of MAC and VLAN addresses that can be added for VFs (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40e: Change the default for VFs to be not privileged (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40evf: Add driver support for promiscuous mode (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40e: Add VF promiscuous mode driver support (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40e: Add promiscuous on VLAN support (Greg Rose)  [Orabug: 23176970]  
  - i40e/i40evf: Only offload VLAN tag if enabled (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Remove zero check (Greg Rose)  [Orabug: 23176970]  
  - i40e: Add DeviceID for X722 QSFP+ (Kamil Krawczyk)  [Orabug: 23176970]  
  - i40e: Add device capability which defines if update is available (Michal Kosiarz)  [Orabug: 23176970]  
  - i40evf: Allow PF driver to configure RSS (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Specify AQ event opcode to wait for (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Code cleanup in i40e_add_fdir_ethtool (Shannon Nelson)  [Orabug: 23176970]  
  - i40evf: Don't Panic (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Add support for configuring VF RSS (Mitch Williams)  [Orabug: 23176970]  
  - i40e/i40evf: Add support for IPIP and SIT offloads (Alexander Duyck)  [Orabug: 23176970]  
  - i40e/i40evf: Clean up feature flags (Alexander Duyck)  [Orabug: 23176970]  
  - i40evf: properly handle VLAN features (Mitch Williams)  [Orabug: 23176970]  
  - i40e/i40evf: Bump patch from 1.5.2 to 1.5.5 (Harshitha Ramamurthy)  [Orabug: 23176970]  
  - i40e: Input set mask constants for RSS, flow director, and flex bytes (Kiran Patil)  [Orabug: 23176970]  
  - i40e: Move NVM event wait check to NVM code (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Add RSS configuration to virtual channel (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Move NVM variable out of AQ struct (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Restrict VF poll mode to only single function mode devices (Shannon Nelson)  [Orabug: 23176970]  
  - i40e/i40evf: Faster RX via avoiding FCoE (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e/i40evf: Drop unused tx_ring argument (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e/i40evf: Move stack var deeper (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Move HW flush (Akeem G Abodunrin)  [Orabug: 23176970]  
  - i40e: Leave debug_mask cleared at init (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Inserting a HW capability display info (Deepthi Kavalur)  [Orabug: 23176970]  
  - i40e/i40evf: Fix TSO checksum pseudo-header adjustment (Alexander Duyck)  [Orabug: 23176970]  
  - i40e/i40evf: Bump patch from 1.5.1 to 1.5.2 (Avinash Dayanand)  [Orabug: 23176970]  
  - i40e: Request PHY media event at reset time (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Lower some message levels (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Fix for supported link modes in 10GBaseT PHY's (Avinash Dayanand)  [Orabug: 23176970]  
  - i40evf: Fix get_rss_aq (Catherine Sullivan)  [Orabug: 23176970]  
  - i40e: Disable link polling (Shannon Nelson)  [Orabug: 23176970]  
  - i40evf: Add longer wait after remove module (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Make VF resets more reliable (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Add new device ID for X722 (Catherine Sullivan)  [Orabug: 23176970]  
  - i40evf: Fix VLAN features (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Remove unused variable (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Enable Geneve offload for FW API ver > 1.4 for XL710/X710 devices (Anjali Singhai Jain)  [Orabug: 23176970]  
  - i40e: remove redundant check on vsi->active_vlans (Colin King)  [Orabug: 23176970]  
  - i40e/i40evf: Bump patch from 1.4.25 to 1.5.1 (Catherine Sullivan)  [Orabug: 23176970]  
  - i40e: Change comment to reflect correct function name (Mitch Williams)  [Orabug: 23176970]  
  - i40evf: Add additional check for reset (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Change unknown event error msg to ignore message (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Added code to prevent double resets (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Notify VFs of all resets (Mitch Williams)  [Orabug: 23176970]  
  - i40e: Remove timer and task only if created (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Assure that adminq is alive in debug mode (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Remove MSIx only if created (Shannon Nelson)  [Orabug: 23176970]  
  - i40e: Fix up return code (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Save off VSI resource count when updating VSI (Kevin Scott)  [Orabug: 23176970]  
  - i40e/i40evf: Remove I40E_MAX_USER_PRIORITY define (Catherine Sullivan)  [Orabug: 23176970]  
  - i40e/i40evf: Fix casting in transmit code (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e/i40evf: Fix handling of boolean logic in polling routines (Alexander Duyck)  [Orabug: 23176970]  
  - i40evf: remove dead code (Alan Cox)  [Orabug: 23176970]  
  - i40e/i40evf: Allow up to 12K bytes of data per Tx descriptor instead of 8K (Alexander Duyck)  [Orabug: 23176970]  
  - i40e: call ndo_stop() instead of dev_close() when running offline selftest (Stefan Assmann)  [Orabug: 23176970]  
  - i40e/i40evf: Limit TSO to 7 descriptors for payload instead of 8 per packet (Alexander Duyck)  [Orabug: 23176970]  
  - i40e: fix errant PCIe bandwidth message (Jesse Brandeburg)  [Orabug: 23176970]  
  - i40e: Add support for client interface for IWARP driver (Anjali Singhai Jain)  [Orabug: 23176970]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-58.el7uek]
changelog:
  - ol6-spec: remove require for ql23xx-firmware-3.03.27 (Ethan Zhao)  [Orabug: 23724175]  
  - ol7-spec: update version dependency for linux-firmware package (Ethan Zhao)  [Orabug: 23701430]  
  - ol6-spec: update version dependency for linux-firmware package (Ethan Zhao)  [Orabug: 23701352]  
  - xen/acpi: Disable ACPI memory hotplug when running under Xen. (Konrad Rzeszutek Wilk)   
  - mlx4_core: use higher log_rdmarc_per_qp when scale_profile is set (Mukesh Kacker)  [Orabug: 23725942]  
  - RDS: IB: change rds_ib_active_bonding_excl_ips to only RFC3927 space (Todd Vierling)   
  - RDS: avoid large pages for sg allocation for TCP transport (Santosh Shilimkar)  [Orabug: 23635336]  
  - bnx2x: Update driver version to 1.713.10 (Rajesh Borundia)  [Orabug: 23718192]  
  - bnx2x: allow adding VLANs while interface is down (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: avoid leaking memory on bnx2x_init_one() failures (Vitaly Kuznetsov)  [Orabug: 23718192]  
  - bnx2x: Prevent false warning for lack of FC NPIV (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: don't wait for Tx completion on recovery (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: fix indentation in bnx2x_sp_task() (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: define event data reserved fields as little-endian (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: define fields of struct cfc_del_event_data as little-endian (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: access cfc_del_event only if the opcode is CFC_DEL (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: fix receive of VF->PF mailbox messages by the PF on big-endian (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: fix sending VF->PF messages on big-endian (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: fix crash on big-endian when adding VLAN (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: Fix 84833 phy command handler (Yuval Mintz)   
  - bnx2x: Fix led setting for 84858 phy. (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Correct 84858 PHY fw version (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Fix 84833 RX CRC (Yuval Mintz)   
  - bnx2x: Fix link-forcing for KR2 (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Add missing HSI for big-endian machines (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Warn about grc timeouts in register dump (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: extend DCBx support (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Add support for single-port DCBx (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Remove unneccessary EXPORT_SYMBOL (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Prevent FW assertion when using Vxlan (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: remove rx_pkt/rx_calls (Eric Dumazet)  [Orabug: 23718192]  
  - bnx2x: avoid soft lockup in bnx2x_poll() (Eric Dumazet)  [Orabug: 23718192]  
  - bnx2x: simplify distinction between port and func stats (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: change FW GRO error message to WARN_ONCE (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: drop redundant error message about allocation failure (Michal Schmidt)  [Orabug: 23718192]  
  - bnx2x: Utilize FW 7.13.1.0. (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Show port statistics in Multi-function (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Add new SW stat 'tx_exhaustion_events' (Yuval Mintz)  [Orabug: 23718192]  
  - bnx2x: Fix vxlan removal (Yuval Mintz)  [Orabug: 23718192]  
  - net: move skb_mark_napi_id() into core networking stack (Eric Dumazet)  [Orabug: 23718192]  
  - bnx2x: remove bnx2x_low_latency_recv() support (Eric Dumazet)  [Orabug: 23718192]  
  - bnx2x: Add FW 7.13.1.0. (Yuval Mintz)  [Orabug: 23718192]  
  - be2iscsi: Update the driver version (Jitendra Bhivare)  [Orabug: 23712824]  
  - be2iscsi: Replace _bh with _irqsave/irqrestore (Jitendra Bhivare)  [Orabug: 23712824]  
  - be2iscsi: Remove unnecessary synchronize_irq() before free_irq() (Lars-Peter Clausen)  [Orabug: 23712824]  
  - be2iscsi:Add missing error check in beiscsi_eeh_resume (Nicholas Krause)  [Orabug: 23712824]  
  - atl2: Disable unimplemented scatter/gather feature (Ben Hutchings)  [Orabug: 23703754]  {CVE-2016-2117} 
  - be2net: Fix provisioning of RSS for VFs in multi-partition configurations (Somnath Kotur)  [Orabug: 23641442]  
  - be2net: Enable Wake-On-LAN from shutdown for Skyhawk (Sriharsha Basavapatna)  [Orabug: 23641442]  
  - be2net: use max-TXQs limit too while provisioning VF queue pairs (Suresh Reddy)  [Orabug: 23641442]  
  - benet: be_resume needs to protect be_open with rtnl_lock (Hannes Frederic Sowa)  [Orabug: 23641442]  
  - be2net: Don't leak iomapped memory on removal. (Douglas Miller)  [Orabug: 23641442]  
  - be2net: don't enable multicast flag in be_enable_if_filters() routine (Venkat Duvvuru)  [Orabug: 23641442]  
  - be2net: Fix a UE caused by passing large frames to the ASIC (ajit.khaparde@broadcom.com)  [Orabug: 23641442]  
  - be2net: Declare some u16 fields as u32 to improve performance (ajit.khaparde@broadcom.com)  [Orabug: 23641442]  
  - be2net: Fix pcie error recovery in case of NIC+RoCE adapters (Padmanabh Ratnakar)  [Orabug: 23641442]  
  - VSOCK: Only check error on skb_recv_datagram when skb is NULL (Jorgen Hansen)  [Orabug: 23718522]  
  - VSOCK: Detach QP check should filter out non matching QPs. (Jorgen Hansen)  [Orabug: 23718522]  
  - x86/mce: Ensure offline CPUs don't participate in rendezvous process (Ashok Raj)  [Orabug: 23520972]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-59.el7uek]
changelog:
  - Enable CONFIG_CONNTRACK_ZONES for Ol6 (Manjunath Govindashetty)  [Orabug: 23755115]  
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (ashok.vairavan)  [Orabug: 23278057]  
  - offload ib subnet manager port and node get info query handling. (Rama Nichanamatlu)  [Orabug: 23750258]  
  - IB/ipoib: Adjust queue sizes (Ajaykumar Hotchandani)  [Orabug: 23302017]  
  - IB/ipoib: Change send workqueue size for CM mode (Ajaykumar Hotchandani)  [Orabug: 23254764]  
  - qed: Add support for qed and qede drivers from Qlogic in UEK4 (Manjunath Govindashetty)  [Orabug: 23732603]  
  - qed: Protect the doorbell BAR with the write barriers. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: Add missing port-mode (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Fix returning unlimited SPQ entries (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: Don't reset statistics on inner reload (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Prevent VF from Tx-switching 'promisc' (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Correct default vlan behavior (Yuval Mintz)  [Orabug: 23732603]  
