- [rt] Update RT sources from rt-rhel-6 [1863050]

- [rt] Update RT sources from rt-rhel-6 [1858091]

- [rt] Update RT sources from rt-rhel-6 [1850280]

- [rt] Update RT sources from rt-rhel-6 [1837733]

- [rt] Update RT sources from rt-rhel-6 [1810602]

- [rt] Update RT sources from rt-rhel-6 [1810602]

- [rt] Update RT sources from rt-rhel-6 [1794133]

- [rt] Update RT sources from rt-rhel-6 [1779367]

- [rt] Update RT sources from rt-rhel-6 [176570]
- rt: The caller of rt_mutex_slowunlock is responsible for deboosting (Tom Rix) [https://bugzilla.redhat.com/show_bug.cgi?id=1772562]

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1765670]
- redhat/configs: Enable CONFIG_X86_INTEL_TSX_MODE_ON (Waiman Long) [1766540] {CVE-2019-11135}
- x86/tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766540] {CVE-2019-11135}
- x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766540] {CVE-2019-11135}
- x86/tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766540] {CVE-2019-11135}
- x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766540] {CVE-2019-11135}
- x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766540] {CVE-2019-11135}
- x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766540] {CVE-2019-11135}
- x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766540] {CVE-2019-11135}
- x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766540] {CVE-2019-11135}
- Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: Add helper function for creating VM worker threads (Clark Williams) [1690343] {CVE-2018-12207}
- kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1690343] {CVE-2018-12207}
- x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: x86: MMU: Remove unused parameter of __direct_map() (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1690343] {CVE-2018-12207}
- KVM: MMU: drop vcpu param in gpte_access (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: simplify ept_misconfig (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: mmu: Remove unused parameter parent_pte from kvm_mmu_get_page() (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: mmu: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: mmu: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: x86: mmu: Make mmu_set_spte() return emulate value (Paolo Bonzini) [1690343] {CVE-2018-12207}
- kvm: Take out __exit annotation in vmx_exit() (Paolo Bonzini) [1690343] {CVE-2018-12207}
- drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756816] {CVE-2019-0154}
- drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756816] {CVE-2019-0154}
- drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Move engine->needs_cmd_parser to engine->flags (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Silence smatch for cmdparser (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/cmdparser: Do not check past the cmd length (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/cmdparser: Check reg_table_count before derefencing (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Prevent writing into a read-only object via a GGTT mmap (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915/cmdparser: Limit clflush to active cachelines (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: Use the precomputed value for whether to enable command parsing (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: don't whitelist oacontrol in cmd parser (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: return EACCES for check_cmd() failures (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: cleanup use of INSTR_CLIENT_MASK (Dave Airlie) [1756883] {CVE-2019-0155}
- drm/i915: kick out cmd_parser specific structs from i915_drv.h (Dave Airlie) [1756883] {CVE-2019-0155}

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1579972]
- [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1724507 1724510]
- [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1724507 1724510]
- [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1724507 1724510]
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724507 1724510] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724507 1724510] {CVE-2019-1125}
- [fs] sunrpc: make visible processing error in bc_svc_process() ("J. Bruce Fields") [1739304 1653675] {CVE-2018-16884}
- [fs] sunrpc: remove unused xpo_prep_reply_hdr callback ("J. Bruce Fields") [1739304 1653675] {CVE-2018-16884}
- [fs] sunrpc: remove svc_tcp_bc_class ("J. Bruce Fields") [1739304 1653675] {CVE-2018-16884}
- [fs] sunrpc: replace svc_serv->sv_bc_xprt by boolean flag ("J. Bruce Fields") [1739304 1653675] {CVE-2018-16884}
- [fs] sunrpc: use-after-free in svc_process_common() ("J. Bruce Fields") [1739304 1653675] {CVE-2018-16884}
- [fs] svcauth_gss: Close connection when dropping an incoming message ("J. Bruce Fields") [1739304 1653675] {CVE-2018-16884}
- [fs] nfsd: COPY and CLONE operations require the saved filehandle to be set (Scott Mayhew) [1739303 1645353]
- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739127 1732106]
- [scsi] vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() (David Milburn) [1737377 1720298]
- [mm] shm_mnt is as longterm as it gets (Aaron Tomlin) [1737376 1597314]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1729411 1723032]
- [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1729411 1723032]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1725180 1600953] {CVE-2018-13405}
- [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1725171 1657352] {CVE-2018-9568}