  - qed: fix qed_fill_link() error handling (Arnd Bergmann)  [Orabug: 23732603]  
  - qed: Don't config min BW on 100g on link flap (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Prevent 100g from working in MSI (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: Add missing 100g init mode (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Save min/max accross dcbx-change (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Fix allocation in interrupt context (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qede: Don't expose self-test for VFs (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Reload on GRO changes (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Fix VF minimum BW setting (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Reset the enable flag for eth protocol. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: signedness bug in qed_dcbx_process_tlv() (Dan Carpenter)  [Orabug: 23732603]  
  - qede: Fix DMA address APIs usage (Manish Chopra)  [Orabug: 23732603]  
  - qed: add support for dcbx. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: Remove a stray tab (Dan Carpenter)  [Orabug: 23732603]  
  - qed: VFs gracefully accept lack of PM (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Allow more than 16 VFs (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Reset link on IOV disable (Manish Chopra)  [Orabug: 23732603]  
  - qed: Improve VF interrupt reset (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Correct PF-sanity check (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: Tx-switching configuration (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: support ndo_get_vf_config (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: IOV support spoof-checking (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: IOV link control (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: Support forced MAC (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: Support PVID configuration (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Add VF support (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Align TLVs (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Bulletin and Link (Yuval Mintz)  [Orabug: 23732603]  
  - qed: IOV l2 functionality (Yuval Mintz)  [Orabug: 23732603]  
  - qed: IOV configure and FLR (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Introduce VFs (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Add VF->PF channel infrastructure (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Add CONFIG_QED_SRIOV (Yuval Mintz)  [Orabug: 23732603]  
  - qede: uninitialized variable in qede_start_xmit() (Dan Carpenter)  [Orabug: 23732603]  
  - qede: prevent chip hang when increasing channels (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: Apply tunnel configurations after PF start (Manish Chopra)  [Orabug: 23732603]  
  - qede: add implementation for internal loopback test. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qede: add support for selftests. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: add infrastructure for device self tests. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: Add PF min bandwidth configuration support (Manish Chopra)  [Orabug: 23732603]  
  - qed: Add PF max bandwidth configuration support (Manish Chopra)  [Orabug: 23732603]  
  - qed: Add vport WFQ configuration APIs (Manish Chopra)  [Orabug: 23732603]  
  - qed: add support for link pause configuration. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed*: Conditions for changing link (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Add support for ethtool private flags (Yuval Mintz)  [Orabug: 23732603]  
  - qed*: Align statistics names (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Fix single MTU sized packet from firmware GRO flow (Manish Chopra)  [Orabug: 23732603]  
  - qede: Fix setting Skb network header (Manish Chopra)  [Orabug: 23732603]  
  - qede: Fix various memory allocation error flows for fastpath (Manish Chopra)  [Orabug: 23732603]  
  - qede: Add fastpath support for tunneling (Manish Chopra)  [Orabug: 23732603]  
  - qed: Enable GRE tunnel slowpath configuration (Manish Chopra)  [Orabug: 23732603]  
  - qed/qede: Add VXLAN tunnel slowpath configuration support (Manish Chopra)  [Orabug: 23732603]  
  - qed: Add infrastructure support for tunneling (Manish Chopra)  [Orabug: 23732603]  
  - qed* - bump driver versions to 8.7.1.20 (Yuval Mintz)  [Orabug: 23732603]  
  - qede: add Rx flow hash/indirection support. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: add Rx flow hash/indirection support. (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed*: remove version dependency (Rahul Verma)  [Orabug: 23732603]  
  - qed: initialize return rc to avoid returning garbage (Colin Ian King)  [Orabug: 23732603]  
  - qed: Enlrage the drain timeout (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Notify of transciever changes (Zvi Nachmani)  [Orabug: 23732603]  
  - qed: Major changes to MB locking (Tomer Tayar)  [Orabug: 23732603]  
  - qed: Prevent MF link notifications (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qede: Fix net-next "make ARCH=x86_64" (Manish Chopra)  [Orabug: 23732603]  
  - qede: Add slowpath/fastpath support and enable hardware GRO (Manish Chopra)  [Orabug: 23732603]  
  - qed/qede: Add infrastructure support for hardware GRO (Manish Chopra)  [Orabug: 23732603]  
  - qed: Remove unused NVM vendor ID (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Fix error flow on slowpath start (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Move statistics to L2 code (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Support B0 instead of A0 (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Correct BAR sizes for older MFW (Ram Amrani)  [Orabug: 23732603]  
  - qed: Print additional HW attention info (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Print HW attention reasons (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Add support for HW attentions (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Semantic refactoring of interrupt code (Yuval Mintz)  [Orabug: 23732603]  
  - qed, qede: rebrand module description (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Prevent probe on previous error (Yuval Mintz)  [Orabug: 23732603]  
  - qed: add MODULE_FIRMWARE() (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Don't report link change needlessly (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Linearize SKBs when needed (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Change pci DID for 10g device (Yuval Mintz)  [Orabug: 23732603]  
  - qed,qede: Bump driver versions to 8.7.0.0 (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Introduce DMA_REGPAIR_LE (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Change metadata needed for SPQ entries (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Handle possible race in SB config (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Turn most GFP_ATOMIC into GFP_KERNEL (Yuval Mintz)  [Orabug: 23732603]  
  - qede: Add vlan filtering offload support (Sudarsana Reddy Kalluru)  [Orabug: 23732603]  
  - qed: Lay infrastructure for vlan filtering offload (Yuval Mintz)  [Orabug: 23732603]  
  - qed/qede: use 8.7.3.0 FW. (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Correct slowpath interrupt scheme (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qed: Fix BAR size split for some servers (Ariel Elior)  [Orabug: 23732603]  
  - qed: fix handling of concurrent ramrods. (Tomer Tayar)  [Orabug: 23732603]  
  - qed: Fix corner case for chain in-between pages (Tomer Tayar)  [Orabug: 23732603]  
  - qede: Add support for {get, set}_pauseparam (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qede: Add support for nway_reset (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qede: Add support for set_phys_id (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qed: Add support for changing LED state (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qede: Add support for {get, set}_ringparam (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qede: Add support for {get, set}_channels (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qed: select ZLIB_INFLATE (Arnd Bergmann)  [Orabug: 23732603]  
  - qlogic: qed: fix error codes in qed_resc_alloc() (Dan Carpenter)  [Orabug: 23732603]  
  - qlogic: qed: fix a test for MODE_MF_SI (Dan Carpenter)  [Orabug: 23732603]  
  - qlogic/qed: remove bogus NULL check (Dan Carpenter)  [Orabug: 23732603]  
  - qede: Add basic ethtool support (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qed: Add statistics support (Manish Chopra)  [Orabug: 23732603]  
  - qede: Add support for link (Sudarsana Kalluru)   
  - qed: Add link support (Yuval Mintz)  [Orabug: 23732603]  
  - qede: classification configuration (Sudarsana Kalluru)  [Orabug: 23732603]  
  - qede: Add basic network device support (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Add slowpath L2 support (Manish Chopra)  [Orabug: 23732603]  
  - qede: Add basic Network driver (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Add basic L2 interface (Yuval Mintz)  [Orabug: 23732603]  
  - qed: Add module with basic common support (Yuval Mintz)  [Orabug: 23732603]  
  - qlcnic: potential NULL dereference in qlcnic_83xx_get_minidump_template() (Dan Carpenter)  [Orabug: 23711389]  
  - qlcnic: protect qlicnic_attach_func with rtnl_lock (Hannes Frederic Sowa)  [Orabug: 23711389]  
  - qlcnic: Update version to 5.3.64 (Manish Chopra)  [Orabug: 23711389]  
  - qlcnic: Fix mailbox completion handling during spurious interrupt (Rajesh Borundia)  [Orabug: 23711389]  
  - qlcnic: Remove unnecessary usage of atomic_t (Rajesh Borundia)  [Orabug: 23711389]  
  - qlcnic: correctly handle qlcnic_alloc_mbx_args (Insu Yun)  [Orabug: 23711389]  
  - qlcnic: constify qlcnic_dcb_ops structures (Julia Lawall)  [Orabug: 23711389]  
  - qlcnic: fix a loop exit condition better (Dan Carpenter)  [Orabug: 23711389]  
  - qlcnic: fix a timeout loop (Dan Carpenter)  [Orabug: 23711389]  
  - net/qlcnic: fix mac address restore in bond mode 5/6 (Jarod Wilson)  [Orabug: 23711389]  
  - qlcnic: constify qlcnic_mbx_ops structure (Julia Lawall)  [Orabug: 23711389]  
  - qlcnic: track vxlan port count (Jiri Benc)  [Orabug: 23711389]  
  - net: qlcnic: delete redundant memsets (Rasmus Villemoes)  [Orabug: 23711389]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.43.1.el7uek]
changelog:
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 26080015]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.44.1.el7uek]
changelog:
  - xsigo: Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 25981984]  
  - I/O ERROR WHEN A FILE ON ACFS FILESYSTEM IS ATTACHED TO THE GUEST DOMU (Joe Jin)  [Orabug: 26096242]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.45.1.el7uek]
changelog:
  - xsigo: poor performance discovering 256 FC LUNs w/4 paths per LUN (Pradeep Gopanapalli)  [Orabug: 25976641]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.46.1.el7uek]
changelog:
  - mlx4: limit max MSIX allocations (Ajaykumar Hotchandani)  [Orabug: 26331606]  
  - nvme: Handle PM1725 HIL reset (Martin K. Petersen)  [Orabug: 26277595]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.47.1.el7uek]
changelog:
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25876653]  {CVE-2016-10229} 
  - HID: hid-cypress: validate length of report (Greg Kroah-Hartman)  [Orabug: 25795985]  {CVE-2017-7273} 
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986983]  {CVE-2017-7895} 
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 26143550]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 26143550]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 26143550]  {CVE-2017-7308}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.48.1.el7uek]
changelog:
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26350952]  
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366015]  {CVE-2017-7645}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.49.1.el7uek]
changelog:
  - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)  [Orabug: 26108563]  {CVE-2017-8890} 
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 26137675]  
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26139379]  
  - net/mlx4_core: Use round robin scheme to avoid stale caches (Santosh Shilimkar)  [Orabug: 26361580]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.50.1.el7uek]
changelog:
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403938]  {CVE-2017-1000363} 
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403954]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403954]  {CVE-2017-1000380} 
  - ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller)  [Orabug: 26403966]  {CVE-2017-9074} 
  - ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings)  [Orabug: 26403966]  {CVE-2017-9074} 
  - ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller)  [Orabug: 26403966]  {CVE-2017-9074} 
  - ipv6: Prevent overrun when parsing v6 header options (Craig Gallek)  [Orabug: 26403966]  {CVE-2017-9074} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26404003]  {CVE-2017-9077} 
  - scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle Fortin)  [Orabug: 26443597]  
  - mm: introduce kv[mz]alloc helpers (Kyle Fortin)  [Orabug: 26443597]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.51.1.el7uek]
changelog:
  - SUNRPC: Handle EADDRNOTAVAIL on connection failures (Trond Myklebust)  [Orabug: 25802249]  
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.54.1.el7uek]
changelog:
  - xen: fix bio vec merging (Roger Pau Monne)  [Orabug: 26669479] [Orabug: 26645497]  {CVE-2017-12134}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.55.1.el7uek]
changelog:
  - Bluetooth: Properly check L2CAP config option output buffer length (Ben Seri)  [Orabug: 26796420]  {CVE-2017-1000251} 
  - blk-mq: avoid re-initialize request which is failed in direct dispatch (Shaohua Li)  [Orabug: 26752510]  
  - xen-blkfront: fix mq start/stop race (Junxiao Bi)  [Orabug: 26739166] [Orabug: 26739166]  
  - Added IB diag counters from UEK2 (Chris Gray)  [Orabug: 26088233]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.56.1.el7uek]
changelog:
  - mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay)  [Orabug: 26867347]  
  - xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky)  [Orabug: 26867347]


author: Dhaval Giani <dhaval.giani@oracle.com> [4.1.12-61.57.1.el7uek]
changelog:
  - packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn)  [Orabug: 26681157]  {CVE-2017-1000111} 
  - sctp: do not inherit ipv6_{mc|ac|fl}_list from parent (Eric Dumazet)  [Orabug: 26650879]  {CVE-2017-9075} 
  - x86/acpi: Prevent out of bound access caused by broken ACPI tables (Seunghun Han)  [Orabug: 26643642]  {CVE-2017-11473} 
  - aio: mark AIO pseudo-fs noexec (Jann Horn)  [Orabug: 26643594]  {CVE-2016-10044} 
  - mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang)  [Orabug: 26643552]  {CVE-2017-11176} 
  - ping: implement proper locking (Eric Dumazet)  [Orabug: 26540282]  {CVE-2017-2671} 
  - nfsd: encoders mustn't use unitialized values in error cases (J. Bruce Fields)  [Orabug: 26572912]  {CVE-2017-8797} 
  - nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi)  [Orabug: 26572912]  {CVE-2017-8797} 
  - vfs: Commit to never having exectuables on proc and sysfs. (Eric W. Biederman)  [Orabug: 26643594]  {CVE-2016-10044} 
  - vfs, writeback: replace FS_CGROUP_WRITEBACK with SB_I_CGROUPWB (Tejun Heo)  [Orabug: 26643594]  {CVE-2016-10044} 
  - fs/exec.c: account for argv/envp pointers (Kees Cook)  [Orabug: 26403981]  {CVE-2017-1000365} {CVE-2017-1000365} 
  - NFSv4: Fix callback server shutdown (Trond Myklebust)  [Orabug: 26403981]  {CVE-2017-9059} 
  - SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust)  [Orabug: 26403981]  {CVE-2017-9059}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.58.1.el7uek]
changelog:
  - netlink: allow to listen "all" netns (Nicolas Dichtel)  [Orabug: 27098331]  
  - netlink: rename private flags and states (Nicolas Dichtel)  [Orabug: 27098331]  
  - netns: use a spin_lock to protect nsid management (Nicolas Dichtel)  [Orabug: 27098331]  
  - netns: notify new nsid outside __peernet2id() (Nicolas Dichtel)  [Orabug: 27098331]  
  - netns: rename peernet2id() to peernet2id_alloc() (Nicolas Dichtel)  [Orabug: 27098331]  
  - netns: always provide the id to rtnl_net_fill() (Nicolas Dichtel)  [Orabug: 27098331]  
  - netns: returns always an id in __peernet2id() (Nicolas Dichtel)  [Orabug: 27098331]  
  - mm: fix new crash in unmapped_area_topdown() (Hugh Dickins)  [Orabug: 26338222]  {CVE-2017-1000364} 
  - mm: larger stack guard gap, between vmas (Hugh Dickins)  [Orabug: 26338222]  {CVE-2017-1000364} 
  - Revert "SUNRPC: Refactor svc_set_num_threads()" (Kirtikar Kashyap)  [Orabug: 26981903]  
  - Revert "NFSv4: Fix callback server shutdown" (Kirtikar Kashyap)  [Orabug: 26981903]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.59.1.el7uek]
changelog:
  - nvme: merge probe_work and reset_work (Christoph Hellwig)  [Orabug: 26984819]  
  - nvme: only ignore hardware errors in nvme_create_io_queues (Christoph Hellwig)  [Orabug: 26984819]  
  - nvme: add NVME_SC_CANCELLED (Christoph Hellwig)  [Orabug: 26984819]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.60.1.el7uek]
changelog:
  - userns: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - udf: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - net: mpls: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - fs: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - ipv6: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - ipv4: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - Thermal/int340x: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - cw1200: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - qla2xxx: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - p54: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - carl9170: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - uvcvideo: prevent speculative execution (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - bpf: prevent speculative execution in eBPF interpreter (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - locking/barriers: introduce new observable speculation barrier (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - x86/cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - x86/cpu/AMD: Make the LFENCE instruction serialized (Elena Reshetova)  [Orabug: 27345857]  {CVE-2017-5753} 
  - kABI: Make the boot_cpu_data look normal. (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - kernel.spec: Require the new microcode_ctl. (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} {CVE-2017-5715} 
  - x86/microcode/AMD: Add support for fam17h microcode loading (Tom Lendacky)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/spec_ctrl: Disable if running as Xen PV guest. (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - Set IBPB when running a different VCPU (Dave Hansen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - Clear the host registers after setbe (Jun Nakajima)  [Orabug: 27345850]  {CVE-2017-5715} 
  - Use the ibpb_inuse variable. (Jun Nakajima)  [Orabug: 27345850]  {CVE-2017-5715} 
  - KVM: x86: add SPEC_CTRL to MSR and CPUID lists (Andrea Arcangeli)  [Orabug: 27345850]  {CVE-2017-5715} 
  - kvm: vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Paolo Bonzini)  [Orabug: 27345850]  {CVE-2017-5715} 
  - Use the "ibrs_inuse" variable. (Jun Nakajima)  [Orabug: 27345850]  {CVE-2017-5715} 
  - kvm: svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Andrea Arcangeli)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/svm: Set IBPB when running a different VCPU (Paolo Bonzini)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/kvm: Pad RSB on VM transition (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/cpu/AMD: Add speculative control support for AMD (Tom Lendacky)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/microcode: Recheck IBRS and IBPB feature on microcode reload (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86: Move IBRS/IBPB feature detection to scattered.c (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add lock to serialize changes to ibrs and ibpb control (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/kvm: clear registers on VM exit (Tom Lendacky)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/kvm: Set IBPB when switching VM (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - *INCOMPLETE* x86/syscall: Clear unused extra registers on syscall entrance (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/entry: Stuff RSB for entry to kernel for non-SMEP platform (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/mm: Only set IBPB when the new thread cannot ptrace current thread (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/mm: Set IBPB upon context switch (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS when offlining cpu and re-enable on wakeup (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/idle: Disable IBRS entering idle and enable it on wakeup (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/spec_ctrl: save IBRS MSR value in paranoid_entry (Andrea Arcangeli)  [Orabug: 27345850]  {CVE-2017-5715} 
  - *Scaffolding* x86/spec_ctrl: Add sysctl knobs to enable/disable SPEC_CTRL feature (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86: Add macro that does not save rax, rcx, rdx on stack to disable IBRS (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/enter: MACROS to set/clear IBRS and set IBP (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/feature: Report presence of IBPB and IBRS control (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86: Add STIBP feature enumeration (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/cpufeature: Add X86_FEATURE_IA32_ARCH_CAPS and X86_FEATURE_IBRS_ATT (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/feature: Enable the x86 feature to control (Tim Chen)  [Orabug: 27345850]  {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.61.1.el7uek]
changelog:
  - x86/pti/efi: broken conversion from efi to kernel page table (Pavel Tatashin)  [Orabug: 27378519] [Orabug: 27352353]  {CVE-2017-5754} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT (redux) (Konrad Rzeszutek Wilk)  [Orabug: 27378474]  
  - x86/IBRS: Make sure we restore MSR_IA32_SPEC_CTRL to a valid value (Boris Ostrovsky)  [Orabug: 27378115]  
  - x86/IBRS/IBPB: Set sysctl_ibrs/ibpb_enabled properly (Boris Ostrovsky)  [Orabug: 27382622]  
  - x86/spec_ctrl: Add missing 'lfence' when IBRS is not supported. (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/entry_64: TRACE_IRQS_OFF before re-enabling. (Jamie Iles)  [Orabug: 27345850]  {CVE-2017-5715} 
  - ptrace: remove unlocked RCU dereference. (Jamie Iles)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/ia32: Adds code hygiene for 32bit SYSCALL instruction entry. (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/ia32: don't save registers on audit call (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/spec/ia32: Sprinkle IBRS and RSB at the 32-bit SYSCALL (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/ia32: Move STUFF_RSB And ENABLE_IBRS (Konrad Rzeszutek Wilk)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86/spec: Always set IBRS to guest value on VMENTER and host on VMEXIT. (Konrad Rzeszutek Wilk)  [Orabug: 27365614]  {CVE-2017-5715} 
  - x86/ia32: save and clear registers on syscall. (Jamie Iles)  [Orabug: 27371760]  {CVE-2017-5754} 
  - x86/IBRS: Save current status of MSR_IA32_SPEC_CTRL (Boris Ostrovsky)  [Orabug: 27371757]  
  - pti: Rename X86_FEATURE_KAISER to X86_FEATURE_PTI (Pavel Tatashin)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/spec_ctrl: Add missing IBRS_DISABLE (Konrad Rzeszutek Wilk)   
  - Make use of ibrs_inuse consistent. (Jun Nakajima)   
  - x86/kvm: Set IBRS on VMEXIT if guest disabled it. (Konrad Rzeszutek Wilk)   
  - Re-introduce clearing of r12-15, rbp, rbx (Kris Van Hees)  [Orabug: 27345850]  {CVE-2017-5715} 
  - x86: more ibrs/pti fixes (Pavel Tatashin)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/spec: Actually do the check for in_use on ENABLE_IBRS (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kvm: svm: Expose the CPUID.0x80000008 ebx flag. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/spec_ctrl: Provide the sysfs version of the ibrs_enabled (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Use better #define for FEATURE_ENABLE_IBRS and 0 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Instead of 0x2, 0x4, and 0x1 use #defines. (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - kpti: Disable when running under Xen PV (Konrad Rzeszutek Wilk)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86: Don't ENABLE_IBRS in nmi when we are still running on user cr3 (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86/enter: Use IBRS on syscall and interrupts - fix ia32 path (Konrad Rzeszutek Wilk)   {CVE-2017-5715} 