- [rt] Update RT sources from rt-rhel-6 [1579972]
- [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1708543 1694459]
- [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1708543 1694459]
- [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1708543 1694459]
- [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1708543 1694459]
- [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1708543 1694459]
- [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Add support for software count cache flush (Gustavo Duarte) [1708543 1694459]
- [powerpc] Introduce asm-prototypes.h (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1708543 1694459]
- [powerpc] asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1708543 1694459]
- [powerpc] Add helper to check if offset is within relative branch range (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1708543 1694459]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Patch barrier_nospec in modules (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1708543 1694459]
- [powerpc] 64s: Add barrier_nospec (Gustavo Duarte) [1708543 1694459]
- [powerpc] reuse asm-generic/barrier.h (Gustavo Duarte) [1708543 1694459]
- [x86] locking/arch: Rename set_mb() to smp_store_mb() (Waiman Long) [1708543 1522387]
- [kernel] locking/arch: Add WRITE_ONCE() to set_mb() (Waiman Long) [1708543 1522387]
- [kernel] asm-generic: guard smp_store_release/load_acquire (Don Dutile) [1708543 1549856]
- [kernel] arch: conditionally define smp_(mb,rmb,wmb) (Don Dutile) [1708543 1549856]

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1579972]
- [rt] sched: create dummy versions of idle_{enter,exit}_fair() ("Luis Claudio R. Goncalves")

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1579972]
- [rt] stop_machine: Reflow cpu_stop_queue_two_works() ("Luis Claudio R. Goncalves")

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1579972]

- [rt] Update RT sources from rt-rhel-6 [1537669]
- [rt] fix configuration regression for -693 series of kernels (Clark Williams) [1576007]

- [rt] Update RT sources from rt-rhel-6 [1537669]

- [rt] Update RT sources from rt-rhel-6 [1537669]

- [rt] Update RT sources from rt-rhel-6 [1537669]

- [rt] Update RT sources from rt-rhel-6 [1537669]

- [rt] Update RT sources from rt-rhel-6 [1479016]

- [rt] Update RT sources from rt-rhel-6 [1479016]

- [rt] Update RT sources from rt-rhel-6 [1479016]
- rt: fix timer softirq merge (Clark Williams) [1509021]

- [rt] Update RT sources from rt-rhel-6 [1479016]

- [rt] Update RT sources from rt-rhel-6 [1479016]

- [rt] kernel-rt-3.10.0-693.2.1.rt56.585.el6rt (Clark Williams) [1391779]

- [rt] kernel-rt-3.10.0-514.rt56.231.el6rt (Clark Williams) [1400193]
- perf: hswep_uncore_sbox_msr_init_box should use wrmsrl_safe ("Luis Claudio R. Goncalves") [1451821]
- [rt] kernel-rt-3.10.0-514.rt56.228.el6rt (Clark Williams) [1400193]

- [rt] kernel-rt-3.10.0-514.rt56.228.el6rt (Clark Williams) [1400193]

- [rt] kernel-rt-3.10.0-514.rt56.221.el6rt (Clark Williams) [1400193]

- [rt] kernel-rt-3.10.0-514.rt56.219.el6rt (Clark Williams) [1400193]

- [rt] kernel-rt-3.10.0-514.rt56.215.el6rt ("Luis Claudio R. Goncalves") [1400193]

- [rt] kernel-rt-3.10.0-514.rt56.210.el6rt (Clark Williams) [1400193]
- [rt] makefiles: cleaned up bz numbers in specfile template (Clark Williams) [1400193]

- [kernel] timekeeping: Copy the shadow-timekeeper over the real timekeeper last [1401068]

- [rt] kernel-3.10.0-327.36.3.el7 [1366059]
- [mm] remove gup_flags FOLL_WRITE games from __get_user_pages() (Alexander Gordeev) [1385128] {CVE-2016-5195}
- [net] add recursion limit to GRO (Sabrina Dubroca) [1379914] {CVE-2016-7039}

- [rt] merged kernel-rt-3.10.0-327.36.1.rt56.237 [1366059]

- [rt] merged kernel-rt-3.10.0-327.28.3.rt56.235 [1343658]
- [net] fix challenge ACK counter information disclosure [1355616] {CVE-2016-5696}

- [rt] merged kernel-rt-3.10.0-327.28.2.rt56.234 [1343658]
- [rhel-rt] config: enable RCU_NOCB_CPU_ALL [1348715]