  - x86: Fix spectre/kpti integration (Konrad Rzeszutek Wilk)  [Orabug: 27371653]  {CVE-2017-5754} 
  - PTI: unbreak EFI old_memmap (Jiri Kosina)  [Orabug: 27371653]  {CVE-2017-5754} 
  - KAISER KABI tweaks. (Martin K. Petersen)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/ldt: fix crash in ldt freeing. (Jamie Iles)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/entry: Define 'cpu_current_top_of_stack' for 64-bit code (Denys Vlasenko)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/entry: Remove unused 'kernel_stack' per-cpu variable (Denys Vlasenko)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/entry: Stop using PER_CPU_VAR(kernel_stack) (Denys Vlasenko)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: Set _PAGE_NX only if supported (Guenter Roeck)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/vdso: Get pvclock data from the vvar VMA instead of the fixmap (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - KPTI: Report when enabled (Kees Cook)  [Orabug: 27371653]  {CVE-2017-5754} 
  - KPTI: Rename to PAGE_TABLE_ISOLATION (Kees Cook)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/kaiser: Move feature detection up (Borislav Petkov)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/kaiser: Reenable PARAVIRT (Borislav Petkov)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/paravirt: Dont patch flush_tlb_single (Thomas Gleixner)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: kaiser_flush_tlb_on_return_to_user() check PCID (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: asm/tlbflush.h handle noPGE at lower level (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: drop is_atomic arg to kaiser_pagetable_walk() (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: use ALTERNATIVE instead of x86_cr3_pcid_noflush (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/kaiser: Check boottime cmdline params (Borislav Petkov)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/kaiser: Rename and simplify X86_FEATURE_KAISER handling (Borislav Petkov)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: add "nokaiser" boot option, using ALTERNATIVE (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: fix unlikely error in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: _pgd_alloc() without __GFP_REPEAT to avoid stalls (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: paranoid_entry pass cr3 need to paranoid_exit (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: x86_cr3_pcid_noflush and x86_cr3_pcid_user (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: PCID 0 for kernel and 128 for user (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: load_new_mm_cr3() let SWITCH_USER_CR3 flush user (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: enhanced by kernel and user PCIDs (Dave Hansen)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: vmstat show NR_KAISERTABLE as nr_overhead (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: delete KAISER_REAL_SWITCH option (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: name that 0x1000 KAISER_SHADOW_PGD_OFFSET (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: cleanups while trying for gold link (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: kaiser_remove_mapping() move along the pgd (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: tidied up kaiser_add/remove_mapping slightly (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: tidied up asm/kaiser.h somewhat (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: ENOMEM if kaiser_pagetable_walk() NULL (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: fix perf crashes (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: fix regs to do_nmi() ifndef CONFIG_KAISER (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: KAISER depends on SMP (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: fix build and FIXME in alloc_ldt_struct() (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: stack map PAGE_SIZE at THREAD_SIZE-PAGE_SIZE (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: do not set _PAGE_NX on pgd_none (Hugh Dickins)  [Orabug: 27371653]  {CVE-2017-5754} 
  - kaiser: merged update (Dave Hansen)  [Orabug: 27371653]  {CVE-2017-5754} 
  - KAISER: Kernel Address Isolation (Richard Fellner)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/boot: Add early cmdline parsing for options with arguments (Tom Lendacky)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm/64: Fix reboot interaction with CR4.PCIDE (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Enable CR4.PCIDE on supported systems (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Add the 'nopcid' boot option to turn off PCID (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Disable PCID on 32-bit kernels (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Remove the UP asm/tlbflush.h code, always use the (formerly) SMP code (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Reimplement flush_tlb_page() using flush_tlb_mm_range() (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Make flush_tlb_mm_range() more predictable (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Remove flush_tlb() and flush_tlb_current_task() (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/vm86/32: Switch to flush_tlb_mm_range() in mark_screen_rdonly() (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/irq: Do not substract irq_tlb_count from irq_call_count (Aaron Lu)  [Orabug: 27371653]  {CVE-2017-5754} 
  - sched/core: Idle_task_exit() shouldn't use switch_mm_irqs_off() (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - ARM: Hide finish_arch_post_lock_switch() from modules (Steven Rostedt)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm, sched/core: Turn off IRQs in switch_mm() (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm, sched/core: Uninline switch_mm() (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - sched/core: Add switch_mm_irqs_off() and use it in the scheduler (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - mm/mmu_context, sched/core: Fix mmu_context.h assumption (Ingo Molnar)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: If INVPCID is available, use it to flush global mappings (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Add a 'noinvpcid' boot option to turn off INVPCID (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Fix INVPCID asm constraint (Borislav Petkov)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/mm: Add INVPCID helpers (Andy Lutomirski)  [Orabug: 27371653]  {CVE-2017-5754} 
  - x86/ibrs: Remove 'ibrs_dump' and remove the pr_debug (Konrad Rzeszutek Wilk)  [Orabug: 27351388]  
  - kABI: Revert kABI: Make the boot_cpu_data look normal (Konrad Rzeszutek Wilk)   {CVE-2017-5715}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.62.1.el7uek]
changelog:
  - xen-blkback: add pending_req allocation stats (Ankur Arora)  [Orabug: 27386891]  
  - xen-blkback: move indirect req allocation out-of-line (Ankur Arora)  [Orabug: 27386891]  
  - xen-blkback: pull nseg validation out in a function (Ankur Arora)  [Orabug: 27386891]  
  - xen-blkback: make struct pending_req less monolithic (Ankur Arora)  [Orabug: 27386891]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.63.1.el7uek]
changelog:
  - Revert "kernel.spec: Require the new microcode_ctl." (Brian Maly)   
  - x86: Clean up IBRS functionality resident in common code (Kanth Ghatraju)  [Orabug: 27439198]  
  - x86: Display correct settings for the SPECTRE_V2 bug (Kanth Ghatraju)  [Orabug: 27439198]  
  - Set CONFIG_GENERIC_CPU_VULNERABILITIES flag (Kanth Ghatraju)  [Orabug: 27439198]  
  - x86/cpu: Implement CPU vulnerabilites sysfs functions (Thomas Gleixner)  [Orabug: 27439198]  
  - sysfs/cpu: Fix typos in vulnerability documentation (David Woodhouse)  [Orabug: 27439198]  
  - sysfs/cpu: Add vulnerability folder (Thomas Gleixner)  [Orabug: 27439198]  
  - x86/cpufeatures: Add X86_BUG_SPECTRE_V[12] (David Woodhouse)  [Orabug: 27439198]  
  - x86/cpufeatures: Add X86_BUG_CPU_MELTDOWN (Kanth Ghatraju)  [Orabug: 27439198]  
  - KVM: x86: Add memory barrier on vmcs field lookup (Andrew Honig)   {CVE-2017-5753} 
  - KVM: VMX: remove I/O port 0x80 bypass on Intel hosts (Andrew Honig)  [Orabug: 27439182]  {CVE-2017-1000407} {CVE-2017-1000407}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.64.1.el7uek]
changelog:
  - IB/cm: remove unnecessary ib_query_device in PSIF RNR WA (Wei Lin Guay)  [Orabug: 27243419]  
  - IB/cm: avoid query device in CM REQ/REP (Francisco Triviño)  [Orabug: 27243417]  
  - IB/cm: return original rnr value when RNR WA for PSIF (Francisco Triviño)  [Orabug: 27243417]  
  - IB/cm: MBIT needs to be used in network order (Francisco Triviño)  [Orabug: 27243417]  
  - RDS: ActiveBonding: Make its own thread for active active (Santosh Shilimkar)  [Orabug: 25512942]  
  - RDS: ActiveBonding: Create a cluster sync point for failback (Santosh Shilimkar)  [Orabug: 25512942]  
  - RDS: correct condition check in reconnect_timeout() (Ajaykumar Hotchandani)  [Orabug: 25512942]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-93.el7uek]
changelog:
  - Input: vmmouse - remove port reservation (Sinclair Yeh)  [Orabug: 25652572]  
  - Input: vmmouse - fix absolute device registration (Dmitry Torokhov)  [Orabug: 25652572]  
  - uek-config: enable CONFIG_MOUSE_PS2_VMMOUSE (Brian Maly)   
  - bnxt_en: use eth_hw_addr_random() (Tobias Klauser)  [Orabug: 25645429]  
  - bnxt_en: fix pci cleanup in bnxt_init_one() failure path (Sathya Perla)  [Orabug: 25645429]  
  - bnxt_en: Fix NULL pointer dereference in a failure path during open. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Reject driver probe against all bridge devices (Ray Jui)  [Orabug: 25645429]  
  - bnxt_en: Added PCI IDs for BCM57452 and BCM57454 ASICs (Deepak Khungar)  [Orabug: 25645429]  
  - bnxt_en: Fix bnxt_setup_tc() error message. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Print FEC settings as part of the linkup dmesg. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Do not setup PHY unless driving a single PF. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add hardware NTUPLE filter for encapsulated packets. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Allow NETIF_F_NTUPLE to be enabled on VFs. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix ethtool -l pre-set max combined channel. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Retry failed NVM_INSTALL_UPDATE with defragmentation flag. (Kshitij Soni)  [Orabug: 25645429]  
  - bnxt_en: Update to firmware interface spec 1.7.0. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Refactor tx completion path. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add a set of TX rings to support XDP. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add tx ring mapping logic. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Centralize logic to reserve rings. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Use event bit map in RX path. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add RX page mode support. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Parameterize RX buffer offsets. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add bp->rx_dir field for rx buffer DMA direction. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Don't use DEFINE_DMA_UNMAP_ADDR to store DMA address in RX path. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Refactor rx SKB function. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix RTNL lock usage on bnxt_get_port_module_status(). (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix RTNL lock usage on bnxt_update_link(). (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix bnxt_reset() in the slow path task. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix "uninitialized variable" bug in TPA code path. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add the ulp_sriov_cfg hooks for bnxt_re RDMA driver. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add support for ethtool -p. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Update to firmware interface spec to 1.6.1. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Clear TPA flags when BNXT_FLAG_NO_AGG_RINGS is set. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix compiler warnings when CONFIG_RFS_ACCEL is not defined. (Michael Chan)  [Orabug: 25645429]  