- [rt] merged kernel-rt-3.10.0-327.22.2.rt56.230 [1332298]

- printk: Prevent console freeze due to out-of-order deadlock [1267425]

- [rt] merged kernel-rt-3.10.0-327.13.1.rt56.216 [1309030]

- [rt] rebased to kernel-rt-3.10.0-327.10.1.rt56.211

- [rt] rebased to kernel-rt-3.10.0-327.4.5.rt56.206
- [security] keys: Fix keyring ref leak in join_session_keyring() (David Howells) [1298040] {CVE-2016-0728}

- [rt] merge kernel-3.10.0-229.20.1 tree [1265251]

- [rt] merge kernel-3.10.0-229.14.1 tree [1245345]

- [rt] merge kernel-3.10.0-229.11.1 tree [1230403]

- xfs: Disable percpu SB on PREEMPT_RT_FULL (Steven Rostedt) [1224430]
- [rt] merged kernel-3.10.0-229.7.2 tree [1223077]

- [rt] rebase to the 229.4.2 build

- sched/rt: Use IPI to trigger RT task push migration instead of pulling [1206362]

- [rt] rebase to the 229.1.2 build

- [rt] fix requires for debuginfo package

- x86_64, traps: Stop using IST for #SS (1172814) {CVE-2014-9322}

- Remove incomplete fix for (1152609) {CVE-2014-8086} pending full fix

- net: always pass struct netdev_notifier_info to netdevice notifiers (1151755)

- HID: fix a couple of off-by-ones (1141395) {CVE-2014-3184}
- USB: whiteheat: Added bounds checking for bulk command response
  (1141405) {CVE-2014-3185}

- fix changelog entry for BZ 1117315

- specfile update to add BZ numbers to previous changelog entries

- Modified the .gitattributes file so that we don't pull in unwanted files when creating the tar.ball for the rpm
- floppy: ignore kernel-only members in FDRAWCMD ioctl input (1094314) {CVE-2014-1738} {CVE-2014-1737}
- floppy: don't write kernel-only members to FDRAWCMD ioctl output (1094314) {CVE-2014-1738} {CVE-2014-1737}
- ath9k: protect tid->sched check (1083255) {CVE-2014-2672}
- rds: prevent dereference of a NULL device in rds_iw_laddr_check (1083279) {CVE-2014-2678}
- mac80211: fix AP powersave TX vs. wakeup race (1083536) {CVE-2014-2706}
- net: fix for a race condition in the inet frag code (1070620) {CVE-2014-0100}
- net: ipv4: current group_info should be put after using (1087418) {CVE-2014-2851}
- mm: try_to_unmap_cluster() should lock_page() before mlocking (1093082) {CVE-2014-3122}
- n_tty: Fix n_tty_write crash when echoing in raw mode (1094238) {CVE-2014-0196}

- spec: do not create an empty include/linux/version.h
- spec: we no longer carry the bfa-3.1.2.1 firmware in the kernel
- spec: added ApplyPatch and the support for linux-kernel-test.patch
- spec: fix the buildid usage on the specfile
- sit: link local routes are missing (999371)

- Respin for final release

- rt: Make cpu_chill() use hrtimer instead of msleep (1059794)

- sit: fix use after free of fb_tunnel_dev (1049524)
- RFC: Nagle latency tuning (1045312)
- jbd2: drop checkpoint mutex waiting in __jbd2_log_wait_for_space (1002918)

- dm snapshot: fix data corruption (1004233) {CVE-2013-4299}
- kernel: net: deadloop path in skb_flow_dissect() (1007939) {CVE-2013-4348}

- install the firmware files for bfa 3.1.2.1 (910551)

- use buildid to compose kernel name
- apply linux-kernel-test.patch if present

- upstream fix for CVE-2013-2094 (962797)

- sock_diag: Fix out-of-bounds access to sock_diag_handlers (915055) {CVE-2013-176}

- specfile change to remove MRG directory from -devel packages

- [netfilter] addition commits to fix ipvs oops seen in testing
- [mrg] reworked specfile changelog to report BZ's and CVEs properly

- [netdev] mlx4: Don't show RoCE interfaces if the hpn channel is not installed

- rebased (git merge) to v3.0.36-rt57
- from Luis Claudio Goncalves <lgoncalv@redhat.com>: 
  - rebased bnx2x driver to 1.70.00-0 (BZ# 839037)
  - added required firmware files for bnx2x