  - MAINTAINERS: Add bnxt_en maintainer info. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Handle no aggregation ring gracefully. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Set default completion ring for async events. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Implement new scheme to reserve tx rings. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add IPV6 hardware RFS support. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Assign additional vnics to VFs. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add new hardware RFS mode. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Refactor code that determines RFS capability. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Add function to get vnic capability. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Refactor TPA code path. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Fix and clarify link_info->advertising. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Improve the IRQ disable sequence during shutdown. (Michael Chan)  [Orabug: 25645429]  
  - bnxt_en: Remove busy poll logic in the driver. (Michael Chan)  [Orabug: 25645429]  
  - vmxnet3: prevent building with 64K pages (Arnd Bergmann)  [Orabug: 25639933]  
  - vmxnet3: Move PCI Id to pci_ids.h (Adit Ranadive)  [Orabug: 25639933]  
  - vmxnet3: avoid assumption about invalid dma_pa in vmxnet3_set_mc() (Alexey Khoroshilov)  [Orabug: 25639933]  
  - vmxnet3: Wake queue from reset work (Benjamin Poirier)  [Orabug: 25639933]  
  - vmxnet3: fix non static symbol warning (Wei Yongjun)  [Orabug: 25639933]  
  - vmxnet3: fix tx data ring copy for variable size (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: update to version 3 (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: introduce command to register memory region (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: add support for get_coalesce, set_coalesce ethtool operations (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: add receive data ring support (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: allow variable length transmit data ring buffer (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: introduce generalized command interface to configure the device (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: prepare for version 3 changes (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: segCnt can be 1 for LRO packets (Shrikrishna Khare)  [Orabug: 25639933]  
  - Driver: Vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: fix lock imbalance in vmxnet3_tq_xmit() (Arnd Bergmann)  [Orabug: 25639933]  
  - vmxnet3: avoid calling pskb_may_pull with interrupts disabled (Neil Horman)  [Orabug: 25639933]  
  - Driver: Vmxnet3: Update Rx ring 2 max size (Shrikrishna Khare)  [Orabug: 25639933]  
  - Driver: Vmxnet3: Fix regression caused by 5738a09 (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: fix checks for dma mapping errors (Alexey Khoroshilov)  [Orabug: 25639933]  
  - Driver: Vmxnet3: Fix use of mfTableLen for big endian architectures (Shrikrishna Khare)  [Orabug: 25639933]  
  - Driver: Vmxnet3: Extend register dump support (Shrikrishna Khare)  [Orabug: 25639933]  
  - vmxnet3: prevent receive getting out of sequence on napi poll (Neil Horman)  [Orabug: 25639933]  
  - scsi: mpt3sas: Bump driver version as "14.101.00.00" (Suganath Prabu Subramani)  [Orabug: 25639713]  
  - scsi: mpt3sas: Fix for Endianness issue. (Suganath Prabu Subramani)  [Orabug: 25639713]  
  - scsi: mpt3sas: Use the new MPI 2.6 32-bit Atomic Request Descriptors for SAS35 devices. (Suganath Prabu Subramani)  [Orabug: 25639713]  
  - scsi: mpt3sas: set EEDP-escape-flags for SAS35 devices. (Suganath Prabu Subramani)  [Orabug: 25639713]  
  - scsi: mpt3sas: Increased/Additional MSIX support for SAS35 devices. (Suganath Prabu Subramani)  [Orabug: 25639713]  
  - scsi: mpt3sas: Added Device ID's for SAS35 devices and updated MPI header. (Suganath Prabu Subramani)  [Orabug: 25639713]  
  - scsi: mpt3sas: disable ASPM for MPI2 controllers (ojab)  [Orabug: 25639713]  
  - scsi: mpt3sas: Force request partial completion alignment (Ram Pai)  [Orabug: 25639713]  
  - scsi: mpt3sas: fix hang on ata passthrough commands (James Bottomley)  [Orabug: 25639713]  
  - scsi: mpt3sas: Recognize and act on iopriority info (Adam Manzanares)  [Orabug: 25639713]  
  - scsi: mpt3sas: Unblock device after controller reset (Suganath Prabu S)  [Orabug: 25639713]  
  - scsi: mpt3sas: Fix secure erase premature termination (Andrey Grodzovsky)  [Orabug: 25639713]  
  - scsi: mpt3sas: Unblock device after controller reset (Suganath Prabu S)  [Orabug: 25639713]  
  - scsi: mpt3sas: fix some spelling mistakes in message and comments (Colin Ian King)  [Orabug: 25639713]  
  - scsi: mpt3sas: Bump driver version as "14.100.00.00" (Suganath Prabu Subramani)  [Orabug: 25535122]  
  - scsi: mpt3sas: Remove unused macro "MPT_DEVICE_TLR_ON" (Suganath Prabu Subramani)  [Orabug: 25535122]  
  - scsi: mpt3sas: Implement device_remove_in_progress check in IOCTL path (Suganath Prabu Subramani)  [Orabug: 25535122]  
  - scsi: mpt3sas: Fix for incorrect numbers for MSIX vectors enabled when non RDPQ card is enumerated first. (Suganath Prabu Subramani)  [Orabug: 25535122]  
  - scsi: mpt3sas: Fix for improper info displayed in var log, while blocking or unblocking the device. (Suganath Prabu Subramani)  [Orabug: 25535122]  
  - scsi: mpt3sas: Fix for block device of raid exists even after deleting raid disk (Sreekanth Reddy)  [Orabug: 25535122]  
  - mpt3sas: Fix resume on WarpDrive flash cards (Greg Edwards)  [Orabug: 25535122]  
  - mpt3sas: Fix warnings exposed by W=1 (Calvin Owens)  [Orabug: 25535122]  
  - mpt3sas: Eliminate dead sleep_flag code (Calvin Owens)  [Orabug: 25535122]  
  - mpt3sas: Eliminate conditional locking in mpt3sas_scsih_issue_tm() (Calvin Owens)  [Orabug: 25535122]  
  - mpt3sas: Ensure the connector_name string is NUL-terminated (Calvin Owens)  [Orabug: 25535122]  
  - mpt3sas: Fix panic when aer correct error occurred (Kefeng Wang)  [Orabug: 25535122]  
  - mpt3sas: avoid mpt3sas_transport_port_add NULL parent_dev (Joe Lawrence)  [Orabug: 25535122]  
  - mpt3sas: set num_phys after allocating phy[] space (Joe Lawrence)  [Orabug: 25535122]  
  - mpt3sas: add missing curly braces (Dan Carpenter)  [Orabug: 25639713]  
  - bnx2i: fix spelling mistake "complection" -> "completion" (Colin Ian King)  [Orabug: 25606037]  
  - bnx2i: silence uninitialized variable warnings (Dan Carpenter)  [Orabug: 25606037]  
  - qlcnic: Update version to 5.3.65 (Manish Chopra)  [Orabug: 25605962]  
  - qlcnic: fix napi budget alteration (Manish Chopra)  [Orabug: 25605962]  
  - qlcnic: fix data structure corruption in async mbx command handling (Manish Chopra)  [Orabug: 25605962]  
  - net: qlcnic: avoid superfluous assignement (xypron.glpk@gmx.de)  [Orabug: 25605962]  
  - qlcnic: add wmb() call in transmit data path. (Sony Chacko)  [Orabug: 25605962]  
  - qlcnic: use the correct ring in qlcnic_83xx_process_rcv_ring_diag() (Dan Carpenter)  [Orabug: 25605962]  
  - net: qlcnic: don't set unused function argument (Arnd Bergmann)  [Orabug: 25605962]  
  - net: qlge: remove superfluous statement (xypron.glpk@gmx.de)  [Orabug: 25605959]  
  - net/qlge: Avoids recursive EEH error (Gavin Shan)  [Orabug: 25605959]  
  - qlge: Replace create_singlethread_workqueue with alloc_ordered_workqueue (Amitoj Kaur Chawla)  [Orabug: 25605959]  
  - qlge: Update version to 1.00.00.35 (Manish Chopra)  [Orabug: 25605959]  
  - qlge: Fix receive packets drop. (Manish Chopra)  [Orabug: 25605959]  
  - qlge: fix a timeout loop in ql_change_rx_buffers() (Dan Carpenter)  [Orabug: 25605959]  
  - qlge: Move jiffies_to_usecs immediately before loop (Joe Perches)  [Orabug: 25605959]  
  - netxen: netxen_rom_fast_read() doesn't return -1 (Dan Carpenter)  [Orabug: 25605954]  
  - netxen: reversed condition in netxen_nic_set_link_parameters() (Dan Carpenter)  [Orabug: 25605954]  
  - netxen: fix error handling in netxen_get_flash_block() (Dan Carpenter)  [Orabug: 25605954]  
  - netxen: Use kobj_to_dev() (Amitoj Kaur Chawla)  [Orabug: 25605954]  
  - hpsa: update reset handler (Don Brace)  [Orabug: 25605941]  
  - hpsa: update identify physical device structure (Don Brace)  [Orabug: 25605941]  
  - hpsa: add in a new check for volume status (Don Brace)  [Orabug: 25605941]  
  - hpsa: send ioaccel requests with 0 length trasfer down raid path (Don Brace)  [Orabug: 25605941]  
  - hpsa: remove abort handler (Don Brace)  [Orabug: 25605941]  
  - hpsa: prevent concurrent rescans (Don Brace)  [Orabug: 25605941]  
  - hpsa: correct scan wakeup (Don Brace)  [Orabug: 25605941]  
  - hpsa: correct queue depth for externals (Don Brace)  [Orabug: 25605941]  
  - hpsa: bump driver version (Don Brace)  [Orabug: 25605941]  
  - scsi: hpsa: remove coalescing settings for ioaccel2 (Don Brace)  [Orabug: 25605941]  
  - scsi: hpsa: use designated initializers (Kees Cook)  [Orabug: 25605941]  
  - scsi: hpsa: remove memory allocate failure message (Amit Kushwaha)  [Orabug: 25605941]  
  - scsi: hpsa: fallback to use legacy REPORT PHYS command (Hannes Reinecke)  [Orabug: 25605941]  
  - scsi: hpsa: use %phN for short hex dumps (Rasmus Villemoes)  [Orabug: 25605941]  
  - scsi: hpsa: add 'ctlr_num' sysfs attribute (Hannes Reinecke)  [Orabug: 25605941]  
  - scsi: hpsa: use correct DID_NO_CONNECT hostbyte (Hannes Reinecke)  [Orabug: 25605941]  
  - scsi: hpsa: use bus '3' for legacy HBA devices (Hannes Reinecke)  [Orabug: 25605941]  
  - scsi: hpsa: correct logical resets (Don Brace)  [Orabug: 25605941]  
  - scsi: hpsa: Remove unneeded void pointer cast (Javier Martinez Canillas)  [Orabug: 25605941]  
  - scsi: hpsa: correct call to hpsa_do_reset (Don Brace)  [Orabug: 25605941]  
  - scsi: hpsa: correct scsi 6byte lba calculation (Mahesh Rajashekhara)  [Orabug: 25605941]  
  - scsi: hpsa: Check for null devices in ioaccel submission patch (Don Brace)  [Orabug: 25605941]  
  - scsi: hpsa: Prevent sending bmic commands to externals (Scott Teel)  [Orabug: 25605941]  
  - scsi: hpsa: Check for vpd support before sending (Scott Teel)  [Orabug: 25605941]  
  - scsi: hpsa: Check for null device pointers (Don Brace)  [Orabug: 25605941]  
  - scsi: hpsa: Determine device external status earlier (Don Brace)  [Orabug: 25605941]  
  - hpsa: change hpsa_passthru_ioctl timeout (Don Brace)  [Orabug: 25605941]  
  - hpsa: correct skipping masked peripherals (Don Brace)  [Orabug: 25605941]  
  - hpsa: set the enclosure identifier to zero (Dan Carpenter)  [Orabug: 25605941]  
  - enic: Remove local ndo_busy_poll() implementation. (David S. Miller)  [Orabug: 25535122]  
  - enic: set skb->hash type properly (Govindarajulu Varadarajan)  [Orabug: 25535122]  
  - enic: fix rq disable (Govindarajulu Varadarajan)  [Orabug: 25535122]  
  - net: enic: use correct type specifier (xypron.glpk@gmx.de)  [Orabug: 25535122]  
  - enic: set netdev->vlan_features (Govindarajulu Varadarajan)  [Orabug: 25535122]  
  - cisco: enic: Update logging macros and uses (Joe Perches)  [Orabug: 25535122]  
  - enic: assign affinity hint to interrupts (Govindarajulu Varadarajan)  [Orabug: 25535122]  
  - net/ena: update driver version to 1.1.2 (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: change condition for host attribute configuration (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: change driver's default timeouts (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: reduce the severity of ena printouts (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: use READ_ONCE to access completion descriptors (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: fix potential access to freed memory during device reset (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: refactor ena_get_stats64 to be atomic context safe (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: fix NULL dereference when removing the driver after device reset failed (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: fix RSS default hash configuration (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: fix ethtool RSS flow configuration (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: fix queues number calculation (Netanel Belgazal)  [Orabug: 25535122]  