- Edited BZs to include CVE references where appropriate

- [kernel] Rebased to v3.0.25-rt44
- [configs] Adjust cnfgs to mirror RHEL vals, avoid dracut "ERROR" msgs {804119}
- [configs] kdump init script fails in mrg2.1 pre-release {756631}

- Propagate the changes for the following everywhere 
- [configs] disable CONFIG_TIPC to avoid regressing (578120)
- [configs] CRYPTO settings and turning off TIPC protocol, (786145)

- Reverted 198214a7ee50375fa71a65e518341980cfd4b2f0
	Reverting this prevents writing to /proc/pid/mem

- Added patch that removes FEER_FAT_M3ERR for i5000_edac
- Added two java-rt memory patches
	1. Allocate RTSJ memory for TCK conformance test.
	2. Add /dev/rmem device driver for real-time JVM testing

- Turn off -virt packages for production build

- acpi: /sys/kernel/debug/acpi/custom_method can bypass module restrictions [680844] {CVE-2011-1021}
- add missing cxgb3/t3fw-7.10.0.bin firmware files [728310]
- add /sys/kernel/realtime entry [728551]
- add the crash module [681987]
- agp: insufficient page_count parameter checking in agp_allocate_memory() [699011] {CVE-2011-1746}
- agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls [699007] {CVE-2011-1745} {CVE-2011-2022}
- backport: sched/cpupri: Remove the vec->lock [727699]
- backport: timers-avoid-the-base-null-otptimization-on-rt.patch from v3.0.0-rt6 [727549]
- be2net 0000:03:00.0: Error in cmd completion - opcode 103, compl 2, extd 30 [719742]
- bluetooth: buffer overflow in l2cap config request [716811] {CVE-2011-2497}
- bluetooth: l2cap and rfcomm: fix 1 byte infoleak to userspace [703024] {CVE-2011-2492}
- config: disable deprecated CONFIG_NF_CT_ACCT [710158]
- dccp: handle invalid feature options length [703014] {CVE-2011-1770}
- fs: cifs session reuse [697397] {CVE-2011-1585}
- fs: corrupted GUID partition tables can cause kernel oops [695983] {CVE-2011-1577}
- fs: DoS (crash) due slab corruption in inotify_init1 [692096] {CVE-2011-1479}
- fs: ext4: kernel panic when writing data to the last block of sparse file [722564] {CVE-2011-2695}
- fs: no access restrictions of /proc/pid/* after setuid program exec [692040] {CVE-2011-1020}
- fs: /proc/PID/io infoleak  [716831] {CVE-2011-2495}
- fs: /proc/PID/io infoleak [716831] {CVE-2011-2495}
- fs: proc: signedness issue in next_pidmap() [697828] {CVE-2011-1593}
- fs: rpc task leak after flock()ing  NFS share [709550] {CVE-2011-2491}
- fs: validate size of EFI GUID partition entries [703031] {CVE-2011-1776}
- gro: Fix memory leak/corruption on VLAN GRO_DROP [695177] {CVE-2011-1576}
- gro: reset dev and skb_iff on skb reuse [691272] {CVE-2011-1478}
- inet_diag: insufficient validation [714542] {CVE-2011-2213}
- kernel: tpm infoleaks [684676] {CVE-2011-1160}
- kexec: fix Oops in crash_shrink_memory() [730834]
- ksm: race between ksmd and exiting task [710988] {CVE-2011-2183}
- mm: avoid wrapping vm_pgoff in mremap() and stack expansions [716545] {CVE-2011-2496}
- mm: mem allocated invisible to oom_kill() if not attached to threads [625692] {CVE-2010-4243}
- net: missing check in can/bcm socket release [698484] {CVE-2011-1598} {CVE-2011-1748}
- net: netns vs proto registration ordering [702307] {CVE-2011-1767} {CVE-2011-1768}
- net: nl80211: missing check for valid SSID size in scan operations [718156] {CVE-2011-2517}
- nfs4: Ensure that ACL pages sent over NFS were not allocated from the slab [682646] {CVE-2011-1090}
- scsi: mpt2sas: prevent heap overflows [694024] {CVE-2011-1494} {CVE-2011-1495}
- sctp: race between ICMP protocol unreachable and connect() [667030] {CVE-2010-4526}
- taskstats: duplicate entries in listener mode can lead to DoS [715451] {CVE-2011-2484}

- modified specfile to include new dirs and Module.symvers in -devel packages

- Backported PCI _CRS fixes from linux-tip