  - net/ena: remove ntuple filter support from device feature list (Netanel Belgazal)  [Orabug: 25535122]  
  - net: ena: use setup_timer() and mod_timer() (Wei Yongjun)  [Orabug: 25535122]  
  - Btrfs: fix crash on fsync when using overlayfs v4 (Liu Bo)  [Orabug: 25512309]  
  - qed*: Fix link indication race (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Don't allocate SBs using main PTT (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Prevent index problems in loopback test (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Reflect PF link when initializing VF (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Free netdevice only after stoping slowpath (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Initialize lock and slowpath workqueue early (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Reserve doorbell BAR space for present CPUs (Ram Amrani)  [Orabug: 25477939]  
  - qed: Don't free a QP more than once (Ram Amrani)  [Orabug: 25477939]  
  - qed: Read queue state before releasing buffer (Ram Amrani)  [Orabug: 25477939]  
  - qed: Release CQ resource under lock on failure (Ram Amrani)  [Orabug: 25477939]  
  - qed: Add support for hardware offloaded FCoE. (Arun Easi)  [Orabug: 25477939]  
  - qed: Add infrastructure for PTP support (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: avoid possible stack overflow in qed_ll2_acquire_connection (Arnd Bergmann)  [Orabug: 25477939]  
  - qed: Replace memset with eth_zero_addr (Shyam Saini)  [Orabug: 25477939]  
  - qed*: Advance driver versions to 8.10.10.20. (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Conserve RDMA resources when !QEDR (Ram Amrani)  [Orabug: 25477939]  
  - qed: Support Multicast on Tx-switching (Mintz, Yuval)  [Orabug: 25477939]  
  - qed*: Change maximal number of queues (Mintz, Yuval)  [Orabug: 25477939]  
  - qed*: Update to dual-license (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: fix old-style function definition (Arnd Bergmann)  [Orabug: 25477939]  
  - qede: fix general protection fault may occur on probe (Amrani, Ram)  [Orabug: 25477939]  
  - qede: use reset to set network header (Zhang Shengju)  [Orabug: 25477939]  
  - qed: Add iSCSI out of order packet handling. (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Add support for hardware offloaded iSCSI. (Yuval Mintz)  [Orabug: 25477939]  
  - qede: Better utilize the qede_[rt]x_queue (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Don't check netdevice for rx-hash (Mintz, Yuval)  [Orabug: 25477939]  
  - qed*: Handle-based L2-queues. (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Revise state locking scheme (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Refactor data-path Rx flow (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Refactor statistics gathering (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Remove 'num_tc'. (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Optimize qed_chain datapath usage (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Optimize aggregation information size (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Correct rdma params configuration (Ram Amrani)  [Orabug: 25477939]  
  - qed: configure ll2 RoCE v1/v2 flavor correctly (Ram Amrani)  [Orabug: 25477939]  
  - qed: Prevent stack corruption on MFW interaction (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Correctly map aggregation replacement pages (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Correct VF mac number (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Don't override priv_flags (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Learn resources from management firmware (Tomer Tayar)  [Orabug: 25477939]  
  - qed: Use VF-queue feature (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Learn of RDMA capabilities per-device (Mintz, Yuval)  [Orabug: 25477939]  
  - qed*: Add support for WoL (Mintz, Yuval)  [Orabug: 25477939]  
  - qed: Add nvram selftest (Mintz, Yuval)  [Orabug: 25477939]  
  - qed*: Management firmware - notifications and defaults (Sudarsana Kalluru)  [Orabug: 25477939]  
  - qede: Fix statistics' strings for Tx/Rx queues (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Fix out-of-bound fastpath memory access (Mintz, Yuval)  [Orabug: 25477939]  
  - qede: Fix incorrrect usage of APIs for un-mapping DMA memory (Manish Chopra)  [Orabug: 25477939]  
  - qed: Zero-out the buffer paased to dcbx_query() API (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: Reconfigure rss indirection direction table when rss count is updated (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed*: Reduce the memory footprint for Rx path (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: Loopback implementation should ignore the normal traffic (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: Do not allow RSS config for 100G devices (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: get_channels() need to populate max tx/rx coalesce values (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Use list_move_tail instead of list_del/list_add_tail (Wei Yongjun)  [Orabug: 25477939]  
  - qed: Remove useless set memory to zero use memset() (Wei Yongjun)  [Orabug: 25477939]  
  - qed: Fix possible race when reading firmware return code. (Manish Chopra)  [Orabug: 25477939]  
  - qed: Handle malicious VFs events (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Allow chance for fast ramrod completions (Yuval Mintz)  [Orabug: 25477939]  
  - qed*: Allow unicast filtering (Yuval Mintz)  [Orabug: 25477939]  
  - qede: Prevent GSO on long Geneve headers (Manish Chopra)  [Orabug: 25477939]  
  - qede: GSO support for tunnels with outer csum (Manish Chopra)  [Orabug: 25477939]  
  - qed: Pass MAC hints to VFs (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Additional work toward cleaning C=1 (Yuval Mintz)  [Orabug: 25477939]  
  - qed*: Fix Kconfig dependencies with INFINIBAND_QEDR (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Fix static checker warning. (Yuval Mintz)  [Orabug: 25477939]  
  - qed: fix old-style function definition (Arnd Bergmann)  [Orabug: 25477939]  
  - qed: Fix to use list_for_each_entry_safe() when delete items (Wei Yongjun)  [Orabug: 25477939]  
  - qed: Add RoCE ll2 & GSI support (Ram Amrani)  [Orabug: 25477939]  
  - qed: Add support for memory registeration verbs (Ram Amrani)  [Orabug: 25477939]  
  - qed: Add support for QP verbs (Ram Amrani)  [Orabug: 25477939]  
  - qed: PD,PKEY and CQ verb support (Ram Amrani)  [Orabug: 25477939]  
  - qed: Add support for RoCE hw init (Ram Amrani)  [Orabug: 25477939]  
  - qede: Add qedr framework (Ram Amrani)  [Orabug: 25477939]  
  - uek-config: enable QED_LL2 (Brian Maly)  [Orabug: 25477939]  
  - qed: Add Light L2 support (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Fix stack corruption on probe (Yuval Mintz)  [Orabug: 25477939]  
  - qed: mark symbols static where possible (Baoyou Xie)  [Orabug: 25477939]  
  - qede: mark qede_set_features() static (Baoyou Xie)  [Orabug: 25477939]  
  - qed*: Add support for the ethtool get_regs operation (Tomer Tayar)  [Orabug: 25477939]  
  - qed: Add support for debug data collection (Tomer Tayar)  [Orabug: 25477939]  
  - qed: add missing header dependencies (Baoyou Xie)  [Orabug: 25477939]  
  - qed: Add infrastructure for debug data collection (Tomer Tayar)  [Orabug: 25477939]  
  - qed: Remove OOM messages (Joe Perches)  [Orabug: 25477939]  
  - qed: fix kzalloc-simple.cocci warnings (Wu Fengguang)  [Orabug: 25477939]  
  - qed: Clear dcbx memory buffers before the usage. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Set selection-field while configuring the app entry in ieee mode. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed*: Disallow dcbx configuration for VF interfaces. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: hide 32-bit compile warning (Arnd Bergmann)  [Orabug: 25477939]  
  - qede: Add support for Tx/Rx-only queues. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Fix address macros (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Change locking scheme for VF channel (Yuval Mintz)  [Orabug: 25477939]  
  - qed*: Add support for VFs over legacy PFs (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Prevent VFs from pause flooding (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Add support for legacy VFs (Yuval Mintz)  [Orabug: 25477939]  
  - qed: FLR of active VFs might lead to FW assert (Yuval Mintz)  [Orabug: 25477939]  
  - qed: utilize FW 8.10.10.0 (Yuval Mintz)  [Orabug: 25477939]  
  - qed*: Fix pause setting (Yuval Mintz)  [Orabug: 25477939]  
  - qede: Fix Tx timeout due to xmit_more (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Add support for NCSI statistics. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: Add support for per-queue stats. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qede: Add support for capturing additional stats in ethtool-stats display. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed*: Add and modify some prints (Yuval Mintz)  [Orabug: 25477939]  
  - qed*: Trivial modifications (Yuval Mintz)  [Orabug: 25477939]  
  - qed*: Semantic changes (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Fix possible memory leak in qed_dcbnl_get_ieee_pfc() (Wei Yongjun)  [Orabug: 25477939]  
  - qed: Update app count when adding a new dcbx app entry to the table. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Add dcbx app support for IEEE Selection Field. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Use ieee mfw-mask to get ethtype in ieee-dcbx mode. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Remove the endian-ness conversion for pri_to_tc value. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Use DEFINE_SPINLOCK() for spinlock (Wei Yongjun)  [Orabug: 25477939]  
  - qed: Fail driver load in 100g MSI mode. (Sudarsana Reddy Kalluru)  [Orabug: 25477939]  
  - qed: Fix error return code in qed_resc_alloc() (Wei Yongjun)  [Orabug: 25477939]  
  - qed: do not use unitialized variable (xypron.glpk@gmx.de)  [Orabug: 25477939]  
  - qed: Prevent over-usage of vlan credits by PF (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Correct min bandwidth for 100g (Yuval Mintz)  [Orabug: 25477939]  
  - qede: Reset statistics on explicit down (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Don't over-do producer cleanup for Rx (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Fix removal of spoof checking for VFs (Yuval Mintz)  [Orabug: 25477939]  
  - qede: Don't try removing unconfigured vlans (Yuval Mintz)  [Orabug: 25477939]  
  - qed: Fix setting/clearing bit in completion bitmap (Manish Chopra)  [Orabug: 25477939]  
  - vfio/pci: Hide broken INTx support from user (Alex Williamson)  [Orabug: 25049396] [Orabug: 25393341]  
  - crypto: cryptd - Assign statesize properly (Wang, Rui Y)  [Orabug: 25202933]  
  - crypto: ghash-clmulni - Fix load failure (Wang, Rui Y)  [Orabug: 25202933]  
  - timers: Use proper base migration in add_timer_on() (Honglei Wang)  [Orabug: 25079989]  
  - USB: digi_acceleport: do sanity checking for the number of ports (Oliver Neukum)  [Orabug: 22916868]  {CVE-2016-3140} 
  - uek-rpm: enable CONFIG_KSPLICE. (Jamie Iles)  [Orabug: 25414814]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 25414814]  
  - signal: protect SIGNAL_UNKILLABLE from unintentional clearing. (Jamie Iles)  [Orabug: 25414814]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.el7uek]
changelog:
  - uek-rpm: sync up spec with linux-firmware version (Ethan Zhao)  [Orabug: 25685665]  
  - scsi: qla2xxx: Fix apparent cut-n-paste error. (Dave Jones)  [Orabug: 25477809]  
  - scsi: qla2xxx: Fix Target mode handling with Multiqueue changes. (Quinn Tran)  [Orabug: 25477809]  
  - scsi: qla2xxx: Add Block Multi Queue functionality. (Michael Hernandez)  [Orabug: 25477809]  
  - scsi: qla2xxx: Add multiple queue pair functionality. (Michael Hernandez)  [Orabug: 25477809]  
  - qla2xxx: Add irq affinity notification (Quinn Tran)  [Orabug: 25477809]  
  - scsi: qla2xxx: Fix scsi scan hang triggered if adapter fails during init (Bill Kuzeja)  [Orabug: 25477809]  
  - dtrace: get rid of dtrace_gethrtime (Kris Van Hees)   
  - dtrace: drop spurious debugging left in by accident (Nick Alcock)  [Orabug: 25143173]  
  - dtrace: comtinuing the FBT implementation and fixes (Kris Van Hees)  [Orabug: 21220305] [Orabug: 24829326]  
  - dtrace: ensure DTrace can use get_user_pages safely (Kris Van Hees)  [Orabug: 25640153]  
  - dtrace: enable paranoid mode and IST shift for xen_int3 (Kris Van Hees)  [Orabug: 25580519]  
  - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race (Peter Zijlstra)   {CVE-2017-6001} 
  - ext2: convert to mbcache2 (Jan Kara)  [Orabug: 24521483]  {CVE-2015-8952} 
  - ext4: convert to mbcache2 (Jan Kara)  [Orabug: 24521483]  {CVE-2015-8952} 
  - mbcache2: reimplement mbcache (Jan Kara)  [Orabug: 24521483]  {CVE-2015-8952} 
  - be2net: get rid of custom busy poll code (Eric Dumazet)  [Orabug: 25570957]  
  - be2net: fix initial MAC setting (Ivan Vecera)  [Orabug: 25570957]  
  - be2net: fix MAC addr setting on privileged BE3 VFs (Ivan Vecera)  [Orabug: 25570957]  
  - be2net: don't delete MAC on close on unprivileged BE3 VFs (Ivan Vecera)  [Orabug: 25570957]  
  - be2net: fix status check in be_cmd_pmac_add() (Ivan Vecera)  [Orabug: 25570957]  
  - be2net: Increase skb headroom size to 256 bytes (Kalesh A P)  [Orabug: 25570957]  
  - be2net: Add DEVSEC privilege to SET_HSW_CONFIG command. (Venkat Duvvuru)  [Orabug: 25570957]  
  - be2net: do not call napi_hash_del() (Eric Dumazet)  [Orabug: 25570957]  
  - be2net: Enable VF link state setting for BE3 (Suresh Reddy)  [Orabug: 25570957]  
  - be2net: Fix TX stats for TSO packets (Sriharsha Basavapatna)  [Orabug: 25570957]  
  - be2net: Update Copyright string in be_hw.h (Sriharsha Basavapatna)  [Orabug: 25570957]  
  - be2net: NCSI FW section should be properly updated with ethtool for BE3 (Sriharsha Basavapatna)  [Orabug: 25570957]  
  - be2net: Provide an alternate way to read pf_num for BEx chips (Sriharsha Basavapatna)  [Orabug: 25570957]  
  - be2net: mark symbols static where possible (Baoyou Xie)  [Orabug: 25570957]  
  - be2net: Update the driver version to 11.1.0.0 (Sriharsha Basavapatna)  [Orabug: 25570957]  
  - be2net: Fix mac address collision in some configurations (Suresh Reddy)  [Orabug: 25570957]  
  - be2net: Add privilege level check for OPCODE_COMMON_GET_EXT_FAT_CAPABILITIES SLI cmd. (Somnath Kotur)  [Orabug: 25570957]  
  - be2net: Issue COMMON_RESET_FUNCTION cmd during driver unload (Somnath Kotur)  [Orabug: 25570957]  
  - be2net: Avoid unnecessary firmware updates of multicast list (Sriharsha Basavapatna)  [Orabug: 25570957]  
  - be2net: do not remove vids from driver table if be_vid_config() fails. (Sathya Perla)  [Orabug: 25570957]  
  - be2net: clear vlan-promisc setting before programming the vlan list (Somnath Kotur)  [Orabug: 25570957]  
  - be2net: perform temperature query in adapter regardless of its interface state (Guilherme G. Piccoli)  [Orabug: 25570957]  
  - be2net: signedness bug in be_msix_enable() (Dan Carpenter)  [Orabug: 25570957]  
  - be2net: update be2net maintainers list (Sathya Perla)  [Orabug: 25570957]  
  - be2net: Change copyright markings in source files (Somnath Kotur)  [Orabug: 25570957]  
  - be2net: Fix broadcast echoes from EVB in BE3 (Somnath Kotur)  [Orabug: 25570957]  
  - be2net: fix definition of be_max_eqs() (Sathya Perla)  [Orabug: 25570957]  
  - scsi: be2iscsi: Use GFP_ATOMIC under spin lock (Wei Yongjun)  [Orabug: 25655127]  
  - scsi: be2iscsi: Update driver version (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add warning message for unsupported adapter (Ketan Mukadam)  [Orabug: 25655127]  
  - scsi: be2iscsi: Reinit SGL handle, CID tables after TPE (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add checks to validate CID alloc/free (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Remove wq_name from beiscsi_hba (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Remove unused struct members (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Remove redundant receive buffers posting (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix iSCSI cmd cleanup IOCTL (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add checks to validate completions (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Set WRB invalid bit for SkyHawk (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Take iscsi_task ref in abort handler (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix for crash in beiscsi_eh_device_reset (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix use of invalidate command table req (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: set errno on error path (Pan Bian)  [Orabug: 25655127]  
  - scsi: be2iscsi: set errno on error path (Pan Bian)  [Orabug: 25655127]  
  - scsi: be2iscsi: allocate enough memory in beiscsi_boot_get_sinfo() (Dan Carpenter)  [Orabug: 25655127]  
  - scsi: be2iscsi: mark symbols static where possible (Baoyou Xie)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add missing unlock for mbox_lock (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Remove redundant iscsi_wrb desc memset (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix error return code (Christophe JAILLET)  [Orabug: 25655127]  
  - scsi: be2iscsi: Update the driver version (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Update copyright information (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix queue and connection parameters (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix bad WRB index error (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix async PDU handling path (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add FUNCTION_RESET during driver unload (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fail the sessions immediately after TPE (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add TPE recovery feature (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add V1 of EPFW cleanup IOCTL (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix POST check and reset sequence (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Move functions to right files (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Add IOCTL to check UER supported (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix to add timer for UE detection (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix to make boot discovery non-blocking (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix checks for HBA in error state (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Remove isr_lock and dead code (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Remove alloc_mcc_tag & beiscsi_pci_soft_reset (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Check all zeroes IP before issuing IOCTL (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Handle only NET_PARAM in iface_get_param (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Rename iface get/set/create/destroy APIs (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Update iface handle before any set param (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Move VLAN code to common iface_set_param (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix release of DHCP IP in static mode (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Fix gateway APIs to support IPv4 & IPv6 (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Set and return right iface v4/v6 states (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Reduce driver load/unload time (Jitendra Bhivare)  [Orabug: 25655127]  
  - scsi: be2iscsi: Replace _bh version for mcc_lock spinlock (Jitendra Bhivare)  [Orabug: 25655127]  
  - i40e: fix VLAN inside VXLAN (Jesse Brandeburg)  [Orabug: 25463021]  
  - i40e: don't truncate match_method assignment (Keller, Jacob E)  [Orabug: 24568124]  
  - i40e: move all updates for VLAN mode into i40e_sync_vsi_filters (Jacob Keller)  [Orabug: 24568124]  
  - i40e: use (add|rm)_vlan_all_mac helper functions when changing PVID (Jacob Keller)  [Orabug: 24568124]  
  - i40e: factor out addition/deletion of VLAN per each MAC address (Jacob Keller)  [Orabug: 24568124]  
  - i40e: delete filter after adding its replacement when converting (Jacob Keller)  [Orabug: 24568124]  
  - i40e: refactor i40e_update_filter_state to avoid passing aq_err (Jacob Keller)  [Orabug: 24568124]  
  - i40e: recalculate vsi->active_filters from hash contents (Jacob Keller)  [Orabug: 24568124]  
  - i40e: defeature support for PTP L4 frame detection on XL710 (Jacob Keller)  [Orabug: 24568124]  
  - i40e: lock service task correctly (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Add functions which apply correct PHY access method for read and write operation (Michal Kosiarz)  [Orabug: 24568124]  
  - i40e: Add FEC for 25g (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: Add support for 25G devices (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: use unsigned printf format specifier for active_filters count (Jacob Keller)  [Orabug: 24568124]  
  - i40e: Blink LED on 1G BaseT boards (Henry Tieman)  [Orabug: 24568124]  
  - i40e: remove code to handle dev_addr specially (Jacob Keller)  [Orabug: 24568124]  
  - i40e: restore workaround for removing default MAC filter (Jacob Keller)  [Orabug: 24568124]  
  - i40e: simplify txd use count calculation (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Driver prints log message on link speed change (Filip Sadowski)  [Orabug: 24568124]  
  - i40e: change message to only appear when extra debug info is wanted (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e/i40evf: replace for memcpy with single memcpy call in ethtool (Jacob Keller)  [Orabug: 24568124]  
  - i40e: set broadcast promiscuous mode for each active VLAN (Jacob Keller)  [Orabug: 24568124]  
  - i40e: Fix for ethtool Supported link modes (Harshitha Ramamurthy)  [Orabug: 24568124]  
  - i40evf: protect against NULL msix_entries and q_vectors pointers (Jacob Keller)  [Orabug: 24568124]  
  - i40e: Pass unknown PHY type for unknown PHYs (Henry Tieman)  [Orabug: 24568124]  
  - i40e: Remove unreachable code (Henry Tieman)  [Orabug: 24568124]  
  - i40evf: check for msix_entries null dereference (Alan Brady)  [Orabug: 24568124]  
  - i40evf: Move some i40evf_reset_task code to separate function (Joe Perches)  [Orabug: 24568124]  
  - i40e: fix panic on SPARC while changing num of desc (Tushar Dave)  [Orabug: 24568124]  
  - i40e: Add protocols over MCTP to i40e_aq_discover_capabilities (Piotr Raczynski)  [Orabug: 24568124]  
  - i40e: fix trivial typo in naming of i40e_sync_filters_subtask (Jacob Keller)  [Orabug: 24568124]  
  - i40e: Add Clause22 implementation (Michal Kosiarz)  [Orabug: 24568124]  
  - i40e: avoid duplicate private flags definitions (Jacob Keller)  [Orabug: 24568124]  
  - i40e: remove second check of VLAN_N_VID in i40e_vlan_rx_add_vid (Jacob Keller)  [Orabug: 24568124]  
  - i40e: remove error_param_int label from i40e_vc_config_promiscuous_mode_msg (Jacob Keller)  [Orabug: 24568124]  
  - i40evf: Be much more verbose about what we can and cannot offload (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Be much more verbose about what we can and cannot offload (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: removed unreachable code (Filip Sadowski)  [Orabug: 24568124]  
  - i40e: Implementation of ERROR state for NVM update state machine (Maciej Sosin)  [Orabug: 24568124]  
  - i40e: Fix for division by zero (Michal Kosiarz)  [Orabug: 24568124]  
  - i40e: clear mac filter count on reset (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Reorder logic for coalescing RS bits (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Add common function for finding VSI by type (Alexander Duyck)  [Orabug: 24568124]  
  - i40evf: avoid an extra msleep while (Jacob Keller)  [Orabug: 24568124]  
  - i40e: replace PTP Rx timestamp hang logic (Jacob Keller)  [Orabug: 24568124]  
  - i40e: use a mutex instead of spinlock in PTP user entry points (Jacob Keller)  [Orabug: 24568124]  
  - i40e: correct check for reading TSYNINDX from the receive descriptor (Jacob Keller)  [Orabug: 24568124]  
  - i40e: remove duplicate add/delete adminq command code for filters (Jacob Keller)  [Orabug: 24568124]  
  - i40e: avoid looping to check whether we're in VLAN mode (Jacob Keller)  [Orabug: 24568124]  
  - i40e: fix MAC filters when removing VLANs (Alan Brady)  [Orabug: 24568124]  
  - i40e: properly cleanup on allocation failure in i40e_sync_vsi_filters (Jacob Keller)  [Orabug: 24568124]  
  - i40e: store MAC/VLAN filters in a hash with the MAC Address as key (Jacob Keller)  [Orabug: 24568124]  
  - i40e: implement __i40e_del_filter and use where applicable (Jacob Keller)  [Orabug: 24568124]  
  - i40e: When searching all MAC/VLAN filters, ignore removed filters (Jacob Keller)  [Orabug: 24568124]  
  - i40e: refactor i40e_put_mac_in_vlan to avoid changing f->vlan (Jacob Keller)  [Orabug: 24568124]  
  - i40e: move i40e_put_mac_in_vlan and i40e_del_mac_all_vlan (Jacob Keller)  [Orabug: 24568124]  
  - i40e: make use of __dev_uc_sync and __dev_mc_sync (Jacob Keller)  [Orabug: 24568124]  
  - i40e: drop is_vf and is_netdev fields in struct i40e_mac_filter (Jacob Keller)  [Orabug: 24568124]  
  - i40e: Add missing 
   to end of dev_err message (Colin Ian King)  [Orabug: 24568124]  
  - i40e: Clean up handling of msglevel flags and debug parameter (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Fix bit logic error in failure case (David Ertman)  [Orabug: 24568124]  
  - i40e/i40evf: Changed version from 1.6.19 to 1.6.21 (Bimmy Pujari)  [Orabug: 24568124]  
  - i40e: Removal of workaround for simple MAC address filter deletion (Filip Sadowski)  [Orabug: 24568124]  
  - i40e: Fix for long link down notification time (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: Drop redundant Rx descriptor processing code (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: fix confusing dmesg info for ethtool -L option (Lihong Yang)  [Orabug: 24568124]  
  - i40e: Make struct i40e_stats const (Joe Perches)  [Orabug: 24568124]  
  - i40e/i40evf: Changed version from 1.6.16 to 1.6.19 (Bimmy Pujari)  [Orabug: 24568124]  
  - i40e/i40evf: fix interrupt affinity bug (Alan Brady)  [Orabug: 24568124]  
  - i40e: group base mode VF offload flags (Preethi Banala)  [Orabug: 24568124]  
  - i40e: reopen client after reset (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Drop code for unsupported flow types (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Remove unused function i40e_vsi_lookup (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Bit test mask correction (Filip Sadowski)  [Orabug: 24568124]  
  - i40e: Rewrite Flow Director busy wait loop (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Fix client interaction (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: disable MSI-X interrupts if we cannot reserve enough vectors (Guilherme G Piccoli)  [Orabug: 24568124]  
  - i40e: Fix configure TCs after initial DCB disable (David Ertman)  [Orabug: 24568124]  
  - i40e: avoid NULL pointer dereference and recursive errors on early PCI error (Guilherme G Piccoli)  [Orabug: 24568124]  
  - i40e: fix sideband flow director vector allocation (Stefan Assmann)  [Orabug: 24568124]  
  - i40e: fix MSI-X vector redistribution if hw limit is reached (Stefan Assmann)  [Orabug: 24568124]  
  - i40e: check if vectors are already depleted when doing VMDq allocation (Stefan Assmann)  [Orabug: 24568124]  
  - i40evf: support queue-specific settings for interrupt moderation (Jacob Keller)  [Orabug: 24568124]  
  - i40e: don't configure zero-size RSS table (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Strip out debugfs hook for Flow Director filter programming (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Split Flow Director descriptor config into separate function (Alexander Duyck)  [Orabug: 24568124]  
  - i40e/i40evf: Add txring_txq function to match fm10k and ixgbe (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: Fix Flow Director raw_buf cleanup (Alexander Duyck)  [Orabug: 24568124]  
  - i40evf: enable adaptive interrupt throttling (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Increase minimum number of allocated VSI (Akeem Abodunrin)  [Orabug: 24568124]  
  - i40e/i40evf: Changed version to 1.6.16 (Bimmy Pujari)  [Orabug: 24568124]  
  - i40e: removing unreachable code (Henry Tieman)  [Orabug: 24568124]  
  - i40e: check conflicting ntuple/sideband rules when re-enabling ATR (Jacob Keller)  [Orabug: 24568124]  
  - i40e: cleanup ATR auto_disable_flags use (Jacob Keller)  [Orabug: 24568124]  
  - i40e: add encap csum VF offload flag (Preethi Banala)  [Orabug: 24568124]  
  - i40e: fix deleting mac filters (Alan Brady)  [Orabug: 24568124]  
  - i40e: Remove 100 Mbps SGMII support for X722 (Harshitha Ramamurthy)  [Orabug: 24568124]  
  - i40evf: remove unnecessary error checking against i40e_shutdown_adminq (Lihong Yang)  [Orabug: 24568124]  
  - i40e: Limit TX descriptor count in cases where frag size is greater than 16K (Alexander Duyck)  [Orabug: 24568124]  
  - i40evf: remove unnecessary error checking against i40evf_up_complete (Bimmy Pujari)  [Orabug: 24568124]  
  - i40evf: Fix link state event handling (Sridhar Samudrala)  [Orabug: 24568124]  
  - i40e: avoid potential null pointer dereference when assigning len (Colin Ian King)  [Orabug: 24568124]  
  - i40e: Fix for extra byte swap in tunnel setup (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: Fix to check for NULL (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: return correct opcode to VF (Mitch Williams)  [Orabug: 24568124]  
  - i40e: fix "dump port" command when NPAR enabled (Alan Brady)  [Orabug: 24568124]  
  - i40e: fix setting user defined RSS hash key (Alan Brady)  [Orabug: 24568124]  
  - i40e: Fix kernel panic on enable/disable LLDP (Dave Ertman)  [Orabug: 24568124]  
  - i40e: Change some init flow for the client (Anjali Singhai Jain)  [Orabug: 24568124]  
  - i40evf: Open RDMA Client after reset (Avinash Dayanand)  [Orabug: 24568124]  
  - i40e/i40evf: Fix indentation (Jeff Kirsher)  [Orabug: 24568124]  
  - i40e: Correcting mutex usage in client code (Avinash Dayanand)  [Orabug: 24568124]  
  - i40e: Remove XSTRINGIFY macro definitions and uses (Joe Perches)  [Orabug: 24568124]  
  - i40e: Initialize pointer in client_release function (Harshitha Ramamurthy)  [Orabug: 24568124]  
  - i40e: Check client is open before calling client ops (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e: use matching format identifiers (Heinrich Schuchardt)  [Orabug: 24568124]  
  - i40e: Add support for HMC resource and profile for X722 (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: Fix byte ordering in ARP NS code for X722 (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: refactor tail_bump check (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40evf: report link speed (Mitch Williams)  [Orabug: 24568124]  
  - i40e: use alloc_workqueue instead of create_singlethread_workqueue (Jacob Keller)  [Orabug: 24568124]  
  - i40e: use configured RSS key and lookup table in i40e_vsi_config_rss (Jacob Keller)  [Orabug: 24568124]  
  - i40e: fix broken i40e_config_rss_aq function (Jacob Keller)  [Orabug: 24568124]  
  - i40e: move i40e_vsi_config_rss below i40e_get_rss_aq (Jacob Keller)  [Orabug: 24568124]  
  - i40e: remove a stray unlock (Dan Carpenter)  [Orabug: 24568124]  
  - i40e/i40evf-Bump version from 1.6.11 to 1.6.12 (Bimmy Pujari)  [Orabug: 24568124]  
  - i40e: Allow RSS Hash set with less than four parameters (Carolyn Wyborny)  [Orabug: 24568124]  
  - i40e: fix memory leak (Mitch Williams)  [Orabug: 24568124]  
  - i40e: fix lookup table when RSS disabled/enabled (Alan Brady)  [Orabug: 24568124]  
  - i40e: Don't notify client of VF reset during VF creation (Avinash Dayanand)  [Orabug: 24568124]  
  - i40e: Force register writes to mitigate sync issues with iwarp VF driver (Avinash Dayanand)  [Orabug: 24568124]  
  - i40e: don't allow reduction of channels below active FD rules (Jacob Keller)  [Orabug: 24568124]  
  - i40e: Fix static analysis tool warning (Dave Ertman)  [Orabug: 24568124]  
  - i40evf: add missing rtnl_lock() around i40evf_set_interrupt_capability (Jacob Keller)  [Orabug: 24568124]  
  - i40e: reset RX csum error stat with other pf stats (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e/i40evf: Reset VLAN filter count when resetting (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e: Fix a bug where a client close can be called before an open is complete (Anjali Singhai Jain)  [Orabug: 24568124]  
  - i40e: Use list_move instead of list_del/list_add (Wei Yongjun)  [Orabug: 24568124]  
  - i40e: check for and deal with non-contiguous TCs (Dave Ertman)  [Orabug: 24568124]  
  - i40e: Explicitly write platform-specific mac address after PF reset (Tushar Dave)  [Orabug: 24568124]  
  - i40e: add missing link advertise setting (Stefan Assmann)  [Orabug: 24568124]  
  - i40e: Move the mutex lock in i40e_client_unregister (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e: Remove redundant memset (Amitoj Kaur Chawla)  [Orabug: 24568124]  
  - i40e/i40evf-bump version to 1.6.11 (Bimmy Pujari)  [Orabug: 24568124]  
  - i40e: refactor Rx filter handling (Mitch Williams)  [Orabug: 24568124]  
  - i40evf: add hyperv dev ids (Joshua Hay)  [Orabug: 24568124]  
  - i40e: Remove device ID 0x37D4 (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e/i40evf: remove useless initializer (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Fix to show correct Advertised Link Modes when link is down (Avinash Dayanand)  [Orabug: 24568124]  
  - i40e: avoid null pointer dereference (Heinrich Schuchardt)  [Orabug: 24568124]  
  - i40e: enable VSI broadcast promiscuous mode instead of adding broadcast filter (Kiran Patil)  [Orabug: 24568124]  
  - i40e: Don't notify client(s) for DCB changes on all VSIs (Neerav Parikh)  [Orabug: 24568124]  
  - i40e: Fix errors resulted while turning off TSO (Tushar Dave)  [Orabug: 24568124]  
  - i40e/i40evf: Bump version from 1.5.16 to 1.6.4 (Bimmy Pujari)  [Orabug: 24568124]  
  - i40e: add VSI info to macaddr messages (Shannon Nelson)  [Orabug: 24568124]  
  - i40e: set default VSI without a reset (Mitch Williams)  [Orabug: 24568124]  
  - i40evf: always activate correct MAC address filter (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Fix RSS to not be limited by the number of CPUs (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e: Removing unnecessary code which caused supported link mode bug (Avinash Dayanand)  [Orabug: 24568124]  
  - i40e: fix missing DA cable check (Serey Kong)  [Orabug: 24568124]  
  - i40e: Save PCI state before suspend (Greg Rose)  [Orabug: 24568124]  
  - i40e: Clean up MSIX IRQs before suspend (Greg Rose)  [Orabug: 24568124]  
  - i40evf: don't overflow buffer (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Add a call to set the client interface down (Catherine Sullivan)  [Orabug: 24568124]  
  - i40e: write HENA for VFs (Mitch Williams)  [Orabug: 24568124]  
  - i40e: add hw struct local variable (Mitch Williams)  [Orabug: 24568124]  
  - i40e: add functions to control default VSI (Mitch Williams)  [Orabug: 24568124]  
  - i40e: Move all UDP port notifiers to single function (Alexander Duyck)  [Orabug: 24568124]  
  - i40e: use valid online CPU on q_vector initialization (Guilherme G. Piccoli)  [Orabug: 24568124]  
  - i40e: enable VSI broadcast promiscuous mode instead of adding broadcast filter (Kiran Patil)  [Orabug: 24568124]  
  - i40e: Look up MAC address in Open Firmware or IDPROM (Sowmini Varadhan)   
  - Define the channel type for Hyper-V PCI Express pass-through (Nick Meier)  [Orabug: 25507635]  
  - Add access to x86_msi for Hyper-V PCI driver (Jack Vogel)  [Orabug: 25507635]  
  - Hyper-V Host driver requires apic access (Jack Vogel)  [Orabug: 25507635]  
  - drivers:hv: Export the API to invoke a hypercall on Hyper-V (Jake Oshins)  [Orabug: 25507635]  
  - Drivers: hv: vmbus: fix build warning (Sudip Mukherjee)  [Orabug: 25507635]  
  - drivers:hv: Make a function to free mmio regions through vmbus (Jake Oshins)  [Orabug: 25507635]  
  - drivers:hv: Export a function that maps Linux CPU num onto Hyper-V proc num (Nick Meier)  [Orabug: 25507635]  
  - Remove PCI_MSI_IRQ_DOMAIN from the Hyper-V config (Jack Vogel)  [Orabug: 25507635]  
  - drivers:hv: Use new vmbus_mmio_free() from client drivers (Nick Meier)  [Orabug: 25507635]  
  - PCI: hv: Add paravirtual PCI front-end for Microsoft Hyper-V VMs (Jake Oshins)  [Orabug: 25507635]  
  - dtrace: ensure we skip the entire SDT probe point (Kris Van Hees)  [Orabug: 25557283]  
  - dtrace: add ip SDT provider (Alan Maguire)  [Orabug: 25557554]


